
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
File:                     DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json)
Hash identifier:          lj1rG4S96cnApU0w/SShqtR7OP6zdYm9eLXUO8R8MLw=
Subject key identifier:   66:56:22:5D:19:4D:C7:34:08:66:EF:D4:31:1F:24:62:2D:10:1B:C8
Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
Certificate issuer:       /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Certificate serial:       0E57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
Manifest number:          0E4C
Signing time:             Thu 30 Oct 2025 17:45:20 +0000
Manifest this update:     Thu 30 Oct 2025 17:45:19 +0000
Manifest next update:     Thu 06 Nov 2025 17:45:19 +0000
Files and hashes:         1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: Mv607sM5ExgP+gB8yI3gsoJMGIueTee5vzKEcUZGV6s=)
                          2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: M2L1TDDyX72ReECKnE9vUgAsmnB0Pz4FwQ7PdyDyDV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
                          rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 17:45:19 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3671 (0xe57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
        Validity
            Not Before: Oct 30 17:45:19 2025 GMT
            Not After : Nov  6 17:45:19 2025 GMT
        Subject: CN=6903a430-f366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:8b:0c:63:ba:91:8e:a6:95:a5:d8:5b:3f:
                    91:28:e9:6a:c2:8e:8c:7e:e7:94:5f:53:51:43:e4:
                    c3:0a:5e:7c:b5:48:a5:72:19:56:c2:97:7f:39:c1:
                    25:5f:59:b7:60:6f:49:75:dc:e1:14:b0:c4:ef:31:
                    03:af:38:84:9f:aa:e3:bb:f8:b8:02:55:01:61:2b:
                    06:70:0a:a3:cf:75:3c:e9:fd:1b:70:90:d5:66:18:
                    f0:dc:84:ac:8e:76:84:28:77:b2:12:b7:3b:3a:e1:
                    f1:72:20:d9:d1:b7:6b:50:56:54:66:cf:4b:39:7d:
                    d9:64:81:55:52:0f:7b:d3:73:f1:31:80:6b:e3:15:
                    db:ff:a1:03:af:a5:06:d0:c3:fb:57:a3:d2:f6:36:
                    0c:8e:59:35:96:af:6a:89:dd:37:16:c2:23:60:1a:
                    8e:31:25:f2:26:83:9a:cd:fc:23:95:0a:6e:5b:29:
                    23:36:19:14:09:35:ca:db:42:bd:8d:03:65:e0:e4:
                    ac:80:c8:35:59:34:96:ed:83:d8:7b:f1:81:5c:67:
                    e2:6b:50:df:7f:e5:35:66:39:38:47:2c:0f:0c:ee:
                    2c:ef:85:38:82:ff:59:90:01:97:35:19:d6:5e:31:
                    27:f9:81:cd:9f:da:4f:fd:ae:3f:7e:f9:ff:49:08:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:56:22:5D:19:4D:C7:34:08:66:EF:D4:31:1F:24:62:2D:10:1B:C8
            X509v3 Authority Key Identifier:
                keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         da:0e:23:b9:9d:b9:0a:35:16:d1:68:60:3c:fb:1b:6b:56:21:
         fa:6d:36:e3:01:eb:2f:ef:ec:dc:24:d0:c5:03:e5:b4:99:83:
         ef:21:a2:34:40:b0:05:69:b6:39:03:f8:9d:d9:c8:a4:ea:7d:
         6c:20:cc:ef:06:4c:ca:86:75:fa:4c:fe:ec:6e:72:29:96:34:
         e6:44:d8:e4:c5:5c:7a:31:ba:b5:0a:0e:12:e4:f4:87:10:1a:
         ae:4a:e2:35:bf:9b:85:e2:2d:c3:0d:e2:3e:45:f4:a8:a6:c7:
         fd:35:0c:d1:e0:f2:2c:8b:5b:aa:65:5a:c1:19:b8:a3:d3:44:
         f9:0f:6a:1f:4e:c6:63:e8:c4:71:c5:58:12:87:e2:b5:39:67:
         fb:eb:b8:83:60:d9:ae:72:da:ae:34:2d:19:f5:42:c2:8f:d7:
         25:af:c8:e3:af:1b:af:a6:c2:f8:c1:59:b8:6d:77:92:84:d5:
         e4:b2:92:0b:06:c9:0c:e1:99:30:9f:6d:dc:7c:88:77:25:00:
         1e:f0:bd:b7:98:6b:7d:b5:b5:a1:8b:08:31:75:5e:37:d7:a4:
         b6:41:a5:67:17:c2:b1:74:04:c6:62:1a:7b:ec:ef:14:f2:30:
         2a:8d:07:ee:31:7e:93:a7:0b:57:86:69:13:3f:9f:6b:4a:11:
         2b:07:a8:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTMzRDcxMTAvBgNVBAUTKDBFRDUyQTc2RjMxQzI0MjE3NEEyQUQxOTQ4MUM5NTcw
M0I3MkUyMzYwHhcNMjUxMDMwMTc0NTE5WhcNMjUxMTA2MTc0NTE5WjAYMRYwFAYD
VQQDEw02OTAzYTQzMC1mMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvGGLDGO6kY6mlaXYWz+RKOlqwo6MfueUX1NRQ+TDCl58tUilchlWwpd/OcEl
X1m3YG9JddzhFLDE7zEDrziEn6rju/i4AlUBYSsGcAqjz3U86f0bcJDVZhjw3ISs
jnaEKHeyErc7OuHxciDZ0bdrUFZUZs9LOX3ZZIFVUg9703PxMYBr4xXb/6EDr6UG
0MP7V6PS9jYMjlk1lq9qid03FsIjYBqOMSXyJoOazfwjlQpuWykjNhkUCTXK20K9
jQNl4OSsgMg1WTSW7YPYe/GBXGfia1Dff+U1Zjk4RywPDO4s74U4gv9ZkAGXNRnW
XjEn+YHNn9pP/a4/fvn/SQio5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZWIl0Z
Tcc0CGbv1DEfJGItEBvIMB8GA1UdIwQYMBaAFA7VKnbzHCQhdKKtGUgclXA7cuI2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNENy9EQzdEODg2NEFF
QjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pDRjBvcTBaU0J5VmNEdHk0
alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0R0VXFkdk1jSkNGMG9xMFpTQnlWY0R0eTRqWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzNENy9EQzdEODg2NEFFQjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pD
RjBvcTBaU0J5VmNEdHk0alkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDaDiO5nbkKNRbRaGA8+xtrViH6bTbjAesv7+zcJNDFA+W0mYPvIaI0
QLAFabY5A/id2cik6n1sIMzvBkzKhnX6TP7sbnIpljTmRNjkxVx6Mbq1Cg4S5PSH
EBquSuI1v5uF4i3DDeI+RfSopsf9NQzR4PIsi1uqZVrBGbij00T5D2ofTsZj6MRx
xVgSh+K1OWf767iDYNmuctquNC0Z9ULCj9clr8jjrxuvpsL4wVm4bXeShNXkspIL
BskM4Zkwn23cfIh3JQAe8L23mGt9tbWhiwgxdV4316S2QaVnF8KxdATGYhp77O8U
8jAqjQfuMX6TpwtXhmkTP59rShErB6ii
-----END CERTIFICATE-----
Generated at Fri Oct 31 05:49:03 2025 by rpki-client