
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
File:                     poNjJUbxoQeEvBpP9voLvmzsLU4.mft (raw, json)
Hash identifier:          j7FtbUYDT8OpeXYmgqGobz9ZDt9zq3WgAYdv5I0R110=
Subject key identifier:   84:7E:0D:0D:38:2D:BE:53:EF:74:11:DD:67:CD:B0:F1:5C:3A:D7:E8
Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
Certificate issuer:       /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Certificate serial:       03FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
Manifest number:          03F3
Signing time:             Mon 03 Nov 2025 00:26:59 +0000
Manifest this update:     Mon 03 Nov 2025 00:26:58 +0000
Manifest next update:     Mon 10 Nov 2025 00:26:58 +0000
Files and hashes:         1: poNjJUbxoQeEvBpP9voLvmzsLU4.crl (hash: OcGPpEz4DSPwoiVq2mV9DUa3rhdGokxFdwYQa9tbMr4=)
                          2: 6246B1F2609A11EDAAF70C26C4F9AE02.roa (hash: CW3j/kB0iIlMJ+3lrD5HV2LAKz9hUDzTZRZrWdpxIYA=)
                          3: 636B090C609A11EDAAF70C26C4F9AE02.roa (hash: KwB5Za6c44Sp6WKsELOvklwRL+/LDv/rBqGOUWdpNrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl
                          rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:26:58 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF547, serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
        Validity
            Not Before: Nov  3 00:26:58 2025 GMT
            Not After : Nov 10 00:26:58 2025 GMT
        Subject: CN=6907f6d2-9601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3d:7d:0a:23:05:08:6b:f8:67:75:97:ee:30:
                    92:72:eb:3e:22:8a:75:45:9d:f0:7d:6f:b2:33:30:
                    d6:02:cc:fd:cd:cb:dd:64:5f:16:99:bb:0f:16:82:
                    01:97:b5:84:49:11:40:9d:46:e3:41:d0:11:d3:4a:
                    72:87:09:89:25:31:ee:bb:9f:14:87:eb:18:87:ff:
                    ca:e0:fc:90:03:20:7e:d2:72:6b:97:c2:9c:83:57:
                    30:95:c5:3e:a4:ca:35:2c:0a:3f:76:fe:72:59:58:
                    a6:5b:06:1b:a7:b5:6e:be:37:4f:d8:41:9f:b2:41:
                    f9:bd:97:38:28:45:6e:98:c1:92:d7:96:bd:2d:79:
                    8c:10:ce:1a:27:87:b3:86:b5:02:a8:f5:88:5d:4a:
                    d1:08:5c:e1:0a:65:32:52:c5:80:a0:70:7a:0e:4f:
                    e1:51:03:d9:d9:70:87:ba:13:76:ed:dc:93:f7:fb:
                    cd:f0:59:46:87:d9:b2:7a:8f:3a:0c:72:2c:1e:2e:
                    d3:ad:8c:12:e6:12:40:a1:1c:05:d5:ae:63:92:40:
                    a2:e2:e5:7f:2a:5b:20:54:72:56:59:2f:0f:5f:8e:
                    35:44:49:05:9a:1e:70:97:0b:a2:47:d5:30:b6:27:
                    ff:a6:b2:ef:54:d6:b1:30:49:c9:28:d4:5e:5f:74:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7E:0D:0D:38:2D:BE:53:EF:74:11:DD:67:CD:B0:F1:5C:3A:D7:E8
            X509v3 Authority Key Identifier:
                keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         b2:36:16:c9:d4:74:c4:b6:3a:f6:ad:c2:6c:f8:20:52:14:2f:
         6f:f6:3e:5f:22:17:9a:4d:d4:bd:8b:a7:9b:1f:54:e2:53:a4:
         74:90:21:3c:32:ac:33:36:a7:40:0f:a1:fd:08:c5:4a:72:a1:
         aa:fb:6f:53:b3:cf:4e:74:2c:af:be:a7:68:b8:f9:fc:1b:ba:
         1e:13:32:69:06:49:57:50:d1:d9:26:25:40:f0:ee:fd:db:ef:
         1b:a5:4f:95:78:45:eb:4c:e2:ec:fd:65:4d:7d:f5:7a:6d:99:
         af:5c:ec:c1:a8:5b:1f:2f:3e:da:17:d9:c7:1b:e3:45:76:01:
         12:6e:b9:37:79:83:6f:06:bd:55:00:f3:bd:32:9d:9a:6c:1b:
         34:9d:19:a1:2d:c1:00:d8:0a:09:60:64:ee:cd:10:21:a1:99:
         18:0f:04:be:52:77:53:6d:fc:85:fe:72:25:68:bc:84:4c:c6:
         19:a7:17:88:c9:bf:3b:a6:c0:af:f4:7e:79:64:7e:66:fc:2b:
         31:58:7d:08:8e:eb:a7:b5:33:65:03:69:d1:b2:32:82:39:c4:
         5c:c7:3a:16:86:e6:49:40:81:73:dc:9a:a0:3a:d8:79:da:89:
         94:95:33:96:50:7a:e1:e5:bc:6e:9b:42:0d:4e:81:66:02:83:
         fa:0f:2f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:15:05 2025 by rpki-client