
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json)
Hash identifier: hhQouAisECLF6IurN5A89iBTb0rt2w4Te43jnOXi19w=
Subject key identifier: B0:5A:5D:68:5F:55:C4:03:BB:8D:AA:91:A9:FF:E0:1C:44:C0:82:DF
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 5B99A02997E3164107422697BFAD2BEA5F0E46B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
Manifest number: 05A7
Signing time: Sun 08 Nov 2026 02:20:16 +0000
Manifest this update: Sun 08 Nov 2026 02:15:16 +0000
Manifest next update: Mon 09 Nov 2026 04:28:16 +0000
Files and hashes: 1: 3130332e3233382e3132382e302f32342d3234203d3e20343033303839.roa (hash: eXvGIHAjEFgcHwx3RykF2HHJzHyrZR4fITP4Cuatfbs=)
2: 3130332e3233382e3132382e302f32342d3234203d3e203136353039.roa (hash: d1XIE95syZP0v07zjAuCvJR2QmouxxiaARcQuCz9mh0=)
3: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: UeVTfn68R0LdGwhBHFcZ5BBp1siueZcbyg5aXpQZnmc=)
4: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: 5WAuhc1MeHZx+SmdAUhd+tkV4+RnOt9fhisjvSKJ2Vs=)
5: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: 7ng0Lz0v75i9UIOOgIh6OtvWrPo/NJYnzs1xeOHzW3c=)
6: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=)
7: 34332e3235352e38312e302f32342d3234203d3e20383334.roa (hash: nTO2Wp5t/vnjKSirqYrsazXOeWW5zUknKZBPOvMogcU=)
8: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=)
9: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: mRp4vY4H0by9mj0sSASpANHm18slHi1+kwE1GgClbCA=)
10: 34332e3235352e38322e302f32342d3234203d3e20323130313130.roa (hash: PB0a+a2Gy49HBYeDS5tizGYeq0RhqGsRJr6JdjueuOg=)
11: 3130332e3233382e3132382e302f32342d3234203d3e203134363138.roa (hash: d3P3WC5yrcNvHuUnPZwXk8M9TJVuxaLvaw3XJhLzpjE=)
12: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Nov 2026 04:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:99:a0:29:97:e3:16:41:07:42:26:97:bf:ad:2b:ea:5f:0e:46:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Nov 8 02:15:16 2026 GMT
Not After : Nov 9 04:28:16 2026 GMT
Subject: CN=B05A5D685F55C403BB8DAA91A9FFE01C44C082DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:1d:5a:0a:fa:72:5f:dc:c5:c4:ff:0b:90:
7d:7c:bb:e6:f0:e6:84:67:94:10:e2:b7:40:fd:c2:
68:f5:3b:68:37:53:e8:87:bf:1d:75:5d:b8:d4:1b:
77:b8:26:82:84:9d:57:33:10:52:6b:de:64:06:a1:
74:48:de:61:cc:c4:28:2c:80:5c:67:17:76:74:79:
ba:d4:30:8c:fb:2a:a5:f7:8e:b3:9f:b7:0a:98:68:
2b:32:85:3c:fc:66:6e:a8:f6:08:8e:95:da:73:e4:
a7:c6:7e:4f:b8:17:ab:53:f4:f3:ab:57:e3:2e:02:
aa:6b:a4:0b:52:1c:af:49:ef:5b:76:ce:8e:c1:fe:
7b:2e:59:13:00:e9:2f:1b:7c:25:b3:2e:45:82:9b:
ae:d0:a6:8b:8c:63:6f:3d:c5:36:50:ce:06:01:1b:
17:65:20:35:e9:62:d3:cf:da:8e:d4:88:d4:99:a0:
e9:ec:ca:e2:c3:9e:f5:db:bd:03:f6:bf:6e:b5:56:
26:c4:56:35:58:d1:00:ff:6f:ca:f1:d1:6f:df:5a:
37:75:91:99:d4:27:8c:ef:6c:cb:3b:e7:d9:74:14:
fc:54:50:8e:78:55:0d:88:81:57:48:ac:a8:51:a3:
c0:07:18:ac:1f:24:b6:76:a3:0d:ca:61:75:b6:09:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5A:5D:68:5F:55:C4:03:BB:8D:AA:91:A9:FF:E0:1C:44:C0:82:DF
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ab:13:d1:90:76:f6:9b:f9:f3:65:7f:f9:ef:8a:c5:fc:d1:
30:1e:64:09:db:93:a8:3a:00:09:d9:40:e3:68:61:bd:7b:fd:
1c:15:bd:11:dc:ef:7e:28:9a:d5:3c:a9:49:ee:ad:76:45:2b:
2b:a7:19:0f:00:ba:23:bd:99:68:c5:cf:b1:0b:bb:7e:f3:cf:
d4:2e:8f:ba:ea:4f:a8:71:82:59:a8:96:cc:63:8c:92:f0:42:
b7:b1:81:bc:52:90:d5:ad:18:8c:9e:e8:38:5b:8d:1c:87:60:
73:3f:a3:22:37:98:c9:9a:32:3e:36:b0:3e:24:4f:ff:3b:de:
86:ab:a3:ab:03:e6:b6:02:88:3e:b3:c9:7b:86:58:dd:28:dd:
cb:ac:49:41:f0:31:f1:50:18:2e:a9:4b:c6:47:77:61:b5:1e:
f0:21:57:b8:48:37:ec:22:f3:68:ed:e6:70:d7:f4:4f:88:3e:
bc:0c:9b:36:f6:dd:b8:77:d8:ed:30:e9:47:01:8b:4f:a6:0a:
4f:b2:b0:ed:ee:fe:d2:83:fd:4f:e1:29:61:95:3a:6e:a2:cb:
18:00:82:23:a6:bb:82:d5:a2:e2:58:79:d1:90:04:d1:0a:70:
e5:fd:b7:c8:9b:c2:90:b0:19:73:a5:5a:08:18:f4:e7:c5:a7:
8a:09:0d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 23:13:07 2026 by rpki-client