
$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
File: M3tFD93J_HAiHaXKCXhYhbHRt8w.mft (raw, json)
Hash identifier: y9Cao2B8qC2aTb3yH4y2lTSafXk3sALsoF8pWmVcQEc=
Subject key identifier: 5A:7F:68:78:DA:B1:A2:12:59:92:FA:A9:55:18:DB:DF:4B:C0:36:FF
Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Certificate issuer: /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Certificate serial: 01AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
Manifest number: 0198
Signing time: Wed 25 Mar 2026 03:42:51 +0000
Manifest this update: Wed 25 Mar 2026 03:42:50 +0000
Manifest next update: Wed 01 Apr 2026 03:42:50 +0000
Files and hashes: 1: M3tFD93J_HAiHaXKCXhYhbHRt8w.crl (hash: HswIc4IwObFJBavZE9FIccMZftBpSNf3vP47/rpUi/k=)
2: 9D107CE43FD311F08A76B677C4F9AE02.roa (hash: SbL1x0M6rhtATPydg1N6LL5pOz+qbg/l/56fetrDa6o=)
3: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (hash: 0apNe0l5FgQvHElgMHv4f+0Whu9gEz8dqP8QgQpe1fU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Validity
Not Before: Mar 25 03:42:50 2026 GMT
Not After : Apr 1 03:42:50 2026 GMT
Subject: CN=69c359bb-ce24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:f2:45:be:bc:7e:7c:66:29:8c:a4:83:05:
a6:49:ac:8b:c3:24:cb:92:16:1b:d3:13:38:23:47:
d6:95:90:2a:01:15:67:a2:80:bb:34:de:da:41:3d:
f1:dc:e3:b5:44:a7:ca:ab:71:ce:53:9c:69:47:2f:
7e:a2:42:4e:b9:34:72:d5:29:3d:52:6d:85:75:c7:
96:47:97:b2:2e:3c:f9:33:57:a3:b9:72:bc:08:45:
85:2d:28:e9:fa:11:91:76:5e:9d:7f:ad:99:69:2f:
49:be:c4:19:4a:b7:a3:fa:47:2d:d8:02:71:7d:22:
ca:2e:a1:39:8a:fb:0f:ce:e3:d2:ad:c5:51:c4:b6:
c0:47:50:b5:cc:32:17:33:84:bb:20:a7:b0:ec:43:
03:f8:c6:c4:a8:6c:88:e6:31:6d:6e:d9:89:d1:b0:
c4:a3:cb:b8:32:64:1c:e5:10:13:d7:7a:7f:21:28:
52:80:31:b2:f9:9f:5c:bb:fd:09:4b:10:e3:61:b6:
d0:47:74:94:b4:23:e6:56:6e:c3:78:51:19:33:5d:
9b:e4:51:eb:f1:86:48:c2:1d:c0:f4:43:e6:86:e9:
ab:c1:31:25:25:42:c4:36:c3:e3:f0:7c:59:1e:7c:
e8:cc:ea:d7:9d:64:bd:02:92:2d:e6:be:a8:d8:4b:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7F:68:78:DA:B1:A2:12:59:92:FA:A9:55:18:DB:DF:4B:C0:36:FF
X509v3 Authority Key Identifier:
keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:66:15:cf:23:20:d9:f9:54:3b:61:88:00:e5:2d:30:51:a2:
df:b0:39:8e:1e:18:b4:7a:52:be:ea:7f:0a:0c:fd:99:80:35:
8a:c8:bb:de:e8:7b:46:fa:dc:8e:f3:cd:73:a2:4a:11:0b:b4:
86:8c:95:46:34:e4:82:5c:a8:25:bd:c7:b6:ed:55:76:3c:59:
b1:49:87:4b:5c:f1:f0:5b:76:ba:dd:14:cf:b3:41:fd:21:ad:
5c:c9:61:16:ba:ce:e1:6f:45:df:c9:8f:bc:42:a5:df:91:36:
5b:c9:0c:22:42:f6:a5:2d:f3:43:16:5f:42:30:8e:b7:01:2d:
65:d6:a3:17:6d:40:c0:f8:ae:83:f3:fc:d9:11:75:6d:f7:00:
13:da:c2:bd:d2:1d:6a:c9:d9:05:dc:19:78:bb:87:f6:e1:44:
59:7a:11:74:1d:26:24:a0:66:c3:6e:34:38:2c:c8:b0:62:30:
75:f8:90:15:7b:bf:67:3b:49:cf:73:1c:db:05:09:54:dc:0c:
d0:1d:e6:2c:ca:5c:2f:f8:51:9f:b2:45:93:a8:aa:8f:cb:36:
31:12:26:b9:20:ad:b0:45:67:ee:a7:e0:6b:30:a7:bc:dc:5b:
9b:14:cf:3d:75:8e:a1:5b:c7:db:ee:17:47:98:d8:28:5f:b8:
a8:3f:b1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:31 2026 by rpki-client