
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft
File:                     c5C6Rl4CIu4xQH5VCebenj-pENs.mft (raw, json)
Hash identifier:          eeLnn+g9rGD0ZV4sbvtm3xUYpb8d1GVhGnQeovYlIPw=
Subject key identifier:   85:E1:47:59:0B:AC:EF:85:34:17:AD:1C:F6:BA:66:E6:69:75:4D:BA
Authority key identifier: 73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB
Certificate issuer:       /CN=A91CA6E6/serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft
Manifest number:          02E4
Signing time:             Mon 03 Nov 2025 02:48:29 +0000
Manifest this update:     Mon 03 Nov 2025 02:48:29 +0000
Manifest next update:     Mon 10 Nov 2025 02:48:29 +0000
Files and hashes:         1: c5C6Rl4CIu4xQH5VCebenj-pENs.crl (hash: x66YLX0zAjHMBDTtfQggvslt8EbKhTB1TCd2EMQL6tw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl
                          rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:48:28 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA6E6, serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB
        Validity
            Not Before: Nov  3 02:48:29 2025 GMT
            Not After : Nov 10 02:48:29 2025 GMT
        Subject: CN=690817fd-8976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:2f:4a:1d:a5:8a:da:1b:a3:07:6e:b0:eb:
                    3c:8f:7f:1c:06:ad:04:5d:76:5b:02:ab:d8:02:e1:
                    00:df:a9:c8:b8:f2:9d:0a:11:f3:ca:20:73:89:f2:
                    96:66:7a:fe:d4:44:6a:5e:35:c2:18:45:8f:5f:7d:
                    4c:77:13:9a:c2:fe:1b:8f:9f:9c:ae:d9:da:1e:0a:
                    c1:78:00:d7:14:1b:5e:3c:a3:9e:c6:24:a3:96:37:
                    9a:99:7e:07:40:d3:63:b4:2a:d5:58:d7:b5:34:97:
                    1a:35:27:40:7b:25:a3:4d:2a:f8:f0:43:86:c9:b1:
                    7b:d8:73:b4:08:f2:1d:a4:ad:0c:2a:6f:bc:dd:0e:
                    db:46:b3:c5:ba:25:36:cb:19:dc:82:62:77:17:6e:
                    ae:d0:e8:7c:8f:11:0f:98:09:d9:da:91:d9:35:68:
                    07:7c:93:de:dd:39:f5:47:fc:ee:50:b1:c8:00:4b:
                    9e:de:10:a8:eb:18:fb:b7:28:9d:73:79:71:61:bb:
                    cd:e0:c5:90:43:81:aa:db:76:2d:bf:fd:57:26:72:
                    1b:b2:d7:e4:78:6b:d5:fb:09:9c:82:72:ac:fd:b1:
                    68:28:aa:d9:65:66:15:fc:29:0e:36:15:9b:20:c7:
                    6f:14:48:91:d9:a2:33:4e:7e:0b:f8:18:39:88:0a:
                    90:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E1:47:59:0B:AC:EF:85:34:17:AD:1C:F6:BA:66:E6:69:75:4D:BA
            X509v3 Authority Key Identifier:
                keyid:73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         42:b8:01:17:6d:67:51:72:39:e7:7d:58:06:52:b6:9e:6d:62:
         7b:aa:1d:2c:18:1b:05:91:d7:3e:bb:da:65:4c:e3:c3:eb:8a:
         e4:c5:9e:1f:6d:ba:75:a1:6b:51:e8:72:6c:ac:22:8a:97:5e:
         9c:c9:b0:11:73:97:4f:b9:78:23:46:7f:e3:0b:ab:79:24:ec:
         58:4c:7a:90:3c:ba:5c:aa:43:e1:f4:47:2e:db:99:30:91:c4:
         d7:ea:7a:c1:69:6a:5d:54:39:8a:23:7d:d5:5a:43:cb:43:ce:
         4a:3c:55:28:ca:cb:e6:15:d2:5d:62:a4:3e:e5:b5:2d:2f:d2:
         a6:44:8f:32:cd:5b:f3:f4:4d:d6:92:5c:98:32:76:b2:5d:86:
         03:66:bd:de:f8:c7:68:23:26:64:9c:9a:95:b4:e1:ae:95:88:
         17:b9:e0:55:68:cc:bb:9f:8b:18:79:c4:df:d1:0b:74:86:57:
         04:db:04:51:8e:a8:8b:7e:7f:56:50:45:b9:f3:92:76:f3:d3:
         b2:14:89:e0:0d:93:4f:4e:4d:c1:1a:3c:c4:96:5d:1a:7c:03:
         38:66:5a:a7:de:4f:66:96:53:36:68:fe:87:96:16:e5:99:5c:
         f9:c9:e0:04:91:63:09:ed:6b:16:1c:40:44:72:ac:de:46:0a:
         52:d0:33:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:11:59 2025 by rpki-client