
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
File:                     c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json)
Hash identifier:          jjIHM2jK5px0gWmrgiQ1MVq/SpDWmuc3yY2netdNpog=
Subject key identifier:   40:5D:62:DF:6E:24:2E:E0:4D:5D:4B:48:8A:31:69:FF:37:B0:48:A1
Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67
Certificate issuer:       /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
Certificate serial:       121C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
Manifest number:          120E
Signing time:             Sun 02 Nov 2025 17:10:31 +0000
Manifest this update:     Sun 02 Nov 2025 17:10:31 +0000
Manifest next update:     Sun 09 Nov 2025 17:10:31 +0000
Files and hashes:         1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: i03eLLQPjmT6Ss6Ogoenr45i5aDCkwVngMzNpKaqPuE=)
                          2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: 19PePHoFF22nUkndMtbal1vAJr/Bweg8ayj4IBTrMGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl
                          rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:10:30 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4636 (0x121c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDDB8, serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
        Validity
            Not Before: Nov  2 17:10:31 2025 GMT
            Not After : Nov  9 17:10:31 2025 GMT
        Subject: CN=69079087-7aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:82:bf:91:5f:56:07:32:1f:07:99:74:dd:57:
                    bf:10:16:1c:67:1f:1b:99:3c:f6:e7:36:0f:d7:f3:
                    70:3f:11:26:5c:b4:27:4d:b9:ca:22:40:ee:21:5b:
                    5b:cd:6b:5d:f8:fb:4a:ad:06:ee:03:76:79:5b:9f:
                    b9:29:61:92:e1:21:8b:e5:e3:e2:fe:92:6c:8d:6b:
                    53:ee:2a:3d:1c:a2:44:11:b9:6a:09:1d:39:99:38:
                    1a:f9:9f:ef:50:16:28:df:df:b0:1f:d8:28:e8:59:
                    f2:de:59:19:9d:aa:d7:02:d4:62:0f:c1:79:07:cd:
                    f4:d2:06:e2:50:ce:db:50:74:2b:e0:67:b9:6f:5a:
                    c9:e7:60:6f:6b:75:05:2c:ba:5e:75:d2:da:81:d4:
                    76:5d:d3:66:f1:5f:0d:b6:70:06:4a:78:24:ab:b8:
                    a5:03:f7:82:1f:72:95:db:dc:69:49:35:b6:7f:a9:
                    f7:d5:ce:42:5d:03:36:1f:14:c6:0e:6f:58:c3:ba:
                    60:4a:52:05:fb:1d:a7:0e:bf:f2:99:fa:7b:68:ce:
                    d8:17:b6:49:a2:06:88:8f:d3:8b:7b:89:1d:b8:fe:
                    72:e5:04:79:f6:8c:9b:d5:6f:dd:a8:e0:b5:51:84:
                    e9:24:c0:74:6a:de:1b:b2:f5:40:28:e2:e0:82:8d:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5D:62:DF:6E:24:2E:E0:4D:5D:4B:48:8A:31:69:FF:37:B0:48:A1
            X509v3 Authority Key Identifier:
                keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         76:bb:c8:ab:f9:44:c0:4a:52:71:19:cf:42:35:5c:a1:ce:81:
         ce:11:2e:43:29:a3:38:b0:d2:18:e9:6d:f8:8b:93:59:08:24:
         d7:ab:dc:37:e3:3a:7c:b1:1d:b3:40:e1:3f:6a:95:69:6b:c8:
         95:7f:62:11:14:b3:ea:6d:6d:72:c0:e3:04:c9:7d:21:4f:70:
         2d:dc:32:6b:1b:e9:b7:57:5e:d9:1e:f1:b8:bd:29:c5:cb:e5:
         f7:a2:eb:5c:dd:ad:af:0f:b2:3c:d0:13:75:60:98:7b:7f:02:
         9f:32:bb:ca:81:75:ee:6b:10:14:27:93:53:fe:45:16:e7:e8:
         a7:43:f8:58:a5:7d:f4:33:81:cc:68:dc:e4:38:e1:cf:9b:8a:
         d5:59:e4:12:51:1f:2e:e2:b1:2b:a2:10:16:a2:a7:9d:2b:e6:
         09:08:7a:76:cf:50:95:f8:4a:6c:d3:62:8a:ad:99:41:e9:87:
         a5:77:ea:86:59:a2:3f:39:ec:8e:9c:bc:99:95:c4:aa:50:7b:
         d6:98:0d:0d:d9:18:ec:db:60:08:31:26:82:4c:6b:77:71:af:
         52:11:9a:a9:7c:01:49:12:65:da:77:92:30:32:cf:22:aa:2f:
         a9:79:00:40:ac:22:56:ea:f2:ff:6a:29:10:ab:ad:63:e2:10:
         6b:3a:df:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:06:14 2025 by rpki-client