
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
File:                     9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json)
Hash identifier:          NXlc3Kq+BbIjgKlxxPp+o9+Z8lyQ6qBWOxD94htHXGw=
Subject key identifier:   CC:31:57:0C:55:20:AB:C1:36:86:40:F3:BD:1A:9E:14:10:9A:13:6A
Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08
Certificate issuer:       /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
Manifest number:          0190
Signing time:             Mon 03 Nov 2025 03:29:20 +0000
Manifest this update:     Mon 03 Nov 2025 03:29:19 +0000
Manifest next update:     Mon 10 Nov 2025 03:29:19 +0000
Files and hashes:         1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: r8VXppkpECLKm0+HsJhf0clVu3UvLyGfTBefLyoABVA=)
                          2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: vLaYuuYnarn+LGPGR9ZLrnHgOaNMvO/0VgOiG0azlng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl
                          rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:29:19 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
        Validity
            Not Before: Nov  3 03:29:19 2025 GMT
            Not After : Nov 10 03:29:19 2025 GMT
        Subject: CN=69082190-6b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:df:d4:26:fe:7d:30:3a:b7:d4:9d:ce:c6:
                    a2:b1:78:c8:4f:1c:25:c8:33:fd:22:54:69:93:fb:
                    b0:e4:05:86:ee:d2:97:33:74:fb:2d:9c:a0:d1:59:
                    13:a1:b3:f6:a8:9e:0f:09:f0:34:59:c0:0f:84:22:
                    7a:f1:1f:61:7f:e2:10:2a:ac:08:55:a7:7a:64:d6:
                    94:e0:e0:16:4d:f8:5a:d1:0e:08:09:88:a1:cc:c9:
                    b0:5e:af:13:fe:a9:ee:62:52:e3:e4:67:c2:a3:01:
                    57:93:2c:e0:49:d6:91:93:d8:e2:66:ed:e9:c2:c0:
                    ae:27:18:b7:00:20:b9:7c:bc:29:1c:dc:db:ff:21:
                    02:3b:bf:c7:dd:c8:c4:53:35:04:d2:0c:ef:f4:09:
                    25:00:6c:c1:a7:da:5b:e8:19:56:bc:3f:8d:eb:3a:
                    ce:ee:7e:b1:71:1a:1f:47:c6:80:26:e5:c2:17:1e:
                    98:51:42:b1:f2:3c:ca:20:56:5b:cc:95:32:ea:d6:
                    ef:eb:88:17:0a:4e:37:92:14:b8:ec:5f:8b:13:88:
                    d4:eb:21:ad:37:ad:b7:c4:26:c5:fe:d6:40:08:44:
                    83:7e:d8:88:d3:c3:0f:02:0a:71:9f:68:2d:16:5d:
                    d2:80:28:b9:d9:d6:1f:ce:56:b5:2f:67:62:89:27:
                    df:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:31:57:0C:55:20:AB:C1:36:86:40:F3:BD:1A:9E:14:10:9A:13:6A
            X509v3 Authority Key Identifier:
                keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         b0:10:4b:8a:2f:24:85:a2:44:c2:7c:f6:bc:6f:03:9e:19:c0:
         7a:cf:28:99:4a:0f:f2:55:81:3d:e7:78:81:08:81:5f:c3:a3:
         e6:0b:0d:e7:8b:91:5b:b1:ef:e4:9d:51:04:4f:ac:c4:dd:cc:
         b7:c3:aa:dd:24:68:03:7c:6b:59:a5:24:70:a0:5e:b6:6c:7c:
         dd:cc:81:69:fe:ff:2f:10:74:dd:d9:f2:85:04:80:10:d7:da:
         c5:21:98:4f:45:76:dc:8a:f1:89:6b:e4:aa:84:94:ec:e6:0c:
         29:37:32:7b:47:b5:d8:bc:40:1b:b6:1e:0f:66:d2:ea:65:1c:
         0b:5d:b1:4a:05:ac:55:38:fb:8c:31:1b:97:dc:04:37:2e:2c:
         a8:45:ff:40:86:87:04:56:23:97:96:c7:c2:4a:5c:09:52:55:
         4d:a9:28:9d:71:0e:b2:0b:d4:39:98:38:84:35:2d:91:a6:55:
         87:22:8d:74:ed:f1:e2:83:ef:a3:5b:69:a7:dd:28:fe:c2:0a:
         18:ab:1d:9a:80:12:79:1b:90:af:79:88:a8:aa:9b:b2:a8:f1:
         8d:6f:9b:bb:fb:c0:e6:60:11:45:7c:45:60:30:7e:6f:d7:b2:
         68:76:68:bd:47:ce:00:2a:e7:57:fd:ba:75:10:09:83:66:db:
         bc:df:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 16:06:14 2025 by rpki-client