
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
File: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json)
Hash identifier: iA6iTdRLWJz+r2xd2Qnj5Xzeqcwq26rMYktfyR8lPiI=
Subject key identifier: 8C:F5:AF:1D:9A:C7:19:24:86:54:BA:43:B1:78:16:8E:A4:E3:94:D9
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 3BF6EADE57AE1A97EB59D788FB8E08047D76A9DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
Manifest number: 07A6
Signing time: Sat 13 Jun 2026 07:49:19 +0000
Manifest this update: Sat 13 Jun 2026 07:44:19 +0000
Manifest next update: Sun 14 Jun 2026 11:03:19 +0000
Files and hashes: 1: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: pfmbS7srXusQGJHjJ/SAnHQ1VLKhlPc/0lynZ6bneuI=)
2: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ciSHjom7uhsnTUry3euH0kEf+ood81S/2eHdQ8CkHns=)
3: 3230332e372e3139362e302f32332d3233203d3e20313334303930.roa (hash: qaOra+xDLyRhqdf//j4nvjjhMuhgOEsIZ5B8fiKTKxU=)
4: 3230332e372e3139362e302f32342d3234203d3e20313334303930.roa (hash: /LpdqHnCJJlwCcOi3CqIbxGlAHdFFT95xe2Q0VqmA3E=)
5: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: yVZN8uUTOOhqgDafcuJzyObo6OYnTkFGrZV6T9wM9pM=)
6: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: TyUQXYW/Z9X7LSxau+0o+4cjIXJiQzcIYmIWKatiFMc=)
7: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: /tu1GLPgmx3L59lA9DS67uY00dm6i5Wm3Y/TLJzZPPI=)
8: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: Fe1UVCyCNYuLeK/2YClSqpX8AFGVDlpgAyiB6HZMqgE=)
9: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: fkFkv4x2RJF8ikeWNYi3IpWqQO/j13TZnucB+1TubjI=)
10: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: Wnz7iyh9clZuDDpLGVNNBZJ0JgoGPtAKZ8B2Ynr6Xgc=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f6:ea:de:57:ae:1a:97:eb:59:d7:88:fb:8e:08:04:7d:76:a9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Jun 13 07:44:19 2026 GMT
Not After : Jun 14 11:03:19 2026 GMT
Subject: CN=8CF5AF1D9AC719248654BA43B178168EA4E394D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:53:b7:f8:af:ad:34:20:18:8a:71:7f:2a:ad:
78:be:d9:27:e3:e3:6b:19:37:26:50:58:0d:a8:f5:
c4:85:26:15:2d:89:f4:27:5d:31:35:3e:31:27:32:
b6:23:86:2f:39:70:93:b4:08:3e:4a:12:70:da:3d:
87:46:fe:ba:d3:e3:4b:94:f1:9c:d0:b0:3c:ca:ed:
b5:c3:09:d5:7e:de:98:88:20:6a:ba:9a:52:b4:58:
36:53:05:f3:ba:5b:21:7d:3a:12:91:ad:b2:9f:03:
77:0f:9a:1e:9f:0f:6f:c9:8f:20:3e:df:25:04:a1:
30:a6:d6:d0:fc:d2:95:96:1c:a0:23:bd:7a:4a:7f:
b6:e6:bc:51:b8:54:99:dd:8f:0b:ea:88:68:69:3a:
b5:f0:c3:95:b2:34:30:f9:0c:6c:ae:55:36:d5:b4:
65:34:4f:07:7a:a0:77:0f:95:e6:63:85:ff:1c:0c:
c8:3f:8a:87:71:a8:6f:2a:bc:dd:e9:16:fa:49:73:
b1:2a:d7:c8:35:43:d8:75:2f:e4:af:6c:50:43:31:
9f:27:dd:f8:68:86:a6:8a:98:eb:54:cb:b4:cf:de:
96:8b:f3:05:98:2c:82:0d:3d:68:ef:2b:ad:a5:5f:
63:5e:d8:8d:89:9f:a7:52:e8:fe:3f:c2:26:3a:76:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:AF:1D:9A:C7:19:24:86:54:BA:43:B1:78:16:8E:A4:E3:94:D9
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:68:58:0e:e1:b8:5e:4d:54:29:4e:1a:53:c3:91:95:1a:f8:
69:e5:85:52:e9:63:0d:c2:00:ee:8e:a2:34:0b:1e:85:d0:1b:
0f:11:b7:b8:27:1d:a9:14:4d:b5:ce:24:d1:51:f7:2e:5f:d8:
c7:df:90:aa:b8:77:bc:38:45:83:e9:c0:4c:d2:ea:6f:bd:11:
ff:f9:10:32:cc:aa:ba:43:a8:35:ae:32:0c:0f:ea:b8:24:93:
42:a9:66:f5:d3:27:b8:a1:e7:39:f5:db:4e:c3:af:7e:8c:82:
69:3a:7a:a2:5b:79:8e:42:08:2d:c5:b7:53:e1:ca:8c:54:70:
9f:be:7a:ff:55:f4:44:eb:8a:20:bc:2c:42:83:dd:a5:80:1d:
91:ef:bc:71:f2:e0:9a:ec:3a:2f:c4:d4:3f:92:36:e6:d8:c6:
7f:ce:62:6f:ed:01:71:18:e9:51:8e:6e:d6:3a:f8:ea:f5:d6:
a9:b0:ba:90:91:18:f4:0c:45:b5:d5:e2:d6:26:51:0a:50:3c:
e1:76:28:3e:b3:a4:a4:56:27:ee:4f:4f:12:22:3d:c5:79:7e:
bf:0b:73:a4:98:03:33:29:23:14:d8:60:9d:6d:f3:6d:53:fd:
f1:b0:02:27:95:76:c8:b2:43:85:e9:7a:c7:92:5f:8a:fb:82:
72:5c:a8:10
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUO/bq3leuGpfrWdeI+44IBH12qd0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx
NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI2MDYxMzA3NDQxOVoX
DTI2MDYxNDExMDMxOVowMzExMC8GA1UEAxMoOENGNUFGMUQ5QUM3MTkyNDg2NTRC
QTQzQjE3ODE2OEVBNEUzOTREOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOBTt/ivrTQgGIpxfyqteL7ZJ+Pjaxk3JlBYDaj1xIUmFS2J9CddMTU+MScy
tiOGLzlwk7QIPkoScNo9h0b+utPjS5TxnNCwPMrttcMJ1X7emIggarqaUrRYNlMF
87pbIX06EpGtsp8Ddw+aHp8Pb8mPID7fJQShMKbW0PzSlZYcoCO9ekp/tua8UbhU
md2PC+qIaGk6tfDDlbI0MPkMbK5VNtW0ZTRPB3qgdw+V5mOF/xwMyD+Kh3Gobyq8
3ekW+klzsSrXyDVD2HUv5K9sUEMxnyfd+GiGpoqY61TLtM/elovzBZgsgg09aO8r
raVfY17YjYmfp1Lo/j/CJjp2AicCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSM9a8d
mscZJIZUukOxeBaOpOOU2TAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA
tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw
NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w
M2psZkN5XzhudUVTbnpBTFEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz
MDAwMDAvNC9CNzM1MUIwNUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAtmhYDuG4Xk1UKU4aU8ORlRr4aeWFUuljDcIA7o6iNAsehdAb
DxG3uCcdqRRNtc4k0VH3Ll/Yx9+Qqrh3vDhFg+nATNLqb70R//kQMsyqukOoNa4y
DA/quCSTQqlm9dMnuKHnOfXbTsOvfoyCaTp6olt5jkIILcW3U+HKjFRwn756/1X0
ROuKILwsQoPdpYAdke+8cfLgmuw6L8TUP5I25tjGf85ib+0BcRjpUY5u1jr46vXW
qbC6kJEY9AxFtdXi1iZRClA84XYoPrOkpFYn7k9PEiI9xXl+vwtzpJgDMykjFNhg
nW3zbVP98bACJ5V2yLJDhel6x5JfivuCclyoEA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:45 2026 by rpki-client