
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft
File:                     XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft (raw, json)
Hash identifier:          vK3vt9Ybc8EbYiFm1BaWgIhpJ39pKFnue9/p71ft0SE=
Subject key identifier:   F8:71:7D:95:6B:CA:E3:08:42:8F:B1:16:47:B9:4A:C0:06:2F:50:10
Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
Certificate issuer:       /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Certificate serial:       0A09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft
Manifest number:          09E4
Signing time:             Sun 02 Nov 2025 19:54:30 +0000
Manifest this update:     Sun 02 Nov 2025 19:54:29 +0000
Manifest next update:     Sun 09 Nov 2025 19:54:29 +0000
Files and hashes:         1: XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl (hash: zoAb2PqFqUPqgKCRJRn4RIbXR/IFDkfJXjSVzKvWm1M=)
                          2: 3818D9A09A9011EFB14F1729C4F9AE02.roa (hash: vvb4CejOVJri8OIdHwWGwZEAuucKhYGTP+ke3m07dcM=)
                          3: 2109DFF2EFBB11EC95A1FD0DC4F9AE02.roa (hash: MvhHzk/9f8tTuJ4ji5wkdvYja5PdDGGnrgSYFLH3YU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
                          rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:54:29 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2569 (0xa09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23B3, serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
        Validity
            Not Before: Nov  2 19:54:29 2025 GMT
            Not After : Nov  9 19:54:29 2025 GMT
        Subject: CN=6907b6f6-2a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:53:74:56:44:0a:33:50:5c:98:d4:5b:89:1f:
                    07:99:aa:6d:cf:7f:c5:b3:f7:3a:bd:d1:7a:b6:e0:
                    54:63:a5:af:3f:d9:87:17:78:2d:42:46:6a:12:db:
                    59:a7:e6:83:a6:f3:96:97:e7:4f:43:06:e6:a5:98:
                    34:d0:96:a6:57:da:2c:c7:fb:9b:bb:cb:92:89:a5:
                    f8:19:5e:10:4d:71:67:d8:ca:0e:30:52:37:b2:1b:
                    69:cf:c0:0a:f8:bc:a6:5a:7b:f2:fa:a5:58:53:1a:
                    15:b3:51:d6:99:1e:e2:dd:f7:7a:56:93:e4:b9:6f:
                    db:aa:3e:2d:e1:2d:ec:65:d8:3d:eb:d6:13:31:6d:
                    87:4d:c5:ac:09:fe:15:19:6d:b6:56:cc:5e:ca:ee:
                    ca:72:50:9a:d0:ec:f0:2d:8e:a0:af:64:d7:c5:5c:
                    a2:b8:31:36:e3:93:90:8b:34:65:13:cc:c9:4a:4d:
                    a3:17:97:08:84:6c:28:2d:28:76:93:9e:7e:a9:ac:
                    da:17:40:0b:79:53:f0:b8:cc:f1:8b:c2:fc:1b:eb:
                    8d:a7:ce:c7:aa:57:06:80:7f:77:f1:bb:00:35:61:
                    d2:77:5e:36:b6:fc:5a:2c:33:a4:29:ba:e7:8d:78:
                    10:ce:66:ab:a1:ab:ce:cc:2b:ed:c6:74:98:07:b5:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:71:7D:95:6B:CA:E3:08:42:8F:B1:16:47:B9:4A:C0:06:2F:50:10
            X509v3 Authority Key Identifier:
                keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         76:47:63:98:f6:54:2a:ac:ac:f3:31:22:d8:56:e5:0a:83:48:
         3d:42:a9:37:28:65:cc:7c:da:82:70:e6:f8:8d:91:74:30:0f:
         49:5c:25:be:d1:b0:56:12:71:ed:16:76:a6:9d:90:d4:b6:1d:
         ed:e6:e3:b1:d0:25:1e:dd:37:34:3b:41:47:81:be:90:cc:16:
         a7:d2:94:d6:3d:55:71:0c:77:22:64:2b:fa:cf:f5:6f:0d:c2:
         f9:b5:82:b8:e6:a1:5f:5e:5b:96:7d:6b:04:4f:f8:4a:29:5d:
         60:61:6e:c3:9f:1c:32:34:2d:a4:f0:4d:f2:bd:74:8c:23:0e:
         ec:d5:da:42:48:a0:e7:dd:13:33:9e:8b:89:a6:8f:1e:05:64:
         51:5e:f2:64:59:1a:d0:3f:0c:ae:52:8d:93:7f:05:75:70:90:
         a9:25:d4:70:c1:60:1e:37:d6:b8:07:ee:23:e5:93:e8:6d:3e:
         5a:bf:c1:87:67:54:c4:53:e1:77:ce:3d:65:45:bc:1b:0d:d5:
         1a:02:66:e9:7a:04:79:84:82:df:33:81:5c:7d:12:d2:23:70:
         93:50:b0:32:5c:72:0c:f5:b1:86:2d:56:84:b9:49:dc:65:82:
         28:a6:81:c9:a1:fb:08:b3:2a:6d:ea:0d:b6:f9:d8:0e:e1:dd:
         cc:ea:9d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:08:29 2025 by rpki-client