
$ rpki-client -vvf rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
File: 76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft (raw, json)
Hash identifier: 9TUWj6zxpLJwTd8D6yluTEbR4UbGxraywZtk/KtmUaQ=
Subject key identifier: 02:DA:5E:2A:FB:AB:34:AA:87:1C:A6:11:37:0F:0D:5F:0D:F5:7F:69
Authority key identifier: 76:99:31:40:DD:5A:B2:2E:A3:3E:CE:7A:92:92:FA:3C:B4:20:C3:68
Certificate issuer: /CN=A916FC1D0000/serialNumber=76993140DD5AB22EA33ECE7A9292FA3CB420C368
Certificate serial: 497E3517B90411BA28EFEBB4F81863505A7A88A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
Manifest number: 56
Signing time: Wed 04 Mar 2026 23:51:27 +0000
Manifest this update: Wed 04 Mar 2026 23:46:27 +0000
Manifest next update: Fri 06 Mar 2026 00:31:27 +0000
Files and hashes: 1: 34392e3231332e36322e302f32332d3234203d3e20323133363035.roa (hash: 87sOgoQHgyzpeMeBH8xm7CrlJ6qlzeJ5m+eZopKCPHs=)
2: AS154185.asa (hash: jaBlNvR/dh5eNSvuUTvWk6BJKRzYhMTUCeVJYrxv+wQ=)
3: 76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl (hash: JOJZiRgikcf2klFbpTovmzWVvibMwnmiY0LVXCx+QaI=)
4: 34392e3231332e36322e302f32332d3234203d3e20323130343430.roa (hash: AUjuz8k+523UsNo4frUmHqvXrlcSAfH5RY7JCVdW0gc=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl
rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Mar 2026 00:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7e:35:17:b9:04:11:ba:28:ef:eb:b4:f8:18:63:50:5a:7a:88:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FC1D0000, serialNumber=76993140DD5AB22EA33ECE7A9292FA3CB420C368
Validity
Not Before: Mar 4 23:46:27 2026 GMT
Not After : Mar 6 00:31:27 2026 GMT
Subject: CN=02DA5E2AFBAB34AA871CA611370F0D5F0DF57F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:25:2d:c7:66:87:4c:6d:db:09:30:a9:4b:
c2:df:22:37:fc:4a:b8:9e:ae:1b:60:ea:bc:8f:9a:
e1:b4:01:3f:cd:b4:0c:df:ab:45:25:f3:c6:72:0c:
2c:e0:83:ad:39:03:97:b2:10:3c:6c:49:19:76:f5:
ed:b2:05:25:0e:86:3a:08:11:a2:8a:6c:a5:0c:fa:
9d:91:4e:c0:5f:d1:33:37:9b:d5:5e:8e:56:d7:44:
cc:fd:21:f9:58:1f:df:4b:2b:f3:96:5e:03:7f:3c:
d2:20:e0:6f:18:8a:87:f8:74:58:bb:59:21:6d:4c:
cd:03:22:7b:90:1a:ae:10:8e:4e:75:73:4b:32:ee:
14:16:f9:11:f9:7c:61:94:ad:e1:70:85:6c:26:85:
35:f8:63:33:3f:dc:bc:a0:48:80:3e:c5:0f:03:0e:
27:b3:ec:fc:d7:58:cf:ba:9b:29:bc:b3:e3:1b:13:
28:27:b5:d8:ec:04:71:58:cb:72:aa:9b:1e:b8:38:
7b:e3:0a:a1:67:bc:2a:15:5d:29:f0:93:3f:64:05:
15:54:bb:21:77:ca:a7:f2:bb:be:03:01:72:7d:5a:
1e:32:51:25:9b:ef:96:de:e5:24:05:d8:ac:09:ed:
0b:f1:07:24:74:68:db:51:f7:51:84:17:ed:12:e8:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DA:5E:2A:FB:AB:34:AA:87:1C:A6:11:37:0F:0D:5F:0D:F5:7F:69
X509v3 Authority Key Identifier:
keyid:76:99:31:40:DD:5A:B2:2E:A3:3E:CE:7A:92:92:FA:3C:B4:20:C3:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ea:6c:01:41:ba:49:84:21:0e:dc:40:c4:dc:c7:37:bf:6a:
b9:90:93:e2:a2:27:5e:74:cc:6e:c3:f2:30:80:0b:d2:05:0a:
8d:ea:aa:7e:3c:0b:60:6c:f1:fe:ef:5f:f3:2a:49:2b:18:33:
50:d9:05:21:d4:8d:34:b5:49:f5:98:8b:e7:38:6b:6c:bb:38:
14:fa:7f:55:58:e7:68:e0:32:44:c3:a2:1c:25:dd:c0:9e:55:
96:39:72:17:89:cc:51:08:ec:fb:da:c4:56:8e:40:7e:8f:a0:
c1:b7:24:1a:a7:17:0c:70:06:a2:f0:1c:a7:18:08:6e:72:16:
d2:5a:80:36:d4:18:2e:45:83:54:55:3c:f3:e4:9d:2c:09:bb:
6d:03:78:2e:da:54:59:e0:32:e2:59:f1:14:65:cd:b9:6e:fe:
24:43:e3:2b:51:e7:b0:4f:7d:44:9c:d4:81:36:91:b3:1f:c7:
c0:e8:5b:00:5a:0a:45:28:79:db:3d:f0:10:96:10:b8:55:84:
0f:bf:0e:66:9c:1e:0e:4e:c2:d3:78:49:b6:ff:7f:9e:c4:26:
74:3f:d9:e4:07:c8:ab:11:c4:e2:a6:82:3b:fe:2b:30:a0:20:
73:6b:79:a7:1c:10:82:b8:ed:50:7f:58:47:59:d3:24:7a:d4:
2f:86:81:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 04:53:18 2026 by rpki-client