
$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File:                     FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier:          LvYmfmuSVjk1rQdH7wZXIjI34VcKPZw5mmTkSxpcte4=
Subject key identifier:   92:5C:C8:28:11:B4:A9:61:02:BF:FE:42:1D:75:D2:9A:54:8C:40:32
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer:       /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial:       0C08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number:          0C01
Signing time:             Sun 02 Nov 2025 18:47:15 +0000
Manifest this update:     Sun 02 Nov 2025 18:47:15 +0000
Manifest next update:     Sun 09 Nov 2025 18:47:15 +0000
Files and hashes:         1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: aNgQmUiJVoAr03Idq/QIET8B+lPhngCk15vDFpz9Etw=)
                          2: FC90C520213411EA8D675645C4F9AE02.roa (hash: bfvf5p0RJyl+DBh15oeIU1R+cb9fxOcLHABt0IlZccM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
                          rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:47:14 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3080 (0xc08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
        Validity
            Not Before: Nov  2 18:47:15 2025 GMT
            Not After : Nov  9 18:47:15 2025 GMT
        Subject: CN=6907a733-ae71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a5:5c:f1:73:01:51:f2:2d:2b:f2:4f:65:67:
                    90:7e:98:24:b2:f3:bb:7c:27:27:94:82:8d:63:81:
                    88:2b:6e:25:5a:aa:ee:1a:e4:3c:6c:9a:20:e2:c0:
                    01:06:72:0c:e0:78:4d:63:20:23:61:b8:2e:66:e3:
                    f0:35:ab:f7:2a:81:b4:0b:52:76:f9:5e:50:9d:cb:
                    d3:2f:be:30:a0:3c:ba:48:c9:bd:cf:b1:64:4c:7a:
                    10:70:2f:bf:77:a8:4e:ad:d8:09:1d:1d:a1:ca:9c:
                    5f:a1:0c:0b:98:23:15:43:f7:e5:ec:00:98:e6:b0:
                    68:bb:1c:ad:10:7a:3d:d2:45:ca:d3:e8:85:b8:4a:
                    e0:be:53:52:dc:41:b7:1c:b5:10:4b:64:6d:07:fd:
                    d7:6e:ab:83:f5:86:61:85:43:ec:b2:20:28:68:42:
                    0d:76:67:22:0b:9f:ff:10:42:f3:56:cd:b8:9c:cb:
                    ec:36:6e:58:fd:9a:64:a4:f7:4e:f6:05:c0:50:44:
                    89:97:a4:db:f7:9e:dd:65:54:0a:9c:25:0c:1a:3d:
                    5d:5c:fd:5c:c0:25:9b:7d:ac:83:9e:5b:1a:3e:be:
                    6d:37:9b:3a:26:6a:01:3e:59:ca:bd:d3:d8:b7:d3:
                    ab:71:75:c6:0c:14:10:d0:75:42:87:25:2a:58:7e:
                    17:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5C:C8:28:11:B4:A9:61:02:BF:FE:42:1D:75:D2:9A:54:8C:40:32
            X509v3 Authority Key Identifier:
                keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         38:ef:27:45:ac:67:c6:bf:95:16:84:ff:40:52:f5:82:b8:6b:
         aa:f2:bd:2b:58:8f:86:16:8d:20:fa:c5:04:01:5f:1f:f5:1c:
         00:de:44:ce:bc:8e:c6:33:ef:e0:1f:91:62:e2:da:01:54:0b:
         71:70:fa:b9:c3:fd:ca:25:e2:33:d8:e4:e1:80:95:5d:db:23:
         27:d7:93:d1:20:34:40:35:9a:1e:f5:52:dc:c0:e8:64:cf:37:
         35:b2:35:aa:dd:71:da:20:bf:75:52:53:d5:c3:f1:d8:c6:c6:
         1c:3a:3c:80:df:2d:5b:eb:69:90:04:9b:5c:80:2d:5c:ff:68:
         31:91:0d:bd:97:07:88:4e:a6:3d:56:e3:98:a2:4d:cb:49:f9:
         5f:ff:cf:f4:93:b5:51:94:52:8d:f6:e4:ef:34:bc:b6:6c:59:
         bf:ff:95:27:e2:64:b1:be:07:7c:1d:8b:a2:92:1b:dc:ea:5a:
         85:77:2b:68:94:dd:dd:74:70:4f:e9:bb:ae:78:b4:8f:4a:fa:
         52:1e:3b:cf:e8:0d:2e:c7:20:ad:62:01:e4:8e:e8:fc:4e:79:
         f9:7d:76:cd:73:6e:ad:64:7c:a0:83:27:6a:f5:95:c7:6b:21:
         5d:35:f2:fa:ac:cb:bd:21:33:df:2f:74:60:11:ff:5b:ea:2a:
         a4:47:77:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:30:29 2025 by rpki-client