
$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
File: 17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json)
Hash identifier: e1BMhxH+jGRjM1wdtKUjoXiKJ3YLeNDV4Yui/4HPDh0=
Subject key identifier: 3A:48:EF:98:97:32:4C:F2:C8:F0:B7:68:4E:8C:A6:5C:DE:AD:46:55
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Certificate issuer: /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial: 543540DD739CEE3CD4EC4A4EDD6457FE957AE5DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
Manifest number: 013A
Signing time: Wed 13 May 2026 10:04:52 +0000
Manifest this update: Wed 13 May 2026 09:59:52 +0000
Manifest next update: Thu 14 May 2026 10:18:52 +0000
Files and hashes: 1: 323030313a6466343a353134383a3a2f34382d3438203d3e2039383333.roa (hash: zl/9BBoJJ3neyY8UfSuYMMT4qwgA84XRS4rr+sykVxA=)
2: 323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa (hash: 6d79MjPujLDyKtMpkk4jphJnh2+RAK01Ho2cDxHKrKM=)
3: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: HOBlUUzXIgqWknT1VOL1nB3qMa6Fu6vRC1OMoEBjewg=)
4: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: 8uk0QBxvr4ce0ErguF7oQjKw9L2WIQXaH5g5goeutDs=)
5: 323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa (hash: 0cKeFRvMg4K7CjG6EjM23reqsbS6dbzuJZqiCsKqNyg=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:35:40:dd:73:9c:ee:3c:d4:ec:4a:4e:dd:64:57:fe:95:7a:e5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Validity
Not Before: May 13 09:59:52 2026 GMT
Not After : May 14 10:18:52 2026 GMT
Subject: CN=3A48EF9897324CF2C8F0B7684E8CA65CDEAD4655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8a:a6:e3:d4:da:19:3c:ee:23:58:84:57:6b:
32:81:2d:d7:fa:ad:a9:95:03:ec:7a:f6:8b:5c:bd:
20:f7:d0:97:ca:8d:a4:91:fc:b5:c3:20:bc:3c:db:
86:8c:74:00:55:46:23:e5:b9:b1:a3:8f:4d:6d:41:
6d:17:48:a8:48:f0:24:5c:ce:0e:23:0f:1a:4c:99:
66:65:c7:e7:16:5e:4e:30:b2:c7:44:ab:c9:15:c4:
de:64:75:f5:d8:46:c1:7b:50:3c:17:43:b2:13:a3:
44:fe:6a:7d:08:ad:e6:a3:2e:3f:46:14:b6:8f:a4:
4f:97:d2:60:45:51:63:df:4d:f1:d2:06:11:63:5f:
e1:79:67:05:d0:cd:f1:64:3f:d8:13:9e:f3:7a:b5:
b6:8a:6b:34:c6:7d:54:5e:f8:91:f2:5a:99:f0:42:
ac:2e:ea:b4:25:54:df:b6:c5:42:a7:0c:ff:e3:52:
85:2d:90:30:e0:d4:f7:53:a0:f7:c9:fa:6f:a8:8e:
ff:2a:d0:c8:52:40:df:e6:96:25:02:bd:27:cf:b5:
28:8e:b1:15:c9:84:b8:ab:20:34:b8:40:a2:05:81:
4d:2d:ec:c2:e2:ff:50:65:bc:ce:5e:04:1c:85:4f:
a4:d9:ee:41:28:9b:c3:a6:6d:a7:ed:03:73:91:8f:
db:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:EF:98:97:32:4C:F2:C8:F0:B7:68:4E:8C:A6:5C:DE:AD:46:55
X509v3 Authority Key Identifier:
keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1d:92:8c:fd:59:bc:aa:32:7a:cd:3f:17:98:01:15:b0:15:
ef:60:ae:9c:26:0a:69:29:f7:70:f5:47:38:ae:0c:52:8a:12:
72:3d:18:c6:e0:e0:b0:a3:b1:ed:2c:6d:b7:bf:c1:df:9b:80:
3d:6c:ca:9a:ae:f6:f1:59:41:1b:6a:dd:85:10:db:bf:bf:1a:
93:dc:d2:c6:22:ff:e1:75:4c:16:d5:73:f4:f8:a5:bd:7b:c6:
f8:d9:63:16:0d:1e:cc:d9:82:0f:40:63:94:b9:c4:0a:8e:a3:
f1:13:6e:15:87:b0:d0:2f:79:74:32:79:af:4c:00:83:98:d3:
eb:4e:e7:ef:3b:0e:a0:ab:74:df:a7:3c:21:e5:f6:e6:5a:3b:
2b:c4:a8:27:d2:c4:ff:05:83:ec:74:98:74:0e:c3:4b:ea:66:
71:74:30:a2:77:ed:83:17:fc:cc:ac:82:14:40:ea:83:f3:f8:
13:fb:53:58:dc:95:8a:cc:05:e5:cd:a8:f8:6a:aa:b8:4b:87:
f2:c3:c1:4a:39:da:f1:97:b6:fc:c8:5c:36:0a:63:1c:0c:ec:
c6:6e:f3:ea:20:6b:e9:8c:b9:fd:d5:b2:2f:8e:e4:28:fc:73:
5e:3d:53:00:87:c9:4c:2d:67:ba:e4:c3:2f:0e:98:94:06:fe:
42:98:39:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:29:26 2026 by rpki-client