
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
File: 76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft (raw, json)
Hash identifier: eNFvIX+N5MDUAlgNk2skBmlwfAgLTRFbfTdD3Jmo8vk=
Subject key identifier: 2C:1C:97:9B:98:E1:F3:64:E6:1A:2A:C3:AD:FC:9B:C7:71:AA:2E:36
Authority key identifier: 76:99:31:40:DD:5A:B2:2E:A3:3E:CE:7A:92:92:FA:3C:B4:20:C3:68
Certificate issuer: /CN=A916FC1D0000/serialNumber=76993140DD5AB22EA33ECE7A9292FA3CB420C368
Certificate serial: 0BF540220F0126B171F7E62F42B5AE7AFE6AE5AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
Manifest number: 0162
Signing time: Mon 21 Sep 2026 19:13:14 +0000
Manifest this update: Mon 21 Sep 2026 19:08:14 +0000
Manifest next update: Tue 22 Sep 2026 20:28:14 +0000
Files and hashes: 1: AS154155.asa (hash: 6/OP71VE0CAHaxu0TCLh1W8MZdHWtiUPC+w4wCQ6Gtw=)
2: 34392e3231332e36322e302f32332d3234203d3e20323130343430.roa (hash: AUjuz8k+523UsNo4frUmHqvXrlcSAfH5RY7JCVdW0gc=)
3: AS154185.asa (hash: jaBlNvR/dh5eNSvuUTvWk6BJKRzYhMTUCeVJYrxv+wQ=)
4: 76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl (hash: h6D2EThNRYL0bfFadJMukFJJWtooMgRhtI/O7yVQno0=)
5: 34392e3231332e36322e302f32332d3234203d3e20323133363035.roa (hash: 87sOgoQHgyzpeMeBH8xm7CrlJ6qlzeJ5m+eZopKCPHs=)
6: 323030313a6466363a34303a3a2f34382d3438203d3e20313534313535.roa (hash: 1EDvMbgTw6EnvKXCa2bvaz7hq+g25XWMa6y21HtIr7k=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl
rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 20:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f5:40:22:0f:01:26:b1:71:f7:e6:2f:42:b5:ae:7a:fe:6a:e5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FC1D0000, serialNumber=76993140DD5AB22EA33ECE7A9292FA3CB420C368
Validity
Not Before: Sep 21 19:08:14 2026 GMT
Not After : Sep 22 20:28:14 2026 GMT
Subject: CN=2C1C979B98E1F364E61A2AC3ADFC9BC771AA2E36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:09:c1:ea:09:f8:5c:64:d3:91:1b:99:4c:
94:a4:d2:4d:d8:c8:a5:fa:00:fa:4a:13:22:31:8f:
c5:0f:55:c2:45:de:07:fe:e0:c0:02:45:87:d8:ce:
d8:f7:55:6b:6a:1f:41:2a:10:0c:46:ea:b0:e4:1c:
b8:b0:13:c6:a8:db:52:0c:c3:1e:7b:4b:f6:94:13:
a7:8c:01:9d:b2:37:44:ca:a1:af:9e:04:7c:ec:83:
5e:1f:be:95:3f:ad:f7:33:57:68:1a:d3:c4:a9:69:
65:2d:87:2d:50:b3:cd:02:86:33:44:bc:f2:45:f5:
89:d7:97:39:34:d0:b1:28:07:fe:a5:81:5c:ec:fb:
bc:e3:16:39:3a:6a:f0:c7:4c:87:d1:a8:8c:fe:9a:
a4:26:32:db:60:c3:93:40:4b:10:37:8a:47:9f:3d:
46:9a:52:c8:a0:94:83:4b:cd:d3:67:b4:d4:9c:62:
b3:dc:3b:5d:d8:64:0a:49:b6:62:53:2b:03:e2:6f:
2f:f4:00:1a:94:16:c4:66:09:4a:ff:c0:33:40:2c:
72:30:07:6b:8b:d8:4e:dd:5b:5a:83:ef:c4:f5:82:
97:e9:04:66:eb:eb:30:f2:18:3a:fe:08:26:6d:7d:
1b:91:3b:e6:bc:b3:cd:b6:3e:1f:06:82:38:3c:7a:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1C:97:9B:98:E1:F3:64:E6:1A:2A:C3:AD:FC:9B:C7:71:AA:2E:36
X509v3 Authority Key Identifier:
keyid:76:99:31:40:DD:5A:B2:2E:A3:3E:CE:7A:92:92:FA:3C:B4:20:C3:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9c:a6:cc:09:cb:90:47:a4:a5:35:8a:00:46:89:1d:34:4a:
d9:ea:8b:bc:1c:62:0c:d8:02:50:bf:d4:56:44:f8:32:8c:16:
ea:15:48:09:66:61:12:c6:71:13:1d:4b:e3:bb:60:22:02:ac:
0c:8e:b1:fc:58:68:43:f3:df:46:7d:f1:e6:71:90:2c:b6:65:
c4:5f:c8:c7:6f:c8:27:c2:34:e6:74:66:19:cd:40:6d:ce:c2:
64:13:1f:86:1c:af:24:d6:9e:9f:e7:75:3d:7b:90:47:c1:a0:
90:09:1f:d4:9c:c4:0c:d0:e0:c0:5c:cb:68:a1:f1:7b:94:cc:
76:c4:12:03:17:36:26:68:bb:c4:d3:e8:f4:6b:c1:f4:41:f7:
86:88:e3:76:48:01:58:6f:b4:9a:33:d3:a1:3f:9e:c5:33:79:
9c:0b:27:30:4c:1c:29:2c:f0:31:4a:ba:e5:30:57:67:60:82:
e0:3a:23:2e:8c:81:b1:b7:fb:00:0a:24:24:fa:39:5c:9e:4a:
a4:c9:3f:28:21:87:92:59:84:5f:df:e1:59:9c:ea:ae:ab:90:
3b:83:a5:62:3a:ef:8d:0a:fa:66:ae:43:5d:a7:f0:25:6f:8d:
86:29:26:cd:b3:62:6e:87:f1:d3:3a:dc:2f:38:e2:06:e3:df:
9f:6b:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:18:50 2026 by rpki-client