
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
File:                     m8FpAIAncr5ikmDEqu1fP-9-s-c.mft (raw, json)
Hash identifier:          w3mbpmWXFqoLYr293wt7lF0fJNahawOV8TtJ/45NqwY=
Subject key identifier:   78:9F:24:9C:58:BA:B7:B5:10:A5:02:FE:45:FE:77:A8:9C:D4:FE:86
Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7
Certificate issuer:       /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
Certificate serial:       0D14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
Manifest number:          0CF1
Signing time:             Sun 02 Nov 2025 18:08:53 +0000
Manifest this update:     Sun 02 Nov 2025 18:08:53 +0000
Manifest next update:     Sun 09 Nov 2025 18:08:53 +0000
Files and hashes:         1: m8FpAIAncr5ikmDEqu1fP-9-s-c.crl (hash: 8Cr1klXD0hmRdk61CtSMDRAt+j7Gk3iWtxsTwSLE5AY=)
                          2: 827D7766AACC11EA8113F532C4F9AE02.roa (hash: oguEqhYGf6Whv8PqzIUzLfsgAvX4wE5CZ9/lAxwLLvs=)
                          3: 81CA43EEAD7811EB905E2C41C4F9AE02.roa (hash: twcj5cD600ozwl+LH65FC7h60q+thDGwgx4YQo1a3TQ=)
                          4: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (hash: C+pA9vRBNRgX2w4BOkt7QtiabsJexJBu+hnduYyIgLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:08:52 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3348 (0xd14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F91EB, serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
        Validity
            Not Before: Nov  2 18:08:53 2025 GMT
            Not After : Nov  9 18:08:53 2025 GMT
        Subject: CN=69079e35-0f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:22:21:bf:70:9c:7c:7d:5e:99:42:22:10:f2:
                    01:11:e8:3d:de:ce:6a:4a:6a:52:29:f7:27:a3:cb:
                    5b:df:9e:e3:8b:25:be:6f:be:3c:02:93:b6:b0:ff:
                    78:bc:e6:84:29:2f:f5:e4:e5:80:82:fb:49:46:6b:
                    86:1f:9c:e0:04:82:33:5d:a4:aa:69:15:1e:c5:8b:
                    e4:19:9f:96:08:ef:c1:d0:97:63:c6:33:87:95:90:
                    48:0c:42:af:48:b5:ac:12:a9:ca:5f:7a:3f:61:31:
                    9c:44:71:d5:6e:1f:ac:bb:fd:9c:32:e3:df:95:8f:
                    df:73:b6:30:a0:a9:19:da:90:5a:f0:0b:64:61:5f:
                    fd:51:10:2d:90:7a:82:ba:d5:9d:3e:2c:5b:f9:0d:
                    f0:1f:d1:2a:74:15:66:ac:ef:43:d2:e0:fe:9b:cb:
                    8f:39:4f:f9:f3:49:55:a2:2c:58:6a:29:61:fd:55:
                    53:21:d9:d2:14:45:e5:c5:3e:0f:ce:b4:1d:da:0e:
                    d5:18:ee:ed:e1:a7:9a:c6:46:5a:37:78:b2:e5:bc:
                    8c:bc:97:f6:c8:29:07:85:c9:5b:bc:1e:38:db:cf:
                    1a:79:b9:c2:3e:39:4a:c0:f7:d1:3a:92:1f:8b:ba:
                    ff:7a:f1:b4:7b:4b:a2:bd:11:a5:3d:ff:9c:99:59:
                    4e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9F:24:9C:58:BA:B7:B5:10:A5:02:FE:45:FE:77:A8:9C:D4:FE:86
            X509v3 Authority Key Identifier:
                keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         84:50:70:30:c1:3a:b3:f0:e0:db:f4:b1:98:21:21:8d:e8:81:
         07:8d:27:ff:94:2f:86:bb:55:3d:64:3b:d0:4e:48:6c:b8:02:
         85:7d:a3:e4:46:28:b4:ab:57:c9:6d:d7:fc:93:df:fb:32:03:
         12:21:21:17:08:47:3c:f1:6d:c7:c7:40:4a:47:03:55:3d:7f:
         a3:40:55:db:77:e8:d0:5d:4b:6f:ca:f3:49:46:0e:96:c2:68:
         c8:3c:8e:e4:ae:93:4d:55:b5:a6:da:f3:d2:1a:f4:e6:71:2a:
         e0:5b:f1:06:82:be:4d:8f:f5:27:db:13:72:18:c5:65:38:f1:
         6d:d2:7b:4b:6b:7b:f5:b7:b2:02:7b:ae:ed:c9:7f:b6:05:aa:
         bc:eb:17:bb:0e:a5:4a:65:75:10:fc:6d:37:e6:53:4f:5f:00:
         bd:ce:0a:dc:8f:24:f6:21:a1:33:25:5f:20:39:c2:ff:83:33:
         ca:d2:29:0f:8e:6a:aa:c5:66:4e:2d:74:b1:59:71:32:43:2b:
         65:31:b7:f1:95:27:71:42:6d:f9:d6:75:13:6d:e2:2f:f6:28:
         05:a6:46:5e:1a:aa:46:e1:c6:a5:e1:b5:74:c1:83:70:aa:84:
         d7:ee:18:4c:4a:b3:49:14:ae:82:e5:d8:60:5b:48:4f:02:d9:
         7a:7d:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 12:55:28 2025 by rpki-client