
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
File: M3tFD93J_HAiHaXKCXhYhbHRt8w.mft (raw, json)
Hash identifier: LxVn+6B5PiGh7Co5R1D9HYksP8NfA1ua8UTK/XyjqLs=
Subject key identifier: 19:85:80:F1:AA:FC:38:FE:49:07:33:04:F3:15:6F:15:84:E2:A8:FD
Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Certificate issuer: /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
Manifest number: 01F9
Signing time: Wed 23 Sep 2026 03:17:11 +0000
Manifest this update: Wed 23 Sep 2026 03:17:11 +0000
Manifest next update: Wed 30 Sep 2026 03:17:11 +0000
Files and hashes: 1: M3tFD93J_HAiHaXKCXhYhbHRt8w.crl (hash: eoWKgObdJeolO9vRa6G4FmYOTAooj3IAOn5E1CX2a30=)
2: B62EB8B8810311F19140D3D06AA30FBC.roa (hash: yrlm89UITOQeEQb//8fs853uuFCWdfVzgxpgMA+QA4o=)
3: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (hash: 0apNe0l5FgQvHElgMHv4f+0Whu9gEz8dqP8QgQpe1fU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Validity
Not Before: Sep 23 03:17:11 2026 GMT
Not After : Sep 30 03:17:11 2026 GMT
Subject: CN=6ab344b7-0f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:e2:88:cf:1f:76:d6:ca:03:48:fb:45:e9:
2f:b5:22:de:c3:cf:a7:4a:c0:b1:1e:71:3d:f2:e4:
20:eb:3c:3e:cd:fa:ac:3e:86:eb:15:67:cc:a5:c8:
c2:79:18:49:ba:c1:8e:68:ad:4b:b4:cf:bd:6b:5a:
d0:3a:f1:5a:7a:44:e0:21:45:98:e5:0b:c4:bc:fe:
de:4d:d0:a1:e8:f9:45:de:c3:eb:13:ef:a7:bf:32:
d1:a9:80:9b:97:1e:f8:b5:f4:4c:84:64:21:63:0f:
da:4d:0e:08:dd:af:cb:a0:81:c4:a2:74:fc:95:cf:
c3:29:4f:e9:2c:a2:f8:31:4f:2a:c6:3b:91:9b:b5:
5f:ba:78:9c:03:2c:e6:b3:a2:e6:bf:2c:47:ec:3c:
e8:60:6f:60:88:22:43:77:b9:53:62:b7:5c:41:82:
e3:35:26:f3:93:3b:1c:e0:6d:84:4e:c3:3c:d5:be:
ad:7b:d3:a3:99:36:d9:0c:dd:ea:86:74:20:f1:a4:
fc:a4:0f:42:0e:63:d7:12:80:e2:73:e2:59:ee:66:
7e:c4:a1:ec:7f:07:80:b6:4f:24:39:50:89:df:36:
a9:02:66:69:6a:84:57:30:07:bf:c2:d3:ff:d3:00:
65:7a:7f:ec:7f:7f:46:cd:88:f4:30:44:b8:48:13:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:85:80:F1:AA:FC:38:FE:49:07:33:04:F3:15:6F:15:84:E2:A8:FD
X509v3 Authority Key Identifier:
keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d5:c3:67:d7:0f:6e:27:fc:47:da:c4:dd:9c:0b:3e:5e:2b:
e6:bc:79:4d:07:59:57:35:1e:17:62:22:bf:a6:87:7d:48:4c:
5f:f7:58:b1:2e:1a:8e:01:74:0f:99:67:06:69:4d:a4:d6:02:
83:80:8a:e2:a7:c8:da:2d:54:9b:d4:f6:d6:94:b1:0d:84:0d:
e0:ae:3c:b6:61:eb:df:da:3a:cd:73:1f:7b:73:d2:6f:65:7c:
f2:ef:25:eb:52:c9:a9:06:4c:7b:09:45:17:26:20:cd:0f:65:
99:d5:ed:14:cd:dc:da:67:bb:6a:e0:5d:fd:a4:4a:d9:b7:b3:
0d:89:6b:b9:13:e4:3a:4a:51:ab:14:ff:d5:a2:bb:ad:ff:8a:
1c:e6:bb:e8:0d:c6:af:5c:a4:3f:b7:c9:85:de:c9:aa:49:4e:
b6:01:d1:ea:69:24:ee:15:64:f9:d0:8a:9c:69:61:91:e9:7d:
6b:5b:1b:fd:e0:b6:bc:d3:da:4a:3d:71:33:38:91:45:13:4c:
57:24:e7:41:ea:6c:1c:aa:ce:50:01:1c:73:6a:f9:8a:8d:70:
ab:74:8c:4f:d1:81:bc:5e:d4:e0:8d:d2:73:da:52:24:db:bc:
d7:19:ce:36:bf:3d:0a:51:fd:62:11:ca:bd:d1:55:72:b9:37:
91:a3:16:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:22:29 2026 by rpki-client