
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier: odU8QMzeDHUeO2wmltCve8pVEQksO7pS/DANrCkNUZs=
Subject key identifier: F3:6D:B2:C9:00:F6:AA:3A:43:B5:B5:C2:65:83:92:0A:3C:6D:0B:C6
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial: 600AC2FB4AA58DEB9A3EE44F0F3DB920E2624819
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number: 03C5
Signing time: Sun 25 Oct 2026 18:00:14 +0000
Manifest this update: Sun 25 Oct 2026 17:55:14 +0000
Manifest next update: Mon 26 Oct 2026 18:59:14 +0000
Files and hashes: 1: 3130332e3232332e3138342e302f32332d3234203d3e20313335303237.roa (hash: g8Tw9Ss3ogaL2/E788moJ1DCuoJI7+nYIfSvQGup0po=)
2: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: pIFxfjpj69x1Lif+QlGLiQkFpstesS9qs1Ck3ciKmxw=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 18:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:0a:c2:fb:4a:a5:8d:eb:9a:3e:e4:4f:0f:3d:b9:20:e2:62:48:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Validity
Not Before: Oct 25 17:55:14 2026 GMT
Not After : Oct 26 18:59:14 2026 GMT
Subject: CN=F36DB2C900F6AA3A43B5B5C26583920A3C6D0BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:8e:b6:46:0c:86:6d:c2:09:5e:5a:c6:93:
44:51:01:dc:4c:1d:e7:c7:66:0a:7a:3f:ef:d7:0d:
0e:b4:8b:61:24:c6:55:62:cc:5e:1c:58:3c:a4:3b:
5e:67:51:19:6b:83:9c:2d:d0:30:5a:95:63:41:fe:
9e:0d:91:80:eb:64:97:98:f9:f3:90:e9:5f:d9:f5:
ed:c3:34:9b:1b:52:ca:9d:61:55:9a:b9:d6:65:0e:
3d:78:0e:4c:d6:f6:91:fd:ff:e6:8e:c0:13:71:4b:
57:4b:df:1d:0f:ab:26:0b:99:c2:ad:fe:4e:8a:be:
c1:cd:50:da:8b:85:40:38:9f:fd:03:42:7c:46:3b:
f6:58:42:34:70:13:bd:4f:75:30:b2:62:2b:fb:76:
89:c3:2c:7c:30:f1:1a:e5:2d:98:69:a0:f7:45:5f:
65:1a:4a:4c:14:d0:77:70:81:29:ad:66:47:9c:dd:
32:5b:02:be:de:e3:70:7c:93:f0:f9:7f:81:8d:7b:
74:dc:6b:3a:16:56:6c:37:1e:f4:81:b0:23:02:ea:
7a:54:54:34:6d:9a:a9:cd:24:77:37:3a:cb:c5:e9:
66:6c:b5:6e:41:73:b0:c6:68:83:42:cc:22:69:1a:
00:29:c1:96:ea:68:39:18:12:cb:bc:c0:3b:32:c6:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6D:B2:C9:00:F6:AA:3A:43:B5:B5:C2:65:83:92:0A:3C:6D:0B:C6
X509v3 Authority Key Identifier:
keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:58:00:e4:3e:8b:7c:4c:94:c6:c1:bc:27:e3:b3:2b:79:c6:
89:6d:af:b4:af:98:3c:ba:8d:53:58:30:8e:2d:5e:41:f7:1f:
eb:d6:a9:98:9f:7d:79:2e:e6:d6:be:15:ee:9e:d2:6d:bf:d0:
4d:ad:c9:62:1a:45:bc:41:69:ed:72:8d:e7:e4:41:33:da:7c:
e1:28:c1:fb:06:48:c7:ea:d4:0a:74:39:e1:d9:82:ce:11:d4:
2e:75:25:2e:b5:3e:a3:79:5d:ba:79:c3:b7:14:fa:de:e3:9b:
b2:54:ab:64:8e:bc:10:cb:a8:6f:74:8f:cc:a4:5c:cd:bc:aa:
08:4e:28:22:0f:97:24:97:c6:3c:1d:0c:15:d2:54:52:58:82:
fd:ef:f9:80:0e:f3:3b:ab:6e:64:97:3c:e7:37:b4:4a:ec:17:
a2:04:1c:3e:60:2f:25:0f:c3:5c:81:48:64:8b:5f:76:f9:67:
ea:19:41:8b:fd:1a:5b:64:67:b5:c1:63:93:97:ac:e7:73:47:
f5:77:62:45:c4:ce:89:df:e6:59:8d:01:20:5b:26:c3:df:d6:
35:31:be:f3:fa:fc:eb:b9:fc:7a:a2:86:3c:51:ef:59:da:dc:
b9:bf:80:b0:33:92:fb:b7:b0:d7:4c:da:6b:0e:cc:02:cd:ef:
51:73:40:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:01:23 2026 by rpki-client