
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
File:                     8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json)
Hash identifier:          XDglSgeOlKrRvIENZpQMJhKk9ikb1BDphKWsWBBt4ck=
Subject key identifier:   E9:BE:97:E8:24:08:C2:DE:C8:85:ED:55:17:C7:17:13:C1:6B:71:30
Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1
Certificate issuer:       /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
Manifest number:          017B
Signing time:             Mon 03 Nov 2025 03:45:02 +0000
Manifest this update:     Mon 03 Nov 2025 03:45:01 +0000
Manifest next update:     Mon 10 Nov 2025 03:45:01 +0000
Files and hashes:         1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: k4zuon34+plvmCdv9/VbJ5lOUW1MLKaL8dWM4UvMJTc=)
                          2: E9CD871CA36911F09537DC54C4F9AE02.roa (hash: 06LRxy/YBwv2lrxUrKbgxV+lgP7QaNp/Mg4b/u0zmQ0=)
                          3: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: C0wDD+AgzZ7rjhppUX9KQGRP55NqDPFQsX30TucXWZw=)
                          4: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: A+eIQ7dJ6b4jdnXFCKHgDz5bYK+SgjdqalthmATouvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl
                          rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:45:00 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1
        Validity
            Not Before: Nov  3 03:45:01 2025 GMT
            Not After : Nov 10 03:45:01 2025 GMT
        Subject: CN=6908253d-0352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:38:a6:75:66:aa:af:06:90:e3:2b:bd:0f:
                    cd:58:43:31:ff:e1:6c:5c:8b:48:ed:4b:51:0b:9c:
                    04:92:ce:ed:46:be:c7:2e:ca:90:ca:c8:28:d2:fa:
                    ba:ef:ae:14:6f:21:8d:d4:ab:d5:57:91:26:df:e7:
                    e4:5e:45:12:a5:7d:aa:c9:e3:41:4e:77:2f:fb:09:
                    cd:b2:af:d8:7b:fb:a7:22:86:24:db:0e:d2:34:a4:
                    9a:2a:b6:73:14:a6:95:85:94:c6:a2:67:f6:d8:8a:
                    35:3a:19:49:af:b6:8c:ab:c4:ac:b4:68:77:3b:de:
                    c8:15:c7:75:9d:f3:66:a6:7c:24:30:44:ab:e0:86:
                    40:db:35:a4:7f:b5:cc:8e:1a:53:81:11:a1:7d:75:
                    6d:55:1e:9f:61:90:81:af:5e:36:17:09:dc:e1:b8:
                    b1:5c:4a:03:b9:5b:19:42:8a:bd:e7:ca:3e:14:22:
                    1c:bb:c5:85:2d:aa:0e:03:85:b7:2a:9e:d2:fb:91:
                    b4:94:a8:89:e5:22:88:fa:e8:e2:db:62:46:40:3c:
                    dc:5b:09:43:92:5a:38:ca:ce:de:c0:5e:56:47:21:
                    55:05:6c:b2:36:3c:45:9f:eb:01:6b:94:67:2e:86:
                    04:1f:33:67:d2:3a:02:ac:78:a4:ab:56:a9:a4:cb:
                    0b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BE:97:E8:24:08:C2:DE:C8:85:ED:55:17:C7:17:13:C1:6B:71:30
            X509v3 Authority Key Identifier:
                keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         40:f8:ac:0e:b9:11:f9:4f:d3:0a:a3:d5:91:6a:6d:4f:5f:7d:
         05:5f:9c:86:2e:64:d4:14:79:32:2c:51:da:69:d3:b9:e2:0a:
         ba:2d:ae:0a:7b:f3:ec:a1:64:39:7f:e7:03:6a:e7:ac:2f:6b:
         75:e4:0e:17:4b:4a:28:59:d2:77:e8:d4:6f:e8:96:6f:0d:bb:
         3a:54:65:3a:e6:da:77:6c:b5:bf:b4:f8:d5:c0:1d:5d:06:39:
         04:39:b4:62:6b:30:8a:62:b0:4b:af:c3:92:28:92:36:95:39:
         53:d7:04:f0:ef:f7:60:0b:e4:59:39:41:c4:42:f6:b8:72:ed:
         d2:a1:e3:02:8d:fe:a7:9e:bc:eb:3d:10:9d:6c:d3:9c:5f:67:
         b7:f0:4d:a5:dc:cd:fc:54:b6:30:78:b2:95:d1:13:10:bd:e3:
         95:4d:ac:29:3f:48:a4:1c:4a:ff:6c:c2:46:45:82:be:fc:58:
         31:cb:b8:e2:90:e9:88:cf:79:33:2e:6e:af:69:4d:95:3d:45:
         89:6d:3a:2b:c1:31:63:6c:d5:a2:4c:68:b1:47:78:38:18:e7:
         4f:6c:ab:c5:05:65:24:97:5c:d6:7e:dd:5b:ee:6d:fb:35:c1:
         e0:e1:ad:db:a2:bd:e6:30:4d:92:26:f8:02:69:a9:c6:ee:b3:
         39:d0:56:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew
QkU3NjQ4RjEwHhcNMjUxMTAzMDM0NTAxWhcNMjUxMTEwMDM0NTAxWjAYMRYwFAYD
VQQDEw02OTA4MjUzZC0wMzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqqQ4pnVmqq8GkOMrvQ/NWEMx/+FsXItI7UtRC5wEks7tRr7HLsqQysgo0vq6
764UbyGN1KvVV5Em3+fkXkUSpX2qyeNBTncv+wnNsq/Ye/unIoYk2w7SNKSaKrZz
FKaVhZTGomf22Io1OhlJr7aMq8SstGh3O97IFcd1nfNmpnwkMESr4IZA2zWkf7XM
jhpTgRGhfXVtVR6fYZCBr142Fwnc4bixXEoDuVsZQoq958o+FCIcu8WFLaoOA4W3
Kp7S+5G0lKiJ5SKI+uji22JGQDzcWwlDklo4ys7ewF5WRyFVBWyyNjxFn+sBa5Rn
LoYEHzNn0joCrHikq1appMsLHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOm+l+gk
CMLeyIXtVRfHFxPBa3EwMB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3
OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00
dDVBaS05V2ZMc29MNTJTUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBA+KwOuRH5T9MKo9WRam1PX30FX5yGLmTUFHkyLFHaadO54gq6La4K
e/PsoWQ5f+cDauesL2t15A4XS0ooWdJ36NRv6JZvDbs6VGU65tp3bLW/tPjVwB1d
BjkEObRiazCKYrBLr8OSKJI2lTlT1wTw7/dgC+RZOUHEQva4cu3SoeMCjf6nnrzr
PRCdbNOcX2e38E2l3M38VLYweLKV0RMQveOVTawpP0ikHEr/bMJGRYK+/Fgxy7ji
kOmIz3kzLm6vaU2VPUWJbTorwTFjbNWiTGixR3g4GOdPbKvFBWUkl1zWft1b7m37
NcHg4a3bor3mME2SJvgCaanG7rM50Fb/
-----END CERTIFICATE-----
Generated at Tue Nov  4 12:39:43 2025 by rpki-client