
$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
File:                     EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft (raw, json)
Hash identifier:          R3ksL1FPfJIFTdDlXPBqOVPecDUglf75EQrhJGZ6/o4=
Subject key identifier:   26:01:7B:52:89:D2:5C:87:06:9E:F4:BE:62:CC:58:F1:70:7F:8B:42
Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13
Certificate issuer:       /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813
Certificate serial:       0BA9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
Manifest number:          0B97
Signing time:             Sun 02 Nov 2025 18:58:48 +0000
Manifest this update:     Sun 02 Nov 2025 18:58:48 +0000
Manifest next update:     Sun 09 Nov 2025 18:58:48 +0000
Files and hashes:         1: EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl (hash: hNV8TvTeNPoFjKvPNo1oQCi/lenla5d/OQuO9vRGXzc=)
                          2: 2A08F1A4369211EAA64E320BC4F9AE02.roa (hash: dZNG5vW2l8zDaTZFXpzRrbU/LlNl+Cok+DnqXn1U2+I=)
                          3: 5D822954368F11EAB3D4CE7FC4F9AE02.roa (hash: 69pkK44GCEYYO1DQ/J3aSzjtWc5Cn9UqeLLTzO9Yidc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl
                          rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:58:47 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2985 (0xba9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813
        Validity
            Not Before: Nov  2 18:58:48 2025 GMT
            Not After : Nov  9 18:58:48 2025 GMT
        Subject: CN=6907a9e8-7149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:c7:ca:af:d5:a9:f6:d5:6f:42:61:21:65:
                    d5:75:6d:f9:79:b6:74:d6:95:ed:99:b9:75:22:f2:
                    6e:43:8d:22:3e:81:b2:31:e1:dc:38:86:ec:a8:56:
                    49:6f:95:ee:2b:a4:55:5d:e1:a8:de:a8:88:a9:ab:
                    82:7c:97:a0:44:ec:ed:02:12:05:ff:f8:6f:ef:a4:
                    51:e3:9d:21:38:c2:15:0b:e4:f8:52:5b:f6:03:36:
                    bb:75:04:db:f0:0e:76:2e:e8:d8:af:db:db:b2:7a:
                    a7:ec:1e:58:0e:6d:1e:b8:a4:85:a6:fa:cd:c3:29:
                    7f:ff:06:33:d1:26:53:00:bd:5a:ad:3f:e7:d5:b6:
                    93:72:3b:19:5b:6f:49:2d:b9:3c:36:d1:75:e7:ad:
                    79:54:65:2f:74:a0:5f:2c:92:b8:36:d2:0b:49:ae:
                    43:d1:53:25:e5:91:6f:78:3e:25:54:cc:e3:2c:93:
                    05:fe:02:b4:35:1d:d6:cc:77:86:de:aa:ec:87:9b:
                    4d:af:b8:89:67:5f:13:8b:ad:87:e5:04:56:f1:3f:
                    b2:1e:64:56:0e:2d:12:d8:71:c1:54:ca:e8:84:77:
                    e9:6e:ad:52:0c:ff:60:32:1f:49:a9:f8:aa:22:77:
                    b0:18:6d:b0:db:c4:ca:02:68:72:9d:53:2a:33:e0:
                    55:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:01:7B:52:89:D2:5C:87:06:9E:F4:BE:62:CC:58:F1:70:7F:8B:42
            X509v3 Authority Key Identifier:
                keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         36:e7:06:00:8f:3f:f1:28:34:9b:0c:0e:3c:aa:15:1b:75:b1:
         83:1d:e4:58:e2:86:02:e3:f0:77:1a:c4:51:d2:96:42:bd:b0:
         04:1f:64:85:cf:41:94:a1:95:61:d0:9a:9b:b8:e3:a3:cd:43:
         7c:a9:74:37:b1:9e:78:e5:5e:34:1f:e2:52:3c:b8:bd:63:41:
         c4:af:db:47:f9:22:4c:f2:ac:22:4f:07:71:a2:8d:ed:e7:f9:
         c7:8d:2a:98:ae:7b:c2:b9:6e:4d:2a:75:e1:b1:7d:85:b1:8f:
         6f:ee:bc:be:b4:a1:c7:07:3b:d5:79:78:c0:21:13:95:45:9f:
         9a:94:94:2e:05:54:53:ce:f9:b1:dd:ff:92:0f:f2:8d:9b:a1:
         76:53:ec:2a:82:83:aa:61:7c:67:9d:82:16:96:e8:b1:05:8b:
         15:7f:99:24:39:fc:65:e7:24:ae:e6:ce:6d:9a:59:31:9f:2b:
         45:47:dd:2d:44:86:94:00:a0:cf:c0:44:4e:c3:4f:84:28:3f:
         b2:3f:16:3f:15:04:06:3f:7d:43:a0:e2:9b:d6:23:c9:98:2e:
         ff:76:62:0d:6a:9b:a9:c7:42:34:ce:c8:98:36:df:aa:52:b4:
         b8:93:b2:f9:9a:3c:59:2b:9c:c6:2d:88:17:63:1f:9f:7d:89:
         70:16:47:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 16:04:22 2025 by rpki-client