
$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
File:                     GW-SdzKT5JVLTZel03rIIKdFwuA.mft (raw, json)
Hash identifier:          6j6bdVMaPL0Ou2CyGkPw1ZyQqdZWbqdXrnhzPFZ93xY=
Subject key identifier:   FE:9B:99:AF:69:BA:B5:37:AB:28:8E:9B:A6:01:8D:C6:C2:6F:4B:DF
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       037F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
Manifest number:          0354
Signing time:             Mon 03 Nov 2025 01:04:37 +0000
Manifest this update:     Mon 03 Nov 2025 01:04:36 +0000
Manifest next update:     Mon 10 Nov 2025 01:04:36 +0000
Files and hashes:         1: GW-SdzKT5JVLTZel03rIIKdFwuA.crl (hash: UMqyUHOi27PR0CHBDRXDcZZyfDkDzPHWHP1G2ASbF2M=)
                          2: EC6F91D234E111F0AC656B38C4F9AE02.roa (hash: E1WKt1YaZn8IuZR2WkpfcwtdDLc+dHKZAfiwmmiESyg=)
                          3: AEF7F896B23511EF99CCD73DC4F9AE02.roa (hash: zyZNP96AkvyazKN+7Z9uXIl84GYsJy6FhTmGH2JNTf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:04:36 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895 (0x37f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Nov  3 01:04:36 2025 GMT
            Not After : Nov 10 01:04:36 2025 GMT
        Subject: CN=6907ffa5-6396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:e7:f8:83:26:f5:ca:00:cc:0c:8f:85:4e:
                    cd:4a:0f:3b:7b:5c:fb:be:fd:dc:6b:9b:a7:36:75:
                    76:8b:92:4d:bd:eb:60:5c:37:f1:a7:20:03:ce:f4:
                    e8:7c:c0:02:e3:8c:91:69:be:f9:5b:8c:af:82:d8:
                    ef:2c:f8:62:c6:61:5a:da:f7:10:ee:12:1d:14:9d:
                    30:fa:f6:d9:2b:e5:f5:46:a0:66:70:f0:1c:0d:71:
                    f2:bc:ca:72:f1:a3:d0:29:4c:3f:73:1e:c1:f8:67:
                    1f:2f:56:2b:f5:08:67:bd:58:73:06:df:e7:f9:44:
                    7f:34:52:66:13:da:c9:39:f0:a0:6c:ed:97:46:79:
                    8c:ec:ab:54:2a:f6:a6:5f:4c:30:f9:92:65:94:ed:
                    59:c9:58:5b:0d:bf:05:09:a6:61:25:a9:81:34:79:
                    87:64:d2:ca:72:d1:93:b6:50:a0:50:3a:19:33:7d:
                    cb:4b:ff:70:31:59:20:84:1a:b2:4f:d4:f2:63:34:
                    0f:c4:19:f0:8b:81:a0:f0:09:ac:3f:f5:4f:48:7f:
                    6b:46:26:78:88:05:8f:a4:05:df:38:13:45:45:7d:
                    48:a6:c8:ce:80:c5:85:01:f0:38:db:49:6d:d0:1e:
                    43:51:52:3e:11:8b:24:47:b3:e8:57:8c:c2:6a:d8:
                    05:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9B:99:AF:69:BA:B5:37:AB:28:8E:9B:A6:01:8D:C6:C2:6F:4B:DF
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         2c:33:ee:05:4e:9c:95:57:9a:a0:d8:7a:7e:07:05:a9:dc:0b:
         00:49:77:f7:15:eb:1f:73:34:a1:d0:9d:25:0a:05:24:f6:73:
         8a:10:37:d9:be:da:f6:c4:e9:44:63:1f:65:2d:d2:7d:f9:3a:
         a2:3d:84:91:6e:80:6e:1a:61:a0:63:cd:78:51:af:69:2f:82:
         25:64:0b:5b:bb:ff:e4:bd:4c:92:b0:70:aa:f7:e6:66:89:8a:
         76:1d:99:09:5f:49:71:8e:84:2f:ee:2d:65:04:7c:0b:dd:4b:
         37:4a:92:8e:0c:36:a8:d1:9d:fa:1a:66:73:2c:24:18:16:a4:
         83:e1:4d:a5:84:0b:6b:be:88:cb:b9:eb:c7:35:f2:a2:2a:06:
         1c:30:08:fa:ee:9d:45:63:b0:07:e9:9a:ff:bd:c5:eb:32:5f:
         74:8f:08:ec:d9:39:d8:2d:5d:9f:fe:b0:94:e0:bc:0c:2f:c7:
         90:0f:bd:c9:51:d7:b4:8c:59:ac:54:5f:74:87:fa:dd:a1:78:
         e0:9f:55:e0:bf:65:84:e9:aa:1d:bf:52:0e:bd:f3:c6:2f:4a:
         0b:89:ec:f0:b1:9e:27:a6:9c:75:98:d3:55:ea:ba:a4:9a:8b:
         90:62:53:7c:b4:81:c7:9d:57:e4:37:11:c6:ea:5b:38:5d:ed:
         dd:95:ba:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:15:14 2025 by rpki-client