
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
File:                     UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json)
Hash identifier:          U0gc8zhEX2ohdxHS5meebhE9RI28qSx0oWgK1UBHLqA=
Subject key identifier:   4D:EE:AB:01:68:8B:19:1F:9A:BC:7F:97:60:47:FF:3B:9B:41:92:0F
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Certificate issuer:       /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
Manifest number:          01AA
Signing time:             Mon 03 Nov 2025 03:15:54 +0000
Manifest this update:     Mon 03 Nov 2025 03:15:54 +0000
Manifest next update:     Mon 10 Nov 2025 03:15:54 +0000
Files and hashes:         1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: T8oeQETw/8cmnNVKtBYlkco+PC9WlYiFlUv3Q9ErvOo=)
                          2: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: fV4R5q8jmyaZ1y6M6EGHK7qWH/l+INutGWYgcX5lTMc=)
                          3: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: ArfhB2PhVsHpBnCuxTAZaN9fEqhnqfH2tcV0KRWRM8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
                          rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:15:53 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
        Validity
            Not Before: Nov  3 03:15:54 2025 GMT
            Not After : Nov 10 03:15:54 2025 GMT
        Subject: CN=69081e6a-1586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:fc:36:a4:cc:84:27:8a:bd:04:b4:6a:92:
                    1b:06:2d:f3:fc:37:72:05:f6:5c:65:f1:cd:67:e3:
                    5e:be:4a:17:7f:43:de:2a:b3:69:ff:4d:0d:9f:98:
                    04:7a:6f:2c:61:05:ab:de:85:04:1d:f2:a1:3e:70:
                    79:f9:00:17:c5:e3:44:cf:de:4e:46:48:6d:16:41:
                    26:be:bf:2d:8c:6e:1a:4a:c8:49:49:93:f8:da:32:
                    4d:72:7a:71:d9:15:10:13:ad:9a:81:2b:ae:5b:94:
                    50:1d:40:2f:ce:2a:7d:a3:55:64:63:28:ea:e8:09:
                    1d:23:5d:e5:ee:ff:26:cf:63:f6:8a:fd:5c:39:b6:
                    d3:a1:09:5c:47:2d:a4:69:46:a3:18:c3:c1:41:fa:
                    42:f4:cb:09:c2:c2:ce:89:0c:99:6d:48:72:58:bf:
                    2a:a6:bf:b1:ee:0c:35:4e:0b:4a:64:ba:6d:62:06:
                    71:30:4c:b0:a1:b6:42:bf:b1:49:8b:8d:9c:ae:fd:
                    cb:13:7b:6f:80:c1:c8:1a:73:02:7c:fa:1b:f4:3e:
                    52:94:b3:95:2b:c3:37:5e:2d:6f:aa:2b:f1:c6:45:
                    b2:14:e4:c6:bf:50:2b:8b:31:59:87:d0:63:c0:d4:
                    cd:41:d0:56:5c:5b:1f:f7:09:00:98:f6:74:e8:b6:
                    ba:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EE:AB:01:68:8B:19:1F:9A:BC:7F:97:60:47:FF:3B:9B:41:92:0F
            X509v3 Authority Key Identifier:
                keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         21:16:46:d9:4b:c8:8f:cd:07:07:d7:bf:f6:9c:93:7e:d7:a8:
         19:19:fb:c0:1f:a9:3d:72:73:5d:54:2d:6a:7e:a2:7d:0a:eb:
         a8:18:e0:69:bd:e0:fb:0f:ec:b7:4a:49:c9:67:6e:f7:bf:8d:
         e3:62:06:2e:86:7c:d1:60:55:d6:f1:7e:37:65:ef:e3:6f:00:
         55:1c:b2:05:d7:b4:d7:24:7c:37:52:e0:78:b5:7b:17:f9:3d:
         fa:10:18:b2:52:16:a9:be:e8:95:1d:4a:54:9b:7c:a1:c8:2f:
         a9:5f:15:ff:ec:91:84:96:3a:41:ea:ac:a0:8e:38:57:c3:52:
         a0:aa:b2:8d:81:5c:2a:d4:c8:09:15:43:32:a2:42:ce:87:ca:
         1a:af:40:17:13:b9:f8:a9:38:6a:55:35:dc:13:34:93:0a:02:
         d9:61:cc:aa:95:50:44:ae:12:1a:fa:11:71:76:a7:da:97:f0:
         2a:7b:c4:a1:dd:0f:e9:8b:ba:bd:46:a6:8d:06:0a:15:9d:d7:
         c2:6d:a6:e4:39:88:60:31:34:c2:bb:a8:53:ce:9f:b9:e3:25:
         12:1e:20:ad:df:99:9a:7a:f1:e4:7f:4b:62:09:70:b3:27:f8:
         e9:67:ac:b8:3a:9a:d3:c0:0c:d9:b8:d0:85:9c:30:a0:b0:b0:
         f1:8a:a4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:15:10 2025 by rpki-client