
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
File:                     5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json)
Hash identifier:          KB7s8uZJC/HU9W2w8c30CRUvj/YPZ4Tz1R3Tixgo7mE=
Subject key identifier:   13:FE:71:32:78:A8:96:79:14:C4:18:C5:7A:5F:1E:A9:2C:80:06:65
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Certificate issuer:       /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial:       0E11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
Manifest number:          0DFC
Signing time:             Sun 02 Nov 2025 17:51:57 +0000
Manifest this update:     Sun 02 Nov 2025 17:51:56 +0000
Manifest next update:     Sun 09 Nov 2025 17:51:56 +0000
Files and hashes:         1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: O1lBEutaUyPR73EmOigc+boUXSXB7rTB3xcEwtnd61Y=)
                          2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: P63HmzuTgX6+OxmcbQTN/m0eCDcj1q5olNwP8Hf8SvI=)
                          3: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: jkm23RvGSquZwL1DUARD3YaIj647wpqnNA3CvWP1hl8=)
                          4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: uZutnh3IDqFkeTM2HclLSv5xEA3RHi+jQtpjzohkCIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
                          rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:51:56 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3601 (0xe11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
        Validity
            Not Before: Nov  2 17:51:56 2025 GMT
            Not After : Nov  9 17:51:56 2025 GMT
        Subject: CN=69079a3d-6020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:40:b1:02:bd:68:00:cc:e8:e1:6d:91:73:b8:
                    24:f3:b8:1c:21:e4:b4:f3:5a:6a:b9:5a:23:9e:f6:
                    09:bb:4f:92:20:8b:21:32:5f:a7:45:33:80:c3:21:
                    81:23:f5:16:cb:cf:8d:2c:0e:f1:c1:cd:c6:67:53:
                    ed:46:8b:b4:8c:08:4c:f4:ec:a0:69:1c:f1:ea:ea:
                    2f:65:a0:8e:14:e8:d5:7b:94:17:8a:e5:f0:ed:b3:
                    5b:32:a5:ac:ea:53:75:6e:01:93:f2:79:89:c4:ee:
                    8e:2b:06:3a:34:0d:6b:47:60:6b:10:55:0b:44:40:
                    b5:d2:e6:a5:4a:af:76:de:99:b0:de:d7:8e:90:5c:
                    16:3d:8a:c1:bb:0e:9a:c5:dd:74:3f:81:2f:e6:68:
                    48:bd:f5:1e:f8:0c:6c:b1:f5:6b:9a:03:42:4e:7e:
                    9a:c4:7e:e9:55:06:d4:59:32:a2:04:51:f5:53:c2:
                    5e:89:58:71:7c:4f:3b:dc:5c:59:bc:2f:f5:32:8d:
                    02:2d:b6:51:8d:e5:15:91:f3:69:d3:06:d7:96:aa:
                    c4:14:ca:24:17:6c:65:2e:36:d2:20:3c:83:7f:f7:
                    a4:67:3a:18:b2:92:61:d5:e1:34:66:7f:3f:32:7c:
                    14:fa:1a:94:53:19:7e:65:60:f7:3d:7e:12:ab:2d:
                    2a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FE:71:32:78:A8:96:79:14:C4:18:C5:7A:5F:1E:A9:2C:80:06:65
            X509v3 Authority Key Identifier:
                keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         68:93:d7:ab:cc:6a:1b:fd:91:82:39:0d:91:91:52:9d:da:77:
         94:2e:73:f8:6f:b5:4c:d7:93:4e:64:ce:22:b0:8c:0a:1c:a1:
         71:fd:35:0b:17:e3:ee:42:98:c5:a2:af:72:c6:55:1a:9b:2e:
         14:ff:7a:b8:09:9c:03:b4:6a:43:95:a2:2a:ec:24:28:98:5d:
         e2:fc:44:b0:7f:9c:d2:83:b1:5b:b0:ee:b5:cc:f1:6a:f1:7f:
         4c:ee:fe:92:7d:e8:7f:4c:ae:d7:68:da:b0:ed:84:c9:96:8f:
         e6:73:40:2a:61:58:03:f5:c4:fa:c8:81:c1:50:86:3b:41:82:
         aa:20:c6:1b:80:7a:f4:78:17:8c:2e:8c:a6:a5:0d:43:0a:e5:
         0e:f2:1d:de:20:79:0c:bb:c1:89:a5:01:3f:cb:c7:e4:ba:ed:
         a3:97:8f:1c:8e:29:cc:29:d5:da:10:3b:cf:b0:92:94:19:63:
         55:c7:b1:f9:45:96:26:a0:4e:f4:5a:ac:17:ae:b2:2d:c6:30:
         0c:2d:25:d2:03:92:90:1d:b0:5a:83:41:15:ed:f1:af:e0:ff:
         70:f3:b0:49:39:c2:5c:47:ad:99:84:93:d8:ea:86:20:51:16:
         61:65:75:bb:90:ba:7f:57:72:1d:34:4e:fe:49:f3:4d:2b:ed:
         1a:48:d9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 16:04:44 2025 by rpki-client