
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
File:                     rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json)
Hash identifier:          jCEf0vcNOsVrbHX5Hs4LXdXpdekF3zrBHC6E/oUi3ZM=
Subject key identifier:   43:D0:6D:E0:EC:12:55:80:F6:BE:69:C3:BC:05:D3:9B:76:F5:3A:48
Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
Certificate issuer:       /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
Manifest number:          0172
Signing time:             Mon 03 Nov 2025 03:50:13 +0000
Manifest this update:     Mon 03 Nov 2025 03:50:13 +0000
Manifest next update:     Mon 10 Nov 2025 03:50:13 +0000
Files and hashes:         1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: ht+rgrLKJ7iYcXb8M3WUW+unW0izPiQ6vUgv1Xms7dI=)
                          2: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: x3typY+Rz1v7YQKoz8/eFq0vzVSoB9fMyJducWo5h8o=)
                          3: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: Zs0S8blgDDMs3jrlGY37AkPWRyP83xeb73R0yUfKf24=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl
                          rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:50:12 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
        Validity
            Not Before: Nov  3 03:50:13 2025 GMT
            Not After : Nov 10 03:50:13 2025 GMT
        Subject: CN=69082675-c6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:95:30:d4:ce:ba:83:55:7d:ce:bd:06:b1:99:
                    44:23:69:7c:9d:0d:52:19:45:36:dd:ba:19:c8:3b:
                    77:f9:33:b9:5c:d1:07:3a:7a:e2:68:f8:7b:e5:94:
                    c0:d5:5c:1f:23:b8:8d:32:49:f4:09:8b:8b:94:27:
                    86:57:fd:78:a8:c8:46:4a:6d:ba:d0:3e:10:46:f6:
                    93:ed:6b:a6:e8:76:03:5a:4e:7a:8f:9e:c9:fe:44:
                    aa:64:a2:ba:f1:a0:d0:97:95:15:b0:6d:a4:ea:e3:
                    a1:e6:0c:c7:de:12:3e:ed:04:dd:3c:41:39:9d:b5:
                    89:50:0f:45:25:36:cd:4e:27:13:f5:fd:3b:28:11:
                    4f:70:41:0f:b9:32:87:d2:4f:9c:38:06:a7:93:23:
                    5b:15:2c:4b:cb:f2:48:e4:21:69:49:22:f4:11:1c:
                    3a:39:94:03:78:95:68:95:5c:b8:1c:da:f3:b9:0c:
                    2a:4b:31:73:36:0f:26:d3:36:12:5b:2f:9b:5d:2b:
                    dd:cc:b7:8b:63:df:51:77:e7:36:96:a0:43:ae:a5:
                    a2:e1:2f:d4:fd:f0:be:0d:74:59:0a:9d:df:4e:a0:
                    18:60:df:9f:29:91:f2:b8:d4:89:ec:3c:f3:c1:90:
                    58:e5:a8:76:c4:dd:5e:97:03:91:58:67:11:35:8a:
                    36:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D0:6D:E0:EC:12:55:80:F6:BE:69:C3:BC:05:D3:9B:76:F5:3A:48
            X509v3 Authority Key Identifier:
                keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         68:ae:ff:b2:83:69:a2:21:76:d6:7f:9d:7d:d8:4f:c2:70:f4:
         34:58:c1:ae:f0:7e:eb:a6:dc:12:d9:68:05:73:8b:dc:1d:06:
         9a:85:9c:7f:c8:a5:b5:a2:5e:28:60:db:74:8c:d4:c5:80:7d:
         f6:9c:10:4f:4e:1e:61:ae:3e:7b:70:97:14:b5:99:06:07:27:
         3e:77:72:14:74:c3:7f:35:a3:50:74:b2:ca:d1:91:e8:0e:75:
         08:c3:3e:44:b6:2e:68:55:54:df:fe:0d:34:51:4e:44:0e:aa:
         e8:c4:59:d7:8a:21:a6:a1:a5:9e:e8:a7:7c:e9:20:23:a3:ba:
         cd:ae:74:a0:45:38:57:35:c3:70:5c:51:d8:e6:06:f6:cd:7b:
         f9:22:2c:33:d6:d2:e0:98:61:90:39:de:41:7f:2a:11:ca:00:
         44:e5:4a:4d:49:79:d6:71:9a:f5:0c:7c:62:f4:1e:48:df:f7:
         3d:e2:00:98:71:33:9f:20:bb:20:8b:d6:ee:69:22:d5:3e:42:
         37:e3:8d:ca:bf:96:cc:f5:c9:f4:b7:b2:d1:0f:f5:c3:a6:f5:
         cd:9c:da:8e:bd:a0:07:c5:4a:a7:bd:44:1a:7f:c5:84:8a:ac:
         c9:be:f6:0e:37:48:d5:7a:eb:55:dd:2b:2b:36:b1:10:68:e9:
         9d:37:1d:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC
RUFDQkNDMkQwHhcNMjUxMTAzMDM1MDEzWhcNMjUxMTEwMDM1MDEzWjAYMRYwFAYD
VQQDEw02OTA4MjY3NS1jNmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9pUw1M66g1V9zr0GsZlEI2l8nQ1SGUU23boZyDt3+TO5XNEHOnriaPh75ZTA
1VwfI7iNMkn0CYuLlCeGV/14qMhGSm260D4QRvaT7Wum6HYDWk56j57J/kSqZKK6
8aDQl5UVsG2k6uOh5gzH3hI+7QTdPEE5nbWJUA9FJTbNTicT9f07KBFPcEEPuTKH
0k+cOAankyNbFSxLy/JI5CFpSSL0ERw6OZQDeJVolVy4HNrzuQwqSzFzNg8m0zYS
Wy+bXSvdzLeLY99Rd+c2lqBDrqWi4S/U/fC+DXRZCp3fTqAYYN+fKZHyuNSJ7Dzz
wZBY5ah2xN1elwORWGcRNYo21wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPQbeDs
ElWA9r5pw7wF05t29TpIMB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz
NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6
NzBoQjAtTklRb0Mtckx6QzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBorv+yg2miIXbWf5192E/CcPQ0WMGu8H7rptwS2WgFc4vcHQaahZx/
yKW1ol4oYNt0jNTFgH32nBBPTh5hrj57cJcUtZkGByc+d3IUdMN/NaNQdLLK0ZHo
DnUIwz5Eti5oVVTf/g00UU5EDqroxFnXiiGmoaWe6Kd86SAjo7rNrnSgRThXNcNw
XFHY5gb2zXv5Iiwz1tLgmGGQOd5BfyoRygBE5UpNSXnWcZr1DHxi9B5I3/c94gCY
cTOfILsgi9buaSLVPkI3443Kv5bM9cn0t7LRD/XDpvXNnNqOvaAHxUqnvUQaf8WE
iqzJvvYON0jVeutV3SsrNrEQaOmdNx3A
-----END CERTIFICATE-----
Generated at Tue Nov  4 08:03:15 2025 by rpki-client