
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
File:                     rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft (raw, json)
Hash identifier:          3iyOP3HG3Xoeavr94mXo4bFKcDF/DbxwDB6zVst1y3Q=
Subject key identifier:   78:F2:74:39:2B:BF:48:25:AC:84:2C:EB:5D:1B:06:69:7E:C0:B5:3A
Authority key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
Certificate issuer:       /CN=A91D837B/serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
Manifest number:          A6
Signing time:             Mon 03 Nov 2025 06:16:11 +0000
Manifest this update:     Mon 03 Nov 2025 06:16:10 +0000
Manifest next update:     Mon 10 Nov 2025 06:16:10 +0000
Files and hashes:         1: rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl (hash: ozRGpDHaXmZMYzulgcKkzxfInVs9LKXe3VzzLSJq8fE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl
                          rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:16:09 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D837B, serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
        Validity
            Not Before: Nov  3 06:16:10 2025 GMT
            Not After : Nov 10 06:16:10 2025 GMT
        Subject: CN=690848aa-537c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:a0:34:20:3f:d2:ac:74:03:fb:5a:17:59:
                    10:88:a4:23:6e:0f:3c:e2:4d:f4:9a:6b:52:65:98:
                    21:31:f8:62:ed:ed:54:67:79:59:73:8f:e8:64:92:
                    b1:f7:73:3e:31:a2:31:ab:a5:be:30:76:58:e9:1e:
                    da:99:c5:0b:53:94:f9:40:11:88:8d:71:45:7d:0f:
                    a8:33:ef:54:8a:b1:7e:a0:59:37:29:c9:f6:23:d7:
                    ea:6b:4b:0a:67:18:ab:58:7b:9a:54:20:be:3d:da:
                    56:a3:cf:06:34:68:e2:8a:02:4e:3f:a0:6e:cd:91:
                    84:da:5e:a8:f8:17:cb:10:22:13:67:4b:af:b5:54:
                    72:f0:a3:fd:64:ca:72:54:35:5e:81:9f:3f:fa:88:
                    2a:32:6e:ba:62:01:c1:e3:8b:14:2d:1f:b5:8f:0d:
                    6b:f6:7c:8c:d9:8c:e8:4e:a3:37:57:48:ca:1e:52:
                    a4:b1:20:e8:60:b5:2a:e3:ba:a1:00:6d:46:4e:f2:
                    fc:b6:11:0f:55:f2:9b:58:df:2b:bd:15:c0:43:22:
                    63:03:20:fe:7f:9d:d9:56:fb:40:df:04:37:6d:3e:
                    6b:82:60:de:98:57:f8:35:47:6c:0f:46:40:60:f6:
                    e9:40:1a:07:53:1d:80:07:38:31:7b:7f:d6:b6:f2:
                    2e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F2:74:39:2B:BF:48:25:AC:84:2C:EB:5D:1B:06:69:7E:C0:B5:3A
            X509v3 Authority Key Identifier:
                keyid:AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         a3:bb:a4:ee:23:05:28:84:e5:d0:18:c9:66:e5:56:33:b7:f9:
         e3:b1:e9:a4:e7:f9:7b:a1:a8:5f:fa:5f:15:30:8a:b7:34:a5:
         24:21:f9:a9:ff:b8:17:e8:79:72:95:75:7d:31:d4:1f:e4:ba:
         c5:1f:58:f2:c8:ed:aa:3b:49:d4:66:b2:60:d7:41:4a:6b:93:
         3d:38:23:ad:82:3e:e2:fe:8e:01:65:ea:76:44:06:5c:95:35:
         13:50:8a:27:07:3d:a5:9b:5a:85:be:15:9a:9b:4a:5e:59:b7:
         4e:f3:22:0d:ef:56:a0:07:ef:92:b3:12:23:96:92:26:5f:d5:
         87:2d:b3:ea:b6:e3:29:56:ab:27:50:75:31:57:c2:1a:c0:29:
         40:e7:04:34:b8:82:53:73:a2:df:78:fd:6f:a1:43:43:aa:12:
         cd:37:94:87:c6:2c:cd:33:13:6f:a0:2e:91:9c:b8:80:76:35:
         98:9e:7d:64:11:0d:ec:2c:da:3d:ff:e2:87:28:ff:06:01:8e:
         ab:54:6f:e2:9f:2b:53:66:b2:bb:90:9f:f8:0f:2a:4c:49:72:
         ca:48:7e:0f:77:12:3c:64:d1:5a:18:31:4b:85:47:37:1d:fc:
         34:bb:1d:11:c6:ec:cf:c9:af:a8:d0:d5:3e:40:3c:11:90:83:
         fa:3a:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:03:52 2025 by rpki-client