
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
File: M3tFD93J_HAiHaXKCXhYhbHRt8w.mft (raw, json)
Hash identifier: NSgEo5JpWca++WMXebFOi1t4mnkM/3gP5f7LWL/kEwQ=
Subject key identifier: B0:AE:B2:76:5C:4B:81:08:4E:BF:CF:50:9D:9D:15:C9:47:20:B4:28
Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Certificate issuer: /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Certificate serial: 021F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
Manifest number: 020C
Signing time: Sat 31 Oct 2026 03:37:37 +0000
Manifest this update: Sat 31 Oct 2026 03:37:36 +0000
Manifest next update: Sat 07 Nov 2026 03:37:36 +0000
Files and hashes: 1: M3tFD93J_HAiHaXKCXhYhbHRt8w.crl (hash: gDmRG7dJ69eDS8fZI/r16UmNFm+RcmMJ5xb0tle5a/Y=)
2: B62EB8B8810311F19140D3D06AA30FBC.roa (hash: yrlm89UITOQeEQb//8fs853uuFCWdfVzgxpgMA+QA4o=)
3: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (hash: 0apNe0l5FgQvHElgMHv4f+0Whu9gEz8dqP8QgQpe1fU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 03:37:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 543 (0x21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Validity
Not Before: Oct 31 03:37:36 2026 GMT
Not After : Nov 7 03:37:36 2026 GMT
Subject: CN=6ae56280-4853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:a4:03:40:0b:8e:31:dc:f1:40:34:3c:90:
5b:b5:79:4a:1f:83:61:77:e7:fc:0b:c9:fe:78:de:
22:dc:b9:4a:a7:33:1f:fd:e8:ae:7f:1a:84:d7:d9:
30:96:cd:31:fe:59:4d:c7:63:54:fb:a5:e5:fa:eb:
d0:61:5d:ad:96:e4:7b:87:43:02:7e:7e:fa:fd:4d:
53:e8:8a:58:5e:6e:37:8c:42:ec:42:3d:8b:f6:4c:
a5:ad:64:8f:70:64:73:95:c9:c7:b9:11:f4:33:8f:
03:70:72:97:be:b6:17:1d:fa:8f:9c:89:fb:2d:bb:
f6:1d:d5:13:28:af:bf:b4:f8:67:c1:58:8f:ca:e2:
72:fc:46:ea:6a:14:e1:cd:e5:f9:d3:ec:bb:29:34:
a6:aa:89:51:92:a6:6a:8f:11:5c:4b:1e:f5:aa:07:
c0:0b:95:e7:20:45:eb:97:6e:17:73:33:0f:6c:2f:
bf:aa:d0:12:b6:cf:0c:51:92:be:67:14:7d:f4:cf:
fb:c0:9b:fe:ad:78:fb:fb:fa:28:b9:2e:e9:f8:78:
e7:99:9c:87:f7:29:2c:ee:c8:2a:36:3e:60:9f:3c:
89:c8:22:90:d7:ee:da:69:80:13:99:3b:17:4c:ba:
a2:2a:d7:23:64:11:2f:3d:74:af:73:aa:b8:b5:5a:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AE:B2:76:5C:4B:81:08:4E:BF:CF:50:9D:9D:15:C9:47:20:B4:28
X509v3 Authority Key Identifier:
keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6f:84:43:af:4c:c2:9a:67:83:6b:2c:cc:0e:49:20:6d:51:
f0:80:c5:39:74:da:59:e8:c3:5f:82:5a:d3:5f:66:fc:4a:f5:
da:5c:cc:a2:ff:b1:a6:92:f5:f7:66:14:f9:2d:da:51:9c:cb:
df:dc:52:cb:b7:26:fa:84:d5:ee:c9:82:07:23:e8:30:9c:be:
8d:0d:e1:25:f6:53:9f:b7:6c:68:72:57:d4:c3:0c:2e:07:5c:
b5:eb:ef:d7:d3:9e:de:0f:fe:51:2b:f8:7b:4e:db:ae:4c:73:
f3:c2:1a:60:d4:7a:ec:71:0c:3e:5c:0f:4b:9a:b7:c8:c1:e5:
a4:ad:be:60:0c:a6:a1:07:32:4b:63:c5:77:e0:01:be:8c:25:
4f:72:8c:e6:68:60:77:49:2f:1d:f1:34:d8:35:97:13:ec:b2:
db:f1:57:d7:ec:62:c0:ae:27:89:96:61:66:1d:02:f3:13:9c:
41:4a:98:0e:c2:45:80:c5:8d:37:9a:0c:f9:1c:42:fe:7b:39:
dc:d4:5a:16:84:19:80:de:56:ce:37:52:8b:1a:ea:9c:af:e1:
49:91:61:34:71:ff:de:9b:62:6f:f2:a1:cf:59:69:11:55:81:
3b:05:a2:c2:e5:4e:d9:26:c9:1c:ec:44:b6:2c:c6:d9:57:59:
a1:31:69:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:54:34 2026 by rpki-client