
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json)
Hash identifier: YRXuGrrks+o79dw/pXEx7RohSbMnRCQEu1RzDuPedTI=
Subject key identifier: 60:F7:F6:B9:B3:1B:50:25:92:DE:52:ED:EE:08:C1:5D:EB:72:84:36
Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Certificate serial: 7A5A4BB81B1330DF4688B1D1CE006C38C8DDBE09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
Manifest number: 0363
Signing time: Sun 20 Sep 2026 04:56:32 +0000
Manifest this update: Sun 20 Sep 2026 04:51:32 +0000
Manifest next update: Mon 21 Sep 2026 05:51:32 +0000
Files and hashes: 1: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: 7QCONFpvmyuNf5zvgrCNMc+J3LAExntNG5Qv6K3hEbs=)
2: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=)
3: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ=)
4: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: 2Zvg9Ws7IMObyn5Fjh5NXlxVrZw5Q8Td4l5rY/CM5ec=)
5: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: VcmsnRsgmQnBSJtXlXxQZTY4P3vXZvCafvFQMqv4vfA=)
6: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: XCFQR4hI12Tjgtit3SEE2XJc52bIvb2OFixoEnv1lfk=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 05:51:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:5a:4b:b8:1b:13:30:df:46:88:b1:d1:ce:00:6c:38:c8:dd:be:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Validity
Not Before: Sep 20 04:51:32 2026 GMT
Not After : Sep 21 05:51:32 2026 GMT
Subject: CN=60F7F6B9B31B502592DE52EDEE08C15DEB728436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:09:b4:0c:3b:51:f0:0e:c4:8c:71:12:a0:
7d:ce:65:16:cf:b5:6b:ae:d0:98:9c:bd:a1:50:f3:
66:39:ba:3d:a6:96:2c:1a:81:2e:6f:d3:31:59:59:
a1:df:84:80:e9:bd:ee:48:b9:7d:2a:26:f4:45:97:
70:90:29:25:83:c9:9a:5e:90:ca:3c:6d:f8:48:8c:
5e:16:33:5d:20:dc:63:45:9f:c6:6b:5f:c3:7d:12:
b1:c5:29:88:4a:62:39:b6:d3:35:57:6c:50:0d:09:
56:cc:4a:3e:8e:e3:85:e2:82:59:7e:06:1c:a7:03:
53:95:da:bc:50:82:0c:9d:f0:b5:25:cc:c8:ce:75:
5e:44:38:72:61:d1:72:d8:38:78:09:cc:65:a2:01:
c9:2d:e4:ae:e5:2b:e9:7b:3b:3f:d4:ba:a9:58:77:
11:69:c8:4f:18:03:66:fd:f9:de:7e:a6:0f:a0:e9:
dc:72:12:b9:54:5f:01:47:54:dd:36:ba:e4:d2:40:
97:bf:45:15:6e:5d:ea:74:99:ab:ea:33:dd:28:7c:
1e:3f:d8:39:84:d7:c0:2d:8d:49:ad:54:d8:bf:c3:
4c:f0:5e:3f:4d:36:9a:11:f1:43:5a:91:1a:c3:70:
73:17:a3:69:68:a5:8d:cd:3a:77:0f:ed:f0:84:32:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F7:F6:B9:B3:1B:50:25:92:DE:52:ED:EE:08:C1:5D:EB:72:84:36
X509v3 Authority Key Identifier:
keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bc:04:a0:39:1d:13:6d:f6:9f:79:d1:22:f5:1d:0c:82:07:
e7:98:5a:f9:07:f7:63:ca:de:77:df:6f:a3:27:51:d2:7b:4e:
94:7f:71:70:82:85:76:da:c0:51:2e:76:2a:48:57:48:d6:81:
8c:ce:8e:ae:b6:65:5c:c4:c8:2b:37:77:ae:0a:b5:51:68:50:
c4:d2:38:e6:9b:24:fe:83:3c:5c:af:e4:f9:10:b2:85:2c:2e:
a9:da:a6:74:d0:bf:d9:4d:af:0a:41:32:2c:21:7c:2b:4d:d2:
85:48:bf:f7:5e:1d:c3:2f:f3:08:37:f5:b1:df:ec:6c:32:ab:
b4:64:e8:ea:53:22:9b:e0:83:77:43:a2:78:8d:e3:ac:e6:5d:
25:d9:20:77:8c:2e:5d:ce:9b:4f:60:bc:4a:2b:73:46:f3:1a:
2b:b9:e9:c6:ac:f1:d7:0c:50:37:af:93:57:eb:ff:8e:4e:1b:
a0:06:f9:c2:00:9c:44:f6:0f:d6:be:7a:f4:cd:2e:a6:a1:c8:
41:2a:d9:c1:56:91:33:c0:45:5e:92:ef:7e:f5:86:88:fc:ce:
4a:58:37:d8:35:fa:f7:b0:43:7f:f6:5f:8b:58:89:48:47:56:
a8:75:6d:c2:1c:1b:61:47:7f:bf:b0:43:56:b7:d6:60:5c:c9:
9b:42:82:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:51:39 2026 by rpki-client