
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
File:                     je6uhW6V886s4RLAoeqXukWlekQ.mft (raw, json)
Hash identifier:          CVBB176q1m8lrZuuZWo4WSCFaTSafgv0vs2nhAnJPno=
Subject key identifier:   BD:F9:FC:65:EA:3E:EA:5B:7A:80:E3:51:0F:44:8F:73:C4:4E:74:0C
Authority key identifier: 8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
Certificate issuer:       /CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44
Certificate serial:       0667
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
Manifest number:          0660
Signing time:             Sun 02 Nov 2025 22:36:38 +0000
Manifest this update:     Sun 02 Nov 2025 22:36:38 +0000
Manifest next update:     Sun 09 Nov 2025 22:36:38 +0000
Files and hashes:         1: je6uhW6V886s4RLAoeqXukWlekQ.crl (hash: 3/9VfDFpa3da4xslJeWDUupnGOvQX7QJHahI1bhsDCw=)
                          2: A26500A2A27F11EBBE87837FC4F9AE02.roa (hash: o6IdzF2JW4pdJz3buu3YPOk5TMt4Nbg8S9u/EOJTdU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:36:37 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1639 (0x667)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C39D1, serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44
        Validity
            Not Before: Nov  2 22:36:38 2025 GMT
            Not After : Nov  9 22:36:38 2025 GMT
        Subject: CN=6907dcf6-28d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:13:03:da:2e:f7:73:ca:2c:79:87:e9:c7:
                    eb:9e:37:3a:27:48:d4:6d:64:6b:ba:ad:a6:5f:00:
                    31:fe:98:3b:9d:45:d9:a1:cc:b9:d6:a7:81:36:ef:
                    f7:e5:ba:34:35:e6:b0:e0:fd:fd:c6:8b:bb:a1:e8:
                    37:45:30:9b:38:23:5d:3a:8a:c8:4b:f2:f6:02:22:
                    06:cc:50:b0:8f:7f:44:47:0a:70:25:e1:ef:fa:fe:
                    6d:c2:31:67:68:b2:74:2b:44:9e:a3:33:72:4a:97:
                    0d:19:17:cd:a1:14:89:88:3a:67:bf:1a:22:91:5f:
                    fd:cb:a0:1f:ea:04:b1:65:a5:a8:14:9c:b0:a3:96:
                    5b:be:b1:0f:d9:14:f4:fc:f6:51:f9:06:4f:11:9a:
                    85:ba:85:05:27:13:66:06:8d:c5:96:3e:47:06:dc:
                    95:25:6d:c4:88:4c:2e:18:f3:0a:05:6b:73:42:86:
                    3f:e8:44:82:39:ad:9a:d1:04:d4:8d:9f:86:ce:52:
                    be:43:1b:4e:98:89:71:bf:1e:3c:7b:13:4b:1e:4c:
                    09:21:cd:bb:af:cf:cf:41:92:55:d8:8e:61:3a:5a:
                    43:df:92:cf:cc:30:d8:bc:bf:60:21:62:5b:89:55:
                    4d:d6:fb:1b:ff:b9:a1:39:a2:dc:ba:26:17:6f:7f:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F9:FC:65:EA:3E:EA:5B:7A:80:E3:51:0F:44:8F:73:C4:4E:74:0C
            X509v3 Authority Key Identifier:
                keyid:8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         bd:70:93:dd:3f:62:22:a8:8b:86:7e:24:9d:2f:1b:52:b2:82:
         d2:8e:c1:a7:ae:39:96:74:ae:4e:34:47:7f:27:3f:8a:6c:89:
         65:57:73:da:ca:f6:e5:ec:d2:1d:30:c7:af:09:04:81:45:1e:
         b9:7e:a7:7d:a7:a8:86:72:44:2e:c5:79:18:c1:cd:9a:84:40:
         04:d2:74:4d:7f:60:b7:48:b0:c8:70:20:79:d0:ea:04:45:73:
         82:3d:a5:ad:41:9c:53:d5:49:f7:1d:72:ac:3a:20:3e:eb:29:
         2c:e2:fd:81:30:e4:91:cb:66:e1:bc:0c:15:15:89:19:38:44:
         36:f8:69:ec:df:58:ac:91:f5:74:19:d7:1c:ba:5c:42:19:d1:
         dc:d4:a7:60:82:4f:ca:f2:f0:7b:2f:55:bb:e5:24:af:dc:d3:
         61:cd:8c:a9:2d:1d:0f:0c:15:ab:b7:c2:19:63:fd:3e:43:7d:
         fe:85:79:e5:6b:ba:bc:06:7f:44:ad:27:19:01:44:5a:ce:06:
         5f:75:77:44:d8:7a:03:19:26:02:bd:7e:8b:bc:bf:eb:ea:c4:
         32:b3:40:89:d6:df:b7:31:fb:3b:8e:08:8e:57:2a:d5:7e:c1:
         3c:8d:51:1f:38:17:c5:23:ac:94:c0:0a:89:53:72:07:83:37:
         9c:a0:b0:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzM5RDExMTAvBgNVBAUTKDhERUVBRTg1NkU5NUYzQ0VBQ0UxMTJDMEExRUE5N0JB
NDVBNTdBNDQwHhcNMjUxMTAyMjIzNjM4WhcNMjUxMTA5MjIzNjM4WjAYMRYwFAYD
VQQDEw02OTA3ZGNmNi0yOGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyvATA9ou93PKLHmH6cfrnjc6J0jUbWRruq2mXwAx/pg7nUXZocy51qeBNu/3
5bo0Neaw4P39xou7oeg3RTCbOCNdOorIS/L2AiIGzFCwj39ERwpwJeHv+v5twjFn
aLJ0K0SeozNySpcNGRfNoRSJiDpnvxoikV/9y6Af6gSxZaWoFJywo5ZbvrEP2RT0
/PZR+QZPEZqFuoUFJxNmBo3Flj5HBtyVJW3EiEwuGPMKBWtzQoY/6ESCOa2a0QTU
jZ+GzlK+QxtOmIlxvx48exNLHkwJIc27r8/PQZJV2I5hOlpD35LPzDDYvL9gIWJb
iVVN1vsb/7mhOaLcuiYXb39bYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL35/GXq
PupbeoDjUQ9Ej3PETnQMMB8GA1UdIwQYMBaAFI3uroVulfPOrOESwKHql7pFpXpE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzlEMS8wODhDMUI0OEEy
N0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4NnM0UkxBb2VxWHVrV2xl
a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2plNnVoVzZWODg2czRSTEFvZXFYdWtXbGVrUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzlEMS8wODhDMUI0OEEyN0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4
NnM0UkxBb2VxWHVrV2xla1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9cJPdP2IiqIuGfiSdLxtSsoLSjsGnrjmWdK5ONEd/Jz+KbIllV3Pa
yvbl7NIdMMevCQSBRR65fqd9p6iGckQuxXkYwc2ahEAE0nRNf2C3SLDIcCB50OoE
RXOCPaWtQZxT1Un3HXKsOiA+6yks4v2BMOSRy2bhvAwVFYkZOEQ2+Gns31iskfV0
GdcculxCGdHc1Kdggk/K8vB7L1W75SSv3NNhzYypLR0PDBWrt8IZY/0+Q33+hXnl
a7q8Bn9ErScZAURazgZfdXdE2HoDGSYCvX6LvL/r6sQys0CJ1t+3Mfs7jgiOVyrV
fsE8jVEfOBfFI6yUwAqJU3IHgzecoLAD
-----END CERTIFICATE-----
Generated at Tue Nov  4 16:04:41 2025 by rpki-client