
$ rpki-client -vvf rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
File:                     bUGUPlFfU_mSYZyH8COTgRJT3mc.mft (raw, json)
Hash identifier:          KrgaUyvldNGbwUhN81UqTJ3lmlDbyh0zt90ZcqHLSVc=
Subject key identifier:   B6:E4:05:F0:DA:4C:2A:85:8B:93:B0:93:4F:28:C8:37:18:0E:CA:17
Authority key identifier: 6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67
Certificate issuer:       /CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
Manifest number:          0161
Signing time:             Mon 03 Nov 2025 04:04:47 +0000
Manifest this update:     Mon 03 Nov 2025 04:04:46 +0000
Manifest next update:     Mon 10 Nov 2025 04:04:46 +0000
Files and hashes:         1: bUGUPlFfU_mSYZyH8COTgRJT3mc.crl (hash: 9UHjEaPw05h4hZ2y4+8cuS1+CwVtmMxIo3vgQ5RIs2I=)
                          2: 038457CEA3A011EEBE44947FC4F9AE02.roa (hash: PgCUtYUopFfJUcc6oCyLffXra/44Q+4sS+exi8w3QBc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl
                          rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:04:45 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915216F, serialNumber=6D41943E515F53F992619C87F02393811253DE67
        Validity
            Not Before: Nov  3 04:04:46 2025 GMT
            Not After : Nov 10 04:04:46 2025 GMT
        Subject: CN=690829de-e376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:81:46:40:42:41:d9:3e:d2:be:f5:ea:a9:39:
                    e4:6c:9f:26:7c:1f:a4:86:fa:7e:c8:7f:d3:d4:10:
                    61:d7:01:a4:fa:3a:34:8f:0c:52:20:9e:56:66:e1:
                    84:8b:ed:5d:9e:5c:b7:3f:16:28:9b:17:44:d3:a7:
                    e0:fb:98:82:78:a6:13:0c:d8:65:78:36:b4:fe:17:
                    22:db:64:6e:df:4f:20:f1:50:64:77:d8:aa:a0:0a:
                    32:59:a1:8a:bb:eb:cb:30:b0:d7:8e:93:71:cf:53:
                    08:d4:7b:52:45:5b:e0:34:0b:23:8c:bc:49:4e:07:
                    a6:2c:1f:4e:a1:c4:f9:fe:e4:13:d3:40:ee:9a:1c:
                    a3:86:ff:3d:34:37:00:16:d4:07:af:ed:58:6a:49:
                    a2:30:a5:c5:9d:5e:41:9e:8f:57:8e:ac:08:0e:46:
                    ef:30:64:4b:b3:30:74:a9:08:13:2e:ab:ff:75:0d:
                    a3:88:d1:7f:0f:6c:3e:92:f3:2b:35:02:6a:79:e3:
                    28:6b:a3:67:a6:4e:0b:87:38:c1:30:60:b2:70:54:
                    54:a9:4b:b6:39:b4:a5:fa:68:2e:e6:ec:e0:aa:f7:
                    8c:f1:a2:9b:8a:76:6c:ca:06:fe:bd:34:f2:d8:7e:
                    d9:55:b6:a8:e0:09:07:6a:4e:d9:2f:00:f2:8b:0e:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E4:05:F0:DA:4C:2A:85:8B:93:B0:93:4F:28:C8:37:18:0E:CA:17
            X509v3 Authority Key Identifier:
                keyid:6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         52:74:f7:74:f7:b7:1b:7e:00:b1:8a:c9:51:34:32:c1:b1:b9:
         80:42:c6:08:3a:10:86:c6:77:f3:67:ef:9d:44:f7:2f:8d:61:
         fd:d2:9f:7d:21:d8:68:b5:e9:4e:e4:c4:e5:e4:ec:83:7a:17:
         5f:e9:b3:c6:c0:a8:7a:2b:e4:ff:fb:bf:21:d5:1b:9e:d0:17:
         a8:39:0e:aa:c7:51:b3:a9:cc:6a:40:31:bd:55:19:36:1d:82:
         fb:0e:f9:65:09:f8:ac:d3:ed:eb:b4:7e:a2:60:e2:1a:93:22:
         c1:99:2a:10:c0:0d:0a:e3:e3:4a:4b:ed:f4:20:3b:31:00:18:
         63:82:ec:70:70:c3:8c:a5:4e:87:cb:64:e3:8d:c6:6a:d9:6c:
         37:8e:59:38:3d:bf:0f:b6:91:d6:31:ee:3b:c0:ed:42:bf:12:
         03:4d:a4:ad:c1:60:8d:db:69:76:5d:1f:02:bf:d0:be:91:5f:
         fe:30:77:6f:3c:56:d1:66:b1:c0:2c:00:2c:ce:47:29:47:2d:
         9e:05:5e:b8:1f:63:6b:92:20:62:73:7f:1f:0f:d0:42:20:03:
         df:fb:ee:c8:c8:ec:38:24:4c:76:15:7f:f6:4d:aa:62:f2:99:
         10:47:3a:2e:1e:f7:48:41:35:05:4a:43:b8:e0:19:9d:6e:df:
         24:d3:ee:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTIxNkYxMTAvBgNVBAUTKDZENDE5NDNFNTE1RjUzRjk5MjYxOUM4N0YwMjM5Mzgx
MTI1M0RFNjcwHhcNMjUxMTAzMDQwNDQ2WhcNMjUxMTEwMDQwNDQ2WjAYMRYwFAYD
VQQDEw02OTA4MjlkZS1lMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5YFGQEJB2T7SvvXqqTnkbJ8mfB+khvp+yH/T1BBh1wGk+jo0jwxSIJ5WZuGE
i+1dnly3PxYomxdE06fg+5iCeKYTDNhleDa0/hci22Ru308g8VBkd9iqoAoyWaGK
u+vLMLDXjpNxz1MI1HtSRVvgNAsjjLxJTgemLB9OocT5/uQT00Dumhyjhv89NDcA
FtQHr+1YakmiMKXFnV5Bno9XjqwIDkbvMGRLszB0qQgTLqv/dQ2jiNF/D2w+kvMr
NQJqeeMoa6Nnpk4LhzjBMGCycFRUqUu2ObSl+mgu5uzgqveM8aKbinZsygb+vTTy
2H7ZVbao4AkHak7ZLwDyiw6YUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbkBfDa
TCqFi5Owk08oyDcYDsoXMB8GA1UdIwQYMBaAFG1BlD5RX1P5kmGch/Ajk4ESU95n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjE2Ri8xMUIyQzgwQUEz
OUUxMUVFOURDNzFDNjBDNEY5QUUwMi9iVUdVUGxGZlVfbVNZWnlIOENPVGdSSlQz
bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JVR1VQbEZmVV9tU1laeUg4Q09UZ1JKVDNtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjE2Ri8xMUIyQzgwQUEzOUUxMUVFOURDNzFDNjBDNEY5QUUwMi9iVUdVUGxGZlVf
bVNZWnlIOENPVGdSSlQzbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSdPd097cbfgCxislRNDLBsbmAQsYIOhCGxnfzZ++dRPcvjWH90p99
IdhotelO5MTl5OyDehdf6bPGwKh6K+T/+78h1Rue0BeoOQ6qx1GzqcxqQDG9VRk2
HYL7DvllCfis0+3rtH6iYOIakyLBmSoQwA0K4+NKS+30IDsxABhjguxwcMOMpU6H
y2TjjcZq2Ww3jlk4Pb8PtpHWMe47wO1CvxIDTaStwWCN22l2XR8Cv9C+kV/+MHdv
PFbRZrHALAAszkcpRy2eBV64H2NrkiBic38fD9BCIAPf++7IyOw4JEx2FX/2Tapi
8pkQRzouHvdIQTUFSkO44Bmdbt8k0+7/
-----END CERTIFICATE-----
Generated at Tue Nov  4 01:03:45 2025 by rpki-client