
$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
File: 17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json)
Hash identifier: cQDGlgIdWkxmFOI9R1L40+BWLwqfgtsDvaLt1mQqnPI=
Subject key identifier: F9:07:B4:EE:1D:59:08:21:C6:A5:48:CF:9D:59:90:64:0F:C7:58:D0
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Certificate issuer: /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial: 0B82E92FBEA9834F4DFB36EB83DEC056446C29C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
Manifest number: 0161
Signing time: Sat 13 Jun 2026 12:42:53 +0000
Manifest this update: Sat 13 Jun 2026 12:37:53 +0000
Manifest next update: Sun 14 Jun 2026 15:57:53 +0000
Files and hashes: 1: 323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa (hash: 6d79MjPujLDyKtMpkk4jphJnh2+RAK01Ho2cDxHKrKM=)
2: 323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa (hash: 0cKeFRvMg4K7CjG6EjM23reqsbS6dbzuJZqiCsKqNyg=)
3: 323030313a6466343a353134383a3a2f34382d3438203d3e2039383333.roa (hash: zl/9BBoJJ3neyY8UfSuYMMT4qwgA84XRS4rr+sykVxA=)
4: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: IGxIPKc+/acE4tl/VwoDNt+MeUtKkf3wdD+icOnNP1o=)
5: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: HOBlUUzXIgqWknT1VOL1nB3qMa6Fu6vRC1OMoEBjewg=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 15:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:82:e9:2f:be:a9:83:4f:4d:fb:36:eb:83:de:c0:56:44:6c:29:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Validity
Not Before: Jun 13 12:37:53 2026 GMT
Not After : Jun 14 15:57:53 2026 GMT
Subject: CN=F907B4EE1D590821C6A548CF9D5990640FC758D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:4a:6d:76:7c:bf:fd:31:ad:0f:b0:11:61:
b0:c8:a1:78:60:b1:4e:cf:94:e5:6f:91:c6:6e:db:
6c:94:74:42:b9:12:d2:5e:a1:88:92:42:a8:30:6d:
be:9b:5c:e0:f1:4e:78:4a:65:a3:cc:61:ee:18:2a:
b4:d5:ba:13:12:c2:1c:46:40:c7:fa:62:fc:05:9a:
cc:77:2f:f9:7a:7b:53:06:80:a1:dc:61:c6:d1:cd:
77:03:f2:6e:8e:bf:cc:c0:5f:a7:43:ef:12:c7:cc:
0c:98:7a:7a:e8:3b:d2:55:40:1a:2c:45:1b:73:e4:
54:34:d3:6b:65:15:f8:b4:a7:38:32:e4:3d:16:99:
6c:c4:10:7b:c5:aa:6e:49:33:36:9f:bc:b1:f9:99:
76:15:53:76:50:97:05:31:19:20:ca:42:19:f3:fa:
21:4c:90:9e:c1:f2:0e:73:7c:11:3d:21:fc:5d:06:
68:66:51:5b:e4:ba:a1:e5:4d:07:d9:52:b5:6e:04:
15:54:03:70:15:15:2b:03:3f:fd:bc:0a:d1:ba:58:
8b:c1:0f:e6:fa:50:68:e1:37:e8:3f:4b:d9:aa:b1:
20:1e:c6:a7:fd:c8:6e:34:ac:a8:2d:43:46:0b:36:
a3:8e:f3:f6:22:b8:b6:46:97:41:82:45:f7:b6:4e:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:07:B4:EE:1D:59:08:21:C6:A5:48:CF:9D:59:90:64:0F:C7:58:D0
X509v3 Authority Key Identifier:
keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:99:7c:72:31:17:69:57:bc:75:ad:36:ac:35:80:07:da:bb:
57:ea:fe:50:4f:ef:d3:e2:ed:e0:97:99:84:fe:cd:88:e1:fb:
ce:73:66:e3:b1:16:ed:c9:19:e1:7b:80:a8:59:3e:02:d4:1d:
ce:16:55:30:01:10:fc:c7:0e:97:3a:c5:1d:10:a8:7f:53:f0:
83:81:a0:34:ae:9c:ce:b1:43:d8:8f:41:6d:06:aa:14:68:12:
fe:ec:5c:b2:8b:ff:61:c6:c6:5c:56:84:21:50:33:68:94:95:
65:ea:2e:1f:a5:76:ea:2f:65:2d:2f:48:6c:1f:a4:34:68:bf:
25:82:49:58:89:15:6e:dc:bf:97:e4:b6:cd:b4:dd:ab:55:b0:
1e:4f:1b:3d:1e:6f:9b:b0:5f:37:ad:bd:d7:87:e0:61:f8:ad:
a5:1d:d9:7b:42:ab:28:60:f6:2b:f6:27:8e:9b:a3:31:0b:15:
16:9e:48:7d:16:3e:bb:6f:bf:1a:30:97:31:d6:0f:6f:0d:27:
25:d0:18:4f:6f:72:33:d4:74:4e:c4:e8:f8:c3:5f:56:3d:37:
a3:0f:ff:42:53:7a:d0:26:e3:de:39:de:eb:73:0a:6e:8e:a5:
98:4c:15:22:85:be:ca:cd:80:5b:cf:06:92:3a:14:a8:14:0d:
7a:6b:9d:81
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUC4LpL76pg09N+zbrg97AVkRsKccwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEygxN0FBMzkyQzBD
RkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBMB4XDTI2MDYxMzEyMzc1M1oX
DTI2MDYxNDE1NTc1M1owMzExMC8GA1UEAxMoRjkwN0I0RUUxRDU5MDgyMUM2QTU0
OENGOUQ1OTkwNjQwRkM3NThEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALjHSm12fL/9Ma0PsBFhsMiheGCxTs+U5W+Rxm7bbJR0QrkS0l6hiJJCqDBt
vptc4PFOeEplo8xh7hgqtNW6ExLCHEZAx/pi/AWazHcv+Xp7UwaAodxhxtHNdwPy
bo6/zMBfp0PvEsfMDJh6eug70lVAGixFG3PkVDTTa2UV+LSnODLkPRaZbMQQe8Wq
bkkzNp+8sfmZdhVTdlCXBTEZIMpCGfP6IUyQnsHyDnN8ET0h/F0GaGZRW+S6oeVN
B9lStW4EFVQDcBUVKwM//bwK0bpYi8EP5vpQaOE36D9L2aqxIB7Gp/3IbjSsqC1D
Rgs2o47z9iK4tkaXQYJF97ZO9N8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBT5B7Tu
HVkIIcalSM+dWZBkD8dY0DAfBgNVHSMEGDAWgBQXqjksDP91T2JJAG2JOG+HG5aT
+jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS8xN0FBMzky
QzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GNm81TEF6X2RV
OWlTUUJ0aVRodmh4dVdrX28uY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3
QjAwMDAvMS8xN0FBMzkyQzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZB
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAlpl8cjEXaVe8da02rDWAB9q7V+r+UE/v0+Lt4JeZhP7NiOH7
znNm47EW7ckZ4XuAqFk+AtQdzhZVMAEQ/McOlzrFHRCof1Pwg4GgNK6czrFD2I9B
bQaqFGgS/uxcsov/YcbGXFaEIVAzaJSVZeouH6V26i9lLS9IbB+kNGi/JYJJWIkV
bty/l+S2zbTdq1WwHk8bPR5vm7BfN62914fgYfitpR3Ze0KrKGD2K/YnjpujMQsV
Fp5IfRY+u2+/GjCXMdYPbw0nJdAYT29yM9R0TsTo+MNfVj03ow//QlN60Cbj3jne
63MKbo6lmEwVIoW+ys2AW88GkjoUqBQNemudgQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:08:58 2026 by rpki-client