
$ rpki-client -vvf rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
File:                     MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft (raw, json)
Hash identifier:          X1FWQELvMYXJZUSO2c04rMg7dmB/OwSAKGpG1iLxsow=
Subject key identifier:   D3:17:88:73:33:AD:FF:99:D5:48:D4:D9:58:2F:31:F5:DD:AC:CB:56
Authority key identifier: 31:E7:B1:0F:71:8B:11:89:A0:31:9D:64:47:E1:3F:6C:46:40:7A:A5
Certificate issuer:       /CN=A918337F/serialNumber=31E7B10F718B1189A0319D6447E13F6C46407AA5
Certificate serial:       2731
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
Manifest number:          2710
Signing time:             Sun 02 Nov 2025 15:40:41 +0000
Manifest this update:     Sun 02 Nov 2025 15:40:40 +0000
Manifest next update:     Sun 09 Nov 2025 15:40:40 +0000
Files and hashes:         1: MeexD3GLEYmgMZ1kR-E_bEZAeqU.crl (hash: lXWjsucfq8sgUcNv63OzoTqeS6w9Agiovr4XYq0Nhgs=)
                          2: EC9B786E9D8811EB80D73886C4F9AE02.roa (hash: KTBWDh6bIJ/cDfWyxQBynd9/3uuoZ/l6tAvGlwlZJZ4=)
                          3: 783D3BDABCE011EA81F10855C4F9AE02.roa (hash: DAi7XHb5iPgy6jmEfDMNPj813+qw6g8bFNaplUoWq+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.crl
                          rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 15:40:40 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10033 (0x2731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918337F, serialNumber=31E7B10F718B1189A0319D6447E13F6C46407AA5
        Validity
            Not Before: Nov  2 15:40:40 2025 GMT
            Not After : Nov  9 15:40:40 2025 GMT
        Subject: CN=69077b78-679d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:43:64:a2:aa:cc:e5:6a:fd:13:66:90:ce:
                    35:32:7a:c6:29:71:fe:10:e4:e0:50:e5:81:0a:10:
                    be:b4:c8:4c:8f:7e:6f:6a:5c:15:51:fb:8f:c8:d8:
                    70:25:79:60:60:79:cb:f6:d0:54:0d:e3:9a:60:6d:
                    01:82:1e:0a:ea:7c:86:44:2c:9a:d6:ac:59:3e:a6:
                    b8:5c:1b:84:99:d4:e1:e0:87:11:c3:5c:eb:38:81:
                    40:fa:58:49:13:26:62:cf:f7:a8:41:f6:82:59:1f:
                    6b:91:40:1a:0f:f6:56:eb:59:18:4b:22:86:c9:5c:
                    2d:8b:61:71:3b:7b:a2:dd:4d:85:dc:08:80:ad:54:
                    b2:7d:4d:ac:15:fc:9b:2b:3c:e4:9c:56:1f:0b:74:
                    89:ed:de:50:6f:e6:c1:a8:ae:5e:65:01:6e:31:04:
                    98:5e:17:02:e8:b7:f8:ed:7d:a9:b1:74:59:0e:6c:
                    16:16:1f:94:7b:db:5b:39:a2:4d:e5:29:6b:b6:ff:
                    59:ac:76:11:e8:a9:b0:5b:8e:40:d8:33:cf:b0:13:
                    81:f5:f6:e2:73:fe:0e:e3:c2:15:c5:f7:a8:88:55:
                    58:ee:2b:3e:aa:eb:d5:89:ae:ce:f6:01:79:13:e8:
                    98:e2:1f:03:6a:36:b0:af:f7:44:f7:7a:a8:5d:2b:
                    46:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:17:88:73:33:AD:FF:99:D5:48:D4:D9:58:2F:31:F5:DD:AC:CB:56
            X509v3 Authority Key Identifier:
                keyid:31:E7:B1:0F:71:8B:11:89:A0:31:9D:64:47:E1:3F:6C:46:40:7A:A5
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         7a:64:3b:d0:c0:8e:de:91:50:e4:d0:cd:3c:ca:62:74:59:c1:
         db:98:7f:c2:6b:7b:12:21:97:25:c6:bf:c4:a0:16:7e:d9:5e:
         1d:cb:1d:11:af:3b:fc:94:2e:3e:8b:79:a3:60:65:c0:cf:7a:
         72:1a:d1:94:0f:0b:bb:5d:3e:4f:b8:4c:3b:bb:88:bc:6f:60:
         92:20:53:52:37:5a:ae:2c:b7:db:dc:f2:79:e1:e1:be:df:cd:
         7f:08:97:e6:e4:e5:53:b4:0e:b0:b4:e5:b9:62:cd:db:b0:0d:
         18:24:bc:0d:55:c0:60:05:ca:69:88:e5:11:58:06:b0:64:a8:
         ef:aa:90:de:d2:99:11:56:83:e8:57:23:b7:c7:15:fd:10:49:
         c6:5e:4e:8d:e7:8d:d9:eb:19:19:53:0e:cd:c9:4e:8e:7a:5b:
         01:35:c5:d1:ac:96:ef:a7:3a:9a:43:90:31:c1:00:03:65:cd:
         d9:74:62:aa:0a:00:eb:37:35:05:00:99:d6:b6:4e:cf:6f:1c:
         7a:57:d1:5b:81:93:68:6f:11:4c:ca:31:51:bc:21:fe:6c:32:
         fd:af:51:ef:3b:95:10:ce:09:71:3d:7f:a0:94:c8:cd:ae:f8:
         96:c4:b8:4f:20:9e:90:2f:b4:16:11:13:72:c2:5f:c1:1c:ae:
         5e:d6:62:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 12:36:19 2025 by rpki-client