
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier: cNhIBpscsXfa6BVMzxAEgPJthbskyND9cEot9YJ5zHk=
Subject key identifier: DE:7D:3D:F2:6D:AA:76:92:22:DF:79:30:A5:74:6D:3E:16:58:71:F6
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial: 3083573ABE05E41D9D059351AE52D5D62B88DD6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number: 02C7
Signing time: Fri 17 Apr 2026 05:08:35 +0000
Manifest this update: Fri 17 Apr 2026 05:03:35 +0000
Manifest next update: Sat 18 Apr 2026 07:51:35 +0000
Files and hashes: 1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: 1rJFbgs4BdEi8AOF2WR1Bex9UlhDq17Yhowuh81ulJY=)
2: 3130332e3232332e3138342e302f32332d3234203d3e20313335303237.roa (hash: g8Tw9Ss3ogaL2/E788moJ1DCuoJI7+nYIfSvQGup0po=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:51:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:83:57:3a:be:05:e4:1d:9d:05:93:51:ae:52:d5:d6:2b:88:dd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Validity
Not Before: Apr 17 05:03:35 2026 GMT
Not After : Apr 18 07:51:35 2026 GMT
Subject: CN=DE7D3DF26DAA769222DF7930A5746D3E165871F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:55:4d:88:75:83:a9:fb:4b:22:2c:bc:4f:38:
85:35:51:8b:56:55:94:60:e7:98:27:01:d4:27:30:
76:a0:29:f2:a3:23:9a:7e:06:f7:a1:ef:a2:9c:4d:
67:36:36:f1:98:58:02:9b:d8:d2:fe:4c:59:c5:07:
57:4c:08:cd:a8:ee:8a:70:50:49:1a:7f:af:f6:ce:
62:50:47:b1:96:f2:1e:0b:a7:02:b2:83:5a:37:a5:
d0:30:3b:90:cf:66:af:bb:b6:48:15:a8:09:95:e7:
bf:9a:ee:e1:5a:56:3f:ca:a9:3b:90:3f:34:22:52:
2f:c1:51:1a:3d:4b:3c:5f:06:06:7d:ec:9a:39:28:
89:23:ae:05:a5:21:67:64:c7:e4:e1:9b:24:11:d6:
7c:9e:07:8b:80:7f:5e:3f:42:28:95:f0:82:87:cb:
f7:55:75:3b:79:9b:34:fe:4b:8b:2e:23:5e:a3:7a:
46:79:b8:7b:9d:1c:e5:66:97:c6:f5:eb:0d:52:b6:
b2:dc:41:68:1a:b0:d9:15:4b:96:f6:5e:f1:67:88:
9d:d9:bf:6c:06:da:7b:e5:4e:a0:bd:7e:39:6a:8d:
4a:c0:95:c0:4e:a2:81:6d:4c:7f:65:91:4b:c4:94:
55:53:ba:c0:d3:88:82:24:2d:64:c5:e6:86:5b:c3:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7D:3D:F2:6D:AA:76:92:22:DF:79:30:A5:74:6D:3E:16:58:71:F6
X509v3 Authority Key Identifier:
keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c3:e4:40:f0:7c:3f:73:78:92:d9:e5:e9:0c:71:77:8c:e2:
a8:75:b9:41:43:aa:d6:90:1e:db:af:5e:bb:94:e1:fe:3d:51:
79:be:86:e1:3b:ec:40:ff:d4:8a:86:c3:0f:73:e9:d5:ca:5a:
30:30:d8:30:1a:0a:56:1d:03:29:b1:ac:6f:ba:58:2d:14:b5:
83:a7:ab:32:ca:c2:3d:3c:84:e9:cf:c9:5d:85:b1:8c:95:2f:
b7:35:f2:c4:13:dc:a3:7a:78:56:f0:3d:8d:b1:ca:ac:25:73:
62:47:bd:e7:56:03:1e:85:d7:81:e1:df:65:b1:11:35:fa:93:
ca:90:0e:20:c2:31:6d:0a:3b:8a:5e:3a:ca:cf:07:3a:f5:6a:
a3:03:97:71:8b:25:e2:51:e1:24:40:c2:0c:f2:3b:9d:ac:b0:
b6:84:f8:10:de:75:20:49:32:51:e2:e7:74:38:ef:b5:0d:24:
a6:c1:a3:1b:4c:e3:12:57:00:35:63:44:ea:d5:d2:04:05:d0:
61:14:16:ed:47:9b:8f:41:45:70:a5:fb:2f:37:15:1f:92:89:
63:9d:e4:68:27:31:d2:bf:00:63:73:e9:47:a1:a2:53:7d:63:
d6:6c:5b:f4:c4:df:bd:52:dd:58:51:80:f5:2a:48:76:f0:ef:
aa:3e:6b:e1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUMINXOr4F5B2dBZNRrlLV1iuI3W8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDhCRjcwMDAwMTEwLwYDVQQFEygzMzlGRkE5MzM1
N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwMB4XDTI2MDQxNzA1MDMzNVoX
DTI2MDQxODA3NTEzNVowMzExMC8GA1UEAxMoREU3RDNERjI2REFBNzY5MjIyREY3
OTMwQTU3NDZEM0UxNjU4NzFGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOZVTYh1g6n7SyIsvE84hTVRi1ZVlGDnmCcB1CcwdqAp8qMjmn4G96HvopxN
ZzY28ZhYApvY0v5MWcUHV0wIzajuinBQSRp/r/bOYlBHsZbyHgunArKDWjel0DA7
kM9mr7u2SBWoCZXnv5ru4VpWP8qpO5A/NCJSL8FRGj1LPF8GBn3smjkoiSOuBaUh
Z2TH5OGbJBHWfJ4Hi4B/Xj9CKJXwgofL91V1O3mbNP5Liy4jXqN6Rnm4e50c5WaX
xvXrDVK2stxBaBqw2RVLlvZe8WeIndm/bAbae+VOoL1+OWqNSsCVwE6igW1Mf2WR
S8SUVVO6wNOIgiQtZMXmhlvDYYECAwEAAaOCAhswggIXMB0GA1UdDgQWBBTefT3y
bap2kiLfeTCldG0+Flhx9jAfBgNVHSMEGDAWgBQzn/qTNX+vJhQoKfq/Ilrq5Bc3
8DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJGNzAwMDAvMC8zMzlGRkE5
MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NNV82a3pWX3J5
WVVLQ242dnlKYTZ1UVhOX0EuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJG
NzAwMDAvMC8zMzlGRkE5MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0Yw
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAzMPkQPB8P3N4ktnl6Qxxd4ziqHW5QUOq1pAe269eu5Th/j1R
eb6G4TvsQP/UiobDD3Pp1cpaMDDYMBoKVh0DKbGsb7pYLRS1g6erMsrCPTyE6c/J
XYWxjJUvtzXyxBPco3p4VvA9jbHKrCVzYke951YDHoXXgeHfZbERNfqTypAOIMIx
bQo7il46ys8HOvVqowOXcYsl4lHhJEDCDPI7naywtoT4EN51IEkyUeLndDjvtQ0k
psGjG0zjElcANWNE6tXSBAXQYRQW7Uebj0FFcKX7LzcVH5KJY53kaCcx0r8AY3Pp
R6GiU31j1mxb9MTfvVLdWFGA9SpIdvDvqj5r4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:46:40 2026 by rpki-client