
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
File:                     7fcsXLhSsiwvD1JSESKNRQej-cI.mft (raw, json)
Hash identifier:          w5Z26zLAqLpfRxBn1WHMApihunj5H7klFSOMzCUu6O8=
Subject key identifier:   98:07:7C:90:10:23:3C:B5:CB:33:73:ED:2D:7A:FA:92:61:7B:DD:20
Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
Certificate issuer:       /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
Certificate serial:       07F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
Manifest number:          07EE
Signing time:             Sun 02 Nov 2025 21:01:29 +0000
Manifest this update:     Sun 02 Nov 2025 21:01:29 +0000
Manifest next update:     Sun 09 Nov 2025 21:01:29 +0000
Files and hashes:         1: 7fcsXLhSsiwvD1JSESKNRQej-cI.crl (hash: XGzSLen2TIg/djDMNoZGyu61Ox7yVz2OSWG7Nr1L0HM=)
                          2: FACAB78805DA11EB9E484F71C4F9AE02.roa (hash: a2mvDw9+17HnzgD52FVNiOdxSzmsbcWIVBVCcOw0u9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl
                          rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:01:28 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2036 (0x7f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130CD3, serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
        Validity
            Not Before: Nov  2 21:01:29 2025 GMT
            Not After : Nov  9 21:01:29 2025 GMT
        Subject: CN=6907c6a9-649a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:f8:81:3f:9a:96:1a:46:68:50:07:e6:4a:
                    61:44:79:74:e4:09:88:38:c0:2d:eb:c0:0e:45:ae:
                    e3:f0:fa:a8:ae:36:1b:de:af:57:78:1f:db:a1:79:
                    d7:99:2c:9e:d1:86:5d:2b:83:9d:36:d8:46:30:a4:
                    cd:27:42:0f:71:18:30:98:1a:6b:77:56:7a:b6:cb:
                    a8:8a:2b:9c:c7:87:60:ad:46:19:eb:7b:c3:4a:24:
                    0b:d2:9e:5e:51:b4:79:a5:dc:52:1f:4a:8f:b0:5d:
                    6b:af:1b:c6:ac:e5:01:44:9e:77:14:0f:41:65:bb:
                    66:13:00:26:fa:3a:d2:5f:da:de:c8:2f:9e:7c:c0:
                    e7:4e:f2:13:22:7f:ed:82:cb:33:1b:a9:16:ca:36:
                    64:60:5f:3f:40:62:fb:27:19:e3:bd:e5:dd:ed:d1:
                    3b:47:af:c8:fc:6a:2e:32:3f:e7:a6:49:95:85:b3:
                    7f:05:02:9c:b9:18:a4:67:d0:72:3f:3e:17:e7:f5:
                    e4:21:6c:d1:78:f1:d6:ac:c6:b5:94:bd:dd:0f:d5:
                    d4:14:45:a9:38:f1:e4:8c:ff:5e:cf:97:71:9b:95:
                    94:b9:3e:12:ee:4b:6a:e7:ac:da:d6:27:d8:4a:87:
                    7e:76:4e:be:1e:34:c2:aa:45:91:a0:2c:74:b6:d9:
                    5c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:07:7C:90:10:23:3C:B5:CB:33:73:ED:2D:7A:FA:92:61:7B:DD:20
            X509v3 Authority Key Identifier:
                keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         16:ee:0d:9a:2f:cd:18:f9:48:e4:a9:2f:51:7a:51:98:a6:06:
         a9:fa:74:41:bf:c1:9d:cd:42:13:b1:bc:17:09:37:f2:ea:27:
         68:02:24:b7:1a:3c:90:42:2a:62:79:ae:8b:8f:0d:dc:02:d3:
         77:55:4d:a9:a8:4d:d0:7f:13:34:31:67:d9:de:ce:f1:3d:53:
         9c:dc:de:ad:8c:16:5e:6c:ee:43:4e:98:2d:60:89:9e:5d:9f:
         7a:8a:f7:d3:1c:ad:91:be:af:1d:d3:f8:5f:1f:42:b1:2a:6d:
         2f:a7:11:e7:42:0f:67:03:a4:65:10:90:d4:26:62:44:95:14:
         75:56:8b:b5:67:e3:34:d1:47:2a:8f:e3:38:41:c3:03:03:01:
         03:e2:46:cf:92:df:2a:01:50:a9:4a:31:43:f3:bd:18:24:81:
         c2:b9:88:91:f4:0d:94:a5:29:8d:b2:15:df:c3:79:70:5a:46:
         95:13:e5:f6:0e:d2:6b:28:5c:f8:0f:db:f2:c1:95:39:fb:7c:
         24:7c:45:6d:0c:85:37:a2:b7:44:06:6c:ec:7f:b0:8f:54:94:
         81:4e:16:3e:ed:32:6f:d5:1a:da:9e:b7:91:e2:5c:ca:a9:3d:
         f0:fb:39:c9:73:d8:0a:79:33:58:f2:9b:d7:65:ba:7e:3b:26:
         aa:15:13:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBDRDMxMTAvBgNVBAUTKEVERjcyQzVDQjg1MkIyMkMyRjBGNTI1MjExMjI4RDQ1
MDdBM0Y5QzIwHhcNMjUxMTAyMjEwMTI5WhcNMjUxMTA5MjEwMTI5WjAYMRYwFAYD
VQQDEw02OTA3YzZhOS02NDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAttL4gT+alhpGaFAH5kphRHl05AmIOMAt68AORa7j8PqorjYb3q9XeB/boXnX
mSye0YZdK4OdNthGMKTNJ0IPcRgwmBprd1Z6tsuoiiucx4dgrUYZ63vDSiQL0p5e
UbR5pdxSH0qPsF1rrxvGrOUBRJ53FA9BZbtmEwAm+jrSX9reyC+efMDnTvITIn/t
gsszG6kWyjZkYF8/QGL7JxnjveXd7dE7R6/I/GouMj/npkmVhbN/BQKcuRikZ9By
Pz4X5/XkIWzRePHWrMa1lL3dD9XUFEWpOPHkjP9ez5dxm5WUuT4S7ktq56za1ifY
Sod+dk6+HjTCqkWRoCx0ttlchQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgHfJAQ
Izy1yzNz7S16+pJhe90gMB8GA1UdIwQYMBaAFO33LFy4UrIsLw9SUhEijUUHo/nC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMENEMy85RjkzMERCMjA1
RDkxMUVCQUZGOTQ5NzBDNEY5QUUwMi83ZmNzWExoU3Npd3ZEMUpTRVNLTlJRZWot
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdmY3NYTGhTc2l3dkQxSlNFU0tOUlFlai1jSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MENEMy85RjkzMERCMjA1RDkxMUVCQUZGOTQ5NzBDNEY5QUUwMi83ZmNzWExoU3Np
d3ZEMUpTRVNLTlJRZWotY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAW7g2aL80Y+UjkqS9RelGYpgap+nRBv8GdzUITsbwXCTfy6idoAiS3
GjyQQipiea6Ljw3cAtN3VU2pqE3QfxM0MWfZ3s7xPVOc3N6tjBZebO5DTpgtYIme
XZ96ivfTHK2Rvq8d0/hfH0KxKm0vpxHnQg9nA6RlEJDUJmJElRR1Vou1Z+M00Ucq
j+M4QcMDAwED4kbPkt8qAVCpSjFD870YJIHCuYiR9A2UpSmNshXfw3lwWkaVE+X2
DtJrKFz4D9vywZU5+3wkfEVtDIU3ordEBmzsf7CPVJSBThY+7TJv1RranreR4lzK
qT3w+znJc9gKeTNY8pvXZbp+OyaqFRPi
-----END CERTIFICATE-----
Generated at Tue Nov  4 08:17:47 2025 by rpki-client