
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
File:                     M6OypTA7URezLn5FhqypRAiRh0I.mft (raw, json)
Hash identifier:          hLL1KoNb7OGgt/WucMB3cxv14kofKOcAwQhqv15EeiM=
Subject key identifier:   DF:9D:2F:3F:70:5C:23:26:1E:42:AE:A8:9B:9E:14:CF:4C:01:09:36
Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42
Certificate issuer:       /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742
Certificate serial:       0C16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
Manifest number:          0C0C
Signing time:             Sun 02 Nov 2025 18:46:14 +0000
Manifest this update:     Sun 02 Nov 2025 18:46:13 +0000
Manifest next update:     Sun 09 Nov 2025 18:46:13 +0000
Files and hashes:         1: M6OypTA7URezLn5FhqypRAiRh0I.crl (hash: jh8gsZdA16MBoPHk81/MnL9h///jx75QIbuhOK1vFpM=)
                          2: 9E48E9821FB011EAAD480012C4F9AE02.roa (hash: +qrgEBTBD6O+YCDXfGBARZb1S4AOeFFb2M6qsvbOdkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl
                          rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:46:13 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3094 (0xc16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BBEF, serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742
        Validity
            Not Before: Nov  2 18:46:13 2025 GMT
            Not After : Nov  9 18:46:13 2025 GMT
        Subject: CN=6907a6f5-b576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:69:7b:4a:64:49:ac:f8:ae:a9:c6:40:d5:
                    cc:7e:8b:db:57:53:af:39:37:b4:82:74:54:bc:6b:
                    f7:a2:be:87:fb:16:bf:ad:07:05:ea:2d:ee:5e:05:
                    ef:b0:30:26:ae:66:09:c3:a5:c4:46:c3:9f:1c:c1:
                    ce:ea:10:d2:8c:d1:49:7b:02:e7:9a:07:05:b7:a5:
                    ac:94:81:ac:29:dc:14:b5:fd:b2:d8:50:72:a7:30:
                    42:70:51:3b:57:ea:a4:53:c6:7a:c3:d4:3f:44:71:
                    17:91:1a:5d:0d:ff:a6:23:18:4c:0e:54:e0:e6:b3:
                    a6:00:c1:fd:9d:10:56:8f:06:71:0c:85:5b:72:3d:
                    3d:10:5f:09:dd:8e:c1:57:97:63:17:96:a3:1c:15:
                    b3:20:7e:a0:8b:c9:b5:45:d0:28:dd:75:73:8f:f5:
                    6d:75:d4:8b:df:d2:f5:aa:bf:8f:7a:9f:38:14:91:
                    7d:19:0c:96:b7:18:ae:92:c6:cf:74:8e:df:41:e3:
                    e5:2d:be:70:73:68:97:91:3c:e4:2b:b8:61:e2:54:
                    61:a3:08:8c:d5:6f:53:3d:27:75:a2:0a:cb:dd:77:
                    11:f1:81:98:45:b2:21:08:9a:64:29:dc:c9:44:92:
                    de:95:36:0f:a4:f8:1f:a9:7e:58:45:da:de:d1:eb:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9D:2F:3F:70:5C:23:26:1E:42:AE:A8:9B:9E:14:CF:4C:01:09:36
            X509v3 Authority Key Identifier:
                keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         86:ee:0b:c1:a3:2e:9a:f4:7a:27:d3:aa:d6:da:cf:1f:b6:26:
         f4:be:17:8b:0c:d7:c3:3d:02:62:69:8d:2f:c8:d0:1b:2a:29:
         ac:ad:86:41:94:9b:96:14:2f:10:1a:78:2c:81:26:42:23:37:
         53:03:0f:78:e8:30:63:5d:f7:9a:82:7f:4d:5d:67:3e:ba:50:
         7d:cc:9d:cf:bb:10:f0:c5:4c:85:6f:26:49:6c:9c:de:08:ac:
         b9:d6:c3:0c:9a:70:b4:bb:e0:bb:95:1b:0c:22:f3:a3:5a:e1:
         51:99:d5:d6:4b:51:ba:3d:c5:51:88:d5:d7:2c:21:78:39:07:
         00:5f:db:1e:8b:c2:6d:80:af:45:3d:82:f6:b0:a5:66:c7:e7:
         ca:dd:74:dc:19:ed:73:12:f2:04:70:9a:99:76:90:d5:a5:92:
         08:45:6f:56:44:70:c6:8c:7d:2e:3d:55:c4:4d:05:e5:ea:64:
         9f:a7:d5:d2:25:89:15:37:c6:ce:b6:8d:85:d1:f5:ee:a7:24:
         5a:b8:d1:ba:ee:a6:97:75:bd:bf:2d:1b:0d:71:a5:a2:88:d5:
         3b:d7:c3:c7:a8:67:b2:71:8b:91:d3:bd:0b:fc:f7:ef:ed:ca:
         6e:8c:21:85:de:26:45:18:c9:24:91:e5:62:58:af:b1:9c:0b:
         cb:78:b3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 16:13:32 2025 by rpki-client