
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
File:                     W71m6GM06ZgX4sbVvOt9rQIPyoo.mft (raw, json)
Hash identifier:          8Jba+x0lIswg4jWW7UkyOleycQMjlOjNpJdizdrFo0E=
Subject key identifier:   71:9C:86:FD:C8:F3:6C:C7:08:1A:5F:0A:B4:E2:59:96:4F:66:32:D0
Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A
Certificate issuer:       /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
Certificate serial:       092D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
Manifest number:          0920
Signing time:             Sun 02 Nov 2025 20:13:27 +0000
Manifest this update:     Sun 02 Nov 2025 20:13:26 +0000
Manifest next update:     Sun 09 Nov 2025 20:13:26 +0000
Files and hashes:         1: W71m6GM06ZgX4sbVvOt9rQIPyoo.crl (hash: HdxgGTIntNE1x7GPzLtQJqeXrsaJBlus1zE4RRwhYBo=)
                          2: 16745A82B1CD11EA9A31DA7DC4F9AE02.roa (hash: glSctB67kcgRNgcA0b3/jW6A3plk8SZgtFK9qI9gKIo=)
                          3: 15C562A2B1CD11EA9A31DA7DC4F9AE02.roa (hash: NkR/nF+Vmt/Gcc86ZcEETph8N4g/HWKaL5fwvV3ReJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl
                          rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:13:25 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2349 (0x92d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E80E, serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
        Validity
            Not Before: Nov  2 20:13:26 2025 GMT
            Not After : Nov  9 20:13:26 2025 GMT
        Subject: CN=6907bb66-2b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:18:80:02:1d:d1:e6:01:e3:99:87:0a:5c:31:
                    1b:f7:97:4b:a5:71:f4:06:4c:58:63:61:c6:48:11:
                    55:cc:8d:10:79:5d:f5:98:af:8b:b9:4f:f2:3c:b6:
                    69:1b:68:ab:80:3a:a2:68:35:a7:ae:a7:f9:a3:d6:
                    6e:c9:9a:f2:e5:64:6e:8f:f0:e5:4a:39:8e:e5:34:
                    88:f6:fd:e2:79:d7:dd:08:21:07:7a:31:e6:22:cc:
                    85:60:12:9d:5e:28:08:24:37:30:89:95:54:cb:ad:
                    34:7c:33:f6:d3:45:18:32:65:a4:0c:a0:06:56:32:
                    78:77:ec:ce:b2:80:7b:3a:11:e5:d3:21:a1:39:db:
                    6c:84:c1:63:c9:35:09:15:11:30:e3:b6:45:78:15:
                    0f:fb:4f:e3:1b:73:fb:58:69:2a:2b:77:9e:54:21:
                    09:5c:e0:8b:a9:8f:50:f3:43:36:f8:c9:05:f1:60:
                    f7:b7:5e:81:86:46:46:43:12:d7:15:0c:dc:03:b3:
                    11:72:6c:04:13:a2:47:0b:10:45:c6:79:73:96:a6:
                    da:2c:27:4d:7a:67:55:f8:00:35:ea:50:76:ef:83:
                    f9:15:61:c0:ec:11:b8:b9:cb:f1:4a:ff:fc:e5:5d:
                    7e:3c:99:10:14:9c:0d:99:c9:af:c0:b8:63:ae:57:
                    d4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9C:86:FD:C8:F3:6C:C7:08:1A:5F:0A:B4:E2:59:96:4F:66:32:D0
            X509v3 Authority Key Identifier:
                keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         56:7e:ee:22:82:b7:09:38:c9:dc:ef:22:eb:b4:f7:38:e0:df:
         6f:b5:08:57:33:c3:21:4c:ec:9c:a7:38:ea:c0:41:ad:b4:dd:
         25:76:01:d6:06:10:91:84:bb:af:93:38:f6:fa:7c:b1:f3:14:
         f4:df:e5:62:3b:33:43:7a:b6:37:12:39:df:fd:4f:11:af:77:
         4a:52:fd:f1:45:be:f1:51:94:74:64:25:e0:18:47:0c:8a:b7:
         91:43:3d:0b:ba:2d:38:2f:28:b3:59:ac:d1:8d:aa:4d:f4:92:
         5f:ed:41:8c:77:b3:eb:87:2f:26:4b:b7:9c:c0:ac:24:11:47:
         93:f8:4f:48:60:22:60:70:e8:17:26:df:12:6d:a9:e4:4c:a1:
         fb:48:c9:04:24:dc:bf:17:68:1c:63:ba:a1:17:76:59:1b:be:
         02:c4:ef:8d:b7:b6:a3:47:c3:69:b5:71:cb:80:1b:02:08:b6:
         10:d8:a8:f9:4e:ca:e2:88:30:ef:a1:b3:79:61:b6:e6:51:55:
         43:46:a7:61:5e:04:be:b7:05:93:fb:3a:b7:f7:c0:ee:f3:41:
         b2:7b:12:a6:8f:c0:8d:4c:03:78:50:3d:5d:5f:5c:9b:1f:de:
         d2:bf:fb:f2:3a:df:7c:c9:60:fc:0b:94:81:3f:13:2a:f6:e0:
         bb:65:08:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:32:01 2025 by rpki-client