
$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
File: M3tFD93J_HAiHaXKCXhYhbHRt8w.mft (raw, json)
Hash identifier: iDryyyuWVGAXKXiNtcjKVIqepG37pB1xwNojOBQ+lBQ=
Subject key identifier: 4F:38:63:1E:D6:5D:B5:8A:60:CA:F2:2B:BF:34:A0:B1:35:F7:4A:E8
Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Certificate issuer: /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Certificate serial: 01EC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
Manifest number: 01D9
Signing time: Thu 23 Jul 2026 05:07:35 +0000
Manifest this update: Thu 23 Jul 2026 05:07:35 +0000
Manifest next update: Thu 30 Jul 2026 05:07:35 +0000
Files and hashes: 1: M3tFD93J_HAiHaXKCXhYhbHRt8w.crl (hash: 6Smu69GiJWX5q346X/0sMSFskyXK8Trxeh9PBS1Rhgo=)
2: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (hash: 0apNe0l5FgQvHElgMHv4f+0Whu9gEz8dqP8QgQpe1fU=)
3: B62EB8B8810311F19140D3D06AA30FBC.roa (hash: yrlm89UITOQeEQb//8fs853uuFCWdfVzgxpgMA+QA4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Validity
Not Before: Jul 23 05:07:35 2026 GMT
Not After : Jul 30 05:07:35 2026 GMT
Subject: CN=6a61a197-3476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:a7:22:aa:e0:ca:54:cc:00:2e:2d:a5:6a:
58:e4:32:a4:59:e6:49:63:09:2d:d9:f2:44:a0:5d:
91:4b:24:77:49:73:b5:0b:e8:6c:e6:76:55:09:b8:
5e:2c:ff:9b:d4:d4:2f:58:a6:51:9f:5a:16:21:2d:
00:4b:5b:5b:1a:7d:ea:c6:15:4e:00:c4:4f:fa:19:
2b:89:3c:d0:bd:1c:b7:41:3c:27:f6:bf:d9:b1:8e:
6f:79:7c:cf:f8:40:b6:a9:02:69:e1:cf:ff:bb:75:
ab:ff:3a:a8:2b:86:e3:60:f2:fe:c7:65:be:37:34:
00:7b:27:91:27:0b:7f:9b:cf:4f:6a:a2:b8:54:6e:
51:59:01:d3:1b:12:16:05:36:fd:01:c2:05:bd:a4:
38:97:37:51:4e:7a:9a:8b:fe:1b:00:81:21:11:64:
f7:1e:1f:1e:da:00:d5:e9:32:da:54:30:68:1b:49:
73:ca:6c:7c:e9:53:40:df:c3:41:79:d6:38:8e:b8:
d4:a0:99:f9:45:38:73:84:11:2b:9e:f6:98:fd:ea:
71:d2:a8:9f:dc:81:f5:22:39:90:23:86:f1:82:c7:
a5:0a:b2:41:09:6d:fb:5f:35:dc:d4:46:01:d4:cd:
f1:ba:19:f9:71:98:cb:7e:67:e6:d6:25:c9:d9:1a:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:38:63:1E:D6:5D:B5:8A:60:CA:F2:2B:BF:34:A0:B1:35:F7:4A:E8
X509v3 Authority Key Identifier:
keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:c0:a7:15:30:ab:7c:cf:6c:29:67:fc:ee:15:85:8e:b6:95:
38:14:3f:1f:50:0d:fd:de:90:93:52:0e:dd:09:ad:64:bd:ce:
43:cc:f9:b9:5b:02:18:72:b6:a4:71:fb:7a:6c:7e:2c:40:c6:
4b:b9:30:9f:3a:d3:be:34:32:ee:86:36:a3:3c:5c:8a:d0:0a:
69:42:cc:73:e5:68:de:3b:b8:ec:11:06:1d:b8:10:c6:64:3b:
3f:14:5c:62:a5:1b:94:7b:42:5d:ff:08:19:79:a2:04:fc:17:
4b:51:b7:c8:70:78:fb:aa:60:82:00:60:c7:b3:ac:60:28:04:
1b:0d:e0:01:75:cb:a0:ed:12:18:21:78:30:ca:48:a1:a1:f4:
68:e3:f5:e5:01:2b:37:a2:23:d4:84:83:de:0e:52:e5:a8:03:
96:06:09:84:5c:d6:a4:80:c6:c2:dc:12:9d:2e:16:eb:89:c6:
d7:f0:30:04:69:28:d6:1b:69:96:47:95:2d:ca:8a:d5:bc:57:
a9:d3:49:55:07:8f:9e:27:b9:8c:aa:b0:77:8c:f8:eb:19:0e:
dc:b0:17:40:e9:74:7b:93:d6:41:8b:c4:8e:48:9d:37:c4:73:
02:a8:13:ea:c5:1a:ee:54:59:19:40:55:64:11:b3:d9:1d:e3:
bd:e2:87:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk4MUIxMTAvBgNVBAUTKDMzN0I0NTBGRERDOUZDNzAyMjFEQTVDQTA5Nzg1ODg1
QjFEMUI3Q0MwHhcNMjYwNzIzMDUwNzM1WhcNMjYwNzMwMDUwNzM1WjAYMRYwFAYD
VQQDEw02YTYxYTE5Ny0zNDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA23CnIqrgylTMAC4tpWpY5DKkWeZJYwkt2fJEoF2RSyR3SXO1C+hs5nZVCbhe
LP+b1NQvWKZRn1oWIS0AS1tbGn3qxhVOAMRP+hkriTzQvRy3QTwn9r/ZsY5veXzP
+EC2qQJp4c//u3Wr/zqoK4bjYPL+x2W+NzQAeyeRJwt/m89PaqK4VG5RWQHTGxIW
BTb9AcIFvaQ4lzdRTnqai/4bAIEhEWT3Hh8e2gDV6TLaVDBoG0lzymx86VNA38NB
edY4jrjUoJn5RThzhBErnvaY/epx0qif3IH1IjmQI4bxgselCrJBCW37XzXc1EYB
1M3xuhn5cZjLfmfm1iXJ2RoVTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE84Yx7W
XbWKYMryK780oLE190roMB8GA1UdIwQYMBaAFDN7RQ/dyfxwIh2lygl4WIWx0bfM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTgxQi9CQzVDRUFCNkNB
OEExMUVFQjA1NkU2MUZDNEY5QUUwMi9NM3RGRDkzSl9IQWlIYVhLQ1hoWWhiSFJ0
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL00zdEZEOTNKX0hBaUhhWEtDWGhZaGJIUnQ4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTgxQi9CQzVDRUFCNkNBOEExMUVFQjA1NkU2MUZDNEY5QUUwMi9NM3RGRDkzSl9I
QWlIYVhLQ1hoWWhiSFJ0OHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM8CnFTCrfM9sKWf87hWFjraVOBQ/H1AN/d6Qk1IO3QmtZL3OQ8z5uVsCGHK2
pHH7emx+LEDGS7kwnzrTvjQy7oY2ozxcitAKaULMc+Vo3ju47BEGHbgQxmQ7PxRc
YqUblHtCXf8IGXmiBPwXS1G3yHB4+6pgggBgx7OsYCgEGw3gAXXLoO0SGCF4MMpI
oaH0aOP15QErN6Ij1ISD3g5S5agDlgYJhFzWpIDGwtwSnS4W64nG1/AwBGko1htp
lkeVLcqK1bxXqdNJVQePnie5jKqwd4z46xkO3LAXQOl0e5PWQYvEjkidN8RzAqgT
6sUa7lRZGUBVZBGz2R3jveKHOw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:51 2026 by rpki-client