
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft
File:                     Fey-uFtpPxJYqQNmevAsYn9prck.mft (raw, json)
Hash identifier:          yS1jWfHyVcyFEYL9w6BTa9er0pVv4WKdqak9MmFYzEM=
Subject key identifier:   26:9C:84:FB:69:63:58:BD:54:7C:8E:A5:D1:E6:E3:E6:69:A6:4C:8B
Authority key identifier: 15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9
Certificate issuer:       /CN=A9170F5D/serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
Certificate serial:       0429
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft
Manifest number:          041D
Signing time:             Mon 03 Nov 2025 00:20:26 +0000
Manifest this update:     Mon 03 Nov 2025 00:20:25 +0000
Manifest next update:     Mon 10 Nov 2025 00:20:25 +0000
Files and hashes:         1: Fey-uFtpPxJYqQNmevAsYn9prck.crl (hash: Ys8M627QeMEpFEa/TKkdTrH3I5l9xCJ6aMC+H0rvdS4=)
                          2: 2839F45288C211ECBEA38C0BC4F9AE02.roa (hash: UBb2Bwu9CWJzw7Q0GrMqv9wsr+f8RiKeX0Zws7JMDOw=)
                          3: 2664BB64A4FE11ECBAF38E5BC4F9AE02.roa (hash: bwN1YTD/nT7yInvxHKJaYaTiVWgmXcRdEsYC7eWJCTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl
                          rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:20:24 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1065 (0x429)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170F5D, serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
        Validity
            Not Before: Nov  3 00:20:25 2025 GMT
            Not After : Nov 10 00:20:25 2025 GMT
        Subject: CN=6907f549-8e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:99:96:4f:d4:86:4a:02:b1:d0:e4:e6:8d:ec:
                    b5:ea:ab:3c:fd:98:77:cb:ac:5b:6a:d2:27:f2:b7:
                    19:6d:41:64:9a:b0:3d:65:c2:09:72:09:d1:40:91:
                    c6:69:41:4f:75:50:19:c5:8e:25:06:9f:5f:85:e3:
                    fe:5a:22:a0:77:16:08:bd:82:47:7d:9b:fd:eb:8c:
                    db:57:c7:e7:b4:21:b6:2e:63:48:09:c5:35:20:c8:
                    85:62:bc:b9:c8:61:34:01:f1:77:d9:a4:87:30:f0:
                    cf:b6:d0:8a:aa:d4:e1:95:2d:b7:e8:3a:64:5d:e5:
                    8c:d2:a5:37:0e:e0:ec:8e:11:b4:68:76:3f:c1:ce:
                    bb:67:3b:21:e4:46:85:c2:3a:a2:18:33:14:ed:10:
                    30:45:de:16:c7:c5:a3:ef:39:d3:24:22:9f:7d:e7:
                    7a:ca:8b:7f:03:78:f4:ef:25:9a:60:c9:e7:af:a8:
                    cd:fc:4c:f6:0a:04:8c:3b:b9:e4:6c:c6:f4:b0:98:
                    b7:cc:d5:7d:6f:6c:09:8a:aa:2e:7a:46:cc:50:81:
                    9e:96:c0:99:87:89:73:26:55:35:58:99:6f:20:1f:
                    09:8a:d9:a1:97:da:ad:1f:f5:44:29:78:ad:9b:23:
                    b3:4b:f9:37:4c:4f:79:ff:fb:aa:f6:86:29:d0:d2:
                    1b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9C:84:FB:69:63:58:BD:54:7C:8E:A5:D1:E6:E3:E6:69:A6:4C:8B
            X509v3 Authority Key Identifier:
                keyid:15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         9c:54:2d:57:59:32:bb:76:bf:46:f2:1e:9f:64:9b:40:68:0e:
         50:c2:a1:f6:60:cc:24:26:7d:25:52:f2:4e:4a:05:f9:4a:bd:
         17:23:4a:71:6e:90:7c:f4:0f:73:b9:a9:c9:c2:1b:c3:b5:e2:
         2c:78:db:42:6f:e9:5b:9d:4b:b5:31:40:a6:4a:7c:f2:99:08:
         64:31:39:1d:ce:5d:bb:b7:a5:09:d0:f2:aa:b4:8d:93:ed:b3:
         3f:08:c5:ff:12:48:7c:92:01:f8:56:54:43:a1:4c:fb:1d:b1:
         31:c7:da:06:b0:e9:e5:04:07:93:ff:46:c8:36:e4:0c:a1:5e:
         3d:74:ad:03:aa:b2:0f:4b:d9:52:2f:53:d1:db:8d:8d:ab:87:
         36:ef:f7:36:f1:77:ac:d9:24:37:98:3e:19:ee:5c:ce:f6:9c:
         c9:7e:f9:e6:18:48:61:ce:7d:58:c6:21:02:6a:52:02:27:4f:
         3f:aa:2b:3a:78:1f:ca:03:02:00:b1:d1:ec:5d:76:d9:a8:38:
         aa:40:11:b8:d9:61:a4:a4:1f:f5:60:91:9c:e8:03:69:5e:26:
         2b:9d:87:8c:64:fa:6f:49:71:3d:09:2b:e9:50:84:db:bb:59:
         17:f8:8c:38:12:9d:82:80:ee:42:ea:74:78:82:c2:2d:c3:68:
         e0:45:ba:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:19:56 2025 by rpki-client