
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft
File:                     wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft (raw, json)
Hash identifier:          s/Tx/0HtlQf4N0cYCNcN9s5bu77i3yQO7kYWEnGRe8s=
Subject key identifier:   0D:C1:1E:44:6A:74:95:E6:82:76:78:F8:5E:3D:41:EB:51:8C:D8:4D
Authority key identifier: C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A
Certificate issuer:       /CN=A917FED9/serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft
Manifest number:          01B3
Signing time:             Mon 03 Nov 2025 03:08:19 +0000
Manifest this update:     Mon 03 Nov 2025 03:08:19 +0000
Manifest next update:     Mon 10 Nov 2025 03:08:19 +0000
Files and hashes:         1: wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl (hash: PDHmfc868VL1xACnCc5bf4z9dsJXRX/pDULUargaXxU=)
                          2: 32503D0625FC11EE9A575E36C4F9AE02.roa (hash: coDJ25CP62J5iPaE/zCXs0A10y/EaRgWhlToPaB3W0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl
                          rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:08:18 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FED9, serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A
        Validity
            Not Before: Nov  3 03:08:19 2025 GMT
            Not After : Nov 10 03:08:19 2025 GMT
        Subject: CN=69081ca3-d280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:da:90:d6:be:9b:91:03:b1:03:5b:52:e7:
                    29:0a:81:46:20:30:e4:26:bb:b4:95:e9:e2:fc:fe:
                    c0:8e:a0:52:66:ba:52:4a:c6:13:e1:08:cc:03:3c:
                    80:9c:e2:7b:c1:a7:9e:1b:89:99:0d:a5:b5:ee:da:
                    c9:62:cb:85:55:96:27:fc:92:fd:75:40:4a:a3:7f:
                    3c:d7:f8:55:60:b1:1d:07:ed:63:af:c7:5a:39:14:
                    81:47:f5:e7:f7:48:1b:f3:4e:37:62:b9:65:85:32:
                    47:7d:5f:41:52:b2:ba:fb:65:03:c9:de:c5:4e:10:
                    09:9d:61:79:3e:bc:03:a5:8e:22:e4:3a:bb:21:58:
                    66:93:9d:0b:45:db:84:75:cb:e1:10:d0:17:3c:0f:
                    7c:5c:cb:1c:d1:4b:07:06:50:a1:72:d9:1f:b0:2b:
                    5d:91:6e:2a:62:00:3f:3a:be:2f:16:5f:6f:1a:d1:
                    c2:da:5a:c9:bf:a4:71:12:74:c6:82:e2:e1:32:b4:
                    57:8c:7c:5d:26:53:d7:ff:0d:ef:89:c6:63:aa:6a:
                    17:da:8c:94:85:28:28:c4:f9:dd:12:4c:92:3f:1c:
                    bc:12:83:43:e6:57:f1:f3:44:0b:ce:a8:bf:22:c7:
                    3b:1c:72:ce:bd:ca:11:f6:55:85:40:10:c5:ce:f2:
                    9f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C1:1E:44:6A:74:95:E6:82:76:78:F8:5E:3D:41:EB:51:8C:D8:4D
            X509v3 Authority Key Identifier:
                keyid:C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         b4:f2:b1:df:81:45:7b:3b:88:ba:10:ca:10:9f:a1:fa:eb:44:
         d1:47:fd:52:fc:70:1e:c7:3a:6d:a5:c9:3b:90:46:d2:b0:88:
         c2:e8:1a:c4:f7:df:4c:5e:cf:40:a9:55:e8:2e:5a:56:8f:ba:
         58:5d:35:60:3d:af:fd:9b:d6:a2:1b:02:2e:1f:e7:b5:19:a9:
         db:0c:41:9d:e8:37:70:3d:c4:61:58:50:15:77:63:6b:a9:c8:
         5b:bb:65:f4:92:4b:86:5c:e1:dd:a9:8b:6c:4b:ee:63:b6:ae:
         f2:d7:2f:59:64:f7:39:55:88:a9:21:1f:b5:2d:71:da:c8:d2:
         e3:0b:a9:fe:a4:49:47:c3:10:44:87:ce:f5:58:22:7d:52:ea:
         af:f2:e7:31:95:0d:d0:68:3a:50:70:db:e1:e1:2c:f8:71:79:
         26:69:6b:0e:c0:b0:0e:2c:61:b5:67:0d:00:d7:c5:1e:2e:44:
         28:8f:be:b7:8f:8d:86:e4:98:54:df:23:1e:7e:f5:9a:fb:99:
         41:a0:d7:13:86:a6:b3:ae:c3:b0:ff:e5:70:8a:b8:31:4f:3b:
         9d:7d:db:cd:d5:9c:88:4c:d5:c9:40:b6:f7:c3:5f:7d:f3:5e:
         7a:0a:82:23:5c:39:81:3f:c9:bb:38:f0:c4:c6:a9:bf:e1:fd:
         ba:bb:ff:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0ZFRDkxMTAvBgNVBAUTKEMxM0E5RjYyQTE0QjA1MTAzQzVBQzU3NTZGOTc2NTky
ODg4QTQ5NUEwHhcNMjUxMTAzMDMwODE5WhcNMjUxMTEwMDMwODE5WjAYMRYwFAYD
VQQDEw02OTA4MWNhMy1kMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxpPakNa+m5EDsQNbUucpCoFGIDDkJru0leni/P7AjqBSZrpSSsYT4QjMAzyA
nOJ7waeeG4mZDaW17trJYsuFVZYn/JL9dUBKo3881/hVYLEdB+1jr8daORSBR/Xn
90gb8043YrllhTJHfV9BUrK6+2UDyd7FThAJnWF5PrwDpY4i5Dq7IVhmk50LRduE
dcvhENAXPA98XMsc0UsHBlChctkfsCtdkW4qYgA/Or4vFl9vGtHC2lrJv6RxEnTG
guLhMrRXjHxdJlPX/w3vicZjqmoX2oyUhSgoxPndEkySPxy8EoND5lfx80QLzqi/
Isc7HHLOvcoR9lWFQBDFzvKf3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3BHkRq
dJXmgnZ4+F49QetRjNhNMB8GA1UdIwQYMBaAFME6n2KhSwUQPFrFdW+XZZKIikla
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVEOS9DMEJBOEFBRTIy
MUIxMUVFQTUwOEQ2MkVDNEY5QUUwMi93VHFmWXFGTEJSQThXc1YxYjVkbGtvaUtT
Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dUcWZZcUZMQlJBOFdzVjFiNWRsa29pS1NWby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RkVEOS9DMEJBOEFBRTIyMUIxMUVFQTUwOEQ2MkVDNEY5QUUwMi93VHFmWXFGTEJS
QThXc1YxYjVkbGtvaUtTVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC08rHfgUV7O4i6EMoQn6H660TRR/1S/HAexzptpck7kEbSsIjC6BrE
999MXs9AqVXoLlpWj7pYXTVgPa/9m9aiGwIuH+e1GanbDEGd6DdwPcRhWFAVd2Nr
qchbu2X0kkuGXOHdqYtsS+5jtq7y1y9ZZPc5VYipIR+1LXHayNLjC6n+pElHwxBE
h871WCJ9Uuqv8ucxlQ3QaDpQcNvh4Sz4cXkmaWsOwLAOLGG1Zw0A18UeLkQoj763
j42G5JhU3yMefvWa+5lBoNcThqazrsOw/+VwirgxTzudfdvN1ZyITNXJQLb3w199
8156CoIjXDmBP8m7OPDExqm/4f26u/9L
-----END CERTIFICATE-----
Generated at Tue Nov  4 08:07:56 2025 by rpki-client