
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
File:                     VtexXMGugneFjWSSwB3VMwhEzAY.mft (raw, json)
Hash identifier:          80R6onPrjrqTH/bm1AE/Qrg0+JUvUYMycIiRBxMHtAg=
Subject key identifier:   55:9A:2C:96:17:F7:C4:48:2B:62:26:0D:0B:08:6A:76:AA:78:AE:3C
Authority key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06
Certificate issuer:       /CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
Certificate serial:       08D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
Manifest number:          08B7
Signing time:             Sun 02 Nov 2025 20:28:28 +0000
Manifest this update:     Sun 02 Nov 2025 20:28:28 +0000
Manifest next update:     Sun 09 Nov 2025 20:28:28 +0000
Files and hashes:         1: VtexXMGugneFjWSSwB3VMwhEzAY.crl (hash: nSTeuuhGENNCeD7u+4x3S6z4W7hnqhYPClEjbFzfZJY=)
                          2: D4B550921C2011F09CB77376C4F9AE02.roa (hash: JQT2hti6LgfZzi6xAGa9WtWCSt6AfjSy/VBWGxZBRBM=)
                          3: C584C646CA5111EAB9696B0AC4F9AE02.roa (hash: /1HZaij49W5GixhkizZ+VpOQAh5u5EJvk7kMPCiizb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl
                          rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:28:27 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260 (0x8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0CC8, serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
        Validity
            Not Before: Nov  2 20:28:28 2025 GMT
            Not After : Nov  9 20:28:28 2025 GMT
        Subject: CN=6907beec-3826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:9c:d4:95:a4:54:e2:95:93:0d:48:75:be:
                    a7:fd:28:f5:07:1e:5b:e2:21:0e:4c:93:41:e2:92:
                    e7:ab:6d:e7:f5:3b:6b:a5:8a:5c:a4:94:65:0a:19:
                    74:a1:82:94:08:d4:ed:c3:3f:43:b1:54:3f:49:a8:
                    7f:08:51:ff:e7:06:9b:d3:f3:38:5c:1e:38:8b:3a:
                    01:26:96:37:cd:f7:8f:80:61:64:c7:cc:c8:54:e8:
                    6a:52:a4:d7:2c:d8:5a:65:71:74:b7:5a:54:4f:8e:
                    33:5a:db:84:a5:c3:41:f2:40:9b:56:a1:b6:d4:aa:
                    4f:79:dc:37:eb:04:32:e0:c5:b3:54:ec:24:2c:11:
                    6b:23:02:12:f3:77:47:5c:6e:4d:88:b8:e1:2a:f8:
                    89:c3:fa:1d:39:4d:ef:4a:d6:17:c6:09:98:aa:9c:
                    67:35:2a:c7:31:52:6f:f9:2e:95:54:76:ff:8a:6b:
                    4e:1f:18:6c:6d:3d:86:86:14:ed:cc:9c:50:19:84:
                    6e:18:57:d5:32:bc:19:17:e0:e3:f5:3f:f6:30:d4:
                    09:ce:cb:d5:43:94:67:8d:15:0f:f0:28:51:cd:01:
                    e0:62:04:45:6a:2f:6e:3d:b3:ac:ca:09:37:b7:8d:
                    d7:48:4e:c9:86:d0:d8:03:d0:41:c5:35:9a:9d:df:
                    2f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9A:2C:96:17:F7:C4:48:2B:62:26:0D:0B:08:6A:76:AA:78:AE:3C
            X509v3 Authority Key Identifier:
                keyid:56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         60:2c:43:64:7f:21:81:ae:2a:40:8f:96:ce:b8:bf:9c:d0:9c:
         8e:6e:44:bb:54:8d:59:27:10:dd:ce:55:73:9b:9d:0b:b8:83:
         24:04:dc:6c:48:66:01:29:5d:b4:e6:a2:5b:b7:e4:e9:d3:6a:
         f4:4a:ea:83:b1:93:05:3e:82:c5:f4:fc:85:9a:fd:bb:a1:af:
         32:dd:08:d3:ee:42:a4:d0:96:29:03:34:0b:24:12:92:a8:13:
         14:39:bc:c5:e9:bf:a1:f5:e1:29:c4:48:bb:2a:17:cc:65:04:
         b7:82:e2:e1:1e:08:f7:cc:68:96:88:d8:03:c5:9a:75:00:da:
         07:b3:9b:6e:e8:47:4b:65:75:67:dd:d2:90:4f:17:53:91:7a:
         dc:12:e6:f8:a0:44:ef:52:8c:9c:27:8b:e8:6a:a6:3a:49:36:
         ed:8b:a7:b6:eb:cf:5e:a6:5a:d9:cb:d5:9e:6f:7b:cf:b0:ba:
         64:56:da:ea:26:b8:2a:09:26:7c:d7:81:b9:dc:20:02:03:97:
         c2:45:fe:0d:64:25:16:5b:25:43:cc:20:e3:24:86:0b:61:a3:
         38:bb:de:0a:e2:c1:53:06:ce:52:ea:36:06:f0:da:10:32:1b:
         df:d3:b4:e8:4c:cb:7c:a4:60:14:31:4b:70:56:7d:e7:06:7a:
         ec:e3:ab:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:07:58 2025 by rpki-client