
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft
File:                     wrgcmpNbsrM71p-3mzTuMmc5nbY.mft (raw, json)
Hash identifier:          hNVJdIEFtfqUdGZRYcHdcfE/Z6eWpFJJ1bXq6su6zp8=
Subject key identifier:   B5:AC:A3:0D:F5:A0:9C:1C:76:4C:D8:67:17:F2:C8:4D:0B:9D:BC:3B
Authority key identifier: C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6
Certificate issuer:       /CN=A9180882/serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6
Certificate serial:       01FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft
Manifest number:          01F7
Signing time:             Mon 03 Nov 2025 02:26:38 +0000
Manifest this update:     Mon 03 Nov 2025 02:26:37 +0000
Manifest next update:     Mon 10 Nov 2025 02:26:37 +0000
Files and hashes:         1: wrgcmpNbsrM71p-3mzTuMmc5nbY.crl (hash: zgIG5RgHJot5XhFD4mYe6KdIW2RY84+HSrimewC+iss=)
                          2: EAD89080BA8B11EDB9005884C4F9AE02.roa (hash: cK40QtT2CNNImNuy8pJFpePuMkD3LPBAr2rQnfOdgKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl
                          rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:26:37 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180882, serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6
        Validity
            Not Before: Nov  3 02:26:37 2025 GMT
            Not After : Nov 10 02:26:37 2025 GMT
        Subject: CN=690812de-9e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:9b:70:64:7e:9d:3f:0c:de:2c:07:f3:99:
                    72:68:04:d5:57:9f:fa:02:a2:3f:c2:a3:07:c1:d0:
                    74:e3:1d:34:7d:1a:96:aa:d2:5c:3f:2b:e9:f7:0c:
                    1b:8c:3c:5e:8c:c6:27:6c:7a:3f:d8:05:6c:3f:4a:
                    f6:8c:01:ab:53:90:4d:0d:e2:b4:f7:45:aa:87:1a:
                    75:6b:b0:c5:02:d1:91:12:46:a1:e3:2a:67:95:25:
                    54:80:18:11:51:9c:91:cf:6b:fc:6e:c8:82:b4:7d:
                    32:7e:df:3d:6d:6f:ff:ba:e9:04:ce:77:b0:65:7e:
                    cc:21:75:f7:2a:dc:f5:1a:59:34:2e:ff:e4:f6:32:
                    33:cb:ba:a5:f4:21:97:84:5a:fe:c4:95:de:d8:e8:
                    52:3c:32:2a:4c:19:71:d2:ab:c0:f7:00:9c:5a:8a:
                    61:8f:d0:28:0e:db:03:f5:b5:38:4e:ef:f4:37:2d:
                    6b:2c:7d:f0:34:16:31:5c:83:bd:a7:e2:45:27:bf:
                    35:b6:b2:a6:12:02:2e:93:fb:c3:f2:bd:f9:e9:fe:
                    e0:03:5d:3e:2b:ec:a0:a8:0f:67:fd:9a:95:84:03:
                    34:29:8e:a3:34:00:0b:2a:d7:4f:3a:04:fc:1b:12:
                    a3:c1:bb:bf:91:2a:f3:9b:a9:02:7c:73:33:d4:db:
                    66:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AC:A3:0D:F5:A0:9C:1C:76:4C:D8:67:17:F2:C8:4D:0B:9D:BC:3B
            X509v3 Authority Key Identifier:
                keyid:C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         05:e6:2b:6b:b7:67:bc:fa:5f:0b:8b:b3:81:c3:77:18:f9:3b:
         81:59:de:4b:2f:98:14:b2:60:42:49:47:af:ad:98:35:cf:a3:
         07:f8:b7:7b:65:53:45:96:75:e6:c9:72:f8:c7:ac:5a:99:6d:
         4d:ff:e1:5a:03:7e:30:49:47:a6:28:51:b8:8c:e1:b7:c3:8f:
         b2:2b:d2:00:ab:27:f6:dc:98:f2:e5:cb:d3:f8:6c:c6:66:e8:
         46:ff:5a:a9:79:85:a4:6c:c6:b2:14:21:90:08:9b:d3:fb:81:
         c3:07:b4:f4:09:df:b4:77:76:73:ff:24:fa:b5:5f:9a:a9:45:
         27:d1:d5:c6:82:26:f1:b1:bd:4f:76:84:61:e7:88:a5:ce:89:
         75:bc:5e:b0:fe:d8:d9:f6:5e:48:a9:03:be:40:61:bd:a6:00:
         42:69:f2:f8:67:26:42:61:2b:f5:b1:13:5a:39:09:33:8a:85:
         e8:5b:2a:2b:d3:c4:2e:cd:f7:01:e9:86:ea:85:17:72:dc:1b:
         f3:1f:8d:bf:8a:24:d8:38:b2:4e:5e:55:bd:e7:51:5a:7a:e7:
         2b:06:7e:5c:70:41:22:c2:21:b3:d0:db:c4:e1:ac:47:80:c0:
         e6:f5:1d:30:ff:44:db:96:c9:77:ff:a0:ae:89:43:24:eb:0f:
         4c:6e:2b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 07:21:02 2025 by rpki-client