
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier: 3edrVDsE5p9x4B3cPqqule+MWLOvZOTfOGGUCAwDei4=
Subject key identifier: 4B:35:8B:23:31:CD:EF:F9:F7:9F:3F:60:CC:D8:F6:5F:2F:27:07:49
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial: 7C58E8E8806BEA7683DD86F46C708574BCA41D12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number: 034F
Signing time: Tue 28 Jul 2026 09:11:09 +0000
Manifest this update: Tue 28 Jul 2026 09:06:09 +0000
Manifest next update: Wed 29 Jul 2026 10:43:09 +0000
Files and hashes: 1: 3130332e3232332e3138342e302f32332d3234203d3e20313335303237.roa (hash: g8Tw9Ss3ogaL2/E788moJ1DCuoJI7+nYIfSvQGup0po=)
2: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: 4dHHeiYoYzM3S4Ddl4XiN1YTbaBrC7AU/1TNZkz20sM=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 10:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:58:e8:e8:80:6b:ea:76:83:dd:86:f4:6c:70:85:74:bc:a4:1d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Validity
Not Before: Jul 28 09:06:09 2026 GMT
Not After : Jul 29 10:43:09 2026 GMT
Subject: CN=4B358B2331CDEFF9F79F3F60CCD8F65F2F270749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:a9:11:29:4e:e3:90:fd:f3:79:1d:fe:0d:
6f:3e:0c:97:5f:76:bc:4e:24:aa:65:4a:ba:51:ca:
65:d6:ba:8d:c1:e4:e1:aa:e7:3f:b8:d6:28:df:af:
2a:3b:f6:2a:29:bd:d0:95:fc:4a:d9:fa:87:57:3d:
e6:b8:ee:c6:53:7d:e2:66:18:f5:01:e3:47:88:42:
fe:b6:03:7c:56:5d:55:37:63:fe:06:cd:05:d0:30:
48:26:79:5b:b2:40:e5:4d:91:e6:23:c5:64:95:b7:
27:e3:19:2c:e0:1f:06:4a:2b:3e:e0:0c:7d:bd:9a:
4e:8d:13:cf:38:7a:20:6b:c6:3d:02:b3:63:b1:70:
8c:b9:89:55:c8:be:d4:2b:72:8b:f1:76:cc:5e:0c:
7e:df:c7:c4:a9:84:b3:03:3d:c1:e9:c8:40:49:e8:
bf:95:e8:f8:f0:75:ca:ea:5c:f6:92:96:7f:20:de:
2b:c7:70:0d:f3:a2:e1:70:c6:f5:c6:f5:5c:91:4c:
d5:ab:c7:58:30:d5:10:be:69:75:d1:83:b4:74:c0:
28:ca:20:55:36:87:3b:34:59:92:51:4a:79:0f:af:
23:47:ff:3e:67:ad:ed:99:34:32:48:2e:6a:93:01:
72:4b:d3:92:32:f2:bb:b7:96:7e:f6:19:1a:ec:26:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:35:8B:23:31:CD:EF:F9:F7:9F:3F:60:CC:D8:F6:5F:2F:27:07:49
X509v3 Authority Key Identifier:
keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bf:b2:fc:41:f2:80:f1:ba:c3:45:dc:7d:e9:71:ad:91:12:
c3:bb:63:b1:0f:00:34:55:44:8e:0a:80:5a:13:32:c2:bf:86:
05:89:89:79:d3:a4:a2:39:f6:17:09:fc:d8:56:07:68:6a:c3:
02:49:7c:bf:b0:b1:25:94:de:34:13:8c:ee:d9:93:a5:a9:ed:
b5:ef:9e:4e:19:e0:5a:9f:e8:af:5b:a3:64:ae:fd:e0:ef:c0:
46:bf:82:d0:79:6a:cb:a3:31:c7:7d:66:88:92:b4:54:35:90:
fa:16:63:10:bb:32:46:99:3b:11:fe:d9:2d:6c:81:40:1b:65:
4d:a3:4b:4d:f3:ab:65:cc:ce:bc:54:ba:cc:15:7a:74:df:69:
05:71:84:7f:5e:2d:2c:00:2e:5d:c7:fa:1f:f8:3e:e4:1a:f6:
0a:8b:52:e0:ee:6f:e7:c0:e8:1b:3c:2b:a3:b8:08:c1:2e:3d:
8e:7b:3e:fa:db:f9:b8:2a:48:6d:f2:78:53:3f:1d:83:69:33:
46:b0:af:22:c3:24:39:8a:f5:88:04:f7:ec:c0:ef:ef:58:04:
cd:65:af:f1:9b:49:d7:d3:b8:d3:66:97:97:f4:35:31:42:de:
3e:64:43:5a:bb:ec:1c:2a:e2:7e:4a:da:a3:76:70:a8:52:68:
1b:d3:0e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:49:54 2026 by rpki-client