
$ rpki-client -vvf rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
File: 76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft (raw, json)
Hash identifier: YPlN28gV6qCeAwV5h8In7X8N4zznmjLBJEJUTUlxsWo=
Subject key identifier: AF:49:A3:E2:E2:2A:EE:00:50:45:DF:10:BB:52:5E:AC:95:DD:32:F8
Authority key identifier: 76:99:31:40:DD:5A:B2:2E:A3:3E:CE:7A:92:92:FA:3C:B4:20:C3:68
Certificate issuer: /CN=A916FC1D0000/serialNumber=76993140DD5AB22EA33ECE7A9292FA3CB420C368
Certificate serial: 06167101B194967660C9E31CF0E025DC6872D802
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
Manifest number: 74
Signing time: Wed 25 Mar 2026 16:38:33 +0000
Manifest this update: Wed 25 Mar 2026 16:33:33 +0000
Manifest next update: Thu 26 Mar 2026 17:35:33 +0000
Files and hashes: 1: 76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl (hash: LdwFJiwX76qtjdjrWyAJFQdrjP7eLJC2HS486Rln8Q8=)
2: 34392e3231332e36322e302f32332d3234203d3e20323130343430.roa (hash: AUjuz8k+523UsNo4frUmHqvXrlcSAfH5RY7JCVdW0gc=)
3: AS154185.asa (hash: jaBlNvR/dh5eNSvuUTvWk6BJKRzYhMTUCeVJYrxv+wQ=)
4: 34392e3231332e36322e302f32332d3234203d3e20323133363035.roa (hash: 87sOgoQHgyzpeMeBH8xm7CrlJ6qlzeJ5m+eZopKCPHs=)
5: 323030313a6466363a34303a3a2f34382d3438203d3e20313534313535.roa (hash: 1EDvMbgTw6EnvKXCa2bvaz7hq+g25XWMa6y21HtIr7k=)
6: AS154155.asa (hash: 6/OP71VE0CAHaxu0TCLh1W8MZdHWtiUPC+w4wCQ6Gtw=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl
rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 17:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:16:71:01:b1:94:96:76:60:c9:e3:1c:f0:e0:25:dc:68:72:d8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FC1D0000, serialNumber=76993140DD5AB22EA33ECE7A9292FA3CB420C368
Validity
Not Before: Mar 25 16:33:33 2026 GMT
Not After : Mar 26 17:35:33 2026 GMT
Subject: CN=AF49A3E2E22AEE005045DF10BB525EAC95DD32F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:7a:4f:c1:9e:4a:40:a1:83:4d:8a:65:da:
61:d7:5d:59:bb:d0:d1:98:e1:ea:31:c4:99:53:d3:
c0:80:de:77:20:25:4d:09:ff:ff:ae:e2:c1:50:2f:
b4:a0:46:ff:45:38:74:43:c4:db:ff:24:06:b7:48:
fe:56:13:aa:4b:fa:98:e1:71:f7:f8:d4:c7:77:fd:
e1:3a:a7:40:94:1c:2b:0d:15:e5:75:a0:3d:93:02:
5b:67:23:b9:34:02:b9:6d:ac:34:6c:2a:48:28:c5:
11:c8:58:64:db:59:1e:f7:e3:30:5b:35:6a:8e:7a:
c2:69:c4:18:27:c4:39:60:c6:17:ed:8e:6d:dd:24:
89:7d:ad:98:7b:ab:39:03:2c:f0:25:7d:97:8a:c6:
6d:ba:a8:9f:55:2d:84:16:ad:d8:fe:45:e3:ec:38:
52:d4:a1:b0:09:b5:11:81:f3:1e:7f:bf:63:05:fb:
fb:da:44:a6:c9:8b:ba:f8:79:55:7e:04:a2:01:37:
81:91:16:23:5c:90:b8:7a:8a:0a:ad:6e:51:ae:c8:
87:ab:74:0a:36:d6:fe:37:f1:3a:ea:5e:dd:13:51:
f6:7f:a5:27:68:8c:b8:ce:30:df:42:9c:53:9f:e6:
dd:91:3e:16:6e:f1:65:fa:5c:fc:a1:98:6d:3e:69:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:49:A3:E2:E2:2A:EE:00:50:45:DF:10:BB:52:5E:AC:95:DD:32:F8
X509v3 Authority Key Identifier:
keyid:76:99:31:40:DD:5A:B2:2E:A3:3E:CE:7A:92:92:FA:3C:B4:20:C3:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:37:09:f6:d3:cd:05:94:e5:91:e1:f1:7b:36:30:75:cc:62:
e3:49:96:ea:23:9b:80:06:0f:49:e0:95:05:f3:12:bc:1d:ad:
b6:b5:55:01:0a:47:20:34:8c:40:1d:51:04:4a:10:54:e9:30:
c9:21:ba:e7:32:c5:9a:38:6d:2b:81:b0:c7:1a:3f:a1:5b:60:
55:d6:d9:5c:a7:7b:d0:63:e3:5d:fc:e7:53:5e:82:0c:69:7b:
96:57:a5:c1:eb:1b:e1:6d:ab:55:3c:11:fa:95:db:97:29:53:
92:6a:40:1e:14:50:73:8c:9a:fa:e0:6c:01:af:28:8c:b8:97:
2d:b0:14:91:f9:aa:62:b9:01:a6:a8:2b:85:86:26:ad:cf:6d:
72:7a:23:cc:78:5f:1d:c3:ca:9c:0c:f4:af:6c:ec:59:bd:29:
05:17:4a:26:0a:a8:4a:0e:db:43:67:8d:d5:27:b7:02:dc:f4:
36:42:ce:fe:97:0d:9a:90:f1:e4:d8:b2:40:7a:65:44:72:a7:
87:e8:4e:ad:36:e0:d5:39:f7:55:fb:71:a2:48:92:df:e8:3c:
55:07:c0:13:b3:3e:ce:5d:fe:63:00:83:7d:3c:25:14:08:22:
f6:f7:7b:b0:92:1c:36:c4:11:fd:db:66:ab:ff:15:42:4a:4d:
bc:65:52:02
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBhZxAbGUlnZgyeMc8OAl3Ghy2AIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxNkZDMUQwMDAwMTEwLwYDVQQFEyg3Njk5MzE0MERE
NUFCMjJFQTMzRUNFN0E5MjkyRkEzQ0I0MjBDMzY4MB4XDTI2MDMyNTE2MzMzM1oX
DTI2MDMyNjE3MzUzM1owMzExMC8GA1UEAxMoQUY0OUEzRTJFMjJBRUUwMDUwNDVE
RjEwQkI1MjVFQUM5NUREMzJGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK2/ek/BnkpAoYNNimXaYdddWbvQ0Zjh6jHEmVPTwIDedyAlTQn//67iwVAv
tKBG/0U4dEPE2/8kBrdI/lYTqkv6mOFx9/jUx3f94TqnQJQcKw0V5XWgPZMCW2cj
uTQCuW2sNGwqSCjFEchYZNtZHvfjMFs1ao56wmnEGCfEOWDGF+2Obd0kiX2tmHur
OQMs8CV9l4rGbbqon1UthBat2P5F4+w4UtShsAm1EYHzHn+/YwX7+9pEpsmLuvh5
VX4EogE3gZEWI1yQuHqKCq1uUa7Ih6t0CjbW/jfxOupe3RNR9n+lJ2iMuM4w30Kc
U5/m3ZE+Fm7xZfpc/KGYbT5pRM0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBSvSaPi
4iruAFBF3xC7Ul6sld0y+DAfBgNVHSMEGDAWgBR2mTFA3VqyLqM+znqSkvo8tCDD
aDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE2RkMxRDAwMDAvMC83Njk5MzE0
MERENUFCMjJFQTMzRUNFN0E5MjkyRkEzQ0I0MjBDMzY4LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9kcGt4UU4xYXNp
NmpQczU2a3BMNlBMUWd3MmcuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE2RkMx
RDAwMDAvMC83Njk5MzE0MERENUFCMjJFQTMzRUNFN0E5MjkyRkEzQ0I0MjBDMzY4
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAJDcJ9tPNBZTlkeHxezYwdcxi40mW6iObgAYPSeCVBfMSvB2t
trVVAQpHIDSMQB1RBEoQVOkwySG65zLFmjhtK4Gwxxo/oVtgVdbZXKd70GPjXfzn
U16CDGl7llelwesb4W2rVTwR+pXblylTkmpAHhRQc4ya+uBsAa8ojLiXLbAUkfmq
YrkBpqgrhYYmrc9tcnojzHhfHcPKnAz0r2zsWb0pBRdKJgqoSg7bQ2eN1Se3Atz0
NkLO/pcNmpDx5NiyQHplRHKnh+hOrTbg1Tn3VftxokiS3+g8VQfAE7M+zl3+YwCD
fTwlFAgi9vd7sJIcNsQR/dtmq/8VQkpNvGVSAg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:57 2026 by rpki-client