
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
File:                     ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft (raw, json)
Hash identifier:          H2l9Qagd8pvXx9hO1p6mNbz+9Jp7A0mjaUHRofT4RAg=
Subject key identifier:   04:DB:0F:81:8D:C6:A1:AD:BB:F4:67:D2:47:BB:64:06:54:F8:AB:8A
Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
Certificate issuer:       /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Certificate serial:       0920
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
Manifest number:          090B
Signing time:             Sun 02 Nov 2025 20:16:37 +0000
Manifest this update:     Sun 02 Nov 2025 20:16:36 +0000
Manifest next update:     Sun 09 Nov 2025 20:16:36 +0000
Files and hashes:         1: ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl (hash: 26nrChMQxsh3OeEvltGvxpXANgk0rwD2Rcp6Tl05ths=)
                          2: E43CFABEB67611ECACB17C42C4F9AE02.roa (hash: xFhwmyCR50XOerYq8iSgMgO+SIsbHjR9sIw6IGAYvWU=)
                          3: A778E94E598911EBA7B14777C4F9AE02.roa (hash: Z21NxB4s+kOX44LQC1mykWpLjv30/E11cYoVZ/qqS00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
                          rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:16:36 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2336 (0x920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113683, serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
        Validity
            Not Before: Nov  2 20:16:36 2025 GMT
            Not After : Nov  9 20:16:36 2025 GMT
        Subject: CN=6907bc25-d508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:c2:39:f2:92:5f:da:2c:84:0a:bc:c4:08:
                    61:dc:cc:7a:f8:48:6f:7f:9e:34:98:5e:13:0b:15:
                    56:96:63:21:49:4b:7a:c1:ae:b5:6e:b6:11:24:2a:
                    d9:a7:cf:f6:be:e4:10:37:3a:2b:f3:8d:45:59:de:
                    32:90:1e:af:a5:89:52:2f:85:72:c5:b7:27:5f:79:
                    47:02:20:03:46:d4:fb:0e:76:c5:99:bb:a5:ea:18:
                    9e:1a:dc:67:a7:2c:7b:11:f8:6d:cc:c3:b6:b1:59:
                    ed:e5:a4:32:de:dc:b8:e5:49:d0:1f:bf:ba:c1:e8:
                    33:ef:aa:40:7c:d6:4f:b7:90:70:bc:11:48:ae:a2:
                    67:c9:d7:dd:5d:3d:9b:ec:bf:9e:e4:ca:12:76:15:
                    7b:70:e5:e6:02:d1:05:c4:b0:0e:3c:31:cd:16:dd:
                    d6:39:5e:4a:bd:61:d1:8a:1a:45:eb:90:63:6c:9f:
                    03:f3:a3:80:70:e9:92:f0:e0:98:fc:8d:44:10:82:
                    b6:20:3b:1f:0d:c7:17:ae:21:68:a0:0a:ed:f7:dd:
                    7a:b0:99:4e:be:de:cb:87:ef:63:bc:e7:a8:9e:15:
                    e3:6e:2c:bc:d0:2b:67:aa:52:f7:a1:e5:2f:6f:29:
                    e3:13:5d:6f:f7:63:9f:43:3f:e7:f5:37:7c:b9:2c:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DB:0F:81:8D:C6:A1:AD:BB:F4:67:D2:47:BB:64:06:54:F8:AB:8A
            X509v3 Authority Key Identifier:
                keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         b5:b3:a9:ee:1f:89:2f:61:fa:c4:be:14:c3:e5:25:13:69:81:
         f2:8d:c4:2b:44:75:f2:5a:2a:52:b5:62:59:a1:c7:8c:37:9a:
         54:3a:47:e3:bf:61:4a:f2:fd:50:58:ba:cc:b3:98:c0:bf:dc:
         5d:38:5e:63:5a:26:d8:81:de:bb:b9:85:a8:3d:22:39:03:72:
         0d:bd:b8:4c:f6:86:7a:13:99:d2:e3:c3:4e:67:4b:52:db:0b:
         b3:c6:f4:07:65:2b:60:e6:58:21:8a:20:ce:b8:47:10:4c:67:
         c5:a9:55:55:5a:71:3c:ff:95:d3:e1:66:23:f7:19:e2:57:e4:
         36:d1:80:e7:6c:fd:aa:61:da:ed:2a:64:26:14:c4:5a:56:5b:
         ed:e7:41:48:a6:fc:1d:88:e7:81:0c:53:95:62:ba:98:4d:b8:
         42:06:c8:7d:11:8e:ef:70:61:c9:33:e1:6a:d1:41:76:a4:3a:
         86:47:9a:1e:6f:9a:47:73:4d:e5:a0:57:c9:41:89:7d:ff:ef:
         c5:1e:7a:7f:8a:bf:6f:02:e6:58:dd:f2:66:cf:f5:a6:12:60:
         b9:69:fe:3a:2d:0e:31:8e:55:7b:99:8a:58:79:1c:50:11:6e:
         7e:1f:4a:42:0c:4f:37:75:7d:26:85:68:2d:32:ee:08:92:dd:
         95:63:d4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 13:18:32 2025 by rpki-client