
$ rpki-client -vvf rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
File: 76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft (raw, json)
Hash identifier: 19K+Rx3WaUyI0quG36i/plyImSP949bX3hDuRhWGDl0=
Subject key identifier: 2D:77:BF:F5:F2:06:56:C4:8B:BB:FF:A4:51:BF:3F:DF:F9:20:7E:85
Authority key identifier: 76:99:31:40:DD:5A:B2:2E:A3:3E:CE:7A:92:92:FA:3C:B4:20:C3:68
Certificate issuer: /CN=A916FC1D0000/serialNumber=76993140DD5AB22EA33ECE7A9292FA3CB420C368
Certificate serial: 648BCA39467D40E582A9F05668BC41906DC45A1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
Manifest number: 0110
Signing time: Tue 21 Jul 2026 16:22:17 +0000
Manifest this update: Tue 21 Jul 2026 16:17:17 +0000
Manifest next update: Wed 22 Jul 2026 17:37:17 +0000
Files and hashes: 1: 34392e3231332e36322e302f32332d3234203d3e20323130343430.roa (hash: AUjuz8k+523UsNo4frUmHqvXrlcSAfH5RY7JCVdW0gc=)
2: AS154185.asa (hash: jaBlNvR/dh5eNSvuUTvWk6BJKRzYhMTUCeVJYrxv+wQ=)
3: 34392e3231332e36322e302f32332d3234203d3e20323133363035.roa (hash: 87sOgoQHgyzpeMeBH8xm7CrlJ6qlzeJ5m+eZopKCPHs=)
4: 76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl (hash: /mB20UweeJXevmprwn/LPr+0/gcI2qplTo/Vj6ADN2g=)
5: AS154155.asa (hash: 6/OP71VE0CAHaxu0TCLh1W8MZdHWtiUPC+w4wCQ6Gtw=)
6: 323030313a6466363a34303a3a2f34382d3438203d3e20313534313535.roa (hash: 1EDvMbgTw6EnvKXCa2bvaz7hq+g25XWMa6y21HtIr7k=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl
rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 17:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:8b:ca:39:46:7d:40:e5:82:a9:f0:56:68:bc:41:90:6d:c4:5a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FC1D0000, serialNumber=76993140DD5AB22EA33ECE7A9292FA3CB420C368
Validity
Not Before: Jul 21 16:17:17 2026 GMT
Not After : Jul 22 17:37:17 2026 GMT
Subject: CN=2D77BFF5F20656C48BBBFFA451BF3FDFF9207E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:e6:f3:61:5b:b0:2a:a7:52:3d:b4:76:8e:
00:65:1b:b3:49:e0:ac:23:8d:34:01:9b:c3:be:16:
6b:c0:c3:ad:3a:b3:34:9a:9d:f8:c0:a4:a2:fe:96:
d3:01:33:48:e7:92:af:90:21:c3:54:c9:3e:3a:70:
a4:75:df:bc:24:46:ea:89:bf:5a:33:37:2d:27:bd:
58:66:e5:67:a7:41:42:eb:c0:a9:21:df:95:0f:ec:
b1:ec:ec:c6:71:4e:f1:1f:8c:24:23:0c:70:42:fa:
32:a5:b2:25:39:e0:0f:a9:06:21:1f:7a:e7:cb:0b:
2d:38:61:94:0d:97:8f:d7:36:4b:55:08:37:62:3b:
c1:fe:d6:7f:ec:b9:a1:62:71:24:3c:62:b4:74:ab:
c5:66:26:fc:fb:93:fe:de:61:97:dc:4c:79:df:6f:
28:05:85:8a:06:1b:3b:3b:1d:59:21:de:05:56:b3:
29:c8:34:c1:8b:5a:72:ee:c5:f5:cf:7d:ab:58:25:
9f:8d:b9:43:69:12:1f:30:c5:ba:d1:70:35:6b:76:
ef:ed:b9:0f:f5:9c:b2:b8:6e:63:2a:64:a2:f4:7a:
c3:5c:1f:6e:43:28:e3:9e:62:35:77:f6:a7:7b:6b:
4a:c0:59:a6:7b:d9:dc:d1:c5:2b:69:32:67:7d:1c:
0c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:77:BF:F5:F2:06:56:C4:8B:BB:FF:A4:51:BF:3F:DF:F9:20:7E:85
X509v3 Authority Key Identifier:
keyid:76:99:31:40:DD:5A:B2:2E:A3:3E:CE:7A:92:92:FA:3C:B4:20:C3:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:81:53:19:e5:68:25:f1:b8:03:d1:ae:34:ba:1b:ca:a9:89:
50:71:bb:44:c9:28:06:41:4c:83:f1:09:15:77:56:e8:75:5f:
43:93:43:0e:42:28:31:ec:1c:cc:a7:4c:af:81:ce:21:7d:6c:
3b:a2:85:92:b7:dc:50:b4:99:f2:f8:05:19:9c:73:4b:20:44:
c9:7e:ee:05:8f:25:6e:41:71:70:19:a9:42:ae:d6:c4:68:0a:
2f:d3:1d:12:c8:47:ea:48:4b:1a:c9:52:c2:f9:7f:b2:8f:10:
e1:c2:6f:77:42:2d:4d:c9:6d:0f:7f:87:bf:dd:3e:7c:e0:61:
c0:f9:72:47:3f:a0:c3:3f:9c:a2:8f:ae:24:8b:0b:80:55:42:
9a:c1:2c:2e:be:c9:e3:15:59:c5:e2:fc:b3:ca:02:2b:84:04:
81:d6:f9:22:3a:91:ec:c3:2d:ad:6c:94:31:14:58:6e:3d:e1:
7c:50:73:7c:7a:91:39:dd:07:7d:d0:cf:25:4d:91:2f:d4:85:
d8:45:97:1c:57:16:b6:25:59:33:e0:eb:7e:8e:c5:84:56:a7:
3f:d1:ae:5c:a6:c5:07:7e:f2:2d:cd:79:29:72:84:be:1b:54:
6f:d2:0c:f4:1d:ca:6b:80:58:59:19:53:60:bf:76:c5:00:08:
f0:23:de:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:24:27 2026 by rpki-client