
$ rpki-client -vvf rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft
File:                     t9SqT11yMa9OdH93IkWsA3ECEPA.mft (raw, json)
Hash identifier:          jttk3Z1HLxS6ge+8kthQerbdz9faFlvjt13gA6N0xDE=
Subject key identifier:   61:59:0A:B1:7B:51:4A:3C:0D:32:64:DA:AA:C9:E4:26:6B:1D:E8:1E
Authority key identifier: B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0
Certificate issuer:       /CN=A91175F6/serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft
Manifest number:          0265
Signing time:             Mon 03 Nov 2025 01:38:19 +0000
Manifest this update:     Mon 03 Nov 2025 01:38:18 +0000
Manifest next update:     Mon 10 Nov 2025 01:38:18 +0000
Files and hashes:         1: t9SqT11yMa9OdH93IkWsA3ECEPA.crl (hash: oVjHhETQoGMlaZLb5pr4P7U5/W6IKnYDg3Gs/7jQ3PY=)
                          2: 5D5B0F7C34CA11EDA301482BC4F9AE02.roa (hash: 90Bhpdbkdnfedi3OPca5alDQUSOpnC2UaqisbVy8klY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl
                          rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:38:18 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91175F6, serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0
        Validity
            Not Before: Nov  3 01:38:18 2025 GMT
            Not After : Nov 10 01:38:18 2025 GMT
        Subject: CN=6908078a-d79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:80:4e:44:3e:78:22:8c:2c:5b:af:92:8a:
                    43:c3:5a:45:1b:9a:29:cf:ef:d8:66:63:b4:1a:33:
                    2d:75:d5:5b:f9:b1:ac:e2:0a:9c:bf:f5:22:6a:17:
                    bf:04:f8:1a:1a:88:1e:6f:05:48:b4:14:bd:77:79:
                    8a:f8:78:d1:08:12:f3:84:4b:86:05:8f:76:c5:7e:
                    b9:36:a6:9c:72:e8:2f:c4:b3:e4:04:ff:eb:39:38:
                    ba:20:8c:41:e4:de:27:55:6d:c4:92:de:92:66:91:
                    5f:59:62:5f:5e:18:4d:da:eb:fe:7c:92:e4:d9:6c:
                    f3:e0:81:5e:87:09:1e:cf:dc:ba:6b:d0:81:0c:f9:
                    50:b3:b1:9f:fe:75:46:03:1a:9c:95:a2:d1:fe:5b:
                    7e:e4:78:a9:6e:51:56:b8:58:c5:28:7a:47:e8:93:
                    73:2d:e2:41:17:0c:0c:a8:3a:04:1d:89:43:e4:e3:
                    16:e3:8a:d4:79:18:4e:e0:3c:a5:c3:a7:01:33:bd:
                    50:10:65:dd:a4:7e:ea:be:69:78:b5:ae:19:5e:31:
                    d7:71:ef:ae:06:4e:1b:05:d9:ee:91:c6:b6:ee:2b:
                    aa:1c:a0:64:cb:81:b0:84:e8:0c:94:54:ac:9e:42:
                    6d:6f:a1:d7:c9:b7:fb:a7:6d:18:55:37:0a:ea:ff:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:59:0A:B1:7B:51:4A:3C:0D:32:64:DA:AA:C9:E4:26:6B:1D:E8:1E
            X509v3 Authority Key Identifier:
                keyid:B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         c4:c5:81:7b:30:2a:c4:c9:b9:8c:0f:d1:91:09:2c:1f:88:a3:
         ec:40:d6:6d:7b:cf:88:db:6a:c2:92:0e:21:d1:38:0f:7e:84:
         64:0b:49:a4:8b:8f:35:ae:5c:7b:83:2c:c4:e4:8b:5d:24:4c:
         cc:d5:2e:7c:16:66:31:78:f0:a9:08:84:2b:50:48:88:48:78:
         7b:58:66:73:7c:f3:85:7d:32:c2:66:22:89:bf:44:e5:df:60:
         52:72:73:b0:7e:6f:28:2c:71:3c:ff:51:62:1b:25:33:4a:fa:
         1a:cd:70:79:36:b6:71:54:05:e3:75:ae:02:4e:02:77:4e:d1:
         38:be:0b:5f:16:4a:35:76:1b:70:a4:bb:f1:14:63:9e:9a:83:
         7c:bf:57:62:0b:79:41:96:4a:f4:f5:07:ff:52:67:05:51:a7:
         05:1b:5a:2c:4f:02:18:12:95:fc:6e:e8:df:28:b2:f2:08:5c:
         ae:97:bb:2e:14:69:57:03:dc:4f:70:fa:14:59:eb:35:36:ea:
         03:d2:40:5c:2b:04:13:32:6b:99:92:3b:50:e7:91:02:fd:33:
         c2:4c:0b:1c:13:04:be:d6:4c:a1:d3:80:a6:45:71:0f:74:00:
         ad:7b:6d:90:e5:df:5e:1c:30:23:a5:ab:9c:3b:78:0b:b0:b0:
         43:dd:d0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:28:00 2025 by rpki-client