
$ rpki-client -vvf rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
File:                     BKVferOuOZ1PJX1P0omxBYCOXDw.mft (raw, json)
Hash identifier:          JzMfLNFYnBrUrHtOjuO1OK7LDiCTl9BNafsy8UfuqEw=
Subject key identifier:   EC:DE:42:A7:53:03:DC:68:E2:C0:5A:EB:63:E3:99:50:8E:CA:38:A1
Authority key identifier: 04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C
Certificate issuer:       /CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
Manifest number:          015C
Signing time:             Mon 03 Nov 2025 04:09:16 +0000
Manifest this update:     Mon 03 Nov 2025 04:09:15 +0000
Manifest next update:     Mon 10 Nov 2025 04:09:15 +0000
Files and hashes:         1: BKVferOuOZ1PJX1P0omxBYCOXDw.crl (hash: DGGcCyhI3itAnA2nIv1BCZDwDum1w9C7xEaCqhDqS2E=)
                          2: F9B8A0AEB04911EE98449A2BC4F9AE02.roa (hash: SZ9uoMEMlq4iFEPfCrqpoW/pO5RpEBqkp89YOfJH9e0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl
                          rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:09:15 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916002E, serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
        Validity
            Not Before: Nov  3 04:09:15 2025 GMT
            Not After : Nov 10 04:09:15 2025 GMT
        Subject: CN=69082aeb-ddaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:58:ae:dc:97:5e:41:d7:53:fc:d7:6e:87:
                    6d:a4:9f:2d:ba:cb:6c:17:ce:b6:08:12:e4:7f:11:
                    43:01:8e:60:81:a8:2b:2f:ac:93:e2:ea:56:2c:11:
                    52:a1:9a:d8:ee:e2:83:83:a7:ab:2e:55:29:00:5d:
                    ad:61:f6:8b:f6:0a:6d:f1:44:44:3c:4e:96:97:ed:
                    89:1d:6d:d8:06:cd:d2:92:22:88:e6:57:63:c9:04:
                    9f:40:78:ee:e3:6e:81:6d:1a:a8:1c:27:96:d8:90:
                    33:c2:dc:43:f9:a0:b8:56:fc:50:02:91:72:e8:dc:
                    ff:a6:ed:12:d1:20:07:57:be:ed:13:30:a4:be:be:
                    4b:22:47:a2:50:df:9f:21:69:b7:b9:e0:18:74:3b:
                    82:02:1e:06:57:37:7d:3a:93:b4:c7:43:9e:dd:1c:
                    8f:b0:ee:d1:32:e6:79:8f:67:6e:cd:91:f2:3b:5b:
                    09:0a:64:a9:22:67:8d:d7:a7:44:18:a4:ea:71:86:
                    fa:07:3c:ee:02:67:1f:19:95:d8:2b:b4:ef:f8:5c:
                    e4:b5:bf:b9:de:25:63:73:53:45:ef:63:f3:a2:64:
                    da:9e:4e:8b:5d:c4:72:f1:a0:b4:bb:40:e6:32:de:
                    89:4b:d1:ee:a4:de:b4:f4:31:68:22:f1:d1:bf:b1:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DE:42:A7:53:03:DC:68:E2:C0:5A:EB:63:E3:99:50:8E:CA:38:A1
            X509v3 Authority Key Identifier:
                keyid:04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         24:ba:e7:c4:77:ef:e1:67:32:f2:35:81:a7:f4:83:01:ef:30:
         08:a5:82:2d:52:4a:be:67:50:ed:c2:08:9d:60:3c:38:2e:92:
         92:49:eb:04:b2:f7:33:8b:fb:d9:66:40:48:09:8f:fb:b4:01:
         61:56:5b:ef:9d:55:36:71:f2:16:46:59:7e:20:a6:d2:3e:4a:
         aa:3c:7c:0d:7a:a0:e0:fe:4d:b1:6a:7b:a1:87:de:af:1d:f7:
         e2:16:e3:22:d9:ed:f1:83:96:e9:6f:b7:60:fe:2e:7e:d2:6a:
         27:1f:f2:ae:78:96:5b:2a:05:5f:33:1e:7a:d0:0d:e1:ca:08:
         64:34:34:6c:e0:77:9b:ba:17:5c:40:03:05:1f:5f:08:e1:31:
         14:a9:8a:0c:d9:74:67:d0:97:00:a9:3c:de:56:48:7a:34:48:
         7b:b3:7b:0d:0b:70:95:57:f8:ae:c9:71:c7:2c:b5:33:32:fa:
         c8:9e:93:79:db:cf:8d:8d:87:74:da:f8:50:db:6a:1a:1a:55:
         fb:8a:79:1b:26:4c:d1:ec:56:1e:53:4e:aa:c3:95:65:53:2d:
         7d:31:ef:cb:2a:df:d2:a3:d0:40:51:9b:e3:60:5d:bd:f0:5e:
         70:dd:a4:4f:b8:c1:77:ec:8d:0b:5b:83:6d:66:88:8f:9a:4e:
         46:1f:60:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjAwMkUxMTAvBgNVBAUTKDA0QTU1RjdBQjNBRTM5OUQ0RjI1N0Q0RkQyODlCMTA1
ODA4RTVDM0MwHhcNMjUxMTAzMDQwOTE1WhcNMjUxMTEwMDQwOTE1WjAYMRYwFAYD
VQQDEw02OTA4MmFlYi1kZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZ9YrtyXXkHXU/zXbodtpJ8tustsF862CBLkfxFDAY5ggagrL6yT4upWLBFS
oZrY7uKDg6erLlUpAF2tYfaL9gpt8UREPE6Wl+2JHW3YBs3SkiKI5ldjyQSfQHju
426BbRqoHCeW2JAzwtxD+aC4VvxQApFy6Nz/pu0S0SAHV77tEzCkvr5LIkeiUN+f
IWm3ueAYdDuCAh4GVzd9OpO0x0Oe3RyPsO7RMuZ5j2duzZHyO1sJCmSpImeN16dE
GKTqcYb6BzzuAmcfGZXYK7Tv+Fzktb+53iVjc1NF72PzomTank6LXcRy8aC0u0Dm
Mt6JS9HupN609DFoIvHRv7EeEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzeQqdT
A9xo4sBa62PjmVCOyjihMB8GA1UdIwQYMBaAFASlX3qzrjmdTyV9T9KJsQWAjlw8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDAyRS9GMjg3RDMwQUIw
MTExMUVFQkM1ODY5NjRDNEY5QUUwMi9CS1ZmZXJPdU9aMVBKWDFQMG9teEJZQ09Y
RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JLVmZlck91T1oxUEpYMVAwb214QllDT1hEdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDAyRS9GMjg3RDMwQUIwMTExMUVFQkM1ODY5NjRDNEY5QUUwMi9CS1ZmZXJPdU9a
MVBKWDFQMG9teEJZQ09YRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkuufEd+/hZzLyNYGn9IMB7zAIpYItUkq+Z1DtwgidYDw4LpKSSesE
svczi/vZZkBICY/7tAFhVlvvnVU2cfIWRll+IKbSPkqqPHwNeqDg/k2xanuhh96v
HffiFuMi2e3xg5bpb7dg/i5+0monH/KueJZbKgVfMx560A3hyghkNDRs4Hebuhdc
QAMFH18I4TEUqYoM2XRn0JcAqTzeVkh6NEh7s3sNC3CVV/iuyXHHLLUzMvrInpN5
28+NjYd02vhQ22oaGlX7inkbJkzR7FYeU06qw5VlUy19Me/LKt/So9BAUZvjYF29
8F5w3aRPuMF37I0LW4NtZoiPmk5GH2CH
-----END CERTIFICATE-----
Generated at Tue Nov  4 02:15:09 2025 by rpki-client