
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File:                     t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier:          nyUXBlMtSgJ02t0qlOvGH811+YhiSbB4oVwK6Fg9iog=
Subject key identifier:   D6:B8:E8:7C:4D:A5:D8:BD:9F:80:EE:C5:66:0E:EB:3D:04:0F:48:BB
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer:       /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial:       07FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number:          07E7
Signing time:             Sun 02 Nov 2025 21:07:51 +0000
Manifest this update:     Sun 02 Nov 2025 21:07:51 +0000
Manifest next update:     Sun 09 Nov 2025 21:07:51 +0000
Files and hashes:         1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: 94foQyQbUp52PJp0eAVJxBcpb8S/6j8GSiwqMqtWkqA=)
                          2: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: tLbfqsiqbU5f5RIfXdeZj0H0Fi86hjwtE1k3SMfEBD0=)
                          3: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: /j+vq5djnc7hZrEiUy4WmMk+wFiISuWLXCgiYcfhmKo=)
                          4: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: tkd8GU4TJwZRxQo7fPIxlQckyw3LFTCGlrBbg1Zjf+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
                          rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:07:50 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2042 (0x7fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
        Validity
            Not Before: Nov  2 21:07:51 2025 GMT
            Not After : Nov  9 21:07:51 2025 GMT
        Subject: CN=6907c827-ca76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:f0:ea:9c:4e:30:08:d4:64:36:eb:0f:fa:
                    4b:9d:b8:04:7d:6f:4c:e1:26:74:94:9f:c6:50:89:
                    bb:aa:05:0f:fd:20:1f:77:6c:1c:e1:5d:fd:7f:8b:
                    c1:5a:02:c6:55:60:c1:97:67:5a:b8:09:2f:91:4d:
                    06:6d:53:85:8c:a6:03:a2:37:03:65:71:5c:64:16:
                    1d:20:eb:2e:62:c2:8d:dc:f9:05:0e:fe:d1:ac:ae:
                    06:e6:1d:58:49:e7:ef:d9:44:6f:5b:33:41:6a:73:
                    46:42:3d:67:23:1b:c1:98:c8:9a:db:44:2f:00:46:
                    50:ab:ba:2c:6e:7d:a9:6d:fd:58:f1:a4:7f:46:03:
                    08:df:a2:7d:81:a5:39:c3:43:19:0b:d6:2f:06:1a:
                    1e:20:79:d5:b8:29:ae:68:ab:47:c0:c6:ca:4b:ea:
                    1a:41:66:d8:11:d3:a6:a3:1f:16:ad:59:72:2e:4d:
                    05:f8:35:cc:c2:91:6f:93:d4:15:fd:f4:2c:8f:a5:
                    fa:cb:5b:42:5d:5c:46:20:2f:75:aa:07:99:95:c3:
                    d3:3a:3d:a4:52:9a:cb:85:5b:72:a2:c0:cc:b3:a3:
                    67:37:2a:d0:ee:95:64:94:17:5d:1c:55:25:17:b1:
                    5e:86:51:77:b6:c4:42:58:ef:20:ae:d2:90:b8:cf:
                    fe:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B8:E8:7C:4D:A5:D8:BD:9F:80:EE:C5:66:0E:EB:3D:04:0F:48:BB
            X509v3 Authority Key Identifier:
                keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         a0:82:37:b0:6e:57:c8:4f:32:96:a7:87:5b:22:7f:fb:9a:1a:
         f1:4d:6d:36:69:41:ea:14:37:55:3e:50:17:b4:1b:93:1e:f5:
         f6:6a:94:ed:ae:4c:8d:eb:f8:23:27:e5:99:c7:ac:8c:4b:00:
         3a:f9:50:78:ec:da:03:4c:6f:46:7d:40:95:77:6e:1c:f8:61:
         f1:4e:ff:20:8e:44:46:81:7c:c4:df:e8:85:b8:02:36:05:e4:
         1c:be:9b:38:fc:bc:02:04:16:a0:0d:41:11:8e:d2:43:ef:19:
         42:00:1a:55:b1:9f:72:da:45:79:cf:20:cf:0a:3c:27:22:e1:
         f0:d0:10:25:0d:4c:bc:ff:52:fc:81:60:b2:de:17:01:42:fa:
         5a:25:15:da:d0:30:21:83:84:60:5b:56:69:55:da:6e:e6:69:
         5a:b7:4b:24:9c:c4:7f:21:0f:f3:3a:51:af:c7:f6:d9:d4:b3:
         4a:88:e4:a6:be:31:55:a4:e8:fd:4f:92:ba:ce:64:46:46:85:
         4b:08:12:91:c0:7d:54:dc:46:aa:da:e3:9f:6a:35:ff:8e:b6:
         ec:37:5f:79:51:18:bf:6d:54:e1:b7:5d:1d:58:cc:3e:ed:ee:
         69:4b:a0:df:7f:d5:e4:78:8d:d4:d1:f5:44:38:9d:05:c3:38:
         3e:0e:3a:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVFNzcxMTAvBgNVBAUTKEI3ODFBMkU3RDkxRURDQThCMDMwREUzRUE4OUZBNEZB
RjE3OTFGMjEwHhcNMjUxMTAyMjEwNzUxWhcNMjUxMTA5MjEwNzUxWjAYMRYwFAYD
VQQDEw02OTA3YzgyNy1jYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApUrw6pxOMAjUZDbrD/pLnbgEfW9M4SZ0lJ/GUIm7qgUP/SAfd2wc4V39f4vB
WgLGVWDBl2dauAkvkU0GbVOFjKYDojcDZXFcZBYdIOsuYsKN3PkFDv7RrK4G5h1Y
Sefv2URvWzNBanNGQj1nIxvBmMia20QvAEZQq7osbn2pbf1Y8aR/RgMI36J9gaU5
w0MZC9YvBhoeIHnVuCmuaKtHwMbKS+oaQWbYEdOmox8WrVlyLk0F+DXMwpFvk9QV
/fQsj6X6y1tCXVxGIC91qgeZlcPTOj2kUprLhVtyosDMs6NnNyrQ7pVklBddHFUl
F7FehlF3tsRCWO8grtKQuM/+MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNa46HxN
pdi9n4DuxWYO6z0ED0i7MB8GA1UdIwQYMBaAFLeBoufZHtyosDDePqifpPrxeR8h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUU3Ny9EOUJFMDdCQTBD
RUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNLaXdNTjQtcUotay12RjVI
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q0R2k1OWtlM0tpd01ONC1xSi1rLXZGNUh5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUU3Ny9EOUJFMDdCQTBDRUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNL
aXdNTjQtcUotay12RjVIeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCggjewblfITzKWp4dbIn/7mhrxTW02aUHqFDdVPlAXtBuTHvX2apTt
rkyN6/gjJ+WZx6yMSwA6+VB47NoDTG9GfUCVd24c+GHxTv8gjkRGgXzE3+iFuAI2
BeQcvps4/LwCBBagDUERjtJD7xlCABpVsZ9y2kV5zyDPCjwnIuHw0BAlDUy8/1L8
gWCy3hcBQvpaJRXa0DAhg4RgW1ZpVdpu5mlat0sknMR/IQ/zOlGvx/bZ1LNKiOSm
vjFVpOj9T5K6zmRGRoVLCBKRwH1U3Eaq2uOfajX/jrbsN195URi/bVTht10dWMw+
7e5pS6Dff9XkeI3U0fVEOJ0Fwzg+Djpq
-----END CERTIFICATE-----
Generated at Tue Nov  4 16:06:24 2025 by rpki-client