
$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
File:                     bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft (raw, json)
Hash identifier:          GW1ytH12APRO5FwmNfCBgi7NvXDwowNjc4DmqT119d8=
Subject key identifier:   50:ED:65:45:11:A8:53:C3:73:AB:4E:5D:5E:01:C1:F6:03:0F:84:EE
Authority key identifier: 6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
Certificate issuer:       /CN=A913695E/serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
Manifest number:          43
Signing time:             Mon 03 Nov 2025 07:23:38 +0000
Manifest this update:     Mon 03 Nov 2025 07:23:37 +0000
Manifest next update:     Mon 10 Nov 2025 07:23:37 +0000
Files and hashes:         1: bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl (hash: wStDwJig7rajd4SvkRFhZAyaAEwdtGNl0WFJiOZFwWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl
                          rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:23:36 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913695E, serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
        Validity
            Not Before: Nov  3 07:23:37 2025 GMT
            Not After : Nov 10 07:23:37 2025 GMT
        Subject: CN=69085879-a8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:c6:ea:6f:be:b7:4a:34:31:e3:1b:12:71:
                    5c:14:8d:af:79:d3:81:a1:77:34:b7:76:87:9b:af:
                    8c:1a:6b:71:3a:8b:c6:f8:1e:cb:7c:d6:1f:a0:aa:
                    fe:c0:f0:ec:0e:12:2b:f3:13:75:9d:57:34:21:fe:
                    8a:fb:88:44:e7:0e:e4:ee:32:9d:be:dc:30:71:3b:
                    5f:85:51:2e:c7:e9:ef:52:ed:64:c8:90:95:38:64:
                    5f:ed:cf:9e:2f:14:23:74:df:02:c0:d4:86:c0:27:
                    3e:cf:be:ab:ff:43:7b:37:d2:ad:88:e3:98:73:35:
                    a5:36:9f:4d:a4:9b:c6:0c:34:72:6e:f5:c5:49:11:
                    43:ee:5b:53:bc:62:a1:02:dc:a0:10:98:17:00:c9:
                    f1:e9:a2:26:19:2c:3e:43:e1:3d:39:90:d0:cb:ce:
                    16:19:af:3d:fd:b4:41:60:2b:04:79:e5:b4:c7:13:
                    f0:aa:de:ff:d5:30:29:3c:c5:65:96:e2:1e:98:13:
                    e1:f4:dc:e7:b0:45:ac:de:51:70:32:08:18:c0:7a:
                    78:c7:ec:ef:05:9d:ca:aa:00:1c:b1:96:18:6d:78:
                    cd:df:58:f8:4b:0b:67:37:ed:3b:1e:17:d8:d5:e9:
                    5a:f9:6e:20:a5:ed:fd:11:5e:f3:24:61:b6:15:b6:
                    7b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:ED:65:45:11:A8:53:C3:73:AB:4E:5D:5E:01:C1:F6:03:0F:84:EE
            X509v3 Authority Key Identifier:
                keyid:6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         31:ad:75:4c:7f:f3:98:14:da:b0:6b:fc:c4:11:26:10:80:f0:
         09:90:f6:44:cd:10:1c:70:9f:01:1f:d0:bc:bc:11:52:64:58:
         d9:49:2d:66:25:04:a5:3e:14:41:1b:7f:98:b8:9c:12:58:65:
         3f:c3:0b:a4:6a:db:83:77:c4:06:1f:e2:40:a6:e8:3a:a2:93:
         f3:37:82:2c:5a:98:5b:8f:78:e4:be:fc:ff:21:1d:24:e3:e3:
         aa:29:a8:a0:a1:62:14:7a:50:35:21:4f:e8:35:2e:9e:fb:bb:
         6c:b8:ac:6a:ce:a1:3f:05:3a:22:7f:2e:b3:83:2f:fe:62:39:
         60:c1:0c:79:5a:7f:c5:15:77:be:c8:04:a7:8f:39:df:7c:68:
         b4:80:c4:f2:bc:6d:1b:5f:61:bf:bd:40:9b:48:b8:dd:5d:09:
         4f:ec:46:02:25:2a:ef:45:29:0f:6f:fc:f7:9b:b6:27:96:4f:
         fd:c7:09:1c:2f:11:15:89:a9:c1:39:86:60:5b:38:e1:56:10:
         b8:24:78:e3:83:df:83:9a:77:42:32:9f:97:79:54:83:e6:21:
         97:d9:86:fb:d0:84:f6:61:6b:42:89:4e:96:b7:75:3b:5b:cd:
         d5:b5:4a:f0:a8:37:22:ab:38:48:d7:ed:e2:8c:bb:4e:97:cd:
         27:e6:79:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:01:01 2025 by rpki-client