
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
File:                     mYWbHvAhS7n86OW_FSbzvRHsKAc.mft (raw, json)
Hash identifier:          7EwWsZGwUQYpnUxnvpveXKWWAtT/34mJyJr6GGJb+1Q=
Subject key identifier:   7A:FD:9C:E0:9F:0D:3C:F8:A7:86:47:2B:10:EF:9B:97:34:E2:C1:D7
Authority key identifier: 99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07
Certificate issuer:       /CN=A91BF026/serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807
Certificate serial:       178C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
Manifest number:          2035
Signing time:             Sun 02 Nov 2025 16:34:40 +0000
Manifest this update:     Sun 02 Nov 2025 16:34:40 +0000
Manifest next update:     Sun 09 Nov 2025 16:34:40 +0000
Files and hashes:         1: mYWbHvAhS7n86OW_FSbzvRHsKAc.crl (hash: RO1QudeHIxIbGxJfZz0nV569z77WVLOJzsJd8soldZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl
                          rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 16:34:39 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6028 (0x178c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF026, serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807
        Validity
            Not Before: Nov  2 16:34:40 2025 GMT
            Not After : Nov  9 16:34:40 2025 GMT
        Subject: CN=69078820-023d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:27:06:fb:d2:7a:2f:2e:f2:ec:d2:3f:7e:
                    4e:e7:e8:12:fd:28:81:b2:f0:de:75:c9:87:ab:d8:
                    9a:87:03:17:f2:f7:b0:e9:81:4f:48:5c:93:9d:d8:
                    f3:7e:9c:14:7b:c1:59:32:eb:c1:c9:99:6d:6e:3d:
                    15:a4:09:fb:89:06:f5:0c:ff:71:67:83:75:e9:a3:
                    d2:0d:aa:06:b0:3d:61:c0:a0:5e:7d:24:17:42:d1:
                    46:7b:49:98:ae:79:97:8d:a8:f2:f9:98:f4:fa:d6:
                    ba:ca:1b:4d:0b:49:3c:bc:e4:bf:73:5f:35:9b:4c:
                    8a:f8:86:09:7a:79:5e:96:4c:cb:b0:f2:9e:9c:c4:
                    53:c1:30:25:8d:7c:b5:5e:43:c0:8d:c2:c1:78:dc:
                    af:4a:01:42:4c:ca:07:0a:c7:98:8a:e1:af:29:cd:
                    bc:4a:3d:6a:0f:bb:c5:2d:8c:35:24:0a:0b:54:87:
                    6c:32:84:6c:12:59:da:ca:f5:48:b1:5e:80:a6:2a:
                    14:00:38:1f:55:7b:18:8e:70:e5:64:e2:51:52:b4:
                    8e:8f:7b:db:04:a2:ae:1b:14:09:94:d2:44:b5:63:
                    2e:ad:ee:c4:70:7b:7d:f1:de:d9:32:db:6f:4c:f2:
                    73:40:b2:b4:7a:42:35:6f:e0:a1:64:ab:07:98:08:
                    21:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FD:9C:E0:9F:0D:3C:F8:A7:86:47:2B:10:EF:9B:97:34:E2:C1:D7
            X509v3 Authority Key Identifier:
                keyid:99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         0f:b4:b3:7d:c2:08:62:15:50:a6:93:db:62:95:7a:52:f3:d7:
         99:83:9a:21:ae:10:75:83:9f:cd:af:f7:a4:2e:fc:ee:44:d8:
         3c:de:26:3c:80:d8:f8:ce:08:6b:18:ba:88:e4:77:3a:f4:0c:
         f3:3a:69:31:72:c6:98:02:f3:f4:ca:5e:44:6f:ec:92:7c:93:
         2c:02:cf:ad:60:f9:30:b4:31:66:49:f7:e8:88:7b:91:eb:6f:
         fc:d4:63:33:41:ba:74:bb:22:b2:6b:88:1b:bc:32:34:bb:7c:
         f5:ce:e1:ae:7d:11:17:74:f7:a9:78:78:fc:62:65:1c:36:fd:
         69:c3:40:48:01:1e:31:0a:88:2d:72:d9:83:4c:dd:69:c7:a5:
         2d:24:74:93:89:70:79:d1:0e:65:b2:cf:32:3d:d5:99:92:bb:
         81:54:09:b4:a5:89:33:16:4f:b2:77:f5:1f:d3:42:32:f9:53:
         5f:56:55:ba:19:3c:ed:ee:f2:16:50:53:42:1b:38:95:bb:f9:
         26:27:65:18:26:1d:a2:d8:ab:03:5d:e8:42:7a:b1:36:bb:06:
         7f:f9:bd:70:56:ca:3e:a1:54:fb:11:f6:a2:8f:b3:6a:38:1d:
         6d:2a:75:07:cc:b0:97:0d:a7:f6:a3:76:9a:d8:d7:d7:b1:d1:
         89:49:59:30
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICF4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYwMjYxMTAvBgNVBAUTKDk5ODU5QjFFRjAyMTRCQjlGQ0U4RTVCRjE1MjZGM0JE
MTFFQzI4MDcwHhcNMjUxMTAyMTYzNDQwWhcNMjUxMTA5MTYzNDQwWjAYMRYwFAYD
VQQDEw02OTA3ODgyMC0wMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu20nBvvSei8u8uzSP35O5+gS/SiBsvDedcmHq9iahwMX8vew6YFPSFyTndjz
fpwUe8FZMuvByZltbj0VpAn7iQb1DP9xZ4N16aPSDaoGsD1hwKBefSQXQtFGe0mY
rnmXjajy+Zj0+ta6yhtNC0k8vOS/c181m0yK+IYJenlelkzLsPKenMRTwTAljXy1
XkPAjcLBeNyvSgFCTMoHCseYiuGvKc28Sj1qD7vFLYw1JAoLVIdsMoRsElnayvVI
sV6ApioUADgfVXsYjnDlZOJRUrSOj3vbBKKuGxQJlNJEtWMure7EcHt98d7ZMttv
TPJzQLK0ekI1b+ChZKsHmAghlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHr9nOCf
DTz4p4ZHKxDvm5c04sHXMB8GA1UdIwQYMBaAFJmFmx7wIUu5/OjlvxUm870R7CgH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAyNi8wMzI4QTg1Q0RE
RTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9tWVdiSHZBaFM3bjg2T1dfRlNienZSSHNL
QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21ZV2JIdkFoUzduODZPV19GU2J6dlJIc0tBYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjAyNi8wMzI4QTg1Q0RERTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9tWVdiSHZBaFM3
bjg2T1dfRlNienZSSHNLQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPtLN9wghiFVCmk9tilXpS89eZg5ohrhB1g5/Nr/ekLvzuRNg83iY8
gNj4zghrGLqI5Hc69AzzOmkxcsaYAvP0yl5Eb+ySfJMsAs+tYPkwtDFmSffoiHuR
62/81GMzQbp0uyKya4gbvDI0u3z1zuGufREXdPepeHj8YmUcNv1pw0BIAR4xCogt
ctmDTN1px6UtJHSTiXB50Q5lss8yPdWZkruBVAm0pYkzFk+yd/Uf00Iy+VNfVlW6
GTzt7vIWUFNCGziVu/kmJ2UYJh2i2KsDXehCerE2uwZ/+b1wVso+oVT7Efaij7Nq
OB1tKnUHzLCXDaf2o3aa2NfXsdGJSVkw
-----END CERTIFICATE-----
Generated at Tue Nov  4 01:03:49 2025 by rpki-client