
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
File:                     yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json)
Hash identifier:          XWXxCG0fqm3BpjoMiYi+1pwWK+u/PPHgPyTdk01zNwQ=
Subject key identifier:   2B:73:16:71:D7:3C:65:A0:D4:58:85:3C:BE:E9:C4:42:12:E6:D1:A9
Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
Certificate issuer:       /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Certificate serial:       0BC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
Manifest number:          0BB3
Signing time:             Sun 02 Nov 2025 18:57:02 +0000
Manifest this update:     Sun 02 Nov 2025 18:57:01 +0000
Manifest next update:     Sun 09 Nov 2025 18:57:01 +0000
Files and hashes:         1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: mcjJaTUMGQ8TeQyT4PtZbaLxH4If0aoQsYa7I9UwVEM=)
                          2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: 9VkEhYHF3f19k3ccapKOmWUnQN3qe0LKW0bGLzgAj2Q=)
                          3: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: UVKRHigELp+/xtOJ9hxFUzKgCIBL/cBJ5XfcHMgTaRI=)
                          4: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: qEnxbXTZjYArRGRzDWZrlZe2tR2ZHb8POdNuo8ieu30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
                          rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:57:01 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3016 (0xbc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
        Validity
            Not Before: Nov  2 18:57:01 2025 GMT
            Not After : Nov  9 18:57:01 2025 GMT
        Subject: CN=6907a97e-345d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:b2:c7:68:98:0c:de:ff:63:a5:92:e9:df:
                    76:b6:d5:eb:99:eb:0b:da:46:b4:07:84:3d:37:be:
                    a1:a1:e7:ed:eb:80:53:24:75:87:e7:95:52:0c:9c:
                    50:a8:4d:04:0c:d0:a4:79:e5:a3:b4:6f:fd:29:7e:
                    1a:84:55:f7:b5:20:d1:df:7a:74:90:bc:32:41:4a:
                    08:58:1c:cc:b2:9a:2d:b4:58:b9:60:de:44:4f:a7:
                    e2:b3:a4:a2:6c:50:eb:cb:21:0d:12:ff:bf:fe:f0:
                    22:6c:91:8b:f2:57:96:fe:a3:30:76:8e:d2:5e:0d:
                    4d:63:31:9d:d1:ae:86:98:58:1a:45:8b:f9:9a:69:
                    65:22:16:9b:67:01:23:57:2c:c5:ef:ee:73:ab:ae:
                    cf:17:a1:6d:d7:3a:77:17:5d:c3:99:f6:78:80:a2:
                    fe:bb:f3:2f:a0:ce:96:8f:5f:66:8e:fc:d0:f1:60:
                    80:d6:54:88:3f:38:a5:10:29:48:f7:c8:41:cf:e0:
                    32:3d:e3:89:46:29:dd:b9:9e:16:75:71:50:4a:c9:
                    21:30:03:48:78:f0:c9:26:14:aa:2d:a3:80:39:de:
                    11:f6:37:26:3b:5b:6c:8e:e2:c0:b7:e4:02:74:e7:
                    3b:a3:34:dc:b4:f3:db:36:f7:07:fc:f3:74:b8:08:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:73:16:71:D7:3C:65:A0:D4:58:85:3C:BE:E9:C4:42:12:E6:D1:A9
            X509v3 Authority Key Identifier:
                keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         7b:bf:28:88:68:59:d2:3f:14:1e:b6:6a:4a:ab:89:9b:21:c1:
         f4:0b:6d:31:8a:13:c7:87:bd:36:63:fb:24:da:a3:44:89:1a:
         41:d4:7e:1d:27:57:e3:77:8d:3b:c1:33:90:fb:ba:28:77:e5:
         49:5b:a9:7b:d9:1b:8e:89:19:c3:bf:3a:ab:5a:c4:94:8d:e3:
         58:c8:a7:dc:18:43:4c:78:70:06:30:bc:fd:88:8b:ba:de:df:
         8a:4e:da:6b:ed:12:fa:cc:82:21:2b:e0:4a:b3:e0:9f:ae:99:
         2c:9d:d2:13:db:77:95:ef:5b:75:bd:f7:1b:f6:57:ae:13:d2:
         58:d2:74:8f:dd:93:a3:67:21:96:86:a8:12:fa:cc:bd:10:f7:
         6d:75:39:84:c6:13:fd:59:39:97:52:c9:21:bb:91:7b:e2:58:
         5a:68:9d:b7:97:97:46:3e:53:bd:2a:4b:ed:18:50:55:60:bd:
         22:98:38:3c:97:e3:de:64:75:f0:70:ea:48:72:b0:6f:16:44:
         44:d3:88:6c:40:cd:43:b7:30:22:ee:46:b8:d4:f3:cf:e7:d8:
         55:05:6f:df:de:76:c9:08:77:6e:e2:96:3b:f0:40:36:69:04:
         08:1f:36:d2:4f:7d:ea:6e:66:ad:86:e0:a7:90:a8:7c:e3:c5:
         12:20:c6:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC
RjFGODlCNDAwHhcNMjUxMTAyMTg1NzAxWhcNMjUxMTA5MTg1NzAxWjAYMRYwFAYD
VQQDEw02OTA3YTk3ZS0zNDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsF6yx2iYDN7/Y6WS6d92ttXrmesL2ka0B4Q9N76hoeft64BTJHWH55VSDJxQ
qE0EDNCkeeWjtG/9KX4ahFX3tSDR33p0kLwyQUoIWBzMspottFi5YN5ET6fis6Si
bFDryyENEv+//vAibJGL8leW/qMwdo7SXg1NYzGd0a6GmFgaRYv5mmllIhabZwEj
VyzF7+5zq67PF6Ft1zp3F13DmfZ4gKL+u/MvoM6Wj19mjvzQ8WCA1lSIPzilEClI
98hBz+AyPeOJRinduZ4WdXFQSskhMANIePDJJhSqLaOAOd4R9jcmO1tsjuLAt+QC
dOc7ozTctPPbNvcH/PN0uAhE/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtzFnHX
PGWg1FiFPL7pxEIS5tGpMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz
QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt
MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C
SlplR3RTZm1lRXlfSDRtMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7vyiIaFnSPxQetmpKq4mbIcH0C20xihPHh702Y/sk2qNEiRpB1H4d
J1fjd407wTOQ+7ood+VJW6l72RuOiRnDvzqrWsSUjeNYyKfcGENMeHAGMLz9iIu6
3t+KTtpr7RL6zIIhK+BKs+CfrpksndIT23eV71t1vfcb9leuE9JY0nSP3ZOjZyGW
hqgS+sy9EPdtdTmExhP9WTmXUskhu5F74lhaaJ23l5dGPlO9KkvtGFBVYL0imDg8
l+PeZHXwcOpIcrBvFkRE04hsQM1DtzAi7ka41PPP59hVBW/f3nbJCHdu4pY78EA2
aQQIHzbST33qbmathuCnkKh848USIMZZ
-----END CERTIFICATE-----
Generated at Tue Nov  4 02:15:10 2025 by rpki-client