
$ rpki-client -vvf rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
File: 76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft (raw, json)
Hash identifier: YmnqdhgegdK39vrnhcNIMdPWQ5sR0mdB/7N34aLIdxQ=
Subject key identifier: 52:45:6B:2A:25:B4:92:37:A0:B1:D3:79:8B:58:6D:63:9D:D3:29:4D
Authority key identifier: 76:99:31:40:DD:5A:B2:2E:A3:3E:CE:7A:92:92:FA:3C:B4:20:C3:68
Certificate issuer: /CN=A916FC1D0000/serialNumber=76993140DD5AB22EA33ECE7A9292FA3CB420C368
Certificate serial: 3BEAB98C3F7DB50BCB116B2F95B21E9F2B8B3868
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
Manifest number: 0119
Signing time: Tue 28 Jul 2026 14:07:17 +0000
Manifest this update: Tue 28 Jul 2026 14:02:17 +0000
Manifest next update: Wed 29 Jul 2026 17:07:17 +0000
Files and hashes: 1: AS154155.asa (hash: 6/OP71VE0CAHaxu0TCLh1W8MZdHWtiUPC+w4wCQ6Gtw=)
2: 323030313a6466363a34303a3a2f34382d3438203d3e20313534313535.roa (hash: 1EDvMbgTw6EnvKXCa2bvaz7hq+g25XWMa6y21HtIr7k=)
3: AS154185.asa (hash: jaBlNvR/dh5eNSvuUTvWk6BJKRzYhMTUCeVJYrxv+wQ=)
4: 76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl (hash: N8uviTD4NVvOne8k44ugxY6PlfT3znjH2qJcsL4tKnw=)
5: 34392e3231332e36322e302f32332d3234203d3e20323130343430.roa (hash: AUjuz8k+523UsNo4frUmHqvXrlcSAfH5RY7JCVdW0gc=)
6: 34392e3231332e36322e302f32332d3234203d3e20323133363035.roa (hash: 87sOgoQHgyzpeMeBH8xm7CrlJ6qlzeJ5m+eZopKCPHs=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl
rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ea:b9:8c:3f:7d:b5:0b:cb:11:6b:2f:95:b2:1e:9f:2b:8b:38:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FC1D0000, serialNumber=76993140DD5AB22EA33ECE7A9292FA3CB420C368
Validity
Not Before: Jul 28 14:02:17 2026 GMT
Not After : Jul 29 17:07:17 2026 GMT
Subject: CN=52456B2A25B49237A0B1D3798B586D639DD3294D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:6c:cd:24:1e:97:60:0b:be:4f:67:24:bc:
07:06:1f:d3:b1:76:bc:52:40:23:d0:65:c8:ab:25:
14:58:6d:b4:d3:b1:15:5d:b3:83:c3:8c:f2:a9:2f:
00:79:a5:1b:b8:a9:00:3c:df:fb:23:fd:b9:3a:18:
27:b5:9e:e1:02:e0:f7:ea:48:c5:4e:f8:0b:c7:00:
d3:f8:ea:c5:ee:dd:89:bb:9a:64:e5:04:1e:c0:9c:
51:47:cf:b1:35:ad:35:7a:e5:0e:bd:d3:1f:e4:3f:
d4:53:ca:e0:d5:87:95:b3:af:05:a8:54:ea:a1:e9:
d3:d7:b4:0f:c1:5c:07:76:c9:f4:de:04:e3:c3:29:
79:43:c0:08:8e:e4:61:00:a9:e1:17:b1:12:ad:ea:
8e:db:55:17:51:9b:92:b7:d1:b9:a5:cf:ea:ce:54:
4b:48:01:cf:a8:a3:c6:9e:6c:ff:67:92:d6:49:89:
fd:ef:f3:88:8d:4b:03:ba:37:a8:05:91:f9:23:58:
a8:ba:0e:1b:9b:23:78:9e:81:48:2a:3f:46:5b:d0:
0b:87:cf:5a:84:3a:c5:97:08:5a:3e:dd:21:b5:24:
f6:e2:d4:32:2f:4a:df:4c:f9:4a:c6:fc:55:72:dd:
8a:6e:33:27:17:52:45:75:49:b6:92:2d:14:45:2b:
62:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:45:6B:2A:25:B4:92:37:A0:B1:D3:79:8B:58:6D:63:9D:D3:29:4D
X509v3 Authority Key Identifier:
keyid:76:99:31:40:DD:5A:B2:2E:A3:3E:CE:7A:92:92:FA:3C:B4:20:C3:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8f:f0:d0:ca:24:96:0f:91:0a:31:09:d7:a3:bf:96:10:7b:
d6:b8:bc:b3:bd:9b:0a:0d:42:53:ff:21:06:d4:5f:be:f1:ce:
60:ef:4c:f5:6c:c9:46:cf:ce:57:87:19:e8:d5:f0:e3:3d:3e:
07:b0:b6:36:03:67:04:50:77:28:ea:6a:d8:49:9d:5b:06:f3:
79:5c:a1:c9:79:d8:39:5e:6c:9e:0a:df:49:8f:05:85:1d:8e:
3d:ec:01:3c:f6:2d:8a:2a:9b:2b:b1:ef:e1:f4:e4:bf:b2:5c:
13:fc:b9:17:0b:96:11:7e:4a:93:d6:fd:e3:95:24:81:b2:54:
a9:b6:d6:20:9b:e4:0d:ff:f0:56:8f:39:97:ab:8e:0b:72:2d:
15:98:b1:34:91:bf:7d:6a:17:0b:ae:bb:9d:1b:91:3b:e7:6e:
fe:e4:0b:40:de:02:de:7f:f5:3c:28:28:6e:38:40:c4:fb:e9:
06:1a:e7:a2:a1:b6:65:ee:4e:0c:29:f0:7b:b0:21:21:30:d9:
92:4a:9a:13:17:65:32:46:47:c6:26:27:75:1f:87:aa:0b:a4:
c8:aa:70:08:8d:c9:a8:a6:bd:3c:69:68:d1:5f:62:01:92:51:
80:d7:62:9a:42:14:ea:13:97:67:77:02:d6:e3:97:1f:3f:8d:
5b:93:e9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:10 2026 by rpki-client