
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft
File:                     Bats53QFyQRH8nu2EgCypDHeStw.mft (raw, json)
Hash identifier:          MnTr+ggohwLoEiw5cr6vn3Bi+bPDQESLOvjcUf/yijc=
Subject key identifier:   13:96:70:96:F0:A3:DE:9F:D0:35:85:77:56:97:9B:BA:8E:B6:0E:A7
Authority key identifier: 05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC
Certificate issuer:       /CN=A9131589/serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC
Certificate serial:       02C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft
Manifest number:          02C7
Signing time:             Mon 03 Nov 2025 01:21:16 +0000
Manifest this update:     Mon 03 Nov 2025 01:21:15 +0000
Manifest next update:     Mon 10 Nov 2025 01:21:15 +0000
Files and hashes:         1: Bats53QFyQRH8nu2EgCypDHeStw.crl (hash: 1DzypxCQ4I2d5ZH29PvAKUn66qLCf2AV8a2sUJbFZf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl
                          rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:21:15 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131589, serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC
        Validity
            Not Before: Nov  3 01:21:15 2025 GMT
            Not After : Nov 10 01:21:15 2025 GMT
        Subject: CN=6908038b-fe35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:0a:51:6e:e6:b2:f7:2b:ef:d5:25:b9:fa:
                    a4:65:a4:46:b9:fb:f1:6c:80:4a:c5:a4:7d:7f:0a:
                    72:53:be:62:bf:fd:ba:3d:5a:59:43:9a:eb:b7:7a:
                    7b:fc:99:f4:59:68:5b:49:91:6c:3f:aa:74:e8:79:
                    46:9f:db:f5:ed:18:0a:2b:7a:61:0b:3a:8e:db:f3:
                    bf:c4:81:53:6b:3f:6e:ec:a2:ed:e2:a6:93:ea:06:
                    22:6b:9b:1c:68:cf:e5:b9:cb:c6:56:55:c6:4e:85:
                    16:b1:df:df:06:6f:10:0e:a8:c5:78:72:ee:f1:60:
                    aa:19:c1:b8:b7:76:91:28:d3:9b:62:08:85:b5:04:
                    de:bb:a6:30:c5:8a:ac:2a:99:b9:91:64:70:26:d8:
                    d7:32:76:57:98:8e:9a:4e:d3:dc:a8:59:71:21:e1:
                    2c:8c:85:8f:6a:7a:e2:a2:c1:9a:0f:9e:f2:0d:1b:
                    2e:a0:5a:a2:bf:76:58:bb:36:84:ca:fa:8b:5f:db:
                    b7:5c:13:dc:a2:58:ea:87:9c:dd:67:31:c0:61:37:
                    24:13:92:74:73:21:ac:41:76:fa:9a:e9:88:e3:15:
                    89:2d:89:a4:fb:a9:3d:08:f7:e0:2e:e1:03:71:25:
                    be:a5:f0:ad:68:45:a8:a1:bd:0c:3f:18:b3:6c:ee:
                    bf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:96:70:96:F0:A3:DE:9F:D0:35:85:77:56:97:9B:BA:8E:B6:0E:A7
            X509v3 Authority Key Identifier:
                keyid:05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         3f:69:a6:3e:82:d1:47:8b:b6:33:b4:9b:50:20:ae:28:0f:fd:
         e1:84:34:f7:a5:cb:94:e6:a6:27:20:da:85:47:20:d6:b7:fc:
         51:f7:dc:c7:28:d8:b7:a2:39:5d:a2:a1:5d:85:67:54:68:3d:
         c6:20:cd:04:a7:a3:8b:2a:40:22:39:20:08:39:9c:8a:2a:1e:
         fe:44:09:23:b3:a7:b8:41:1f:03:24:44:45:a7:68:1e:3d:d0:
         c3:2f:81:c7:ea:0f:e5:ef:f7:9b:69:02:a8:10:fe:b6:ca:ed:
         61:d2:fc:97:c4:cb:3c:8d:06:d4:d4:01:0c:70:c2:3a:20:9e:
         e9:8e:79:03:93:8c:ac:0f:0e:77:07:e1:13:95:51:d0:73:87:
         20:77:18:e1:8f:20:c7:e7:87:f3:72:60:9e:f2:5f:6d:31:4f:
         ad:f6:e8:9e:bf:ad:24:b0:d4:d9:79:02:c6:ab:68:7d:99:0d:
         69:58:d3:88:f9:60:80:61:41:99:f9:71:91:7e:46:21:46:c9:
         b1:c7:80:59:d3:52:84:3e:3a:ac:fb:59:23:6d:fb:3e:ac:d3:
         bd:2b:28:c8:31:8f:78:36:ea:5d:d7:00:f4:e6:d4:74:74:92:
         fb:6f:33:46:7a:c3:b5:f9:a1:00:e8:ce:d7:f6:d0:2c:39:5c:
         5e:14:9e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 16:03:50 2025 by rpki-client