
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
File:                     RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft (raw, json)
Hash identifier:          cQ++vu3jmFPEiNJzmYSjlbRRcUsTS6JveY3QvlelsQQ=
Subject key identifier:   FF:9C:6A:B9:16:F8:1E:31:65:D5:26:A5:17:62:E4:19:76:BB:59:CA
Authority key identifier: 46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B
Certificate issuer:       /CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
Certificate serial:       0585
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
Manifest number:          057A
Signing time:             Sun 02 Nov 2025 23:16:52 +0000
Manifest this update:     Sun 02 Nov 2025 23:16:51 +0000
Manifest next update:     Sun 09 Nov 2025 23:16:51 +0000
Files and hashes:         1: RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl (hash: gQujuHxOCuHJSv4y9leKdmqMU6/qvm7iSBYiOLyH/wE=)
                          2: 0006ED8263DD11EC9A50031BC4F9AE02.roa (hash: PgPrbR0fCfUw8BhUQ7eR3PB9T8RP6QKcZtXwflcH4Ik=)
                          3: D249CE5EFE8911EBA7BEB564C4F9AE02.roa (hash: po2KMn6zY0kiDIXMsK+Ya6gGcbuzyqGCNmpP7nPOhRQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:16:51 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413 (0x585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982FB, serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
        Validity
            Not Before: Nov  2 23:16:51 2025 GMT
            Not After : Nov  9 23:16:51 2025 GMT
        Subject: CN=6907e663-a6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:d2:60:ba:d1:7e:24:d0:aa:61:31:ab:e5:
                    38:a6:a5:ad:92:81:30:99:b8:97:05:5c:6e:e0:6b:
                    3c:ed:b9:25:8e:71:52:d1:9a:51:b3:ef:f0:d9:6e:
                    34:58:d0:90:86:02:bd:16:0e:92:14:75:9d:80:e6:
                    06:b6:92:84:66:5e:a4:05:83:00:e0:8b:6a:55:6f:
                    a6:48:06:b6:0f:43:5b:73:5b:bd:07:a5:fd:d3:08:
                    38:23:87:aa:2b:82:c6:02:0b:40:0e:eb:ff:b1:01:
                    73:ed:36:48:79:03:4a:84:28:13:1b:89:2c:bc:9d:
                    e2:79:00:76:d9:cf:dd:5f:82:56:d0:f1:b5:39:0e:
                    d2:96:b9:42:c0:20:29:87:b9:76:20:9e:b7:99:09:
                    9a:55:ac:b0:b8:95:61:6f:8a:86:13:0a:db:50:52:
                    4c:df:12:e7:56:d8:6c:bd:46:62:a3:8f:2b:e5:83:
                    c1:b1:02:8f:e9:cd:e1:a5:7a:0d:09:9a:89:29:25:
                    2b:ba:d5:e3:49:79:c4:a1:46:df:30:98:1c:9f:bf:
                    3d:77:53:64:c1:d1:74:18:08:ce:52:26:19:fa:b0:
                    9c:53:ce:3b:b7:d4:a9:a7:7c:e8:5b:25:7f:b9:21:
                    5b:d6:af:98:64:73:8d:25:55:e9:49:70:58:a2:b6:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9C:6A:B9:16:F8:1E:31:65:D5:26:A5:17:62:E4:19:76:BB:59:CA
            X509v3 Authority Key Identifier:
                keyid:46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         56:e8:14:d2:89:17:0b:6a:d7:9b:2c:c4:63:fd:81:95:fe:cc:
         20:64:1b:b5:72:96:35:c6:d2:89:5d:c7:0d:69:33:68:4a:29:
         8f:d9:93:a3:37:2e:a1:5b:c3:34:06:7f:18:28:53:d4:d3:d3:
         58:f1:6d:ea:0b:65:2a:eb:ce:79:2f:66:60:24:38:37:d2:60:
         d7:51:bf:d7:b2:12:ab:1a:cc:06:65:6e:80:d0:07:83:5f:3d:
         72:c6:da:e6:f1:8d:f3:da:15:fa:8f:65:b1:cc:d1:24:37:75:
         ef:0d:cd:63:c5:f2:0a:e6:06:79:86:7a:fa:d2:02:61:19:61:
         19:a8:82:6b:b7:ad:85:03:1d:76:d3:64:41:eb:83:12:31:02:
         10:e5:cd:a4:09:e2:d6:ab:97:a7:10:b3:69:f0:4e:9a:a9:28:
         fd:aa:af:97:4c:59:b1:79:5b:0a:11:66:e0:01:a3:c9:1d:32:
         3c:b0:68:35:79:fc:d7:f3:84:02:b9:14:27:84:59:36:79:94:
         bd:4b:aa:84:ce:70:b1:7c:74:99:be:27:56:22:5e:c4:71:ff:
         fe:92:ca:06:7d:59:56:c2:b2:50:a9:82:5a:6b:51:72:80:b6:
         7f:fc:c7:78:23:78:98:21:8d:a9:b4:20:69:17:75:b5:65:43:
         07:09:46:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgyRkIxMTAvBgNVBAUTKDQ2NDlCMjQ5RTQyNkMyQjhGQUFGRjYyRjI3OTBGMkU2
N0IwMEZDNUIwHhcNMjUxMTAyMjMxNjUxWhcNMjUxMTA5MjMxNjUxWjAYMRYwFAYD
VQQDEw02OTA3ZTY2My1hNmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsQfSYLrRfiTQqmExq+U4pqWtkoEwmbiXBVxu4Gs87bkljnFS0ZpRs+/w2W40
WNCQhgK9Fg6SFHWdgOYGtpKEZl6kBYMA4ItqVW+mSAa2D0Nbc1u9B6X90wg4I4eq
K4LGAgtADuv/sQFz7TZIeQNKhCgTG4ksvJ3ieQB22c/dX4JW0PG1OQ7SlrlCwCAp
h7l2IJ63mQmaVaywuJVhb4qGEwrbUFJM3xLnVthsvUZio48r5YPBsQKP6c3hpXoN
CZqJKSUrutXjSXnEoUbfMJgcn789d1NkwdF0GAjOUiYZ+rCcU847t9Spp3zoWyV/
uSFb1q+YZHONJVXpSXBYorYbdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+carkW
+B4xZdUmpRdi5Bl2u1nKMB8GA1UdIwQYMBaAFEZJsknkJsK4+q/2LyeQ8uZ7APxb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJGQi85OTRENkRBNkZF
ODcxMUVCQjlGQTcyNjNDNEY5QUUwMi9Sa215U2VRbXdyajZyX1l2SjVEeTVuc0Ff
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JrbXlTZVFtd3JqNnJfWXZKNUR5NW5zQV9Gcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODJGQi85OTRENkRBNkZFODcxMUVCQjlGQTcyNjNDNEY5QUUwMi9Sa215U2VRbXdy
ajZyX1l2SjVEeTVuc0FfRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBW6BTSiRcLatebLMRj/YGV/swgZBu1cpY1xtKJXccNaTNoSimP2ZOj
Ny6hW8M0Bn8YKFPU09NY8W3qC2Uq6855L2ZgJDg30mDXUb/XshKrGswGZW6A0AeD
Xz1yxtrm8Y3z2hX6j2WxzNEkN3XvDc1jxfIK5gZ5hnr60gJhGWEZqIJrt62FAx12
02RB64MSMQIQ5c2kCeLWq5enELNp8E6aqSj9qq+XTFmxeVsKEWbgAaPJHTI8sGg1
efzX84QCuRQnhFk2eZS9S6qEznCxfHSZvidWIl7Ecf/+ksoGfVlWwrJQqYJaa1Fy
gLZ//Md4I3iYIY2ptCBpF3W1ZUMHCUb8
-----END CERTIFICATE-----
Generated at Tue Nov  4 01:05:58 2025 by rpki-client