
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
File: Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft (raw, json)
Hash identifier: eoA8AUlEZlTP+TDKxR9JgHQhjXQ5xJSaclyjjj1krqY=
Subject key identifier: 73:A2:56:92:77:5F:DE:F5:4E:96:2B:82:0F:A8:C4:EE:D7:7E:E2:F0
Authority key identifier: 1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4
Certificate issuer: /CN=A913B5C2/serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
Certificate serial: 0795
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
Manifest number: 0783
Signing time: Tue 04 Nov 2025 21:40:57 +0000
Manifest this update: Tue 04 Nov 2025 21:40:56 +0000
Manifest next update: Tue 11 Nov 2025 21:40:56 +0000
Files and hashes: 1: Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl (hash: +IzkmdEPMRuOfHnYh8Q9fOvmCuM9j5U5M8Z6bNTuwdo=)
2: 5010A55A8C6411EE9E586967C4F9AE02.roa (hash: 4WaxcSOypw5MR8KdXAghCvA+v2O7hVTdBBBYUHYD0cA=)
3: F704E032765811EE8C17A621C4F9AE02.roa (hash: CnCwLn7lDIG3FNQW26Y0bfxtI9n4x8PAcrUkdqYQEww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl
rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941 (0x795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B5C2, serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
Validity
Not Before: Nov 4 21:40:56 2025 GMT
Not After : Nov 11 21:40:56 2025 GMT
Subject: CN=690a72e9-fc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:64:a2:94:80:b0:08:4a:b9:d0:c2:a0:2a:
3e:ef:25:e1:88:d9:02:7f:17:cc:4f:28:e5:03:c0:
51:97:2a:99:ed:32:5e:b0:b7:e3:ed:04:d8:77:95:
5f:db:b9:ab:84:0c:28:93:0e:d0:93:cd:b3:b4:bf:
ea:b8:dd:04:0f:0d:55:a5:e0:99:05:7c:6d:1d:c6:
70:85:bc:76:04:30:fd:ba:fb:2e:a5:61:4e:ba:3f:
e6:e4:4c:ae:26:c4:0a:07:2e:b8:b6:c6:a5:e1:68:
ff:42:f9:9b:9d:86:f2:a1:5c:e7:55:26:b4:c2:d6:
69:dc:59:7c:84:93:c4:21:af:33:ef:54:79:6b:4c:
ff:c6:e3:1c:05:ad:0f:c0:e5:ef:8a:fc:a4:3f:15:
46:d7:9e:58:1b:89:0e:ed:a6:76:0b:8e:69:24:55:
9b:5f:6d:a4:2d:f5:bf:ee:4b:9c:d1:63:1e:63:7f:
a9:ae:a0:a5:07:2c:c9:22:38:d4:e4:c0:e1:7a:0a:
de:62:d9:f8:51:04:e2:8c:65:3b:2e:ab:eb:8e:26:
1f:74:36:2d:7a:ae:83:7c:c3:cd:60:20:82:6d:cb:
0c:c8:ba:5c:60:85:9a:61:e1:29:e1:e2:ab:37:e6:
c1:2c:35:0b:af:bb:aa:3f:72:11:51:a9:16:f8:37:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A2:56:92:77:5F:DE:F5:4E:96:2B:82:0F:A8:C4:EE:D7:7E:E2:F0
X509v3 Authority Key Identifier:
keyid:1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:15:70:0c:59:ca:5a:90:88:5c:e8:42:ce:ff:d1:c5:37:7a:
e6:55:9a:e7:aa:0b:68:33:df:a4:a3:b1:23:33:e1:49:63:70:
5f:6d:d9:b2:bd:2c:ca:45:5f:92:be:fd:f0:8f:e6:d8:16:c9:
32:7c:29:68:25:d9:43:02:f0:88:e3:cc:47:22:09:9c:5e:f0:
85:ff:d5:40:a1:fb:42:c5:ec:be:4f:cc:a6:9e:75:b2:8a:bf:
7d:c1:ac:b9:75:cc:df:15:5b:d8:d5:fd:e1:02:6b:67:19:79:
09:9d:05:0c:23:45:ba:4a:32:66:db:0f:3b:14:77:c2:c8:dd:
9a:1d:dd:af:44:6e:6a:45:1d:3c:36:20:d6:30:9a:c2:d4:05:
18:eb:75:34:35:bb:48:6a:4c:d4:d3:2e:d3:da:0c:c6:16:fd:
40:1f:01:0b:de:59:dd:80:06:54:6a:62:e7:04:f5:b5:63:fe:
45:86:c1:ce:51:9f:4c:f1:06:ca:82:90:39:10:d4:48:c8:3e:
d3:b5:ac:46:a5:b7:03:73:b1:94:10:f2:9d:4d:fd:87:c8:8d:
0e:2b:3b:08:f0:5c:5d:39:ae:51:8b:f4:00:21:1f:7c:cc:bf:
65:61:f2:ef:81:28:b9:97:00:9a:d1:d6:ec:df:0e:4d:23:74:
6a:f2:a9:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I1QzIxMTAvBgNVBAUTKDFFRUQyNjNGMDQyOEQ4NEUzRkJFNTE3NTNEMTZENEIz
RDYyNzk3QzQwHhcNMjUxMTA0MjE0MDU2WhcNMjUxMTExMjE0MDU2WjAYMRYwFAYD
VQQDEw02OTBhNzJlOS1mYzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0IpkopSAsAhKudDCoCo+7yXhiNkCfxfMTyjlA8BRlyqZ7TJesLfj7QTYd5Vf
27mrhAwokw7Qk82ztL/quN0EDw1VpeCZBXxtHcZwhbx2BDD9uvsupWFOuj/m5Eyu
JsQKBy64tsal4Wj/QvmbnYbyoVznVSa0wtZp3Fl8hJPEIa8z71R5a0z/xuMcBa0P
wOXvivykPxVG155YG4kO7aZ2C45pJFWbX22kLfW/7kuc0WMeY3+prqClByzJIjjU
5MDhegreYtn4UQTijGU7LqvrjiYfdDYteq6DfMPNYCCCbcsMyLpcYIWaYeEp4eKr
N+bBLDULr7uqP3IRUakW+DeO7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOiVpJ3
X971TpYrgg+oxO7XfuLwMB8GA1UdIwQYMBaAFB7tJj8EKNhOP75RdT0W1LPWJ5fE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjVDMi83NzlEMDRBMDM2
NDExMUVCODQ5OUQyMTlDNEY5QUUwMi9IdTBtUHdRbzJFNF92bEYxUFJiVXM5WW5s
OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h1MG1Qd1FvMkU0X3ZsRjFQUmJVczlZbmw4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjVDMi83NzlEMDRBMDM2NDExMUVCODQ5OUQyMTlDNEY5QUUwMi9IdTBtUHdRbzJF
NF92bEYxUFJiVXM5WW5sOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMFXAMWcpakIhc6ELO/9HFN3rmVZrnqgtoM9+ko7EjM+FJY3Bfbdmy
vSzKRV+Svv3wj+bYFskyfCloJdlDAvCI48xHIgmcXvCF/9VAoftCxey+T8ymnnWy
ir99way5dczfFVvY1f3hAmtnGXkJnQUMI0W6SjJm2w87FHfCyN2aHd2vRG5qRR08
NiDWMJrC1AUY63U0NbtIakzU0y7T2gzGFv1AHwEL3lndgAZUamLnBPW1Y/5FhsHO
UZ9M8QbKgpA5ENRIyD7TtaxGpbcDc7GUEPKdTf2HyI0OKzsI8FxdOa5Ri/QAIR98
zL9lYfLvgSi5lwCa0dbs3w5NI3Rq8qk5
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:07:34 2025 by rpki-client