
$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
File:                     W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json)
Hash identifier:          PA001vxiBoEfNAI/ZNTCiJOslyR+fuXiA6ZoxHwnGtI=
Subject key identifier:   02:CE:BE:AF:19:E8:CA:FD:14:21:5F:6A:D4:F4:16:72:59:2B:6B:8A
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Certificate issuer:       /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial:       0379
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
Manifest number:          036F
Signing time:             Mon 03 Nov 2025 00:50:35 +0000
Manifest this update:     Mon 03 Nov 2025 00:50:34 +0000
Manifest next update:     Mon 10 Nov 2025 00:50:34 +0000
Files and hashes:         1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: ORxrzwGcUkXapO5K284ipWhgcGQfGA8ArOL4RGRyAP8=)
                          2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: gHbb1DedGEVNYDe8gPkrOnV+opTyWHpDa3aEA0RGNJI=)
                          3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: ERhWo0W4P0/i1i0Btr7k8IVeQA2SJMiw/31p7bzmBlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:50:34 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
        Validity
            Not Before: Nov  3 00:50:34 2025 GMT
            Not After : Nov 10 00:50:34 2025 GMT
        Subject: CN=6907fc5b-43b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:40:4b:5d:5d:a4:30:d9:75:b0:e4:f8:6d:2a:
                    b1:99:a9:3c:85:12:4a:ee:89:76:47:92:59:ef:00:
                    35:28:d1:07:cc:93:5e:1e:9a:dd:91:b5:60:2c:26:
                    f8:df:b5:31:b8:9c:09:0d:81:d6:8b:70:d2:e2:2e:
                    b8:ff:55:c8:d9:be:32:51:d9:2b:29:b8:82:34:55:
                    bf:9e:23:fd:e2:7d:62:35:6b:ad:a2:8d:9a:92:04:
                    56:44:9c:ff:84:e5:b6:4d:e7:6b:a4:64:a3:08:67:
                    21:98:48:08:27:7e:26:8a:70:58:45:a0:ad:46:06:
                    96:3c:f8:4a:69:45:25:8e:9b:a0:d3:09:0f:f6:09:
                    06:8e:d9:09:67:35:e2:7d:39:ed:51:8f:13:ff:da:
                    de:e5:5c:4e:46:9c:91:03:5e:07:fe:c4:a9:c8:b4:
                    52:85:1e:1e:ee:5f:ff:f7:92:59:d7:5b:03:d6:b1:
                    6b:9d:5f:29:5f:94:ee:d5:df:36:7e:e8:48:6a:bf:
                    73:29:77:d9:a7:5b:6a:ce:6e:87:24:60:fe:9d:e2:
                    23:4b:51:2c:32:f5:75:a3:ed:5b:4d:61:d1:68:ed:
                    c7:9a:2e:93:77:98:ef:4e:9c:6d:59:ba:ee:10:3d:
                    8b:dc:7f:5c:b0:b2:83:83:ff:35:4d:ea:55:b0:fe:
                    3e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CE:BE:AF:19:E8:CA:FD:14:21:5F:6A:D4:F4:16:72:59:2B:6B:8A
            X509v3 Authority Key Identifier:
                keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         96:ef:57:4d:d5:50:ab:bb:6f:85:37:5c:76:44:a0:c9:0a:af:
         54:0e:75:74:14:24:8b:f8:35:63:9a:11:ba:a3:dc:ff:1f:85:
         be:5e:50:cc:2e:0d:89:e4:a4:b3:6a:e1:6d:f9:19:88:05:49:
         07:6a:a5:eb:66:88:29:cc:cd:96:99:1b:c8:d5:e4:2c:fa:d3:
         3a:af:f8:f0:2b:18:b5:c4:e2:50:b7:fd:04:fd:78:81:0f:b9:
         e2:b3:e6:2f:42:ee:91:6e:a0:41:eb:10:04:e5:71:fa:53:8a:
         10:3d:5c:73:b8:07:3b:e9:fc:12:2d:99:6b:8a:e2:c7:33:75:
         a6:5e:cc:4d:da:83:40:ba:bb:f0:aa:c4:c8:45:5c:da:69:22:
         80:d0:d0:64:21:06:3f:ef:ac:01:28:74:66:10:f0:d4:9b:35:
         0c:f7:8d:c2:ca:5e:c0:cc:76:6f:d8:25:86:08:c5:f1:ba:d2:
         5a:8b:62:93:a1:40:b6:51:0b:ce:e3:1c:29:f9:29:0c:78:b1:
         38:9b:68:f5:50:49:59:18:82:1b:28:39:e2:f5:14:d2:7c:ec:
         16:ce:57:11:7b:3e:55:76:89:4a:0e:1b:e5:9c:b3:55:60:7f:
         dd:1a:2e:f1:d6:5e:90:31:81:60:6f:84:42:fb:f3:3e:10:f8:
         ee:02:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 12:40:30 2025 by rpki-client