
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File:                     Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier:          GpMR0YdCaS7a/uUjP6Yd80HR6L7Upu3RZ1grOT/a6/E=
Subject key identifier:   F2:13:71:C4:D6:85:DF:AF:92:31:E6:95:4A:2F:3D:33:E4:E1:F0:15
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       354C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number:          350F
Signing time:             Thu 30 Oct 2025 15:17:55 +0000
Manifest this update:     Thu 30 Oct 2025 15:17:54 +0000
Manifest next update:     Thu 06 Nov 2025 15:17:54 +0000
Files and hashes:         1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: Rug+6+gMVtknCAQny5ThtkrDM75n/YVv4UDwHHwbK/Q=)
                          2: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: IrJp7iMCwaqaCQTisyHX9ot6P3+bjwvrOPWL8AEixrI=)
                          3: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: hIudSvFY2AsPTk+bMlzkhMZSMDa/NBtr6ArnMu6ko7M=)
                          4: 8D6AE850AD3911F0992C7B7CC4F9AE02.roa (hash: Fcl4nAp6anSV3zB5Tg3RnLthWAjO1cGDuxQ+VLe6QA0=)
                          5: 8E7802B4AD3911F0992C7B7CC4F9AE02.roa (hash: LAmTYqluf0IIC60/QbcPZtF2FgRuKfItkv3OxnG47U8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 15:17:54 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13644 (0x354c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: Oct 30 15:17:54 2025 GMT
            Not After : Nov  6 15:17:54 2025 GMT
        Subject: CN=690381a3-abdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:f6:39:ef:7b:71:d8:42:ab:0f:11:6b:d4:
                    db:49:7e:9c:3a:e9:ff:83:7d:ca:39:30:f4:a6:c9:
                    f0:c6:da:3c:a4:da:3c:4e:75:b1:9e:65:68:d0:fa:
                    55:2f:cd:fd:67:5c:c8:ec:39:5b:09:15:36:99:ec:
                    df:2d:fa:30:28:48:06:3e:17:38:6b:60:f1:58:2e:
                    30:f6:25:88:b5:e5:c5:85:bc:b9:3e:cc:2e:c8:b5:
                    0a:53:7f:9f:02:77:23:dc:bc:48:03:64:f2:ef:a4:
                    0c:cb:8f:2a:73:5f:2b:ac:cc:99:b7:09:84:62:65:
                    46:8c:af:ff:94:a2:50:16:99:d2:89:8f:87:c2:eb:
                    5c:ed:d7:58:14:e6:cc:b1:ac:1b:47:3c:5d:3a:4d:
                    48:37:63:84:fc:df:52:34:ad:aa:b0:b0:4a:c9:60:
                    98:b0:4a:5a:e1:1d:e2:09:bd:e9:7c:6c:8a:4e:fb:
                    2b:39:3f:ec:d2:6c:e6:07:ae:d7:b6:38:c9:c5:0d:
                    f5:36:b1:ea:29:29:2a:d6:d6:74:64:5f:f9:db:13:
                    e2:68:c1:59:aa:cc:6f:7f:09:9c:b5:9f:0e:8e:da:
                    3f:c7:39:81:a2:7e:3c:20:1f:2e:a1:80:49:85:00:
                    ae:d4:79:83:22:ac:c6:fa:e6:02:bd:6b:c4:37:fb:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:13:71:C4:D6:85:DF:AF:92:31:E6:95:4A:2F:3D:33:E4:E1:F0:15
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         11:20:b9:59:30:27:71:a2:5e:9d:47:a4:9b:48:27:89:7b:57:
         4c:b0:7c:70:3c:a5:cc:50:d1:e7:79:83:25:55:c0:5c:ef:12:
         98:e8:73:57:68:06:76:89:be:36:88:31:9d:1d:9d:e4:ec:80:
         32:4d:12:62:e0:b6:c6:6b:23:74:c9:25:f3:36:9d:89:f7:6a:
         63:62:8a:e1:36:f8:a8:a4:1b:63:cf:07:e6:99:88:92:17:b5:
         6f:86:d4:9d:ce:92:4f:62:4b:74:2b:b5:2d:02:d3:fb:a3:a9:
         29:f8:e9:8b:58:6f:e7:6f:a8:2f:27:5c:14:b8:84:b8:46:47:
         66:e9:aa:a4:d5:62:39:ea:12:4d:cc:c9:be:a8:cd:d7:a5:53:
         f9:51:ca:9e:d8:0f:a1:c9:38:b7:ca:58:b2:f3:d5:ec:f7:9d:
         04:eb:2a:41:c8:b6:b1:c2:96:29:55:d3:cd:52:88:50:1e:2a:
         28:3c:ec:90:5b:be:49:45:19:01:a4:64:bb:34:8d:f3:31:a5:
         a5:82:ca:2d:ad:d1:3e:6e:0b:ca:f3:89:b5:44:23:97:2f:c5:
         0d:6e:8a:fb:c9:a2:fe:e2:01:cc:76:6a:33:15:89:29:1d:7a:
         04:d5:e9:c7:6c:47:e5:96:da:49:9c:0a:6a:cd:29:9b:b9:16:
         e4:de:c4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 12:16:56 2025 by rpki-client