
$ rpki-client -vvf rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
File:                     YoQgfQ0noui_TS6xT7EpytT2zD8.mft (raw, json)
Hash identifier:          pGV1jscfrl+fdNVeFf8DtnAtwunYEkTZxFK4PouYgD0=
Subject key identifier:   64:25:73:B8:DD:BD:C2:7E:D9:7F:25:8D:DD:08:D8:80:4C:BA:35:C3
Authority key identifier: 62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
Certificate issuer:       /CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
Certificate serial:       0EFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
Manifest number:          0EDF
Signing time:             Sun 02 Nov 2025 17:38:51 +0000
Manifest this update:     Sun 02 Nov 2025 17:38:51 +0000
Manifest next update:     Sun 09 Nov 2025 17:38:51 +0000
Files and hashes:         1: YoQgfQ0noui_TS6xT7EpytT2zD8.crl (hash: o7VIZCi2Kp1dzSYltzLKhFRJ8LRZHUllIhlh4Vv82ZY=)
                          2: 58105BCA5ACB11EA84F2392EC4F9AE02.roa (hash: VOr56XdXHCfTJb7vCteXD3c/7SeyxHXCJjM/HYRl50c=)
                          3: 50E999AA911911E9BEF5F94EC4F9AE02.roa (hash: oCjpYZp3Jq8v9CYytKf/Jy8pzYlTc/kezyUqPc+tK1E=)
                          4: 2012E112712611EB8BCB2B84C4F9AE02.roa (hash: yrTYzTGLD7DdI6Sq4pABNT1xu81eDL8OtDlxoy9a6BI=)
                          5: 504E3B04911911E9BEF5F94EC4F9AE02.roa (hash: XFUDQ5YpEwqHQdCoCuZZOQlERoKAxzu3Gpexl3i5/54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl
                          rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:38:50 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3834 (0xefa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914275E, serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
        Validity
            Not Before: Nov  2 17:38:51 2025 GMT
            Not After : Nov  9 17:38:51 2025 GMT
        Subject: CN=6907972b-05f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4a:af:06:d4:b3:b3:7c:96:61:39:be:8d:8e:
                    7a:ce:1c:80:86:da:74:36:62:51:08:c8:2b:a6:9b:
                    98:1c:62:a8:b4:c9:d2:de:f7:07:43:ea:39:c6:3c:
                    53:0c:02:eb:21:f4:09:00:ab:89:67:2e:e6:de:39:
                    a2:8a:1e:d5:19:67:43:0b:e8:a0:46:61:0c:c7:af:
                    fc:cb:3e:ae:4a:a0:da:f9:bf:a2:59:a8:9b:f6:92:
                    ab:b9:36:a1:ac:97:14:8a:60:ba:17:a2:7b:57:0d:
                    a1:df:d3:f9:1b:93:5d:a8:69:90:0b:e3:9e:c7:c3:
                    3d:fc:75:79:20:c7:40:34:c0:cd:20:49:be:fe:63:
                    ba:56:25:65:be:65:9e:ba:64:8e:b1:52:9a:bd:dd:
                    a3:e7:ec:ab:da:d2:1c:dd:fb:d1:9b:33:e5:3a:33:
                    bf:8f:89:af:38:d4:ab:44:a1:67:a3:a9:b4:e1:aa:
                    0d:01:84:db:95:07:10:ad:e1:76:40:2b:38:33:93:
                    86:30:4b:a7:6f:a2:6e:30:bc:f9:a0:5c:d3:fb:8b:
                    e3:2e:ea:8b:05:87:a0:90:33:51:9a:d7:fe:94:04:
                    2a:dd:62:84:ad:c0:80:6a:47:7e:99:21:1c:b0:d9:
                    7b:e2:15:d5:8b:21:8f:d1:e7:c8:22:20:cd:df:7d:
                    74:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:25:73:B8:DD:BD:C2:7E:D9:7F:25:8D:DD:08:D8:80:4C:BA:35:C3
            X509v3 Authority Key Identifier:
                keyid:62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         1f:f0:32:38:31:52:da:73:04:d7:ac:a8:ee:35:67:58:f8:5a:
         85:47:18:5c:13:74:9a:ed:8e:3d:ad:51:f2:bb:52:c9:3e:92:
         77:43:07:14:d4:7e:75:f4:ac:55:87:f0:3b:62:97:a0:2c:42:
         a9:41:11:60:ae:46:a8:92:14:8c:b5:fe:ea:3b:61:f0:35:81:
         f3:a5:fd:b8:7f:ac:d6:be:ce:bc:ce:89:6c:7b:87:d1:e2:3d:
         50:8f:20:1c:52:a3:40:ce:ad:e2:6f:86:75:cc:6c:83:08:c1:
         df:e0:b6:c7:9c:a4:72:7f:c1:8d:44:d6:c7:f1:dc:19:0d:c5:
         1b:6e:93:f1:d4:7d:b0:64:b6:18:d0:70:84:2e:95:aa:d6:be:
         c1:9d:8b:ce:a1:4b:81:9e:b4:33:b8:82:98:4d:be:74:ad:db:
         0d:a0:40:64:88:27:5a:8c:9c:9c:13:98:8f:15:e4:09:08:bf:
         10:fe:67:a9:bf:71:cf:7c:3d:2d:40:1a:19:de:16:a7:d5:61:
         df:3a:6d:82:0e:4b:bd:8d:de:19:3d:d9:0b:22:77:95:57:ed:
         86:9e:38:fe:8a:3b:5e:f3:6c:66:e6:04:83:45:3f:d7:a0:c1:
         7a:6f:c2:47:07:89:87:1b:92:6d:8b:36:70:78:cf:ec:65:3a:
         8a:0f:23:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:06:10 2025 by rpki-client