
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
File:                     uQQiVZtYxNqonyJNSccf9E-byjQ.mft (raw, json)
Hash identifier:          RLJR49+SGabL2pIIcAWDlnbgs8ODwasHWmm1umVs4I4=
Subject key identifier:   0F:63:F5:FF:45:8F:1C:2B:CC:A1:FA:24:A2:01:4F:6D:52:9C:E5:16
Authority key identifier: B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34
Certificate issuer:       /CN=A91EA723/serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34
Certificate serial:       0216
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
Manifest number:          0209
Signing time:             Mon 03 Nov 2025 02:24:55 +0000
Manifest this update:     Mon 03 Nov 2025 02:24:54 +0000
Manifest next update:     Mon 10 Nov 2025 02:24:54 +0000
Files and hashes:         1: uQQiVZtYxNqonyJNSccf9E-byjQ.crl (hash: bU9mzkWMCSzzR1aAI/zc+RSxjMclnOmAegE7oC96TbA=)
                          2: 4868355806A611F08F878981C4F9AE02.roa (hash: CY2/EJImr1t3NibBfSgu4VzBiSPC1MYnf7DadJvamq4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:24:54 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA723, serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34
        Validity
            Not Before: Nov  3 02:24:54 2025 GMT
            Not After : Nov 10 02:24:54 2025 GMT
        Subject: CN=69081276-a70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b4:9b:fa:41:10:8e:54:0d:df:ac:34:ff:bd:
                    1e:d9:51:84:ee:e1:27:2e:e8:b0:67:5e:ec:e4:74:
                    29:00:bf:ad:8e:55:c8:60:dc:09:a2:33:a0:98:f3:
                    02:91:a3:9d:a8:04:04:04:73:38:b6:cc:5c:6b:19:
                    4c:82:29:f2:fd:96:8d:ea:a1:82:43:c5:74:44:61:
                    88:9c:4c:56:bb:6e:69:f3:e6:17:53:b7:8c:da:a4:
                    15:8f:f7:3b:4f:bb:d6:46:01:0f:5c:14:37:c2:c2:
                    17:c0:5e:63:a7:cb:42:e5:cc:9b:8c:83:6c:a5:5b:
                    03:63:1d:e1:3b:19:b0:11:65:fb:80:48:3e:a4:82:
                    a2:9d:a0:3a:c2:56:b5:ed:9a:7b:37:9f:4c:40:c5:
                    c9:93:04:a7:2f:b8:c7:0c:99:ae:ad:1d:4f:13:fa:
                    1f:86:7d:5d:83:ec:b9:33:98:5e:fd:14:3a:a8:d1:
                    7c:58:2c:c7:27:36:2d:30:8a:d9:54:0d:8a:39:69:
                    ce:86:88:ea:8f:8c:3e:bd:55:f4:2a:48:9d:02:41:
                    49:80:17:55:14:32:cc:99:4e:cf:70:ea:83:51:aa:
                    64:cb:05:0d:2e:92:7f:e6:ff:5e:ae:21:45:49:8c:
                    f8:86:8a:7d:af:59:ff:af:76:bd:9b:35:11:53:f1:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:63:F5:FF:45:8F:1C:2B:CC:A1:FA:24:A2:01:4F:6D:52:9C:E5:16
            X509v3 Authority Key Identifier:
                keyid:B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         78:e1:d4:de:9a:53:9e:28:d2:50:eb:bf:7b:77:5b:42:82:f2:
         31:da:8a:7e:37:f2:08:3e:aa:f7:b5:bb:eb:4c:95:9b:aa:9c:
         59:84:e4:b8:27:bb:44:10:e5:c6:cd:7e:a8:5d:e8:27:71:f3:
         71:14:19:69:39:ea:2b:dd:c2:b7:a6:7c:c3:73:ec:d0:7f:c7:
         da:78:ec:bb:16:1a:a5:31:11:04:b9:f9:a9:92:21:b0:f8:e7:
         b9:c7:f5:dd:56:fb:c1:26:f3:82:11:1e:27:07:bb:92:8f:c2:
         40:6f:84:50:4b:ff:e7:6a:4b:52:46:a9:d0:da:e3:51:ae:47:
         0e:66:73:72:7e:31:3a:56:fa:84:2f:a1:54:8c:d9:87:6c:96:
         4d:65:81:50:fd:a4:ef:cd:f0:b3:fe:f1:73:61:a4:c6:10:97:
         cb:f5:2d:21:08:ea:00:93:93:d0:48:35:dd:1e:38:1a:0a:5e:
         dd:8c:e2:a0:34:f0:76:76:e8:91:bd:71:e2:9e:fc:39:3e:2b:
         71:c4:75:23:e2:75:a7:f8:3c:1b:e6:15:4c:45:dd:b6:15:92:
         ec:72:8c:24:e5:48:da:2e:92:51:ac:ee:02:72:81:b8:fd:23:
         4f:5f:e2:1d:53:28:18:8d:b5:b7:7b:63:73:14:95:f8:a1:6a:
         d0:65:95:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE3MjMxMTAvBgNVBAUTKEI5MDQyMjU1OUI1OEM0REFBODlGMjI0RDQ5QzcxRkY0
NEY5QkNBMzQwHhcNMjUxMTAzMDIyNDU0WhcNMjUxMTEwMDIyNDU0WjAYMRYwFAYD
VQQDEw02OTA4MTI3Ni1hNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq7Sb+kEQjlQN36w0/70e2VGE7uEnLuiwZ17s5HQpAL+tjlXIYNwJojOgmPMC
kaOdqAQEBHM4tsxcaxlMginy/ZaN6qGCQ8V0RGGInExWu25p8+YXU7eM2qQVj/c7
T7vWRgEPXBQ3wsIXwF5jp8tC5cybjINspVsDYx3hOxmwEWX7gEg+pIKinaA6wla1
7Zp7N59MQMXJkwSnL7jHDJmurR1PE/ofhn1dg+y5M5he/RQ6qNF8WCzHJzYtMIrZ
VA2KOWnOhojqj4w+vVX0KkidAkFJgBdVFDLMmU7PcOqDUapkywUNLpJ/5v9eriFF
SYz4hop9r1n/r3a9mzURU/FBIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9j9f9F
jxwrzKH6JKIBT21SnOUWMB8GA1UdIwQYMBaAFLkEIlWbWMTaqJ8iTUnHH/RPm8o0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTcyMy8yQ0Q3RjVDOEIy
N0QxMUVEODg1NkZBODFDNEY5QUUwMi91UVFpVlp0WXhOcW9ueUpOU2NjZjlFLWJ5
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VRUWlWWnRZeE5xb255Sk5TY2NmOUUtYnlqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTcyMy8yQ0Q3RjVDOEIyN0QxMUVEODg1NkZBODFDNEY5QUUwMi91UVFpVlp0WXhO
cW9ueUpOU2NjZjlFLWJ5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB44dTemlOeKNJQ6797d1tCgvIx2op+N/IIPqr3tbvrTJWbqpxZhOS4
J7tEEOXGzX6oXegncfNxFBlpOeor3cK3pnzDc+zQf8faeOy7FhqlMREEufmpkiGw
+Oe5x/XdVvvBJvOCER4nB7uSj8JAb4RQS//naktSRqnQ2uNRrkcOZnNyfjE6VvqE
L6FUjNmHbJZNZYFQ/aTvzfCz/vFzYaTGEJfL9S0hCOoAk5PQSDXdHjgaCl7djOKg
NPB2duiRvXHinvw5PitxxHUj4nWn+Dwb5hVMRd22FZLscowk5UjaLpJRrO4CcoG4
/SNPX+IdUygYjbW3e2NzFJX4oWrQZZVo
-----END CERTIFICATE-----
Generated at Tue Nov  4 12:36:18 2025 by rpki-client