
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
File:                     6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft (raw, json)
Hash identifier:          hhYDqv2SDdUS4PhhHVUaa1tWdMCFrYaC1wQmuPWSsak=
Subject key identifier:   36:DE:AF:A2:45:0C:A5:1A:4C:06:B6:44:48:97:E9:62:6F:6B:F9:07
Authority key identifier: EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA
Certificate issuer:       /CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA
Certificate serial:       0513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
Manifest number:          050C
Signing time:             Sun 02 Nov 2025 23:37:04 +0000
Manifest this update:     Sun 02 Nov 2025 23:37:03 +0000
Manifest next update:     Sun 09 Nov 2025 23:37:03 +0000
Files and hashes:         1: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl (hash: /zTgA2lLpVxp7NWiOnY6WxXpi8lfe0towo1ZR/7FXv4=)
                          2: E11714EE89E711F0B91AE62DC4F9AE02.roa (hash: wDRLIHrvxrqmI7nnU4ubgr079aqianE5n+pmFlnwcnU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl
                          rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:37:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A13C2, serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA
        Validity
            Not Before: Nov  2 23:37:03 2025 GMT
            Not After : Nov  9 23:37:03 2025 GMT
        Subject: CN=6907eb20-176f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:dd:e7:69:22:3a:c8:19:21:ac:c7:5a:c9:
                    67:c0:24:df:22:e7:18:bb:5c:bf:fd:e0:a0:c1:9e:
                    e0:b6:b5:5a:7f:2c:a7:e6:1b:28:28:67:31:95:41:
                    c5:a7:45:9b:7e:47:9a:a3:16:61:89:c0:0b:78:1d:
                    1e:98:9a:67:d4:fa:0a:f6:2d:b9:92:56:23:e6:b8:
                    2e:6b:67:28:02:f7:af:ec:84:84:34:ff:d8:aa:53:
                    44:6c:0d:17:dc:07:0b:47:9d:02:3a:49:8d:1d:71:
                    51:b5:35:9c:89:4d:34:27:5c:66:bd:56:2d:cc:b6:
                    c0:41:dc:61:fb:3e:f6:f3:86:d9:cd:7a:31:f9:42:
                    c8:a4:37:f3:71:71:bf:59:26:62:93:02:a3:cf:0e:
                    5f:ab:b3:b7:70:dd:53:98:7e:f8:20:d9:a0:d8:cd:
                    28:fa:37:47:3a:70:dd:87:6f:71:c0:61:04:18:9a:
                    d3:bd:2b:7e:95:72:a4:69:98:ea:d7:76:3e:51:ba:
                    3c:28:9a:40:2d:59:26:ca:28:9b:f0:ff:45:06:bf:
                    06:99:0d:07:b3:7b:76:c5:57:6e:67:2f:28:f3:f8:
                    04:a9:fd:dd:61:ab:4f:d4:63:b5:c9:7d:09:c6:e7:
                    5f:24:0b:bb:06:fd:25:76:ad:90:a5:21:02:ba:84:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DE:AF:A2:45:0C:A5:1A:4C:06:B6:44:48:97:E9:62:6F:6B:F9:07
            X509v3 Authority Key Identifier:
                keyid:EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         73:88:90:31:b0:0d:9a:19:e7:76:e6:1f:d1:94:e8:58:ef:df:
         c4:a2:47:b8:e3:66:a8:b5:dc:5e:b9:03:f8:3f:90:25:1c:35:
         d4:73:60:1b:43:c2:cf:e8:44:15:6e:f6:95:aa:1d:df:7c:bc:
         80:d6:6f:58:aa:92:fb:d8:b9:2e:f2:9c:7e:18:da:6a:d3:4d:
         23:57:bf:d9:96:8f:13:95:fd:d8:56:08:24:f3:77:d8:73:e3:
         1c:1f:7d:d7:69:84:19:dc:aa:b6:ca:4d:37:5c:d7:c0:16:85:
         d0:e2:74:81:3a:df:ba:17:c2:68:87:25:08:3f:12:23:cd:6b:
         8a:0b:41:52:a3:c0:b1:9d:a0:c3:0a:39:2f:71:9f:8a:36:6b:
         6c:fd:16:55:45:2d:be:01:ae:6d:ff:b5:e4:89:e8:2e:29:f1:
         f6:6a:7e:c3:88:29:fc:9c:a1:9e:0e:dd:8d:b4:d2:68:6a:51:
         5a:e6:05:35:ff:a7:66:af:b6:d3:50:21:a5:85:8c:33:b0:16:
         93:75:49:74:9e:84:53:3e:8d:fc:9d:86:81:6c:c9:82:81:2d:
         58:51:75:14:82:ef:e4:bf:d0:72:f0:07:8e:49:35:0b:f3:c9:
         f5:e9:88:44:b6:c0:80:ab:ec:8e:95:da:cd:0b:1f:10:3e:be:
         d7:b3:ec:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:07:31 2025 by rpki-client