
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json)
Hash identifier: z2wrTLo8aXT9VxvLLVg5CA6JKsNmn/OGKOGPNZmlvQ4=
Subject key identifier: 4E:04:2A:9E:48:72:AF:4A:DE:EB:95:C1:0A:E5:96:68:ED:8C:67:0E
Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Certificate serial: 6E5F4332D31018DFBE1ECE18D6A9674EEF95CBD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
Manifest number: 031B
Signing time: Tue 28 Jul 2026 03:01:09 +0000
Manifest this update: Tue 28 Jul 2026 02:56:09 +0000
Manifest next update: Wed 29 Jul 2026 03:11:09 +0000
Files and hashes: 1: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ=)
2: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: 7QCONFpvmyuNf5zvgrCNMc+J3LAExntNG5Qv6K3hEbs=)
3: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: Y78WIY2yzF1XtCAaAnHrBkvYGIL3gY1uRcOPrL2jEJ4=)
4: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: 2pHYFNhpresl2Qe+bmQCdeuqTmZNLu6JpjLmSUgR1DM=)
5: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=)
6: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: POeaLZ7jyGbDhNwka17vD8hm5iiL/jnjTj3d8a5jHPw=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 03:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:5f:43:32:d3:10:18:df:be:1e:ce:18:d6:a9:67:4e:ef:95:cb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Validity
Not Before: Jul 28 02:56:09 2026 GMT
Not After : Jul 29 03:11:09 2026 GMT
Subject: CN=4E042A9E4872AF4ADEEB95C10AE59668ED8C670E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:7f:b2:ca:80:e2:77:66:b1:a8:8b:00:82:
e8:20:bb:ad:70:c1:c2:9e:f0:f2:54:6f:9f:c4:45:
f2:6d:84:bb:5a:fb:a7:8c:50:ed:5a:83:7d:a7:2d:
1f:a6:90:80:5c:f4:d6:5e:4d:dc:16:4b:5a:5b:a9:
de:99:0a:6b:d2:67:d6:10:98:33:c1:a3:bb:58:f8:
05:62:5b:14:68:9e:73:69:5c:cc:93:65:72:17:1b:
8d:6b:ad:e9:63:69:1b:d3:7f:5a:ce:76:ef:5d:68:
ed:29:e7:55:16:07:f5:e0:17:dd:dd:56:39:69:74:
3a:53:8f:37:5a:9b:8f:32:10:d7:0a:1b:78:2f:be:
9b:3b:7c:3a:4b:16:68:26:91:70:0a:60:62:d6:1d:
4d:f4:2f:7c:08:b6:f3:f3:e7:ff:6e:bf:00:82:f0:
30:d2:bd:b3:51:85:b2:2e:36:b2:74:d1:8f:ae:ea:
21:64:fa:50:b9:69:2b:1e:ae:68:38:fb:76:2c:15:
16:3d:0d:f9:de:63:de:67:f3:6b:6c:cc:10:84:73:
53:93:6a:4d:27:3a:ae:9d:0f:38:b3:cd:e5:c6:69:
1d:e8:ad:f1:93:b3:7e:a4:58:77:49:38:d1:4b:66:
31:17:4b:c8:08:59:ea:6c:d0:9f:e5:0a:ef:bc:ef:
c9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:04:2A:9E:48:72:AF:4A:DE:EB:95:C1:0A:E5:96:68:ED:8C:67:0E
X509v3 Authority Key Identifier:
keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:4a:29:ed:dc:be:7d:47:d5:10:3d:ab:19:16:ad:05:3d:5f:
58:f8:55:4b:22:c7:7b:ac:65:23:c0:3b:bd:d2:6a:8c:7f:27:
69:82:62:bd:9b:63:fe:a5:2d:7c:61:97:a3:06:5d:8a:39:58:
7d:f1:d2:fb:7b:6a:d1:0f:c1:b5:9e:90:83:42:31:ca:d3:08:
9a:e5:85:6e:cc:c5:74:7d:20:c5:f0:92:a8:05:66:2b:eb:8a:
80:49:a5:8d:c7:6c:1d:d7:53:f0:2b:6f:3d:56:2f:66:59:2d:
2e:20:8c:48:ea:73:1f:ab:68:7a:7c:bc:69:97:07:e5:89:28:
fb:c0:43:a7:6e:5c:fc:69:6e:4f:16:79:cb:e1:ea:31:2c:ab:
25:c3:1a:73:60:e9:f9:2c:c9:97:d8:71:cf:16:27:b1:41:60:
76:d3:1d:18:e9:85:fb:37:21:4f:b0:14:07:13:eb:46:b9:b1:
09:04:70:9c:f9:05:72:35:a0:4c:72:e4:26:93:5d:0c:d5:59:
d2:e2:99:27:b1:e5:10:0c:e0:35:61:c0:32:03:16:07:cb:fb:
4c:ce:07:9a:55:a5:0b:c2:ad:b3:eb:52:e8:53:59:05:1f:d8:
28:4f:b9:ff:b9:fa:79:19:cb:53:9a:f2:3c:94:d8:eb:c1:22:
98:9f:d3:e0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbl9DMtMQGN++Hs4Y1qlnTu+Vy9gwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1
Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI2MDcyODAyNTYwOVoX
DTI2MDcyOTAzMTEwOVowMzExMC8GA1UEAxMoNEUwNDJBOUU0ODcyQUY0QURFRUI5
NUMxMEFFNTk2NjhFRDhDNjcwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJCQf7LKgOJ3ZrGoiwCC6CC7rXDBwp7w8lRvn8RF8m2Eu1r7p4xQ7VqDfact
H6aQgFz01l5N3BZLWlup3pkKa9Jn1hCYM8Gju1j4BWJbFGiec2lczJNlchcbjWut
6WNpG9N/Ws52711o7SnnVRYH9eAX3d1WOWl0OlOPN1qbjzIQ1wobeC++mzt8OksW
aCaRcApgYtYdTfQvfAi28/Pn/26/AILwMNK9s1GFsi42snTRj67qIWT6ULlpKx6u
aDj7diwVFj0N+d5j3mfza2zMEIRzU5NqTSc6rp0POLPN5cZpHeit8ZOzfqRYd0k4
0UtmMRdLyAhZ6mzQn+UK77zvyVcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBROBCqe
SHKvSt7rlcEK5ZZo7YxnDjAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c
ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw
RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp
UXl0TDNMX1RJUG1vdHQzSHMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUx
MDAwMDAvMC81RDcwN0IwRDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdC
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEA50op7dy+fUfVED2rGRatBT1fWPhVSyLHe6xlI8A7vdJqjH8n
aYJivZtj/qUtfGGXowZdijlYffHS+3tq0Q/BtZ6Qg0IxytMImuWFbszFdH0gxfCS
qAVmK+uKgEmljcdsHddT8CtvPVYvZlktLiCMSOpzH6toeny8aZcH5Yko+8BDp25c
/GluTxZ5y+HqMSyrJcMac2Dp+SzJl9hxzxYnsUFgdtMdGOmF+zchT7AUBxPrRrmx
CQRwnPkFcjWgTHLkJpNdDNVZ0uKZJ7HlEAzgNWHAMgMWB8v7TM4HmlWlC8Kts+tS
6FNZBR/YKE+5/7n6eRnLU5ryPJTY68EimJ/T4A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:32:06 2026 by rpki-client