
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json)
Hash identifier: 2/6mohac9NLEfIOcjJv53g47CaYR7FM/Ynl6YS2Fjqw=
Subject key identifier: 07:D0:F8:EF:65:CF:54:D5:00:5F:5E:CF:93:09:B3:AE:ED:3B:C8:7F
Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Certificate serial: 17A6627C32524A7891D7CA80016EB0E82E53E772
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
Manifest number: 02DF
Signing time: Fri 12 Jun 2026 14:23:51 +0000
Manifest this update: Fri 12 Jun 2026 14:18:51 +0000
Manifest next update: Sat 13 Jun 2026 16:01:51 +0000
Files and hashes: 1: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: 7QCONFpvmyuNf5zvgrCNMc+J3LAExntNG5Qv6K3hEbs=)
2: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: POeaLZ7jyGbDhNwka17vD8hm5iiL/jnjTj3d8a5jHPw=)
3: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ=)
4: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=)
5: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: Ot9SbiBkdsEb4efoCE/zSs0ME3DvIADye1fcljsMXRU=)
6: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: 2pHYFNhpresl2Qe+bmQCdeuqTmZNLu6JpjLmSUgR1DM=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 16:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a6:62:7c:32:52:4a:78:91:d7:ca:80:01:6e:b0:e8:2e:53:e7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Validity
Not Before: Jun 12 14:18:51 2026 GMT
Not After : Jun 13 16:01:51 2026 GMT
Subject: CN=07D0F8EF65CF54D5005F5ECF9309B3AEED3BC87F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:11:87:2f:61:02:fa:56:83:9c:4f:64:9c:
24:60:af:63:b9:3e:74:ec:a5:aa:9c:21:3f:a0:f7:
3e:56:0d:8e:57:f1:ac:cf:3d:07:74:39:9d:4b:56:
14:1f:27:7a:6f:5e:6f:69:1f:e4:af:e5:b5:30:d6:
88:ae:37:6d:68:df:60:2b:14:2f:da:32:88:82:e5:
a6:85:2e:2a:ac:ae:d9:09:91:1e:59:99:eb:56:c3:
39:75:1b:03:7f:a9:f3:ab:59:0e:9c:1e:5e:bf:80:
63:83:6d:fd:a4:d3:f3:cf:a9:91:c0:99:35:d9:9a:
36:4f:57:c1:22:1b:1d:6a:47:9a:a3:5a:06:99:2f:
2c:d8:c2:30:e2:39:78:8e:e0:63:39:d3:cb:e4:0e:
1e:60:42:9b:48:76:f4:42:e9:49:fd:97:71:32:cb:
d1:01:f6:bf:11:70:eb:d3:7a:6a:b6:14:42:f1:3b:
fb:bc:00:a3:56:43:ec:b6:27:a7:25:23:f5:7f:d7:
6d:35:b8:eb:43:b7:15:1b:9e:ff:70:34:7d:fb:4f:
14:78:04:54:26:10:8f:95:20:fe:cf:14:ce:2b:c6:
de:49:17:44:29:dc:f6:f3:8c:5e:96:80:32:e8:60:
c7:2f:fc:20:f3:c0:58:6b:e5:a0:21:85:62:99:7e:
4b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D0:F8:EF:65:CF:54:D5:00:5F:5E:CF:93:09:B3:AE:ED:3B:C8:7F
X509v3 Authority Key Identifier:
keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c5:25:d4:0b:7a:29:66:da:f8:6e:a1:d6:64:81:6a:c0:59:
02:c2:08:a5:8a:2d:c3:f3:af:77:88:3c:59:aa:f6:82:66:fb:
b4:06:ff:5b:34:17:a2:4d:8c:77:04:a3:23:c8:8d:ad:07:4a:
5e:77:af:be:d0:30:fa:71:e3:6a:a5:42:81:dc:cd:04:97:8c:
9c:95:36:45:db:1c:82:08:da:39:e9:14:90:9e:c2:cc:80:18:
35:c2:2b:7d:59:ef:87:de:55:0a:aa:9d:36:22:a1:fd:25:46:
f6:a3:67:37:03:88:9f:2c:f3:25:f8:20:76:1c:f9:1d:11:45:
85:db:45:d3:6e:7e:23:13:55:1f:57:d7:27:ec:c9:6d:d9:ba:
93:af:98:b5:13:45:01:7c:b6:27:82:ac:d3:40:82:54:e2:3b:
f1:82:22:f1:e0:39:de:69:2f:02:c1:03:87:e5:af:0b:34:c3:
c5:15:56:00:2a:99:f6:01:ba:fc:be:fa:a1:48:0b:ac:1e:47:
f1:60:a1:cc:54:04:8d:7a:b8:61:c9:24:fb:b9:bd:55:c3:53:
ac:a4:64:46:99:32:bd:f0:67:9d:0c:8b:0e:31:f4:24:c6:52:
a9:c2:b9:2f:b7:2a:e6:38:e0:4a:37:87:a4:85:f1:d4:61:59:
c0:14:da:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:24 2026 by rpki-client