
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
File: Ht151WWBY19_MpfG0nDHN0l4nj0.mft (raw, json)
Hash identifier: /13VUlhVwVXsvn3+k3YQRp/uHPw5FDV+hDXTrO+8sqs=
Subject key identifier: 1E:B9:B3:60:31:35:B9:4E:CD:14:FF:83:86:35:66:5F:8A:EF:7D:78
Authority key identifier: 1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D
Certificate issuer: /CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D
Certificate serial: 05D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
Manifest number: 05CF
Signing time: Tue 04 Nov 2025 23:10:11 +0000
Manifest this update: Tue 04 Nov 2025 23:10:10 +0000
Manifest next update: Tue 11 Nov 2025 23:10:10 +0000
Files and hashes: 1: Ht151WWBY19_MpfG0nDHN0l4nj0.crl (hash: gAUzHEqfH7kDkNM6IK2y6kgyu5vxNgKJPnytS20yVkA=)
2: 23331070F9FB11EB8CFF5E7DC4F9AE02.roa (hash: 20Y+YZ+oCN3ppNQCTOwRKwBUzBD7wCn9amRfDZmyyFY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl
rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1496 (0x5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D6E, serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D
Validity
Not Before: Nov 4 23:10:10 2025 GMT
Not After : Nov 11 23:10:10 2025 GMT
Subject: CN=690a87d2-40b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:ba:89:49:7c:08:db:6f:be:be:75:0c:2b:
61:24:5e:34:0d:12:5a:44:9d:16:84:2b:65:bc:a4:
d8:88:6e:53:00:80:fa:0d:dc:de:56:c9:d2:5c:8e:
07:e2:c4:cb:ba:42:c4:34:40:fd:44:3c:33:92:01:
0e:8b:ca:d8:ef:19:ce:0d:72:94:8a:33:a2:17:5a:
ca:22:be:5e:59:59:40:ac:c7:08:ed:08:21:11:a8:
5f:17:26:1c:5a:37:1e:2a:bd:b4:ec:9d:58:00:9b:
07:11:09:cc:13:25:31:15:3b:56:80:18:e0:83:7a:
14:3c:1e:90:3b:27:2e:e9:40:d3:18:3b:18:b5:e8:
12:29:f9:f9:cd:2b:5a:95:01:b7:b0:a6:b2:c1:a0:
c9:50:20:1c:1f:9c:a9:49:af:9a:56:29:e0:d1:19:
f1:a3:95:ec:1b:fe:f0:42:a6:61:9d:3d:c0:0b:40:
22:a9:a7:74:15:0b:62:41:ba:b8:5e:ad:42:ba:77:
ae:04:60:71:f2:66:65:c2:42:bd:13:8e:3f:fb:32:
a7:e9:12:3b:d0:53:89:09:42:63:d9:58:3a:57:ea:
d1:2e:93:dc:5a:eb:73:16:25:30:5e:d3:cd:77:4c:
21:f2:8a:50:a4:0d:35:5f:34:ed:d5:07:63:a6:25:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B9:B3:60:31:35:B9:4E:CD:14:FF:83:86:35:66:5F:8A:EF:7D:78
X509v3 Authority Key Identifier:
keyid:1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c1:55:76:e8:98:a8:48:83:a8:03:3f:27:e2:27:1f:96:29:
8c:19:d7:ae:f1:c2:53:db:a9:09:23:00:3d:40:72:d2:1f:0a:
b6:23:c9:02:6b:dd:27:8b:93:32:23:26:81:e8:62:33:2b:38:
67:eb:a2:b2:97:17:c8:b5:14:a9:5c:e4:62:ab:3d:05:ed:89:
43:93:d4:6c:06:3d:51:05:1d:24:67:0d:a8:95:48:fa:2c:19:
e4:98:47:ed:f9:51:6b:92:e4:bd:09:5a:7e:26:03:37:13:04:
6d:59:ba:96:be:01:79:12:76:5c:f0:e4:c6:7b:21:dc:02:42:
1e:3f:85:a5:2f:61:f2:bd:dd:cb:d4:d5:16:ce:5c:8d:1d:15:
a2:4a:0b:c3:23:39:08:40:4b:d8:62:a1:02:a8:75:d0:08:66:
ca:cb:1e:7b:e1:45:ee:1d:e4:f7:78:b2:a6:6f:71:8a:22:a5:
de:42:c5:18:0d:4d:e4:06:9b:5e:1c:e1:74:11:d1:94:da:ea:
ff:78:c7:85:5b:be:4d:3e:fd:de:47:20:fa:5f:9b:96:3d:cc:
4b:68:e0:64:0d:b6:76:d6:cc:0d:4a:99:7b:7e:a5:0e:21:6c:
19:39:77:8e:7c:2c:dd:a8:3f:6c:87:a8:8b:05:2d:7e:36:58:
54:40:8b:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVENkUxMTAvBgNVBAUTKDFFREQ3OUQ1NjU4MTYzNUY3RjMyOTdDNkQyNzBDNzM3
NDk3ODlFM0QwHhcNMjUxMTA0MjMxMDEwWhcNMjUxMTExMjMxMDEwWjAYMRYwFAYD
VQQDEw02OTBhODdkMi00MGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArA+6iUl8CNtvvr51DCthJF40DRJaRJ0WhCtlvKTYiG5TAID6DdzeVsnSXI4H
4sTLukLENED9RDwzkgEOi8rY7xnODXKUijOiF1rKIr5eWVlArMcI7QghEahfFyYc
WjceKr207J1YAJsHEQnMEyUxFTtWgBjgg3oUPB6QOycu6UDTGDsYtegSKfn5zSta
lQG3sKaywaDJUCAcH5ypSa+aVing0Rnxo5XsG/7wQqZhnT3AC0Aiqad0FQtiQbq4
Xq1CuneuBGBx8mZlwkK9E44/+zKn6RI70FOJCUJj2Vg6V+rRLpPcWutzFiUwXtPN
d0wh8opQpA01XzTt1QdjpiVTawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB65s2Ax
NblOzRT/g4Y1Zl+K7314MB8GA1UdIwQYMBaAFB7dedVlgWNffzKXxtJwxzdJeJ49
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS81NkU5QTdBNERG
RjExMUVCODk0RjMwNjdDNEY5QUUwMi9IdDE1MVdXQlkxOV9NcGZHMG5ESE4wbDRu
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h0MTUxV1dCWTE5X01wZkcwbkRITjBsNG5qMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUQ2RS81NkU5QTdBNERGRjExMUVCODk0RjMwNjdDNEY5QUUwMi9IdDE1MVdXQlkx
OV9NcGZHMG5ESE4wbDRuajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfwVV26JioSIOoAz8n4icflimMGdeu8cJT26kJIwA9QHLSHwq2I8kC
a90ni5MyIyaB6GIzKzhn66KylxfItRSpXORiqz0F7YlDk9RsBj1RBR0kZw2olUj6
LBnkmEft+VFrkuS9CVp+JgM3EwRtWbqWvgF5EnZc8OTGeyHcAkIeP4WlL2Hyvd3L
1NUWzlyNHRWiSgvDIzkIQEvYYqECqHXQCGbKyx574UXuHeT3eLKmb3GKIqXeQsUY
DU3kBpteHOF0EdGU2ur/eMeFW75NPv3eRyD6X5uWPcxLaOBkDbZ21swNSpl7fqUO
IWwZOXeOfCzdqD9sh6iLBS1+NlhUQIu6
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:38:07 2025 by rpki-client