
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
File: 17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json)
Hash identifier: ftwpHhne3Xvp8Q0gZLqnhqDLow3p+iPSZSbvqnn19kQ=
Subject key identifier: B7:FA:DE:51:41:06:AD:F1:16:CB:B3:52:BB:B6:BE:E3:9C:DF:D9:AF
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Certificate issuer: /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial: 18637909F3582177F758F12F164C566D7FDCC304
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
Manifest number: 01F9
Signing time: Sun 04 Oct 2026 09:52:55 +0000
Manifest this update: Sun 04 Oct 2026 09:47:55 +0000
Manifest next update: Mon 05 Oct 2026 12:30:55 +0000
Files and hashes: 1: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: 9FXIqtvqlI1b6k7H88FgG5bPVoeiPlgW3c8/gsoxMSo=)
2: AS153346.asa (hash: rAU+nhqV6DoL50iYgf+3duDnIh+fo6Vc/7vgCwv8AHo=)
3: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: /geMAek/bhD2vBZRt53k4rs2qEWUxNDEO4OSI2khIxk=)
4: 323030313a6466343a353134633a3a2f34362d3436203d3e20313533333436.roa (hash: cfW8/BpGR5YLDJqf4B6srqIWH4dAdAcYNWndMbPZ4n4=)
5: AS9833.asa (hash: eF+RoiYlyVewG5EIfcht1IcC29IFU+2ytLm0lOE12DA=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 12:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:63:79:09:f3:58:21:77:f7:58:f1:2f:16:4c:56:6d:7f:dc:c3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Validity
Not Before: Oct 4 09:47:55 2026 GMT
Not After : Oct 5 12:30:55 2026 GMT
Subject: CN=B7FADE514106ADF116CBB352BBB6BEE39CDFD9AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:72:55:37:17:0f:17:6f:31:c5:09:90:22:
68:ba:f0:ab:58:fe:48:47:0e:9b:19:3c:6b:b2:24:
6b:86:52:42:29:90:46:fd:51:d2:6b:ff:e3:b4:ac:
10:86:07:68:bd:ba:24:82:56:bf:c7:a6:f6:66:c1:
9c:10:15:74:7a:14:7c:b8:03:07:1a:27:68:c9:4b:
3f:5c:b8:71:74:cc:a1:94:4d:b5:3c:2c:5f:2c:64:
f6:9c:29:15:02:a8:d3:d5:99:59:34:0d:5d:e5:24:
43:4c:d2:62:c6:b8:8b:b4:04:99:bc:34:80:14:15:
ae:0b:c7:1f:13:15:50:e9:69:a6:52:4c:c0:42:91:
90:96:de:d7:48:f3:c9:40:ba:a2:b7:3f:ae:9b:21:
a9:9d:44:96:d5:53:62:bb:95:44:25:6c:00:49:fd:
d5:9e:72:fb:b3:03:a2:70:59:b6:5e:bf:47:d2:e6:
73:57:9e:01:d2:b1:10:f3:c4:8a:90:88:9b:71:46:
e3:b2:a6:0f:24:66:dd:b6:08:1e:2b:54:cc:56:03:
7e:05:3e:e9:8f:0d:5c:4e:66:fc:0f:d2:78:08:eb:
41:65:95:85:6d:90:07:20:58:36:a3:88:79:c3:be:
98:5d:c1:6a:df:0b:e7:34:28:e0:fc:f0:ca:1f:06:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FA:DE:51:41:06:AD:F1:16:CB:B3:52:BB:B6:BE:E3:9C:DF:D9:AF
X509v3 Authority Key Identifier:
keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f0:49:e3:72:42:ee:1e:6f:f5:e4:42:81:70:30:64:ad:9d:
00:d2:ed:5d:ef:f3:f4:8b:b0:f8:b6:a6:f8:cf:76:3d:e6:87:
56:5c:c9:22:d3:bf:c8:bb:71:7f:82:c9:86:f5:06:31:17:c6:
3c:64:02:0f:2a:33:76:2b:8a:77:d1:41:ec:28:9c:7b:b4:a8:
be:ac:e7:4d:ce:2e:33:38:2b:cc:ed:36:e0:61:d2:36:c9:46:
53:5f:a5:1f:d4:7e:e7:de:b4:0c:a4:59:40:4c:50:0d:14:60:
6c:85:82:73:47:27:97:c3:4c:27:04:90:91:d8:65:2a:23:ec:
da:70:8c:fd:0b:85:ca:58:b3:a8:23:f0:45:a1:1c:63:41:ed:
e5:b5:ec:40:ab:b6:f1:73:5c:f3:87:d3:78:30:88:b0:09:84:
d5:c7:28:06:4e:ef:09:a2:61:bc:02:8f:d4:40:7a:3f:88:b8:
d4:6f:76:e1:1d:43:68:70:9a:91:20:59:c5:28:e0:93:b0:0f:
be:fc:3c:96:e4:9a:24:9b:83:27:86:32:56:6b:66:bc:40:fa:
2c:fd:36:1a:ef:b4:54:b7:7e:58:ad:99:4c:18:c6:1d:73:9c:
14:85:09:7e:10:99:ac:c0:35:1c:4d:38:ad:ee:b7:6e:b9:fb:
2a:12:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:56:07 2026 by rpki-client