
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
File:                     0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft (raw, json)
Hash identifier:          Vw1A8K0anxUhUBNY8pFNDAAkDCDRKdedTuVt9BUsB5I=
Subject key identifier:   97:DD:B8:B3:0B:E0:A2:2F:F8:D0:F5:CA:A8:7D:21:3C:E7:41:0F:3E
Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
Certificate issuer:       /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Certificate serial:       070B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
Manifest number:          06EE
Signing time:             Sun 02 Nov 2025 21:57:45 +0000
Manifest this update:     Sun 02 Nov 2025 21:57:44 +0000
Manifest next update:     Sun 09 Nov 2025 21:57:44 +0000
Files and hashes:         1: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl (hash: oobXdsfUYyGLEP61UAPx2s+bIlaTTu/uofY4kzTskww=)
                          2: 3B03239684CE11EF9D90A966C4F9AE02.roa (hash: 0+CvQqBA1GWK9uAje6YI9ltQjscAcIJ8/LtX4JAvJgQ=)
                          3: 6A8A22841DCE11EF85CAC83EC4F9AE02.roa (hash: BifS2RiKJAeyaao2xahiTEJyhWsX4uSdQw3ik4lZCoM=)
                          4: DD3C61621DCD11EF88E9EE3DC4F9AE02.roa (hash: qv769QTOuxRY2vZMEitP1PhQNGQQJL1+VWV0CsKcicw=)
                          5: 178E201EA51911EDB711B90AC4F9AE02.roa (hash: Fk3FD4AcHMukexgYcFy6H4xmHyHDGU1VOrgDQ2JaHQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:57:44 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1803 (0x70b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D26C6, serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
        Validity
            Not Before: Nov  2 21:57:44 2025 GMT
            Not After : Nov  9 21:57:44 2025 GMT
        Subject: CN=6907d3d8-521d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:4d:56:34:4b:d4:7d:b6:81:44:aa:6c:29:
                    d9:06:19:27:df:2c:34:bb:3c:c0:33:e5:7a:d4:24:
                    4b:b9:aa:6d:7a:b8:b0:a3:5d:2e:a4:f7:d6:4f:db:
                    1c:1d:68:d8:b0:b2:0a:c2:8e:ce:c6:4b:f2:fd:41:
                    2f:c3:57:4d:cd:9f:5b:3e:1e:a3:18:b5:0a:6c:9c:
                    cc:20:a6:f4:94:78:f3:6e:9a:28:c2:d1:19:75:34:
                    b9:51:41:ca:14:62:fc:1f:39:25:25:01:b7:b4:92:
                    99:00:83:5f:53:2c:a4:d3:ac:ad:24:6d:04:3a:7f:
                    5c:41:58:d0:6f:ca:cd:4c:1f:c2:ff:12:23:61:5c:
                    72:a4:5e:0c:4d:ea:12:7d:df:dd:01:af:ee:15:37:
                    d0:55:43:a3:93:3a:15:b1:ba:b6:16:99:9d:e1:ae:
                    0a:b6:c6:c6:c4:86:46:d2:77:a0:c9:c2:2b:e5:86:
                    9f:43:20:5f:c2:cb:b3:e1:85:00:5d:54:e4:3a:d7:
                    03:67:c2:76:32:51:bb:4e:1a:df:90:3a:4c:b0:f3:
                    5c:f2:1d:26:ee:5a:e5:81:23:b3:54:05:82:09:d0:
                    8a:70:6b:56:86:48:95:9e:25:96:63:0b:e6:ea:37:
                    dd:97:02:5e:90:7f:30:06:db:72:e2:74:f8:a6:78:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DD:B8:B3:0B:E0:A2:2F:F8:D0:F5:CA:A8:7D:21:3C:E7:41:0F:3E
            X509v3 Authority Key Identifier:
                keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         57:7f:1e:94:cf:22:8d:6d:73:6b:d9:cc:15:a7:d1:3c:6c:11:
         1f:f2:62:6c:f4:68:86:8f:b1:12:dc:47:a3:25:c8:fe:c2:63:
         f0:e0:ad:a2:13:4b:7b:8a:b7:0b:cc:b2:0d:22:7e:3e:6a:83:
         87:59:c7:cb:8d:60:12:38:fe:f4:46:e5:2e:11:a5:fe:35:36:
         19:d2:cd:a0:82:39:cc:f7:6f:af:b5:0f:80:6e:01:29:e2:16:
         87:41:c1:f1:16:00:69:03:8b:cf:fb:df:86:e3:55:a9:5e:1c:
         62:92:3d:96:d1:1b:91:8d:25:f9:e4:f9:07:53:ed:27:f5:ea:
         ec:8d:e5:e5:71:fe:a6:4e:66:08:e8:a4:78:ed:0a:27:c2:4d:
         a0:76:95:6b:b5:bc:3a:79:13:5d:34:27:46:e7:fb:d0:3e:fb:
         62:79:4c:74:fc:7a:05:dc:05:20:0b:83:6b:99:74:63:b0:f8:
         16:66:eb:b3:7d:59:94:29:72:38:5f:bc:0f:f6:93:fd:4b:9d:
         19:4c:39:3f:ea:3b:fa:8b:50:73:fe:8e:82:18:51:9a:45:02:
         f9:0b:b1:4b:17:4d:82:58:1c:4c:9a:61:ad:66:f4:67:f7:42:
         55:22:e1:a6:15:f0:72:59:a7:98:cf:13:04:01:24:1f:5d:f4:
         4c:ab:01:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI2QzYxMTAvBgNVBAUTKEQyOUI2NEU2MzQ0NjVBQjQxMzIwNTRCQjdFODNDOUQ1
RjE4MzQ5RjcwHhcNMjUxMTAyMjE1NzQ0WhcNMjUxMTA5MjE1NzQ0WjAYMRYwFAYD
VQQDEw02OTA3ZDNkOC01MjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwfZNVjRL1H22gUSqbCnZBhkn3yw0uzzAM+V61CRLuapteriwo10upPfWT9sc
HWjYsLIKwo7Oxkvy/UEvw1dNzZ9bPh6jGLUKbJzMIKb0lHjzbpoowtEZdTS5UUHK
FGL8HzklJQG3tJKZAINfUyyk06ytJG0EOn9cQVjQb8rNTB/C/xIjYVxypF4MTeoS
fd/dAa/uFTfQVUOjkzoVsbq2Fpmd4a4KtsbGxIZG0negycIr5YafQyBfwsuz4YUA
XVTkOtcDZ8J2MlG7ThrfkDpMsPNc8h0m7lrlgSOzVAWCCdCKcGtWhkiVniWWYwvm
6jfdlwJekH8wBtty4nT4pnhUDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfduLML
4KIv+ND1yqh9ITznQQ8+MB8GA1UdIwQYMBaAFNKbZOY0Rlq0EyBUu36DydXxg0n3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjZDNi81OEU5OUU5NDZG
NzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dyUVRJRlM3Zm9QSjFmR0RT
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBwdGs1alJHV3JRVElGUzdmb1BKMWZHRFNmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjZDNi81OEU5OUU5NDZGNzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dy
UVRJRlM3Zm9QSjFmR0RTZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBXfx6UzyKNbXNr2cwVp9E8bBEf8mJs9GiGj7ES3EejJcj+wmPw4K2i
E0t7ircLzLINIn4+aoOHWcfLjWASOP70RuUuEaX+NTYZ0s2ggjnM92+vtQ+AbgEp
4haHQcHxFgBpA4vP+9+G41WpXhxikj2W0RuRjSX55PkHU+0n9ersjeXlcf6mTmYI
6KR47Qonwk2gdpVrtbw6eRNdNCdG5/vQPvtieUx0/HoF3AUgC4NrmXRjsPgWZuuz
fVmUKXI4X7wP9pP9S50ZTDk/6jv6i1Bz/o6CGFGaRQL5C7FLF02CWBxMmmGtZvRn
90JVIuGmFfByWaeYzxMEASQfXfRMqwF0
-----END CERTIFICATE-----
Generated at Tue Nov  4 16:13:37 2025 by rpki-client