
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
File:                     QoezMyF220hqLLxCVAL6nIa23Eg.mft (raw, json)
Hash identifier:          ngvKFRWhfi6j53MBO/fzYAAwsi2w/KR55pBJvaQrnxQ=
Subject key identifier:   49:59:70:E4:D0:EB:C5:BD:41:12:10:9C:34:BE:EA:2F:9D:33:96:2B
Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Certificate issuer:       /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Certificate serial:       1E88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
Manifest number:          32F6
Signing time:             Sun 02 Nov 2025 15:40:48 +0000
Manifest this update:     Sun 02 Nov 2025 15:40:48 +0000
Manifest next update:     Sun 09 Nov 2025 15:40:48 +0000
Files and hashes:         1: QoezMyF220hqLLxCVAL6nIa23Eg.crl (hash: BLdPM8iyw+VqiQpswzj4NChlZb9Vy0nhETZN/ye3tQY=)
                          2: 4FA6792A8F6711E6A509C92DC4F9AE02.roa (hash: rgEBVfEHrHQCIYu+8cT3x0Mx0w03fqFbIgZigqEcJN4=)
                          3: 4EB814BA8F6711E6A509C92DC4F9AE02.roa (hash: r0CHOQu1cJbmjwRlYBEiavWoEM4N4g/XqSKR2NA/Xr4=)
                          4: 4BDAE70EB7A911EF9D4E880CC4F9AE02.roa (hash: m2nIep6ftkfrIPBLf24Qcs2kiAMJ/4wpttb2LM7mGxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
                          rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 15:40:47 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7816 (0x1e88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABDD, serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
        Validity
            Not Before: Nov  2 15:40:48 2025 GMT
            Not After : Nov  9 15:40:48 2025 GMT
        Subject: CN=69077b80-2c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:13:d6:d9:6d:d5:03:77:33:e7:10:50:ea:
                    5e:43:b2:be:2b:1a:04:9b:74:8c:5f:8a:cb:fd:d4:
                    0c:1b:c6:d3:92:65:e8:9a:71:90:47:c0:f6:99:2a:
                    3f:d2:62:c5:91:f5:03:13:3f:12:df:45:9d:90:67:
                    63:78:db:00:99:f6:7f:75:db:19:8a:0b:9b:b0:71:
                    4a:1e:2f:5d:6a:c8:ed:a5:05:83:4a:be:05:10:e7:
                    76:c0:52:bc:14:23:f1:bb:eb:38:72:df:ad:bb:a0:
                    3d:88:88:63:6a:ea:55:e1:da:42:26:f1:3e:56:49:
                    bc:d4:75:1a:58:e4:4c:b1:05:85:42:07:91:da:ae:
                    29:0e:41:7e:6b:9a:67:9f:04:2e:62:78:a2:d5:d0:
                    8e:98:22:14:2c:f3:e7:54:c0:17:f7:83:6f:8b:bc:
                    bb:73:7b:44:a5:5f:4b:dc:f3:c5:82:e4:78:d3:95:
                    e6:bc:be:0a:16:a7:04:ee:06:e6:20:11:3c:54:90:
                    e0:34:72:77:b7:1a:29:e5:0e:6c:cc:d8:6c:99:ff:
                    8d:43:86:b6:be:6f:9d:ce:00:68:be:e0:38:6a:80:
                    dc:a8:96:af:3e:b3:ee:4e:47:20:fa:92:af:e6:00:
                    95:39:b2:57:1b:6d:e3:6c:6f:f9:2c:c4:ec:6a:45:
                    a8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:59:70:E4:D0:EB:C5:BD:41:12:10:9C:34:BE:EA:2F:9D:33:96:2B
            X509v3 Authority Key Identifier:
                keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         e2:4d:35:88:70:9d:ce:bb:ab:b7:ba:b9:31:19:08:60:5d:b4:
         e7:26:36:e5:9a:68:96:3d:de:9e:fc:88:be:aa:75:2c:61:2b:
         77:10:a1:13:b3:10:7a:d5:4a:73:aa:37:6f:aa:43:4b:88:57:
         06:f6:11:77:b1:ce:a5:50:09:d9:8e:f9:5b:03:3b:ae:02:76:
         f0:7c:07:f0:8c:b0:ab:d8:99:80:01:eb:3c:77:07:f6:5d:04:
         b0:8a:b0:98:fe:4f:8a:59:82:19:9d:df:54:3f:8a:ef:fd:6b:
         8b:11:1e:cd:60:04:75:fd:d3:f4:82:37:09:26:6e:2c:45:1a:
         1a:5c:7b:4c:55:02:69:37:e9:69:66:d1:41:6d:01:c8:82:aa:
         b8:9e:17:e4:3f:6b:5d:d0:cb:77:b9:28:42:52:ea:ed:5f:61:
         db:f3:8d:c9:10:10:25:2c:de:4c:83:40:f0:20:39:61:f5:1a:
         fd:cf:dd:15:58:e1:13:0a:f7:8a:44:cd:75:52:d3:bf:02:bd:
         06:e1:f1:fe:55:74:2e:de:a2:c7:ed:cb:3d:16:0f:b6:ff:86:
         21:b7:90:b8:8c:2d:cb:1f:a9:fb:ec:e3:05:8a:34:b0:30:91:
         22:96:6d:7b:67:8c:c5:aa:46:7b:5a:54:2e:d0:16:26:01:14:
         b0:d1:be:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:10:08 2025 by rpki-client