
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft
File:                     7bwZ_qH8tmtPqgoil27hNQs32-s.mft (raw, json)
Hash identifier:          WwVDbxwz9G48nUiasfvZt5fhuqbjt7cw5wRewlY2Wsk=
Subject key identifier:   07:C4:D4:0F:E7:38:50:05:EB:22:94:BC:2D:E3:50:2A:E6:5E:7E:D7
Authority key identifier: ED:BC:19:FE:A1:FC:B6:6B:4F:AA:0A:22:97:6E:E1:35:0B:37:DB:EB
Certificate issuer:       /CN=A916A4BF/serialNumber=EDBC19FEA1FCB66B4FAA0A22976EE1350B37DBEB
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft
Manifest number:          6F
Signing time:             Mon 03 Nov 2025 06:56:15 +0000
Manifest this update:     Mon 03 Nov 2025 06:56:14 +0000
Manifest next update:     Mon 10 Nov 2025 06:56:14 +0000
Files and hashes:         1: 7bwZ_qH8tmtPqgoil27hNQs32-s.crl (hash: x68s18JNIr8G42nvWliWVsfvu4Ei/1vBCqoouXdxNDg=)
                          2: DEB9B2E01FAE11F0BD4A6886C4F9AE02.roa (hash: YKV/U+PooarTthEs+eyt4mbIMbu1go/l4voLZ2DzYhw=)
                          3: 27AB5E0E1FAF11F0AB8F0B87C4F9AE02.roa (hash: oaE4p5hJkp4+nLCmgu91heGRJg3fBe+drWuPnIXpClQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.crl
                          rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:56:13 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A4BF, serialNumber=EDBC19FEA1FCB66B4FAA0A22976EE1350B37DBEB
        Validity
            Not Before: Nov  3 06:56:14 2025 GMT
            Not After : Nov 10 06:56:14 2025 GMT
        Subject: CN=6908520e-d0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:2e:03:61:65:88:a9:67:d2:e9:bd:7f:3d:
                    d8:34:c7:02:de:c0:4a:94:2d:f3:6d:ee:63:97:ad:
                    17:c2:de:76:24:a6:3b:ed:40:a8:70:cb:cb:16:5f:
                    17:13:76:ce:98:d5:2e:ae:3b:8f:25:13:f9:3e:79:
                    31:81:b2:1e:c2:91:83:0e:3d:99:57:5d:99:a5:e9:
                    46:8a:4f:05:9f:39:8d:26:c9:df:72:62:f3:e1:3c:
                    c2:bb:9f:65:38:fd:a3:2b:73:97:01:17:b1:f8:34:
                    fe:8a:00:3b:e8:c8:30:2c:34:03:ac:8e:ef:6a:9d:
                    87:8a:bb:8f:e9:e5:ac:0b:27:45:12:e6:d5:e5:d9:
                    3e:11:24:6b:08:84:12:6a:1c:52:70:58:a1:a7:e8:
                    20:2c:2c:da:97:17:2e:21:a0:62:a2:42:d1:c8:24:
                    3f:dd:8e:6e:96:30:68:4d:5d:a2:b0:c1:3c:f8:7d:
                    85:a2:8d:cd:a0:67:0b:e8:a4:e8:c3:22:34:ae:db:
                    9b:3e:be:0d:33:aa:e1:d9:44:c1:aa:90:05:35:8a:
                    b6:b4:7d:1b:d6:1b:b3:2c:0d:d1:e2:d3:7a:6b:70:
                    ea:47:ad:62:a8:27:c4:06:2f:c0:57:76:37:c8:33:
                    37:57:61:6b:e9:bf:05:14:5f:58:18:c6:27:58:91:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C4:D4:0F:E7:38:50:05:EB:22:94:BC:2D:E3:50:2A:E6:5E:7E:D7
            X509v3 Authority Key Identifier:
                keyid:ED:BC:19:FE:A1:FC:B6:6B:4F:AA:0A:22:97:6E:E1:35:0B:37:DB:EB
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         3f:58:0c:76:e0:ee:67:13:97:bb:ac:df:d5:b1:d0:ee:ff:3b:
         fb:9d:30:62:47:10:99:79:7c:9b:9a:16:96:f3:e9:75:c0:f4:
         1c:91:c1:82:07:d7:1c:87:13:85:dc:92:5b:03:d9:6f:1e:05:
         9b:ab:22:23:85:fb:d5:f9:96:d4:5a:93:3e:e8:37:86:43:38:
         76:9d:b3:09:3c:50:5c:e9:6c:6d:18:de:46:21:e6:40:8a:c8:
         55:4e:71:3f:54:bd:4a:44:a6:19:1d:ed:7b:a3:7e:0d:97:47:
         57:b2:a7:f9:fb:49:86:d8:8c:bb:d5:ce:03:d3:2e:10:5c:d8:
         c7:3d:4c:54:d6:82:99:d2:6d:fa:fd:9e:29:31:2c:23:34:44:
         b8:0e:f1:bf:af:ce:c1:4b:cc:61:e5:80:7d:34:2e:b5:af:3a:
         f3:84:78:85:24:fe:11:e0:fe:87:b2:c8:ba:8e:0c:30:f5:1a:
         95:d4:01:6c:d5:e4:1d:83:29:60:a4:fa:bc:d4:97:47:95:53:
         cb:ae:8c:44:14:9e:3d:6a:c8:4c:95:d6:a0:b0:a3:33:1c:15:
         75:13:c8:8a:5a:90:e4:fd:25:45:38:59:70:dc:3f:e1:d7:2b:
         f2:d8:04:cd:44:84:63:40:10:41:52:87:22:9c:bf:3a:70:cf:
         8c:13:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 16:04:25 2025 by rpki-client