
$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
File:                     vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json)
Hash identifier:          iFPQWgqrlFAv0xJW98OAgvBYUO0WotaESIX8ZTyjfmk=
Subject key identifier:   B9:40:FE:BF:C4:E9:5A:12:F7:80:C5:F1:03:13:94:75:4F:35:D3:BD
Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
Certificate issuer:       /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Certificate serial:       054C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
Manifest number:          0542
Signing time:             Sun 02 Nov 2025 23:26:53 +0000
Manifest this update:     Sun 02 Nov 2025 23:26:52 +0000
Manifest next update:     Sun 09 Nov 2025 23:26:52 +0000
Files and hashes:         1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: d10/pgJUqZL1xmfAJuxaA8AqDTfurketj2L3csCKzbI=)
                          2: AFB22EC892C211F0A3854712C4F9AE02.roa (hash: 8XhJkYfZtUkquYR5u12lUnek3pRnxzxHWIehQP2S0wo=)
                          3: 7A93FBCE92CA11F08DC37F48C4F9AE02.roa (hash: 90ZyS4U6Q1wf7JXIDQayibihHgxjqDGULjXEwxSwLJo=)
                          4: D575368892D011F0B767031EC4F9AE02.roa (hash: kzLaaICHZkVtnjNMrsdH4mcf3ZHwNLMcESdDt6YjBQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
                          rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:26:52 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
        Validity
            Not Before: Nov  2 23:26:52 2025 GMT
            Not After : Nov  9 23:26:52 2025 GMT
        Subject: CN=6907e8bc-ec81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:03:4b:78:45:6a:2c:44:3d:67:a4:94:40:50:
                    1c:16:1d:be:07:18:1f:58:ad:ab:0b:5a:01:fa:ed:
                    3c:05:d2:67:9e:1d:93:88:f5:c6:65:da:f4:72:1c:
                    9a:d3:c1:9f:4c:d0:83:d9:fd:ed:ce:8a:2a:3e:38:
                    e0:a8:43:89:69:aa:d7:49:2f:26:9b:71:4a:dd:3e:
                    db:f8:6e:fe:41:2c:d6:76:25:54:95:e9:f1:87:5d:
                    61:17:0b:2b:c6:3d:c3:db:0b:cc:69:e1:c3:16:1a:
                    55:cc:32:1c:85:93:66:14:1b:bf:fb:4d:0d:7c:15:
                    2f:b4:d1:31:03:4c:4c:c0:46:f2:37:d8:67:71:4b:
                    d6:bf:04:b5:dc:62:4c:53:66:6d:83:df:ad:fa:73:
                    87:4f:f3:b7:a8:24:c7:7d:84:a1:ba:33:2f:89:9a:
                    07:14:4a:c1:19:2a:e1:54:34:52:9e:73:07:da:b4:
                    e0:26:fc:e3:51:ec:d0:f0:8d:5d:d7:27:89:da:15:
                    73:7f:e2:2e:2c:8f:1a:0c:67:f3:4a:56:1a:27:a5:
                    95:2d:f7:18:54:00:0e:59:6c:39:5f:18:a1:41:61:
                    ea:f3:3d:d0:3f:36:b3:44:09:32:9f:ca:dd:3f:b2:
                    68:9e:99:98:ac:84:d7:da:80:0a:bd:2e:21:d8:1e:
                    9b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:40:FE:BF:C4:E9:5A:12:F7:80:C5:F1:03:13:94:75:4F:35:D3:BD
            X509v3 Authority Key Identifier:
                keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         ad:9a:d8:ea:d9:2c:ff:09:c1:90:42:a8:70:b1:24:62:0b:c6:
         98:98:6e:1f:1a:a1:64:da:8a:1e:21:16:36:8b:e2:44:37:3f:
         e9:a2:bb:d8:2c:c8:c0:66:43:2f:2e:42:47:ae:9d:c0:02:09:
         fa:cd:2b:8f:68:a7:73:f8:c4:8c:c3:85:02:ac:54:8e:0a:20:
         88:9e:60:c9:6d:42:92:48:7c:8e:9a:52:dd:08:eb:7a:9e:3b:
         4b:7a:d6:cc:a7:b2:37:a9:49:05:6c:aa:37:05:16:ba:01:5a:
         be:be:84:d4:b3:50:07:a8:89:f9:a8:cd:44:2d:b0:53:d0:b6:
         6c:51:68:72:db:c7:85:61:6e:b7:5f:d8:f5:5d:06:53:b6:a3:
         b0:0a:ce:a5:75:24:35:ce:e8:af:fb:4c:50:d0:fa:4e:e6:39:
         d1:c1:43:bb:0c:f5:43:f9:0e:9b:13:19:28:00:3e:92:16:c9:
         86:c4:d5:87:34:ae:c7:ae:5d:00:cc:1f:c0:5e:d0:68:72:dd:
         ee:75:02:7f:75:22:0c:7c:1c:87:22:8e:23:cb:5e:90:ee:ba:
         eb:29:75:b5:d4:44:fe:29:c6:50:9a:eb:49:00:51:22:83:bf:
         66:a5:46:cc:fc:6e:b5:3b:97:7d:f3:6f:78:6d:94:17:2b:79:
         a6:0c:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:06:11 2025 by rpki-client