
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
File:                     MfUEGe8ZsP2mG2Y5DBLur27L50E.mft (raw, json)
Hash identifier:          Xxws2rebf6LFy7EgyhK2XnHQUQ1LVGwgTwz//uhHL50=
Subject key identifier:   EA:69:3A:1C:E4:6A:20:66:60:15:D3:EF:EC:33:84:8D:8D:3F:26:3A
Authority key identifier: 31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
Certificate issuer:       /CN=A9186584/serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
Certificate serial:       0870
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
Manifest number:          0868
Signing time:             Sun 02 Nov 2025 20:35:18 +0000
Manifest this update:     Sun 02 Nov 2025 20:35:18 +0000
Manifest next update:     Sun 09 Nov 2025 20:35:17 +0000
Files and hashes:         1: MfUEGe8ZsP2mG2Y5DBLur27L50E.crl (hash: QEUO+0km2lYwly8DVeWMvXby6/+TrgeogymRFhPxAzk=)
                          2: 1F820766D66F11EAB2766134C4F9AE02.roa (hash: FxDMGItivgHcpDIQVI/wEfT2xKykaCPSfnkqAOljfEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
                          rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:35:17 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160 (0x870)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186584, serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
        Validity
            Not Before: Nov  2 20:35:18 2025 GMT
            Not After : Nov  9 20:35:17 2025 GMT
        Subject: CN=6907c086-6ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a4:57:37:f8:3f:7d:a4:e6:00:9d:ae:91:11:
                    2a:fd:b5:b6:a6:a2:f6:46:6a:31:69:f8:01:b8:6e:
                    83:58:58:51:e1:22:80:53:e2:4d:e5:10:00:c6:2e:
                    65:45:12:9a:99:00:c7:f6:eb:87:91:70:31:d3:bf:
                    3e:86:40:36:03:50:b8:45:4d:d3:12:70:39:37:c4:
                    85:2e:80:2e:17:2f:14:23:85:56:f0:5a:bc:05:ab:
                    66:f7:ca:fa:60:6b:66:16:cd:39:a8:c2:61:a8:06:
                    44:95:7e:64:4d:91:f6:f2:1a:94:5a:c7:ed:8a:d4:
                    b6:b8:6a:bb:ca:fb:03:c7:4a:cd:19:aa:34:5f:f3:
                    6f:c5:6d:26:75:ca:5a:38:69:ef:85:db:69:a5:3e:
                    08:33:c9:8a:ff:71:16:d4:56:4d:b3:b5:92:5d:0b:
                    64:5e:8b:87:56:a7:b9:b6:c2:c6:8d:0a:5b:7d:df:
                    13:3e:81:77:62:7e:58:07:7b:02:f3:50:5a:bd:56:
                    8f:82:f7:db:34:21:39:2f:12:a5:66:b7:0e:f4:6d:
                    3f:ca:1b:4e:c2:41:40:53:6c:95:14:1b:e4:86:eb:
                    9d:82:88:9b:ad:3d:f8:1e:2c:89:c3:ad:49:a0:f0:
                    8a:5e:cb:57:ea:bf:97:6d:35:27:5d:51:c9:12:66:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:69:3A:1C:E4:6A:20:66:60:15:D3:EF:EC:33:84:8D:8D:3F:26:3A
            X509v3 Authority Key Identifier:
                keyid:31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         3d:0a:f0:d6:d7:c1:11:20:bc:22:af:fc:a7:a3:c2:c8:39:e1:
         4c:c9:18:7e:4c:5d:71:01:07:a0:98:c9:7d:db:8c:52:83:ed:
         81:c0:b8:46:c9:53:7b:13:f5:f1:1a:56:73:34:49:eb:21:57:
         a3:ad:6b:4c:1c:05:65:05:86:cb:2f:ca:99:63:14:eb:3a:e2:
         c4:08:87:2e:db:bd:4b:dd:f9:28:22:b6:1d:81:06:b9:79:94:
         c1:12:68:a3:17:c3:4b:6d:7c:08:8a:7c:da:4c:36:66:1b:c7:
         07:4b:a0:b4:93:92:fd:4a:ee:9c:cb:8d:41:7d:53:de:90:47:
         77:ec:c3:ed:96:8d:10:08:b2:6f:ed:6c:93:ef:2c:03:1f:a4:
         28:75:f5:55:30:cc:59:2f:d7:3e:2c:c7:2b:9a:9f:46:7b:c0:
         62:70:8f:f9:da:af:bd:0b:29:f4:81:42:7c:20:40:23:27:57:
         18:3b:55:dc:e5:56:9e:cd:f1:ab:91:f6:46:eb:a8:4d:f5:62:
         27:d5:d2:35:ce:9b:5f:60:23:7a:7a:cf:b1:1a:27:f8:c4:c1:
         47:ae:38:d6:64:ce:a9:f4:60:a6:65:28:d6:e8:c6:c4:38:43:
         c2:ed:89:c4:5a:b1:a5:ed:52:22:c1:a3:18:48:b7:47:9c:14:
         97:18:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 16:04:44 2025 by rpki-client