
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
File:                     EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json)
Hash identifier:          4aDbIUzzb1ZDQcjxg/IpJxHTCSB+nlNJHd3mOJfoHv0=
Subject key identifier:   95:75:CE:4F:01:7F:B6:A2:B7:1C:15:EE:BD:7E:14:54:0A:58:BD:E1
Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
Certificate issuer:       /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Certificate serial:       10C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
Manifest number:          10B7
Signing time:             Sun 02 Nov 2025 17:22:01 +0000
Manifest this update:     Sun 02 Nov 2025 17:22:00 +0000
Manifest next update:     Sun 09 Nov 2025 17:22:00 +0000
Files and hashes:         1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: jb5+ad8AKUwQDdVw81EhRtEjn/XNBbqO8hrqynf5tqQ=)
                          2: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: S/gVJ+TtEF1mtr8NQHi7hBzO8ZEUNieBwZ0+m5tF7pk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:22:00 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4290 (0x10c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
        Validity
            Not Before: Nov  2 17:22:00 2025 GMT
            Not After : Nov  9 17:22:00 2025 GMT
        Subject: CN=69079339-dffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:cb:82:dd:5e:ae:47:2c:e0:c9:b4:22:a9:
                    4b:35:da:0b:c7:95:a8:9b:b8:97:e4:3a:4e:af:c5:
                    ca:d6:87:d0:33:fe:5f:21:bd:3b:4b:d5:cc:04:90:
                    3e:1e:87:f4:f5:02:5a:da:62:2f:48:65:61:c2:a4:
                    67:6a:b5:1f:9d:bd:18:29:12:cd:ea:a4:0b:2c:fb:
                    1d:a2:53:00:d0:75:c7:30:ed:ce:fe:4a:9b:5d:c8:
                    07:36:f6:c0:b3:16:2f:a9:00:17:b1:92:f4:b2:73:
                    13:ae:80:f8:e0:32:a3:7c:84:2b:15:2d:df:66:e7:
                    65:d8:03:18:a9:85:c8:5e:9b:6e:bf:74:6c:0e:f1:
                    43:92:4b:a6:f3:4e:a0:59:34:3e:d4:b7:06:93:29:
                    4f:6e:9d:80:d1:fe:14:3f:42:1d:f1:65:d5:c1:3e:
                    90:8d:82:8d:44:80:e5:98:9f:cf:d5:7f:d5:e8:38:
                    43:89:9e:ce:89:88:f6:60:b9:67:97:de:ff:32:9b:
                    7f:4d:3e:f2:81:27:94:59:9e:e3:52:36:e3:40:c7:
                    ec:1b:9d:89:08:fb:b8:82:e1:72:8c:5f:c0:d5:7b:
                    d4:57:c9:3e:a0:c9:74:c3:ad:71:36:30:6e:11:0c:
                    aa:58:60:85:0b:da:7f:7a:f3:ec:21:5a:c1:7c:5a:
                    d7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:75:CE:4F:01:7F:B6:A2:B7:1C:15:EE:BD:7E:14:54:0A:58:BD:E1
            X509v3 Authority Key Identifier:
                keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         78:e5:18:bd:a0:2a:7e:45:b2:57:bd:99:7a:98:09:09:75:a2:
         e6:6b:6c:4e:b9:a1:db:3f:a0:9a:f7:0a:2f:fe:9e:50:65:30:
         14:eb:9d:92:98:f2:f3:5d:c0:8b:40:52:ff:cd:73:97:d5:74:
         6c:4e:d4:6e:c0:9b:60:54:07:94:1b:11:8f:78:ee:1c:17:5b:
         96:09:b3:3e:3a:39:8c:06:0f:8e:97:ca:b6:1f:8a:f7:d8:3e:
         e8:db:5b:b4:9b:f5:d5:13:8e:e8:76:97:c0:9a:b7:4d:1d:85:
         ae:d0:06:73:6c:87:de:b3:24:6d:c4:75:ae:d7:72:9d:38:54:
         70:9d:0e:2f:21:5a:77:6c:fc:75:fd:6d:5c:81:4c:b3:29:f1:
         b9:75:16:fe:9d:08:12:87:3e:3f:7e:d7:ea:54:88:39:62:b6:
         3f:05:cf:1e:f7:73:56:dc:bb:c9:ff:0a:7d:ea:ae:4f:6d:16:
         20:a8:16:01:eb:4d:02:8a:41:ed:1f:72:b6:f4:cc:9b:4d:51:
         c3:ec:0a:77:e3:de:4a:8c:4a:4a:10:8c:c6:57:df:63:75:03:
         38:4c:ea:21:da:08:1a:ee:d3:95:c0:53:08:01:6d:aa:90:a0:
         d3:e8:8b:62:39:b4:62:eb:8c:6d:18:09:ef:11:98:cd:b4:33:
         91:b5:44:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 12:33:06 2025 by rpki-client