
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
File:                     ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json)
Hash identifier:          m5U/CW/md0uuRLkPpOCldoEZ3CFjm73i6hDrCmBdtHE=
Subject key identifier:   BC:60:F3:E8:B2:0E:59:45:5F:80:02:16:AA:E5:D4:C5:8B:52:D5:C4
Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A
Certificate issuer:       /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
Manifest number:          0143
Signing time:             Mon 03 Nov 2025 04:26:44 +0000
Manifest this update:     Mon 03 Nov 2025 04:26:43 +0000
Manifest next update:     Mon 10 Nov 2025 04:26:43 +0000
Files and hashes:         1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: /TidoINWqeMirBY/b3orUP99adKwhhvFr3K2LUIS/FQ=)
                          2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: 7LY78H5hS+YFZuVbW5A4tc8w5yevBk0DBjddJ2jmN+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl
                          rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:26:43 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E53C, serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
        Validity
            Not Before: Nov  3 04:26:43 2025 GMT
            Not After : Nov 10 04:26:43 2025 GMT
        Subject: CN=69082f04-f409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:e7:92:97:d4:2b:79:f1:93:f4:5c:dd:53:
                    2a:3e:1e:bd:d0:ae:36:45:0a:86:e6:a0:fa:04:db:
                    bc:cb:6c:6c:98:6c:66:01:e2:b2:d6:71:e2:cc:9b:
                    24:40:d4:81:26:5d:f7:b0:ae:e6:b8:b8:9f:34:49:
                    7e:22:e5:68:4a:3e:0b:97:62:79:f4:cb:f2:67:ea:
                    e7:19:20:12:4c:fd:13:08:15:6d:94:93:28:2e:b6:
                    7d:3f:a0:15:25:78:49:02:28:06:e5:84:80:b0:31:
                    ab:86:cd:9b:77:12:cd:cb:64:60:e7:c4:4b:1c:4b:
                    d3:9a:8d:1d:74:fc:6f:17:11:17:97:17:da:e2:20:
                    fd:e9:75:a4:5f:94:f8:88:b2:04:22:fe:92:6e:af:
                    ec:32:3e:91:7d:33:01:36:ff:76:36:9f:9c:e8:ed:
                    35:0b:c6:5e:5d:37:e8:99:3c:ee:c7:09:c7:b2:c4:
                    65:44:6f:52:47:ed:31:a6:43:b8:78:bc:82:ff:e2:
                    a0:5e:64:26:f8:84:7d:e1:f3:db:7c:e3:3c:17:bc:
                    f6:d0:2a:76:e9:f3:5b:39:97:04:ba:d2:7f:dd:b6:
                    d5:8d:fa:7a:4f:28:c2:04:17:16:1f:2f:fb:43:9c:
                    4f:a1:87:80:6a:c3:87:53:3d:b6:4b:64:4d:e9:f1:
                    ac:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:60:F3:E8:B2:0E:59:45:5F:80:02:16:AA:E5:D4:C5:8B:52:D5:C4
            X509v3 Authority Key Identifier:
                keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         31:31:73:3c:bb:1a:1d:31:d3:ee:43:99:85:e5:f2:5d:96:6a:
         8f:35:32:c3:d7:db:04:47:15:2b:47:82:d8:ca:f9:3a:8f:4a:
         30:e8:ad:a0:84:9b:28:db:5b:07:a5:11:86:57:db:d1:1c:b4:
         5f:68:ac:2a:85:60:14:99:17:2e:6c:13:12:80:0d:a9:7c:61:
         5a:f5:f5:47:0f:63:10:83:f8:66:1d:b2:03:68:f5:31:eb:db:
         5c:60:f0:a3:24:06:97:90:b6:a0:f6:4b:c6:02:dc:9c:3a:c2:
         c1:31:03:7b:75:5e:be:86:64:41:c2:f5:ad:5f:27:df:e4:7b:
         ff:9f:52:a3:dd:e2:0f:dc:17:29:cb:cb:e9:48:a0:10:37:a4:
         c4:05:d9:51:a7:c1:55:86:55:60:cf:6f:e9:bd:44:90:ef:79:
         28:ae:77:0b:83:3d:23:6f:90:67:87:8f:a6:ee:e8:c2:17:5e:
         34:bb:69:f5:59:f5:c9:24:6e:44:d9:e0:7e:26:1f:b3:f6:33:
         36:ac:be:43:2b:73:dc:d1:5f:c4:2e:30:36:a8:06:90:f7:1b:
         e3:34:3d:15:c1:de:9c:0c:fc:d1:d4:fd:6d:b6:94:ad:8d:20:
         b1:3a:bb:86:94:56:f7:f8:c7:80:31:c1:ad:e6:7c:f7:b2:01:
         a4:68:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 16:13:22 2025 by rpki-client