
$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
File: M3tFD93J_HAiHaXKCXhYhbHRt8w.mft (raw, json)
Hash identifier: nQ1/Vn1pcSo8lFCZDqRmH12lBnREw7Lkr7Q6hQcg8Xo=
Subject key identifier: E8:A4:E6:F2:44:B0:F3:E7:02:90:69:3E:17:FD:A4:E9:0B:2E:FC:6D
Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Certificate issuer: /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
Manifest number: 014B
Signing time: Mon 03 Nov 2025 04:22:21 +0000
Manifest this update: Mon 03 Nov 2025 04:22:21 +0000
Manifest next update: Mon 10 Nov 2025 04:22:21 +0000
Files and hashes: 1: M3tFD93J_HAiHaXKCXhYhbHRt8w.crl (hash: dqoUO22DrN7lyS3AnGtS34FJyt6CQXxWSahZq9eJ0vc=)
2: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (hash: EhoFh5hj1fnJIAYm7dVoqkfeol8zF4Op7mwB2iCWpG0=)
3: 9D107CE43FD311F08A76B677C4F9AE02.roa (hash: M4xxwp5XL8JXkQpTNZQamOx/rEaiqoV0xB/oQh2Nk2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Validity
Not Before: Nov 3 04:22:21 2025 GMT
Not After : Nov 10 04:22:21 2025 GMT
Subject: CN=69082dfd-d673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:74:32:09:57:c6:c9:e1:80:e1:02:d8:56:
68:d1:c6:2f:5f:83:34:3a:75:1a:69:6b:75:ed:ee:
47:43:dc:85:ee:91:d2:56:14:a1:8d:25:ed:f5:33:
5f:11:59:ca:9b:42:57:68:6b:60:4b:55:92:53:db:
26:04:5f:f1:6f:6b:00:04:ed:38:e6:4d:2f:00:ca:
bd:46:de:87:7b:bc:ea:4e:28:18:1e:fa:3c:74:f3:
86:b9:b1:4b:e2:94:08:09:64:ed:62:2b:46:f5:f8:
32:b4:94:41:ae:f3:7f:fa:b1:28:bc:2a:0a:46:fa:
9b:e7:34:09:09:48:22:28:ea:f1:8f:dd:5b:b7:65:
52:32:f1:ae:7e:ca:25:3f:60:af:87:fd:55:fc:c4:
b5:73:d1:3d:a1:84:ef:51:51:1e:12:94:0c:55:b6:
cc:90:c5:70:f9:c2:51:ab:45:6b:75:b0:48:ad:97:
9e:50:fa:55:3b:ac:33:3d:e4:5c:17:f2:c8:60:88:
f4:61:eb:a8:fc:9e:87:9e:cb:50:8c:f9:b5:c0:43:
d4:5e:41:74:6d:ac:3b:9d:50:75:c1:a1:13:f4:16:
f3:d0:dd:d1:34:80:15:6d:ea:33:20:17:b7:c3:c2:
fd:3c:df:28:64:8d:02:cd:6a:1b:22:bb:4e:8e:7f:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A4:E6:F2:44:B0:F3:E7:02:90:69:3E:17:FD:A4:E9:0B:2E:FC:6D
X509v3 Authority Key Identifier:
keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:75:16:a4:c7:43:63:aa:bd:2b:b9:e1:88:a4:e5:b8:f4:18:
49:84:be:5f:23:02:79:90:84:8f:11:e1:a2:6c:86:ff:91:2b:
63:b8:72:57:f6:8a:4b:c3:87:1c:64:6f:ea:c9:bc:55:48:5e:
67:d5:a2:9b:3f:71:0e:ae:4b:ae:a9:4e:29:7d:1a:7b:fd:1e:
3d:92:2e:2a:3d:80:28:fe:1e:33:85:16:0e:90:cb:fb:2c:1e:
f8:23:8f:ea:03:ee:69:b5:43:ea:96:d5:ac:5b:e7:d8:f9:08:
20:6b:d1:84:9a:2f:c1:ad:4c:c3:73:8a:bd:4a:b3:ac:b3:dd:
bf:d2:e4:47:6e:e4:d8:8d:df:ba:aa:83:5e:32:b2:75:e7:79:
21:8d:dd:3f:7a:c5:bc:0d:70:fd:5f:0d:29:91:34:a4:0c:f8:
93:84:af:91:82:4b:0f:5b:f2:1e:56:ca:3f:55:36:7d:36:b7:
4e:5d:2a:b6:a9:a8:7d:be:e1:12:05:68:77:5d:79:75:46:97:
b2:c0:60:b4:ed:14:9e:99:dc:b2:00:7e:3b:e9:6e:62:0a:75:
1c:56:a5:79:c2:83:d4:81:9f:f8:05:ac:e2:a1:6c:12:a2:ef:
88:af:44:e0:97:ed:8f:09:04:42:41:2b:55:cc:1f:03:ba:c7:
78:d9:31:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk4MUIxMTAvBgNVBAUTKDMzN0I0NTBGRERDOUZDNzAyMjFEQTVDQTA5Nzg1ODg1
QjFEMUI3Q0MwHhcNMjUxMTAzMDQyMjIxWhcNMjUxMTEwMDQyMjIxWjAYMRYwFAYD
VQQDEw02OTA4MmRmZC1kNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArRZ0MglXxsnhgOEC2FZo0cYvX4M0OnUaaWt17e5HQ9yF7pHSVhShjSXt9TNf
EVnKm0JXaGtgS1WSU9smBF/xb2sABO045k0vAMq9Rt6He7zqTigYHvo8dPOGubFL
4pQICWTtYitG9fgytJRBrvN/+rEovCoKRvqb5zQJCUgiKOrxj91bt2VSMvGufsol
P2Cvh/1V/MS1c9E9oYTvUVEeEpQMVbbMkMVw+cJRq0VrdbBIrZeeUPpVO6wzPeRc
F/LIYIj0Yeuo/J6HnstQjPm1wEPUXkF0baw7nVB1waET9Bbz0N3RNIAVbeozIBe3
w8L9PN8oZI0CzWobIrtOjn/ulwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOik5vJE
sPPnApBpPhf9pOkLLvxtMB8GA1UdIwQYMBaAFDN7RQ/dyfxwIh2lygl4WIWx0bfM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTgxQi9CQzVDRUFCNkNB
OEExMUVFQjA1NkU2MUZDNEY5QUUwMi9NM3RGRDkzSl9IQWlIYVhLQ1hoWWhiSFJ0
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL00zdEZEOTNKX0hBaUhhWEtDWGhZaGJIUnQ4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTgxQi9CQzVDRUFCNkNBOEExMUVFQjA1NkU2MUZDNEY5QUUwMi9NM3RGRDkzSl9I
QWlIYVhLQ1hoWWhiSFJ0OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVdRakx0Njqr0rueGIpOW49BhJhL5fIwJ5kISPEeGibIb/kStjuHJX
9opLw4ccZG/qybxVSF5n1aKbP3EOrkuuqU4pfRp7/R49ki4qPYAo/h4zhRYOkMv7
LB74I4/qA+5ptUPqltWsW+fY+Qgga9GEmi/BrUzDc4q9SrOss92/0uRHbuTYjd+6
qoNeMrJ153khjd0/esW8DXD9Xw0pkTSkDPiThK+RgksPW/IeVso/VTZ9NrdOXSq2
qah9vuESBWh3XXl1RpeywGC07RSemdyyAH476W5iCnUcVqV5woPUgZ/4BazioWwS
ou+Ir0Tgl+2PCQRCQStVzB8Dusd42TG0
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:01:56 2025 by rpki-client