
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
File:                     sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json)
Hash identifier:          3HjOXYNcruI3HDu5tgKyixf71H7oIwO/NZdkc4bBtco=
Subject key identifier:   E7:BD:FE:A1:DB:06:82:2E:F1:6F:26:2D:F3:20:40:AC:47:FD:FA:FC
Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
Certificate issuer:       /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Certificate serial:       11CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
Manifest number:          201D
Signing time:             Sun 02 Nov 2025 17:12:52 +0000
Manifest this update:     Sun 02 Nov 2025 17:12:52 +0000
Manifest next update:     Sun 09 Nov 2025 17:12:52 +0000
Files and hashes:         1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: AMzUF3EXl8htcZoS7wfHRAJpBJ/Fs/X05snlq4OSf8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
                          rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:12:51 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4554 (0x11ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
        Validity
            Not Before: Nov  2 17:12:52 2025 GMT
            Not After : Nov  9 17:12:52 2025 GMT
        Subject: CN=69079114-f9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:dc:ca:64:23:e2:ed:55:da:f1:b0:64:9d:
                    b7:98:af:5d:4a:e1:f7:e9:90:e3:cb:4c:a7:21:aa:
                    10:c4:4f:f2:2c:e9:5c:df:a2:87:97:dc:9a:63:24:
                    7f:f7:e6:e6:28:be:6d:6b:05:52:88:cb:11:4b:a2:
                    8e:aa:bf:d6:46:9b:88:85:47:e2:e2:b4:97:b1:63:
                    0a:e3:9b:61:cd:bc:50:e5:eb:67:f5:12:04:17:b3:
                    2a:89:80:a0:e3:a6:23:60:21:ca:f6:28:fe:e1:8a:
                    a7:68:5c:15:bb:46:31:2c:06:eb:88:54:81:0b:8b:
                    77:7a:b6:42:4c:38:bc:82:da:c9:a5:dc:3f:17:1a:
                    34:26:d3:59:a3:71:bc:15:8e:cd:0b:21:3d:c7:aa:
                    25:d9:da:f9:79:6a:21:e8:f7:29:31:a1:41:4e:7a:
                    82:22:b6:6a:bf:07:6a:42:18:25:97:c2:d9:6f:04:
                    da:81:62:17:52:c3:e6:9f:50:c3:c4:82:5b:39:5a:
                    eb:6f:e4:8b:d9:ce:01:46:dc:12:22:ec:c9:0a:a0:
                    96:b3:5c:be:90:53:0c:df:59:48:53:76:ad:9d:8b:
                    32:d5:a9:5b:ec:0f:db:c8:fb:dc:b2:0b:10:27:4f:
                    41:df:d8:9b:99:aa:96:2c:ac:5f:93:89:7f:dd:ba:
                    86:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BD:FE:A1:DB:06:82:2E:F1:6F:26:2D:F3:20:40:AC:47:FD:FA:FC
            X509v3 Authority Key Identifier:
                keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         7c:46:bf:bf:d2:ed:5e:1c:73:b7:5a:93:2e:26:a3:01:fb:b0:
         7f:09:b9:5d:32:09:30:92:cc:5a:9d:b0:27:cb:8b:c8:eb:83:
         2b:7f:c8:b8:3e:09:5e:0b:88:03:23:9c:9d:77:03:19:46:6b:
         f7:67:58:6d:bd:f3:f0:1d:fa:c8:7e:73:f1:9a:24:57:d8:48:
         5d:fb:a5:4e:0b:03:2e:7f:f6:4a:fc:d0:3e:d0:4a:2a:89:92:
         89:a8:93:b4:3b:f4:67:f8:09:90:64:93:d2:5e:a9:4d:46:bb:
         1d:25:7d:23:d5:f7:1c:34:52:ef:88:90:35:c8:b8:88:eb:87:
         10:07:44:72:eb:a7:53:d7:18:3d:f9:fa:f6:17:74:a8:58:05:
         95:98:32:ff:1e:3d:54:98:5e:51:53:29:22:c0:fe:94:76:38:
         1c:9c:2b:ad:b4:d2:81:b0:ca:45:4a:a0:b0:1f:f0:3c:83:09:
         e7:76:be:fb:69:7c:02:e1:7e:5d:c4:83:d4:94:cd:8e:67:50:
         f8:f2:bd:88:47:c0:d9:f8:1d:2e:c0:02:24:0f:c6:36:61:96:
         fa:67:b0:de:fd:a7:23:4d:93:0d:25:3c:a1:61:38:1c:0d:bf:
         2c:66:0b:72:23:a9:00:82:d5:1b:e0:1e:ae:22:1d:53:61:38:
         12:1f:ba:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 07:22:36 2025 by rpki-client