
$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
File:                     Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json)
Hash identifier:          G5l4I/qW42M1UX7yybKdH0A8tOSHum5T2mMUmXNDI48=
Subject key identifier:   DE:63:62:B0:C8:D2:BA:67:39:BB:84:30:D3:59:B7:88:71:C4:44:D5
Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7
Certificate issuer:       /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
Certificate serial:       0850
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
Manifest number:          084A
Signing time:             Sun 02 Nov 2025 20:40:55 +0000
Manifest this update:     Sun 02 Nov 2025 20:40:54 +0000
Manifest next update:     Sun 09 Nov 2025 20:40:54 +0000
Files and hashes:         1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: D25yKsHnGTso8YGkjM9NrtXr9K7WWHpE7NLq+fZTgqY=)
                          2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: letKkI3J7GQM6enE4QxR/GGV62ebNvR+dZGy0HTaYqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl
                          rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:40:54 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2128 (0x850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91753AE, serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
        Validity
            Not Before: Nov  2 20:40:54 2025 GMT
            Not After : Nov  9 20:40:54 2025 GMT
        Subject: CN=6907c1d6-7f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:70:d8:5c:c6:ec:15:9e:d7:9c:df:8d:7c:
                    f8:00:18:08:92:bb:7c:fa:de:20:63:8d:1a:0e:c9:
                    81:b3:84:3b:ff:08:5a:4c:92:a8:99:ab:57:b9:92:
                    33:22:2b:97:fb:38:42:ff:aa:a7:60:08:71:b3:34:
                    0f:b6:e6:88:56:5d:65:a1:46:ee:a7:4d:96:68:cd:
                    39:b0:f9:f4:14:4f:bf:ec:a0:59:bc:53:f8:26:57:
                    cf:f4:ec:4b:49:74:bf:39:51:d1:7c:3b:f5:b1:bd:
                    4f:d8:96:55:04:0c:35:af:9c:76:25:43:b2:11:fc:
                    2c:e9:71:4a:ab:6e:d3:5e:e3:a5:d6:f8:21:d6:f8:
                    69:15:2f:4d:62:e9:1d:e1:3f:e8:e4:97:63:f6:3c:
                    74:8d:0b:1b:b5:32:51:0a:6f:d0:af:8f:56:96:98:
                    98:59:eb:21:76:81:24:52:de:8d:d7:85:ea:d1:eb:
                    d1:b0:c0:66:0f:76:98:a8:8c:17:a6:61:a2:e0:75:
                    bf:92:0e:4c:97:c6:f6:84:40:9a:49:28:7f:f9:3b:
                    e1:82:82:4e:5c:d4:8c:72:1f:1c:5d:96:f9:78:61:
                    89:98:c9:b4:f6:97:d2:d5:f8:de:77:75:b0:6a:3f:
                    42:64:96:f5:fa:59:4e:b4:ac:58:03:3c:d7:8a:2a:
                    b7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:63:62:B0:C8:D2:BA:67:39:BB:84:30:D3:59:B7:88:71:C4:44:D5
            X509v3 Authority Key Identifier:
                keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         a2:b9:de:eb:a6:df:c2:85:85:5d:f5:d7:7e:c0:f1:0f:15:1f:
         b0:83:6e:d5:f7:d8:2a:66:54:79:e2:4c:60:d3:53:73:66:dc:
         7c:55:90:83:c1:87:8e:93:15:e4:8d:65:07:cd:3c:00:d6:7a:
         35:d7:72:4e:3f:65:e8:d4:54:99:0f:62:33:f1:58:dc:5b:e3:
         ce:bb:50:19:a8:05:39:33:a1:9a:99:34:51:4d:46:1a:33:66:
         a5:3a:c3:02:c9:73:e2:4a:e9:46:58:71:2b:4d:4f:34:5f:03:
         15:40:a4:af:99:58:f7:68:8e:e5:65:05:f6:fc:3f:4b:74:14:
         e2:9b:a0:0b:59:39:13:cf:32:8f:ec:f1:f2:a5:cc:2a:20:cb:
         34:fb:ab:f2:cd:ab:db:c2:25:5f:b5:eb:ef:c0:f5:aa:61:68:
         42:7b:f3:7e:ab:68:3e:02:6e:8e:07:69:70:d8:00:7f:03:1d:
         bb:96:01:cc:99:7d:7f:e6:e0:a6:23:a5:8f:b3:38:65:db:84:
         7b:ff:69:59:cf:7c:91:f0:14:77:e5:6b:95:83:7a:83:6d:2b:
         77:4e:16:bc:c2:fa:77:83:b6:f4:b5:06:5d:17:65:86:ed:ed:
         69:a4:ba:88:9e:2c:e6:f8:c7:06:e4:04:9d:37:1e:9a:89:d7:
         99:0c:b9:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUzQUUxMTAvBgNVBAUTKDE5QkU1QkU2MzU1NUYxMUI3MzQxREM0RTFDQkM5RjQ0
QzlFREEwRjcwHhcNMjUxMTAyMjA0MDU0WhcNMjUxMTA5MjA0MDU0WjAYMRYwFAYD
VQQDEw02OTA3YzFkNi03ZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqNxw2FzG7BWe15zfjXz4ABgIkrt8+t4gY40aDsmBs4Q7/whaTJKomatXuZIz
IiuX+zhC/6qnYAhxszQPtuaIVl1loUbup02WaM05sPn0FE+/7KBZvFP4JlfP9OxL
SXS/OVHRfDv1sb1P2JZVBAw1r5x2JUOyEfws6XFKq27TXuOl1vgh1vhpFS9NYukd
4T/o5Jdj9jx0jQsbtTJRCm/Qr49WlpiYWeshdoEkUt6N14Xq0evRsMBmD3aYqIwX
pmGi4HW/kg5Ml8b2hECaSSh/+TvhgoJOXNSMch8cXZb5eGGJmMm09pfS1fjed3Ww
aj9CZJb1+llOtKxYAzzXiiq3JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5jYrDI
0rpnObuEMNNZt4hxxETVMB8GA1UdIwQYMBaAFBm+W+Y1VfEbc0HcThy8n0TJ7aD3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTNBRS9GMzI5OThCQ0Ux
RTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhSdHpRZHhPSEx5ZlJNbnRv
UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0diNWI1alZWOFJ0elFkeE9ITHlmUk1udG9QYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTNBRS9GMzI5OThCQ0UxRTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhS
dHpRZHhPSEx5ZlJNbnRvUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCiud7rpt/ChYVd9dd+wPEPFR+wg27V99gqZlR54kxg01NzZtx8VZCD
wYeOkxXkjWUHzTwA1no113JOP2Xo1FSZD2Iz8VjcW+POu1AZqAU5M6GamTRRTUYa
M2alOsMCyXPiSulGWHErTU80XwMVQKSvmVj3aI7lZQX2/D9LdBTim6ALWTkTzzKP
7PHypcwqIMs0+6vyzavbwiVftevvwPWqYWhCe/N+q2g+Am6OB2lw2AB/Ax27lgHM
mX1/5uCmI6WPszhl24R7/2lZz3yR8BR35WuVg3qDbSt3Tha8wvp3g7b0tQZdF2WG
7e1ppLqInizm+McG5ASdNx6aideZDLmA
-----END CERTIFICATE-----
Generated at Tue Nov  4 01:10:12 2025 by rpki-client