
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
File:                     wngM_VepmGmT2_bA1r3u92tFGXI.mft (raw, json)
Hash identifier:          ZnoXsxYPsT0pvjTk8WpiakDHc5yciHq00CBYbKLuwgE=
Subject key identifier:   95:01:E7:B8:B2:68:81:81:8B:98:C9:37:78:14:A8:7C:56:17:72:98
Authority key identifier: C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72
Certificate issuer:       /CN=A91E007B/serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972
Certificate serial:       0AAC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
Manifest number:          0AA2
Signing time:             Sun 02 Nov 2025 19:30:10 +0000
Manifest this update:     Sun 02 Nov 2025 19:30:10 +0000
Manifest next update:     Sun 09 Nov 2025 19:30:10 +0000
Files and hashes:         1: wngM_VepmGmT2_bA1r3u92tFGXI.crl (hash: oH0Uv/cYzO55cIjwkBBFbW7zS0jtyM6CEi5PIhVcWx0=)
                          2: 828FBA521E3511EB800DB148C4F9AE02.roa (hash: oGaPAiCIGxwvx1m0yhdtvzk/Yk0mtLu3eaCey59T6YI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl
                          rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:30:09 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2732 (0xaac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E007B, serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972
        Validity
            Not Before: Nov  2 19:30:10 2025 GMT
            Not After : Nov  9 19:30:10 2025 GMT
        Subject: CN=6907b142-2b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e9:6d:3f:1a:92:5e:f3:46:33:13:1e:0e:c4:
                    a2:15:59:9b:62:ed:4c:0f:70:48:4d:e3:0d:a3:3f:
                    4f:19:9e:1e:49:0b:b3:ea:6f:4c:b3:13:d4:94:ff:
                    28:e1:e9:c9:eb:74:ab:e1:d4:a6:19:09:2e:65:e0:
                    2a:6f:46:4b:6f:ff:9f:cd:33:a5:84:48:13:bf:a6:
                    07:be:3d:18:a1:9a:3d:b5:9a:38:4e:19:ed:58:8a:
                    54:26:40:0d:45:61:fb:82:fc:36:a7:d1:54:c4:5f:
                    9f:9d:c0:d6:3a:6b:60:cb:b3:45:9a:a8:a3:6f:fd:
                    79:48:87:f7:83:44:46:c9:0e:69:61:32:bd:2c:c8:
                    83:6a:7a:03:3b:10:a6:23:d3:cd:5b:6d:13:7c:b4:
                    9c:a9:c2:09:51:19:35:1a:41:91:32:14:3d:79:56:
                    0d:f7:49:1d:69:32:f6:89:88:34:23:09:d9:9e:a8:
                    b9:14:d4:05:57:c1:e6:de:cb:a7:dd:de:29:e3:a0:
                    13:f3:b4:b8:1e:7d:00:74:36:5e:af:93:a8:47:b7:
                    2f:49:ae:6a:da:3c:ed:68:c0:61:46:70:ad:90:c0:
                    db:1a:52:5e:e2:47:dd:23:35:41:1b:b8:ca:00:a4:
                    b7:f2:ff:e9:12:c2:22:31:8a:ab:11:23:90:44:80:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:01:E7:B8:B2:68:81:81:8B:98:C9:37:78:14:A8:7C:56:17:72:98
            X509v3 Authority Key Identifier:
                keyid:C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         bf:df:8d:c9:13:5e:88:83:91:7f:ab:cc:d6:92:59:8c:01:4c:
         58:96:83:fe:7d:a4:b8:d2:11:54:45:b3:ad:dd:ac:59:4d:ee:
         66:e0:22:5e:f8:83:af:7e:89:2f:dc:2d:57:e4:dc:a2:a1:d3:
         43:0f:d2:d6:92:00:8b:14:78:b0:94:6f:28:06:87:d3:12:49:
         73:9b:e9:0c:e3:f4:4c:2b:7a:9d:dc:b9:27:e4:43:88:1c:5a:
         44:68:c9:08:71:77:6e:be:20:41:3a:81:a4:f5:78:b2:d0:8d:
         6f:3d:06:11:3c:2e:78:de:9f:cb:b2:cf:94:e0:b5:e6:44:93:
         84:84:75:81:e1:e8:61:d9:ef:e8:df:e9:b7:83:b2:41:77:38:
         00:b7:6b:47:67:e3:55:00:c4:9c:70:1c:4d:3f:bc:87:c8:17:
         d9:b2:ac:73:9a:4f:d6:d5:bb:75:b0:3b:9f:ea:11:27:77:88:
         8f:f1:1b:8c:08:4f:e2:72:05:80:cd:6a:5c:1a:aa:36:7c:62:
         05:f1:c0:aa:70:bb:24:55:d6:1e:8d:51:68:01:e2:69:2c:0f:
         d5:61:e4:df:77:a2:eb:1a:f1:6b:95:50:36:9b:c2:ac:fc:65:
         0a:11:65:12:59:2d:06:af:08:aa:74:83:56:7b:df:5b:43:b0:
         36:20:ac:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:08:16 2025 by rpki-client