
$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
File: 17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json)
Hash identifier: T/9bx0R8ib65cf4wu43nlc32kjBEFSPtkMotqLUV4Vw=
Subject key identifier: A9:B2:86:2E:C7:6E:06:AD:D6:58:FA:BC:96:D2:10:CD:40:6E:99:53
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Certificate issuer: /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial: 1CFBA984F95B12613425486B19CEACCED4D5FE64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
Manifest number: 018D
Signing time: Fri 24 Jul 2026 02:46:29 +0000
Manifest this update: Fri 24 Jul 2026 02:41:29 +0000
Manifest next update: Sat 25 Jul 2026 03:58:29 +0000
Files and hashes: 1: 323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa (hash: 0cKeFRvMg4K7CjG6EjM23reqsbS6dbzuJZqiCsKqNyg=)
2: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: maIFbVP2QxAtoEnGy5L0kwMesK8T0myV9Zg4EWLm28k=)
3: 323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa (hash: 6d79MjPujLDyKtMpkk4jphJnh2+RAK01Ho2cDxHKrKM=)
4: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: 9FXIqtvqlI1b6k7H88FgG5bPVoeiPlgW3c8/gsoxMSo=)
5: 323030313a6466343a353134383a3a2f34382d3438203d3e2039383333.roa (hash: zl/9BBoJJ3neyY8UfSuYMMT4qwgA84XRS4rr+sykVxA=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:fb:a9:84:f9:5b:12:61:34:25:48:6b:19:ce:ac:ce:d4:d5:fe:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Validity
Not Before: Jul 24 02:41:29 2026 GMT
Not After : Jul 25 03:58:29 2026 GMT
Subject: CN=A9B2862EC76E06ADD658FABC96D210CD406E9953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:5f:6f:f0:5d:0d:b1:b9:50:cf:23:cc:d7:
1c:6a:6e:69:ff:79:de:75:02:41:61:29:ff:9e:ac:
b1:08:84:6a:1a:ae:b9:8b:fb:6f:47:6a:b4:9c:35:
f6:8b:c1:64:8c:dc:4c:3c:ea:a0:1d:2e:be:c0:6d:
2a:22:49:5d:65:79:0a:9b:c8:65:03:f0:1b:74:52:
7f:a8:f4:36:d9:84:46:17:6b:a7:66:9a:f6:05:52:
dd:a5:6d:c3:ef:28:8d:b0:89:7c:ae:71:b3:21:8c:
93:5a:fd:c3:a5:38:c3:63:4d:2d:06:34:0e:f1:c3:
4a:e5:15:cb:91:00:0f:83:29:e0:61:97:d2:fc:88:
5f:27:b8:2e:cd:0b:62:90:1b:ef:2e:9a:9e:04:b0:
73:dc:5e:f8:05:18:d0:0c:80:e0:0a:93:e4:30:0d:
9e:9a:9a:25:83:99:b6:a8:ff:b0:20:38:0e:78:b7:
e6:6f:15:15:05:7c:10:8b:91:16:ed:e2:52:6a:81:
b2:e5:c3:fd:47:b3:ac:5f:38:61:f8:7f:da:4b:de:
b3:1b:bd:54:39:1f:d2:35:a5:57:6b:1b:1e:50:b6:
1c:f7:10:04:52:af:12:c8:96:b9:de:04:08:a4:73:
ff:9c:44:f2:c2:7f:54:cd:79:01:0b:88:5b:8f:27:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B2:86:2E:C7:6E:06:AD:D6:58:FA:BC:96:D2:10:CD:40:6E:99:53
X509v3 Authority Key Identifier:
keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:34:66:56:30:c0:7f:c9:86:e7:37:59:c4:58:c8:20:12:74:
b6:9c:43:6f:c5:e1:ec:17:5b:ab:3e:30:fc:66:39:6d:8e:72:
ab:fa:27:36:7c:5f:35:97:dd:ee:3a:45:ee:43:10:73:e2:bf:
8a:ee:f0:8d:96:f5:de:a2:6b:10:d7:28:95:40:98:68:d1:6f:
47:6e:3c:bc:16:1c:06:9c:ec:17:86:09:4e:24:56:45:50:b6:
14:6f:c6:4f:bf:6f:a1:db:9a:a2:1d:f4:be:73:0a:10:86:58:
52:13:2a:60:46:df:6e:fb:6e:20:49:0a:7c:d9:e9:43:32:87:
6d:e4:c1:59:fa:5e:b9:8f:e8:47:df:de:7e:e2:75:24:1f:7d:
66:88:7e:50:17:3c:bd:e1:cb:06:b0:ea:c8:9a:2e:cd:85:77:
45:b8:c3:37:64:dd:97:3b:a4:ad:e9:07:35:f9:f6:68:5c:e1:
64:bf:22:fa:dc:fd:02:9c:36:0b:4d:10:b3:82:72:49:52:40:
be:aa:e9:a9:34:93:42:3c:3c:20:2f:d1:be:4f:c1:b4:81:4d:
1c:58:46:99:8b:e3:e5:4e:64:e4:67:eb:d0:d7:f9:9d:25:fb:
67:6f:8d:16:63:22:88:cc:57:db:a2:ba:88:57:93:04:93:97:
26:1d:6b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:18:11 2026 by rpki-client