
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
File:                     N-rtpCQtUJYrh7SiB6xMNEszBgw.mft (raw, json)
Hash identifier:          3Bp0ZHrrAuKkFSMiQc2B9aDUQ9hUidSmj+JhEwVA4ZQ=
Subject key identifier:   BF:35:80:FA:87:8E:1C:1F:0B:80:57:8D:66:B3:B7:2F:3A:4B:14:FB
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Certificate issuer:       /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial:       0E68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
Manifest number:          0E2D
Signing time:             Sun 02 Nov 2025 17:51:25 +0000
Manifest this update:     Sun 02 Nov 2025 17:51:25 +0000
Manifest next update:     Sun 09 Nov 2025 17:51:25 +0000
Files and hashes:         1: N-rtpCQtUJYrh7SiB6xMNEszBgw.crl (hash: M/jQ2qIZaYYwPM51RfJ5Xk/Nt37+EU2fBqUvXRZa7wc=)
                          2: C65A7B2E2DA511EDABDD0D5AC4F9AE02.roa (hash: XXEtd4acA5WN5nQ55u0c/6B2fLJ5iEmhPHp1iyDBTHg=)
                          3: 571B65E63DB411EEAA68F342C4F9AE02.roa (hash: c5cKsH/wywjFJuntQ2zEXHvdACLKbLED/IyUky+0prg=)
                          4: A26FA1DC51B811F0B1C0B748C4F9AE02.roa (hash: +ia9FDkk8XhHZAjnVE6jiqT+IAX2KrKqfIZK/zSEFO8=)
                          5: 4B058994B18D11EC886B063CC4F9AE02.roa (hash: hz9U6Vrjf2uu8O9hhyxsvGgsibbnQkjfxQGCzPSoo1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:51:24 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3688 (0xe68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0741, serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
        Validity
            Not Before: Nov  2 17:51:25 2025 GMT
            Not After : Nov  9 17:51:25 2025 GMT
        Subject: CN=69079a1d-9c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:9b:31:e7:4d:56:10:e4:55:d2:a1:f5:5b:
                    54:d3:2f:47:1d:b4:42:c5:b2:64:a3:59:6a:b6:48:
                    1f:09:a9:a5:85:d8:44:0d:85:e9:11:69:9c:05:c5:
                    4c:db:f3:27:45:f2:f6:5c:9f:5c:02:99:d0:c6:4d:
                    44:77:be:25:43:3a:54:b9:c9:55:fc:ee:50:cb:0e:
                    6d:94:08:5d:2e:e6:63:f0:70:48:2e:6d:39:15:04:
                    a7:2c:ec:70:3c:d2:82:77:ac:3a:d7:12:1c:b1:94:
                    79:71:66:ba:cd:87:cb:12:99:b1:be:47:ac:43:f9:
                    9e:1d:8c:73:bd:45:25:b5:7a:62:ac:7c:40:b9:19:
                    41:83:05:57:a3:51:e5:e2:1e:99:24:35:bd:5c:57:
                    d4:5a:5f:7e:4d:70:93:d3:b1:e4:d1:53:ee:d4:bf:
                    6e:a3:ab:b8:a4:24:ba:d9:ce:c3:dc:2e:93:3d:54:
                    ea:81:99:95:f5:02:14:88:4c:5b:d9:d9:4e:4a:bc:
                    e9:53:c8:d1:38:13:8a:a9:4e:43:0b:a6:45:6a:00:
                    45:4f:2f:18:d7:fe:70:e0:90:61:3b:22:8b:21:2a:
                    24:82:a4:4e:f4:b3:80:f2:62:19:28:33:b8:4a:6c:
                    ed:05:b4:a4:1c:5f:66:76:0f:6a:81:35:c1:6d:f0:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:35:80:FA:87:8E:1C:1F:0B:80:57:8D:66:B3:B7:2F:3A:4B:14:FB
            X509v3 Authority Key Identifier:
                keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         c1:ac:37:78:dd:54:df:cf:9f:cc:15:c1:2a:07:12:b3:d1:9c:
         c9:77:de:25:b7:69:15:7c:4b:e8:25:d7:ef:a9:cc:1b:57:6a:
         e7:39:33:cb:b4:eb:a7:a2:fb:7b:aa:09:1d:58:b1:90:ab:cd:
         6f:97:82:1f:ad:c0:d0:1f:bf:32:9a:f5:b1:cf:6a:ad:35:e7:
         fe:d3:79:f9:9d:ea:8f:5c:3c:33:c2:67:07:7d:b4:d4:bc:2f:
         44:31:ec:3a:cc:74:30:75:3e:11:a5:40:0b:05:e8:ed:70:f6:
         a6:1b:b0:b3:3c:26:b2:dd:52:90:35:ae:e9:69:89:02:3d:49:
         29:17:4f:c6:23:79:42:24:04:13:c5:ee:9f:bc:39:c0:55:25:
         b6:86:65:e7:13:2e:12:91:88:58:44:dc:d1:8f:ff:10:ed:3a:
         0d:ca:75:31:ec:b9:54:fd:35:88:41:5c:92:fe:5d:79:6a:48:
         25:8a:3c:14:1c:4c:2d:69:46:f4:f8:97:e3:7f:38:b9:18:95:
         5f:df:5b:ac:09:8a:84:0d:8e:89:e4:51:f2:22:e7:2e:86:51:
         b2:ed:0c:47:77:14:ca:1b:c8:34:60:b9:8c:17:98:5f:cb:06:
         8d:6f:8b:9e:db:e2:55:27:2c:8d:3d:8c:71:89:24:01:9b:b3:
         a2:54:3d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 07:23:37 2025 by rpki-client