
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
File:                     gBf49rHsAjxINqRXp7BYQqBxnyg.mft (raw, json)
Hash identifier:          Bco9Ol7T0ppAVKurm7tKUYY8in+CTEUFXmnoov8UDjk=
Subject key identifier:   EF:10:E1:2F:8D:37:64:C4:05:A8:8C:AF:14:80:58:FA:C4:FB:36:3D
Authority key identifier: 80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
Certificate issuer:       /CN=A913B088/serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Certificate serial:       0B8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
Manifest number:          0B88
Signing time:             Thu 30 Oct 2025 19:02:49 +0000
Manifest this update:     Thu 30 Oct 2025 19:02:49 +0000
Manifest next update:     Thu 06 Nov 2025 19:02:49 +0000
Files and hashes:         1: gBf49rHsAjxINqRXp7BYQqBxnyg.crl (hash: NjcCo1Uhhx6g3/hRuAFdnFwkdWFbHSwMd0sNW8M7zpI=)
                          2: 6DEDEF66387A11EA9450A37CC4F9AE02.roa (hash: o4u5Q2Jc2gCY8tVjsD1bgPzcbwwoDr6mqctN+7fPekU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
                          rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 19:02:48 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2959 (0xb8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B088, serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
        Validity
            Not Before: Oct 30 19:02:49 2025 GMT
            Not After : Nov  6 19:02:49 2025 GMT
        Subject: CN=6903b659-4c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f5:78:9d:b9:f5:6e:ce:98:67:44:cf:13:6a:
                    7a:01:c8:04:59:ec:01:2a:d0:92:e0:80:a9:4d:fd:
                    32:32:de:a5:d6:68:ee:84:ad:7f:07:ca:eb:01:f2:
                    cd:be:7a:bf:b8:d5:c7:b0:6a:bb:26:c0:90:e5:15:
                    23:af:b7:e9:fa:34:59:97:8d:f8:4f:cc:6b:94:75:
                    35:3a:6b:90:26:b2:e0:e4:0e:04:27:51:87:ec:ad:
                    1f:11:cf:2a:4c:58:11:32:60:df:e7:49:6f:5e:5e:
                    32:ab:cf:5a:7d:fc:24:5a:2e:59:9a:1c:8c:e4:8b:
                    75:68:2b:26:ab:66:b9:fa:8b:0a:ee:da:12:34:ef:
                    c4:99:44:02:28:3a:2f:d0:23:c0:8a:78:f2:01:0d:
                    12:35:68:9b:ce:9b:87:b2:cb:e0:6f:ba:c6:b8:59:
                    3b:3e:71:2e:3b:1e:bf:9a:aa:68:cf:dd:8f:43:3a:
                    9a:cf:54:a0:e3:f8:b8:d4:34:69:8f:92:81:3a:55:
                    98:4d:75:a3:48:87:d9:14:9e:95:1a:11:c3:16:fa:
                    94:56:ba:d1:5b:e4:ab:45:90:2f:80:6e:e3:14:12:
                    a7:41:5a:8e:4a:c6:2f:ef:fc:fe:30:43:c2:00:1b:
                    69:1c:c5:53:87:89:3b:33:87:aa:01:f7:5a:43:0a:
                    79:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:10:E1:2F:8D:37:64:C4:05:A8:8C:AF:14:80:58:FA:C4:FB:36:3D
            X509v3 Authority Key Identifier:
                keyid:80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         0e:0b:5d:87:71:17:82:e6:9b:62:26:fc:38:bc:ba:66:bc:a7:
         ab:28:c8:5c:6c:59:04:ed:aa:49:84:39:47:a4:73:7b:05:ec:
         96:60:09:f2:eb:c9:f0:7c:c0:36:9a:ef:d6:9e:a7:92:cc:32:
         e9:b9:c8:50:4d:5a:fd:82:e1:6c:1b:5e:f9:26:eb:d1:ba:a7:
         93:2e:0a:55:7d:ad:c7:6e:f2:b2:76:9a:75:f0:9d:7a:90:6a:
         dc:d6:25:71:69:af:11:26:b3:66:de:1f:0a:f5:d2:f2:c8:c2:
         7f:81:10:2e:90:43:6a:f3:cb:52:2d:23:ec:d4:a2:23:11:19:
         53:82:51:d3:d4:f2:fb:d9:97:b0:c2:d4:81:ff:65:43:a1:57:
         f9:03:08:55:33:09:c9:fe:61:ec:ee:aa:6c:d8:02:a7:0e:3f:
         bc:26:75:e8:fb:c4:53:ae:e5:11:6a:27:fb:d3:ba:fc:21:0f:
         92:a0:f7:90:8e:b2:08:37:b9:84:03:af:bf:63:61:94:6a:75:
         29:b9:18:47:bb:86:cd:88:7f:8a:82:1e:bb:58:4e:4d:0e:2b:
         ef:16:c7:4f:12:aa:fa:77:53:e7:ff:37:fd:4d:f0:ca:58:b6:
         c7:b1:d1:0b:29:b7:d0:e9:78:33:1a:b8:ba:03:9c:f5:fb:a4:
         b0:43:1e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:41:22 2025 by rpki-client