
$ rpki-client -vvf rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
File:                     06m0znk41yolUFSgwIW_eI6wabA.mft (raw, json)
Hash identifier:          83ydl2aacoE+I1xBrFh1Y8Fd9XQ6pNOaj4fG4zXebl4=
Subject key identifier:   99:9F:B6:9C:99:B3:C6:C4:18:02:CB:7E:75:60:D0:73:59:25:72:BF
Authority key identifier: D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0
Certificate issuer:       /CN=A914331D/serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
Certificate serial:       093E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
Manifest number:          0936
Signing time:             Sun 02 Nov 2025 20:10:30 +0000
Manifest this update:     Sun 02 Nov 2025 20:10:29 +0000
Manifest next update:     Sun 09 Nov 2025 20:10:29 +0000
Files and hashes:         1: 06m0znk41yolUFSgwIW_eI6wabA.crl (hash: +nCOi5IUwr6FZ0BuOnCTj6DNTtXSdvAm01/5NoCQOWs=)
                          2: 425602A0AD2111EA9510AC0DC4F9AE02.roa (hash: eiGSH0P7OA/wuySnx+L4WnNP4YI49fVfK6qem5HgBnk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl
                          rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:10:29 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2366 (0x93e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914331D, serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
        Validity
            Not Before: Nov  2 20:10:29 2025 GMT
            Not After : Nov  9 20:10:29 2025 GMT
        Subject: CN=6907bab6-a344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:04:d6:22:21:14:ec:34:e3:bd:60:51:cd:
                    6a:1d:1a:e8:23:48:49:a4:85:ee:ad:1f:7a:6e:d1:
                    3b:ce:4a:b5:fa:a5:04:af:54:a5:34:51:a7:c3:35:
                    1b:b4:12:5a:26:6c:2e:6c:98:ea:56:d1:93:f4:b8:
                    ee:93:62:73:67:b1:56:af:6a:d9:28:6b:32:7e:2b:
                    bc:06:a1:82:03:28:7e:3e:97:20:8a:0e:a5:f2:00:
                    3f:fc:fb:83:38:4e:fa:c2:db:b9:57:7d:d4:77:3a:
                    69:99:bc:27:10:9f:5c:0f:ad:8f:4e:74:06:2d:8e:
                    15:db:71:59:56:eb:69:c6:3a:23:4c:ed:2e:a4:1e:
                    17:1e:4b:d9:5f:11:3e:f6:fe:ee:bf:16:38:df:91:
                    08:8f:a8:07:e1:65:7b:41:2d:62:e6:7b:63:0d:51:
                    c9:8a:f8:ca:e4:47:cf:c0:de:57:64:22:3d:7e:3a:
                    3e:80:ab:1f:f5:03:bb:92:01:73:1f:82:67:d1:1a:
                    c9:6f:ad:86:d4:76:cf:ba:72:43:3b:d7:97:35:46:
                    87:2c:af:03:2f:9f:0e:10:bb:19:62:9f:6e:e1:97:
                    04:7b:97:40:6e:ad:93:bc:d0:c3:9b:50:75:e5:98:
                    dd:43:c3:33:aa:9d:80:07:c4:4e:6a:27:f1:60:55:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9F:B6:9C:99:B3:C6:C4:18:02:CB:7E:75:60:D0:73:59:25:72:BF
            X509v3 Authority Key Identifier:
                keyid:D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         2f:c5:be:5d:8b:08:fe:fb:25:b8:b0:29:6d:65:ec:9b:f4:c3:
         7c:08:af:8a:a6:94:e6:96:62:12:33:a0:f3:db:b7:47:ff:c0:
         cb:6a:18:8a:e4:93:80:18:96:74:7e:b5:88:44:40:04:55:83:
         58:81:62:9c:ab:ae:a9:d2:3d:7c:0d:c3:47:00:bf:4c:da:d3:
         78:b5:6f:4f:3f:e1:d3:63:6a:39:77:30:32:69:a8:38:27:eb:
         04:33:8d:58:a0:0d:0c:59:35:78:55:ee:2b:26:c4:ae:cf:c3:
         82:76:df:4c:c0:98:af:3d:8e:78:b1:ae:26:5b:80:79:62:ce:
         ed:dd:4c:00:85:e9:cb:7f:02:5b:d2:47:83:22:6b:4a:52:5d:
         4a:67:e3:26:81:b5:e4:39:8b:69:32:ec:25:1d:32:45:1e:d6:
         5c:86:27:bc:c5:50:29:ac:5b:7c:f6:4c:d7:b0:f9:9a:23:36:
         9b:4e:93:7f:53:5a:18:f9:b0:71:d0:41:26:d0:e0:3a:b5:80:
         c9:4e:54:92:41:23:0f:63:4c:82:91:37:78:48:f3:96:55:21:
         33:5c:4c:84:33:ce:9e:6c:8b:e8:dc:5e:93:c1:c3:44:8d:78:
         6f:66:ba:05:6c:3c:32:92:b7:ea:15:f5:94:92:22:5d:e0:a8:
         a4:75:e1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 07:22:38 2025 by rpki-client