
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
File:                     tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json)
Hash identifier:          R1pctd2fX32yBzF5+eIT5ILGIVWWQWUAPvlIQI7DFBY=
Subject key identifier:   20:E3:8B:54:67:13:28:39:1E:FE:B9:88:98:AF:62:7E:3A:DC:EB:09
Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
Certificate issuer:       /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Certificate serial:       0395
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
Manifest number:          0385
Signing time:             Mon 03 Nov 2025 00:46:41 +0000
Manifest this update:     Mon 03 Nov 2025 00:46:40 +0000
Manifest next update:     Mon 10 Nov 2025 00:46:40 +0000
Files and hashes:         1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: T8mrhd46CO8m95IhXe+8firaDy0dPvTsSTo2Sz3x6jo=)
                          2: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: DOUqu1Qj+MU4+uk8We4DlL9rOQ0u7xDb2aWTGQZFr1c=)
                          3: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GjwPBXkxZ4qE4L8GvWJPamMwvGLPmxgtpWoHImjgHS0=)
                          4: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: 9wsSWlTIkEvdY3EgDoQza7/AJrOesuO9qQzI1IZGf8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:46:39 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917 (0x395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
        Validity
            Not Before: Nov  3 00:46:40 2025 GMT
            Not After : Nov 10 00:46:40 2025 GMT
        Subject: CN=6907fb70-7ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3e:08:94:03:54:bf:81:ee:19:9a:fc:e4:4a:
                    d1:68:10:33:0f:99:a2:37:e7:95:59:a8:81:be:9c:
                    ee:2f:1c:ff:5b:85:36:a3:f4:b7:3c:25:ee:44:e2:
                    0a:29:42:29:cd:1b:87:4c:06:6b:15:63:8e:37:66:
                    ff:9b:60:77:3d:d5:9c:e9:13:37:ef:92:33:1d:46:
                    e7:03:01:6a:67:dc:17:24:bd:b3:60:db:91:58:88:
                    c2:8e:ac:de:d3:40:3e:7f:5b:d0:57:9a:2f:24:76:
                    e3:5d:a8:b7:00:dc:60:e2:69:80:da:d9:8e:48:6a:
                    7e:72:54:a9:a1:03:f0:96:63:aa:74:df:24:79:92:
                    76:49:b2:89:71:aa:c8:02:20:a4:3d:86:1b:f3:ad:
                    63:07:f3:bd:90:7a:a4:0a:24:40:93:a2:e2:1c:eb:
                    58:ac:85:21:79:93:22:5b:3f:58:83:96:04:3b:55:
                    3a:db:3b:9d:d2:8f:8e:c9:86:75:6d:0f:fb:ef:a7:
                    a0:c8:4d:98:42:2f:4c:07:25:70:a7:39:1a:77:f5:
                    45:da:09:8b:9b:62:7e:fe:a0:6b:da:62:73:d4:64:
                    4e:b6:ad:7d:8d:99:cb:0d:e0:e6:df:6a:f3:37:d8:
                    29:8b:26:93:d1:a2:01:89:a8:60:ff:c9:d1:42:82:
                    18:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E3:8B:54:67:13:28:39:1E:FE:B9:88:98:AF:62:7E:3A:DC:EB:09
            X509v3 Authority Key Identifier:
                keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         2d:c6:ed:aa:71:48:23:08:30:d3:05:10:05:44:e7:5b:66:8f:
         7d:83:4f:72:46:b3:ed:e8:f9:ad:aa:23:72:28:b1:e7:cf:a6:
         28:ee:8f:e3:fd:d3:4f:70:d7:7f:7a:30:ff:1b:34:b5:8a:59:
         0c:e0:5b:81:fe:3f:a9:71:9e:8c:a0:5c:6f:82:1d:8f:8a:57:
         13:d3:bf:4d:7d:dd:62:dd:83:53:80:38:e5:5b:4d:7b:ba:2a:
         1d:08:2c:2a:8c:80:bd:39:f3:a2:4e:51:6d:ac:94:4b:b9:69:
         93:21:ab:5f:72:e4:7b:6c:e3:50:ac:dc:fd:18:c1:e8:df:eb:
         11:b1:fa:5d:3c:14:52:bc:7f:fe:e1:18:73:7e:1d:a4:4f:6c:
         c2:93:1e:38:33:26:9a:4b:43:7c:67:0f:b6:33:a0:a3:07:23:
         ee:a9:37:cf:a7:5d:40:2a:08:22:6d:b5:e9:c7:d4:a3:4a:34:
         df:d4:cb:d5:36:62:d9:32:c5:7d:08:22:73:86:fc:eb:6f:26:
         b0:84:59:e3:16:5d:37:c1:d4:b0:85:48:23:bf:d2:6e:e6:58:
         66:75:3c:a1:e2:5f:e0:88:4e:06:3f:65:04:1b:48:54:95:cb:
         6a:3d:ea:08:e1:d4:67:5e:2d:80:55:21:81:69:66:43:f3:4f:
         0b:f2:09:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:07:14 2025 by rpki-client