
$ rpki-client -vvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
File:                     zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft (raw, json)
Hash identifier:          q6js2DszlQ9y27ZAqy6hxIIVNoU/ELhcRA3yJFefpbw=
Subject key identifier:   09:90:D6:C9:16:2A:53:1F:FC:9B:5F:39:55:69:69:61:35:D7:A9:1D
Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
Certificate issuer:       /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
Manifest number:          81
Signing time:             Mon 03 Nov 2025 06:41:09 +0000
Manifest this update:     Mon 03 Nov 2025 06:41:08 +0000
Manifest next update:     Mon 10 Nov 2025 06:41:08 +0000
Files and hashes:         1: zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl (hash: kGUP6BgWqsg434/1raBt/rc7COMca4GZTcxYOBQ3JB0=)
                          2: 296C92D0F5B611EFB7E6426EC4F9AE02.roa (hash: DAG2avo3wM4Iv7tiFSCw0I7iwE7NYk5jbcu93twLDNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
                          rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:41:08 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
        Validity
            Not Before: Nov  3 06:41:08 2025 GMT
            Not After : Nov 10 06:41:08 2025 GMT
        Subject: CN=69084e84-4a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:15:8f:f9:1d:a2:64:6f:de:58:96:77:70:0d:
                    69:f4:8e:f3:f5:fe:d1:13:bc:77:c4:13:b1:01:42:
                    f5:ac:2f:b4:9f:b9:b7:f9:b1:57:f4:a8:72:96:05:
                    54:04:bf:c0:d5:b6:14:5e:f9:8d:25:03:60:82:de:
                    ba:c1:fe:f2:17:71:55:94:7b:18:bc:3f:34:22:c6:
                    59:0a:eb:40:c4:ba:e0:ca:f3:46:1b:c5:82:4b:f2:
                    20:ec:1b:42:0b:eb:fe:a5:25:b4:74:e4:9a:1b:29:
                    39:f3:3e:be:00:8a:0b:46:8e:13:8f:ab:ea:e4:f5:
                    d4:c2:0b:59:b2:6b:94:cf:19:ec:af:df:a1:14:f3:
                    80:ff:08:85:f7:51:75:2b:80:b2:58:5e:35:1a:7f:
                    ff:36:96:23:3e:ce:af:19:5f:a9:e2:7d:22:4c:75:
                    d0:b0:c2:86:01:6d:52:25:ac:60:95:ae:b4:95:3b:
                    0a:05:71:d0:46:09:9b:0b:57:75:e4:08:30:8a:69:
                    03:4e:a7:64:6a:c3:62:15:d4:84:44:7f:16:a3:19:
                    86:ed:bc:15:f3:e4:2b:7d:a4:43:43:a1:71:5f:a6:
                    d1:bb:00:88:1b:3e:15:7f:1e:36:b3:05:64:60:a5:
                    37:70:7c:fc:11:b0:89:e6:66:7a:3a:f7:d5:6d:f8:
                    c1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:90:D6:C9:16:2A:53:1F:FC:9B:5F:39:55:69:69:61:35:D7:A9:1D
            X509v3 Authority Key Identifier:
                keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         d1:77:69:3d:ed:61:52:e8:ef:86:82:20:84:2e:42:55:fe:da:
         58:6f:3e:a4:bd:f0:d5:5f:93:27:74:33:2c:0c:dd:69:1b:c0:
         30:2d:94:6e:74:ca:66:30:e0:46:59:71:5d:cb:ce:d4:3f:5d:
         0b:cd:c2:4d:35:48:e3:a5:db:cd:0d:d0:41:64:5f:dd:1f:f0:
         10:de:05:e5:1c:e4:39:7b:9f:cb:a1:ad:6a:7c:dc:f0:79:17:
         d3:32:2a:96:9f:b7:33:13:53:f8:ea:dd:bd:b4:f1:5f:b7:6c:
         a6:97:68:da:05:0a:17:68:17:41:a9:cf:dd:76:d8:e3:c7:86:
         c9:43:55:51:88:28:8d:6b:4f:ae:62:83:16:07:f5:1e:59:1f:
         0b:58:f5:0b:2a:fe:99:a6:19:cd:b6:46:90:23:60:57:44:1b:
         5e:d9:80:7c:1e:b4:5b:89:18:b0:b2:0c:d9:2d:3d:b6:08:10:
         f0:67:00:23:e5:d0:99:26:64:04:f3:89:e6:b1:bf:7e:c9:05:
         a4:a0:cf:a7:99:5a:72:04:94:e3:b5:54:c2:f2:7e:c5:48:1f:
         7c:34:7f:d0:1e:8d:0b:ed:0a:7f:1e:07:a2:d3:1c:00:f8:7a:
         1a:66:c5:ab:d4:fb:4d:44:a2:1e:32:40:cd:f9:38:00:77:c6:
         5c:a2:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:10:52 2025 by rpki-client