
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier: /ZEMwGivkSWVzytajgKTrilWG4++gGOh0NnprPVVzrI=
Subject key identifier: 8E:8A:47:73:31:18:68:93:C2:BB:F6:BB:EB:1C:13:9F:02:B7:86:22
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial: 35AFDB1B2AEEFBCB440DFD093379FAB2E6844D28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number: 039E
Signing time: Fri 25 Sep 2026 21:46:32 +0000
Manifest this update: Fri 25 Sep 2026 21:41:32 +0000
Manifest next update: Sun 27 Sep 2026 00:55:32 +0000
Files and hashes: 1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: Zp57ukR/XdRuGOggd2HDD2iEsSz8Y6RtV/RypgFlohk=)
2: 3130332e3232332e3138342e302f32332d3234203d3e20313335303237.roa (hash: g8Tw9Ss3ogaL2/E788moJ1DCuoJI7+nYIfSvQGup0po=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 00:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:af:db:1b:2a:ee:fb:cb:44:0d:fd:09:33:79:fa:b2:e6:84:4d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Validity
Not Before: Sep 25 21:41:32 2026 GMT
Not After : Sep 27 00:55:32 2026 GMT
Subject: CN=8E8A477331186893C2BBF6BBEB1C139F02B78622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:49:ec:63:db:c8:ea:84:54:60:4e:e4:8a:
33:75:2d:11:d4:1a:2d:a4:d2:ee:20:24:b7:05:53:
61:49:79:88:11:c9:d0:96:55:f4:10:aa:70:4b:60:
4a:67:00:e6:25:3d:2a:5c:6c:c1:86:93:92:07:df:
f7:5b:34:19:b4:6a:ec:17:e2:66:74:4a:94:e4:dd:
1e:e3:4f:3f:0d:86:65:ff:6c:c1:8b:57:6b:44:b3:
44:79:ca:c2:83:56:c7:8a:9a:02:22:30:96:f5:99:
17:e4:d2:c4:73:43:db:89:1c:22:5e:d6:6e:85:91:
e2:0e:ed:b5:dd:9a:d3:09:26:ab:b2:9c:aa:e9:c8:
9a:6b:a6:3a:bd:48:c3:a6:3f:00:a3:3c:c8:ed:29:
c9:11:93:f8:a1:b1:d3:46:d5:6e:86:02:89:3c:60:
39:e2:70:1d:60:19:4b:00:4c:21:e9:21:4e:06:fe:
56:a8:28:a0:78:4a:0c:9d:40:7a:aa:4e:70:40:83:
71:a0:57:44:2e:18:fb:10:09:23:24:6c:aa:23:66:
7a:2b:cd:97:4c:e3:60:6b:d1:f2:ec:4b:38:66:6c:
aa:3d:c9:bf:82:f2:b3:78:78:0b:9f:40:0e:9e:94:
af:f8:d3:3c:08:e9:5f:fc:4d:8a:1c:f4:5c:e4:51:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8A:47:73:31:18:68:93:C2:BB:F6:BB:EB:1C:13:9F:02:B7:86:22
X509v3 Authority Key Identifier:
keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:af:04:d0:30:1c:72:d4:5a:1f:fa:ed:92:44:21:e7:98:7c:
be:80:73:a4:a3:d5:bd:28:d5:61:b0:f3:44:e0:6c:2b:51:39:
ed:bc:03:ec:ed:10:04:eb:29:c4:51:5d:d5:0f:46:b4:fd:54:
d2:ce:09:9e:73:73:ed:15:5e:3c:0b:2e:4e:4c:6e:c6:56:97:
b7:cd:bb:da:17:10:81:a5:74:67:27:4e:15:6d:bd:33:5f:e5:
a8:77:98:0d:bc:01:d3:e2:f4:17:64:6b:4a:04:e4:62:33:56:
37:9e:fc:a6:86:07:11:eb:8e:9d:36:c2:60:c5:95:ef:08:b2:
4d:75:5e:61:e5:52:4d:3f:f5:00:10:b9:da:9b:b5:a8:f6:fd:
e0:ad:27:29:6e:30:88:82:4c:03:7d:31:2f:4c:de:69:cd:4f:
97:d6:18:1a:14:a1:9c:ae:7a:c4:32:d4:e8:c6:8e:17:76:b5:
0f:f8:c7:ce:1a:27:8c:3b:dc:ad:2e:8d:40:25:63:a5:e7:b8:
e8:9d:61:0c:a8:2f:21:ec:03:20:67:51:49:e6:99:a9:be:44:
28:46:79:12:2e:43:ec:c8:e3:10:59:14:a3:9e:7b:4c:95:e2:
0f:de:72:a0:6b:19:52:eb:dc:87:87:bc:ee:91:d7:68:a3:62:
5b:63:66:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:18:22 2026 by rpki-client