
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
File:                     pp7mLFrogRdKQhI3WepCPWH3NCM.mft (raw, json)
Hash identifier:          kqCyoFLR0Lfbycw9flbs31aL1//LugllJTs9HPwzdn8=
Subject key identifier:   18:D5:64:BE:F4:22:93:F2:65:43:5B:9E:51:C4:75:4C:FA:E3:D0:98
Authority key identifier: A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23
Certificate issuer:       /CN=A9132F12/serialNumber=A69EE62C5AE881174A42123759EA423D61F73423
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
Manifest number:          DC
Signing time:             Mon 03 Nov 2025 05:31:54 +0000
Manifest this update:     Mon 03 Nov 2025 05:31:54 +0000
Manifest next update:     Mon 10 Nov 2025 05:31:54 +0000
Files and hashes:         1: pp7mLFrogRdKQhI3WepCPWH3NCM.crl (hash: Iw62VeUSIe8QvB9HnM49NzsralqM2M71/p3ipWU+Lro=)
                          2: A1418C5E68C411EF841B7987C4F9AE02.roa (hash: w11TSOq/EaycCd3tkTNvuoFONdTStuPzFxhygocn60Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl
                          rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:31:53 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132F12, serialNumber=A69EE62C5AE881174A42123759EA423D61F73423
        Validity
            Not Before: Nov  3 05:31:54 2025 GMT
            Not After : Nov 10 05:31:54 2025 GMT
        Subject: CN=69083e4a-748c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:e3:d7:8f:1f:b9:d8:e0:bb:e4:63:76:8c:
                    06:bc:ee:49:3b:c1:f2:4c:ff:db:45:ca:4e:bd:51:
                    12:3b:05:20:d9:3a:36:f1:ac:71:11:ec:87:51:e4:
                    00:26:cc:a2:a0:52:db:6e:94:b3:72:1b:23:52:86:
                    0e:ff:4b:e4:00:ec:72:99:88:ee:63:66:b8:c2:ce:
                    6d:50:de:27:ab:02:a2:31:71:c0:f8:30:18:60:a9:
                    a0:5a:6d:53:7e:f4:89:c5:92:52:c9:8e:60:93:0a:
                    0a:f4:97:63:5d:16:e1:64:9f:80:8a:b5:53:f5:d2:
                    e1:34:e2:c6:9d:c7:0e:fe:0d:69:0e:9c:6d:54:09:
                    52:3a:47:17:f5:5a:32:1b:6f:27:84:50:e9:93:59:
                    bf:fa:b0:9a:e5:d7:d6:e6:49:39:da:eb:bf:97:fe:
                    8c:0b:56:cd:0b:88:39:59:1d:c8:e5:de:72:f3:a9:
                    08:c5:8b:9f:f2:d0:37:90:ad:8c:ea:00:b7:54:ca:
                    5c:f4:f1:13:bc:c6:14:04:42:de:4f:6e:18:51:47:
                    bd:4e:6f:bb:83:b3:45:47:b4:32:da:bf:8e:75:ad:
                    ad:78:4e:94:d9:0f:34:e4:58:ea:2c:e9:27:3a:13:
                    e6:da:28:a4:f3:65:af:2b:e3:5f:58:28:82:6e:5b:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D5:64:BE:F4:22:93:F2:65:43:5B:9E:51:C4:75:4C:FA:E3:D0:98
            X509v3 Authority Key Identifier:
                keyid:A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         71:99:47:50:8d:2c:f3:80:10:b3:45:35:83:59:1b:ee:b5:28:
         67:aa:10:17:45:74:a1:63:79:86:a9:9d:82:43:c5:79:5f:6f:
         cf:b3:11:36:a0:57:f5:87:d5:b9:29:e4:da:c2:c3:f2:37:e0:
         ab:b9:18:9b:31:f1:24:f1:12:69:7a:38:d9:9d:65:2d:4a:6a:
         f1:89:00:0e:42:38:f3:a1:83:99:3b:d3:0f:36:5f:9d:0a:f7:
         8e:d1:2e:70:4c:12:eb:70:68:5b:79:56:39:48:68:b4:2d:d4:
         fe:95:30:97:75:e3:8d:70:1b:07:b9:e3:7a:41:40:cd:94:95:
         f5:19:05:0b:5c:5b:93:64:3f:7d:4f:f3:90:29:06:c6:97:ea:
         a7:c9:aa:56:f2:6f:e0:2d:e3:90:89:45:0f:b3:0c:26:59:21:
         91:38:2d:0f:a7:12:9f:e8:ff:9a:a5:05:b5:2b:7f:2f:8a:8a:
         4b:d4:d3:e1:f2:5a:23:5f:ac:ba:d9:b5:d9:1a:74:56:7d:59:
         94:38:50:e2:ee:05:75:c1:ff:57:ce:7e:83:db:5f:f5:e2:3b:
         81:90:d9:dc:21:3e:54:0e:c9:f1:4e:81:5f:93:02:7b:ca:45:
         cb:52:24:d4:d3:a9:81:35:bb:ac:ed:14:c4:30:85:4d:ae:89:
         af:80:0c:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJGMTIxMTAvBgNVBAUTKEE2OUVFNjJDNUFFODgxMTc0QTQyMTIzNzU5RUE0MjNE
NjFGNzM0MjMwHhcNMjUxMTAzMDUzMTU0WhcNMjUxMTEwMDUzMTU0WjAYMRYwFAYD
VQQDEw02OTA4M2U0YS03NDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7Hj148fudjgu+RjdowGvO5JO8HyTP/bRcpOvVESOwUg2To28axxEeyHUeQA
JsyioFLbbpSzchsjUoYO/0vkAOxymYjuY2a4ws5tUN4nqwKiMXHA+DAYYKmgWm1T
fvSJxZJSyY5gkwoK9JdjXRbhZJ+AirVT9dLhNOLGnccO/g1pDpxtVAlSOkcX9Voy
G28nhFDpk1m/+rCa5dfW5kk52uu/l/6MC1bNC4g5WR3I5d5y86kIxYuf8tA3kK2M
6gC3VMpc9PETvMYUBELeT24YUUe9Tm+7g7NFR7Qy2r+Oda2teE6U2Q805FjqLOkn
OhPm2iik82WvK+NfWCiCblv0SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjVZL70
IpPyZUNbnlHEdUz649CYMB8GA1UdIwQYMBaAFKae5ixa6IEXSkISN1nqQj1h9zQj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkYxMi9GRjMzM0I4QTY4
QzExMUVGQTc1M0ExNjRDNEY5QUUwMi9wcDdtTEZyb2dSZEtRaEkzV2VwQ1BXSDNO
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BwN21MRnJvZ1JkS1FoSTNXZXBDUFdIM05DTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkYxMi9GRjMzM0I4QTY4QzExMUVGQTc1M0ExNjRDNEY5QUUwMi9wcDdtTEZyb2dS
ZEtRaEkzV2VwQ1BXSDNOQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxmUdQjSzzgBCzRTWDWRvutShnqhAXRXShY3mGqZ2CQ8V5X2/PsxE2
oFf1h9W5KeTawsPyN+CruRibMfEk8RJpejjZnWUtSmrxiQAOQjjzoYOZO9MPNl+d
CveO0S5wTBLrcGhbeVY5SGi0LdT+lTCXdeONcBsHueN6QUDNlJX1GQULXFuTZD99
T/OQKQbGl+qnyapW8m/gLeOQiUUPswwmWSGROC0PpxKf6P+apQW1K38viopL1NPh
8lojX6y62bXZGnRWfVmUOFDi7gV1wf9Xzn6D21/14juBkNncIT5UDsnxToFfkwJ7
ykXLUiTU06mBNbus7RTEMIVNromvgAzC
-----END CERTIFICATE-----
Generated at Tue Nov  4 16:13:25 2025 by rpki-client