
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
File:                     Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json)
Hash identifier:          og7MQTe8bYlmw8NAEJMrmAm8q9qY14dqbnOdLaHKAVQ=
Subject key identifier:   2C:6A:05:6D:8E:03:D6:C8:F2:2C:2B:EB:67:A8:1C:0D:92:43:7D:85
Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
Certificate issuer:       /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Certificate serial:       020F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
Manifest number:          0206
Signing time:             Mon 03 Nov 2025 02:21:05 +0000
Manifest this update:     Mon 03 Nov 2025 02:21:05 +0000
Manifest next update:     Mon 10 Nov 2025 02:21:05 +0000
Files and hashes:         1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: tj8+Etf9oMn8pi6W+MkzjhmlxyxHoR1YGkLabLhzbdA=)
                          2: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 60VgyL7DaGetkQSPDqdUeNAT7JTTWsCniqM1ifeH4YQ=)
                          3: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: agT8B/KOnCHYQpfkAexNJsFp5T4PhjfgQqzkODGUs5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:21:04 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
        Validity
            Not Before: Nov  3 02:21:05 2025 GMT
            Not After : Nov 10 02:21:05 2025 GMT
        Subject: CN=69081191-ca3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:82:de:39:6e:bc:18:e4:63:bd:5c:2a:4e:
                    c4:f8:72:78:3e:86:96:32:e2:e1:2a:a8:ba:bd:70:
                    7f:e9:b0:76:d9:76:03:04:ff:54:d5:a8:d6:ae:56:
                    bb:7c:8d:5e:54:83:80:dc:f6:99:89:d3:2f:99:c8:
                    c8:8e:03:a0:46:6e:51:df:ee:8f:86:61:71:d3:1f:
                    2d:c3:c4:e6:31:85:38:92:87:27:ec:0e:43:d8:28:
                    de:6f:bf:fb:34:eb:60:a6:b8:26:b1:ce:38:8b:18:
                    0f:e2:c1:16:7e:52:45:22:83:d6:60:1b:67:37:97:
                    37:82:66:be:54:51:7a:39:e1:fb:cb:55:47:23:8d:
                    0c:14:e7:b1:aa:00:99:a6:25:7d:87:fd:ef:ce:75:
                    c5:00:92:11:5e:57:b9:44:60:5d:4f:f2:fa:99:00:
                    0d:40:64:28:c4:3a:bb:95:2d:43:e2:3c:2f:bb:b5:
                    ef:1c:cc:12:96:46:54:68:48:43:da:fe:f7:40:3a:
                    de:e1:f4:c1:c2:1d:5d:d2:48:b0:1b:d7:b5:b6:05:
                    20:3d:c1:2e:39:f3:08:07:b6:30:5e:a8:1d:52:03:
                    f5:0b:20:5f:fa:ed:20:7c:91:3a:ae:d6:27:b2:a1:
                    95:c9:11:e3:6c:7c:82:fc:13:b9:22:45:5b:5d:36:
                    11:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6A:05:6D:8E:03:D6:C8:F2:2C:2B:EB:67:A8:1C:0D:92:43:7D:85
            X509v3 Authority Key Identifier:
                keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         7f:4f:90:e3:ed:d5:d0:36:b7:f2:ca:97:19:b9:15:4b:8d:0f:
         6e:db:74:53:b3:13:5d:ce:ba:51:51:d0:f3:a5:25:10:f0:23:
         29:19:b1:c3:eb:81:5d:07:52:38:8f:03:ba:42:83:1b:3f:53:
         02:6c:09:0a:83:e9:0e:4e:f7:47:93:52:da:5f:de:54:e9:db:
         99:ae:74:0c:bd:37:4a:6f:01:24:26:05:59:97:78:ec:82:3f:
         b5:4b:69:85:29:57:25:43:e0:a0:73:83:0a:41:7f:7c:eb:01:
         f9:e0:af:0e:d9:2c:cd:c2:96:dc:b0:f3:c6:6d:88:3e:e7:91:
         a8:a6:8b:1e:c6:1d:20:bd:92:bb:fb:36:43:55:00:47:87:ee:
         00:5e:95:aa:d0:3c:25:75:39:5e:28:f8:3a:e1:bd:b6:11:89:
         1d:fa:f9:73:6c:e6:cb:2d:5b:5e:e5:33:eb:62:94:25:64:8e:
         ff:a4:86:dd:c4:5c:38:43:bc:f2:72:19:f9:26:c0:9c:3c:6e:
         6c:33:7a:d0:e6:6f:68:18:91:a7:94:86:cf:88:69:07:33:e8:
         dc:1e:6c:05:59:44:24:0b:86:ea:79:9e:c2:8c:1e:fc:0f:bc:
         e4:22:69:bf:d9:d9:1e:36:a0:5c:f9:2a:79:50:fe:29:56:7d:
         a8:b8:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:02:49 2025 by rpki-client