
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier: RnOur/tYMzF1uOFQGplM2OI9E0WIzsm4eXrHQq/q3KE=
Subject key identifier: A9:ED:96:6B:07:51:C0:69:0D:52:A3:F6:10:2A:7E:26:5B:A2:4A:D4
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial: 19AA45B5B56E714950EFFFE91F972DB4C36CEDAD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number: 0349
Signing time: Thu 23 Jul 2026 20:01:09 +0000
Manifest this update: Thu 23 Jul 2026 19:56:09 +0000
Manifest next update: Fri 24 Jul 2026 23:56:09 +0000
Files and hashes: 1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: MS5tYEoBlwUz9SQKejknSC1GHZ0jEIjiqvtKFmg9XH0=)
2: 3130332e3232332e3138342e302f32332d3234203d3e20313335303237.roa (hash: g8Tw9Ss3ogaL2/E788moJ1DCuoJI7+nYIfSvQGup0po=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:aa:45:b5:b5:6e:71:49:50:ef:ff:e9:1f:97:2d:b4:c3:6c:ed:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Validity
Not Before: Jul 23 19:56:09 2026 GMT
Not After : Jul 24 23:56:09 2026 GMT
Subject: CN=A9ED966B0751C0690D52A3F6102A7E265BA24AD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:6b:d0:a4:fe:66:25:6c:45:b8:d4:9e:e7:
22:9d:5e:73:48:dd:d9:aa:81:2f:cf:65:b4:13:84:
f6:7c:5c:0f:81:3c:e6:3a:2c:3e:eb:2e:d2:60:ff:
5a:01:a0:ad:64:a6:0a:62:96:ab:8e:97:d2:f4:01:
07:dc:37:4e:c8:ee:5d:73:c3:9a:78:34:45:5d:a3:
94:ca:28:d6:9d:20:42:2d:bc:e5:7a:76:00:b4:55:
bd:7f:72:ee:45:be:8d:cd:b1:9c:a7:75:3a:cb:e6:
e5:9d:34:24:77:3a:a0:e9:13:b0:49:4c:02:91:17:
8a:45:cb:78:1e:a7:76:22:a6:83:56:7b:64:a6:f8:
d7:58:31:38:28:54:d8:f9:d9:3a:7b:aa:23:ca:8d:
ff:4d:41:27:d1:12:16:37:b2:b3:6a:11:f6:09:8a:
df:8b:0c:e5:e1:1c:58:35:35:5d:15:b3:91:1e:76:
df:d0:82:76:b3:6c:eb:33:47:2d:9c:3a:d9:1c:01:
cf:95:33:26:b5:9f:0c:3f:f4:1f:6b:50:13:12:ea:
cb:f8:d8:17:4a:40:69:d9:8c:45:15:ed:bb:e2:af:
c3:19:51:b3:fe:72:dd:f2:2c:31:7c:a4:9c:f1:45:
63:21:c9:0d:fb:97:d2:71:14:37:02:e9:44:7d:87:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:ED:96:6B:07:51:C0:69:0D:52:A3:F6:10:2A:7E:26:5B:A2:4A:D4
X509v3 Authority Key Identifier:
keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:40:80:61:7e:3a:3d:23:28:66:1a:31:91:e7:36:1f:ca:8f:
ae:59:60:41:6c:9e:70:a8:a1:c7:61:b0:12:bc:3a:2e:8c:a0:
48:e7:af:20:33:7e:63:02:e7:5f:9e:09:bf:63:60:f7:4f:2f:
d7:b1:73:f3:29:d7:5f:63:a4:df:cd:e2:8c:4a:87:2f:30:74:
18:61:91:9c:c1:1e:d2:1e:84:06:09:30:89:ea:62:cc:10:52:
47:50:1d:6c:a3:91:5a:30:64:73:c6:f3:97:ca:2d:3f:48:93:
8a:97:af:75:92:59:b4:b2:55:af:c4:e3:db:a0:16:5d:ef:f1:
4c:df:f0:80:a6:cb:ee:76:0a:e0:0f:cf:26:01:a3:52:06:66:
c0:d7:20:3d:6b:4e:ab:54:1b:6c:f6:ac:c7:5c:65:8b:5d:cd:
02:15:96:f0:0a:c6:39:51:b0:69:17:2e:68:e6:06:e6:7f:30:
f4:1d:e9:35:c3:76:91:c5:62:cb:df:ff:34:bc:d3:4f:85:55:
b5:58:a7:cf:1f:2e:d9:71:96:5c:60:d4:41:e0:e0:81:71:5f:
b9:1f:82:5a:df:0e:f5:6d:9f:5d:8b:65:d6:8c:58:2d:1c:df:
d0:a4:a0:7f:07:a3:db:7c:d5:03:eb:e6:eb:f8:a8:28:7a:2f:
55:6b:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:19:48 2026 by rpki-client