
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json)
Hash identifier: DS3fU1ah75Bv/Aji3qvQywpSfEtyHSxxyXUGEJmx6C0=
Subject key identifier: BD:1F:D5:58:57:77:10:B9:FA:0F:43:C8:7C:77:D0:DD:AE:23:89:E5
Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Certificate serial: 56D34C23A3CBA2130D44305E7E5EF6D4B8357566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
Manifest number: 0297
Signing time: Sun 19 Apr 2026 00:43:35 +0000
Manifest this update: Sun 19 Apr 2026 00:38:35 +0000
Manifest next update: Mon 20 Apr 2026 01:04:35 +0000
Files and hashes: 1: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: 2pHYFNhpresl2Qe+bmQCdeuqTmZNLu6JpjLmSUgR1DM=)
2: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ=)
3: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: zIfc0+tP/sWafdYu8XLX099sz207IuztrrQcpaa3vvk=)
4: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: POeaLZ7jyGbDhNwka17vD8hm5iiL/jnjTj3d8a5jHPw=)
5: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: 7QCONFpvmyuNf5zvgrCNMc+J3LAExntNG5Qv6K3hEbs=)
6: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 01:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d3:4c:23:a3:cb:a2:13:0d:44:30:5e:7e:5e:f6:d4:b8:35:75:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Validity
Not Before: Apr 19 00:38:35 2026 GMT
Not After : Apr 20 01:04:35 2026 GMT
Subject: CN=BD1FD558577710B9FA0F43C87C77D0DDAE2389E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:eb:d5:5a:00:e2:03:47:61:56:07:b2:0f:
f1:c9:e7:aa:6a:0d:ff:e9:59:4e:17:68:61:01:ec:
95:43:38:a2:b2:12:06:45:cd:59:8c:c5:49:62:a7:
47:a3:b5:8b:cb:6d:78:92:96:15:72:20:3a:2d:d4:
79:56:7c:9a:75:3b:0a:ed:9f:8e:d5:77:0b:55:7f:
a4:f5:ab:74:36:dc:96:ba:7d:e7:be:41:2a:d5:fe:
38:ae:27:06:92:c9:99:8f:0a:92:73:c2:51:20:42:
24:81:b3:8f:b3:14:fb:50:29:14:e4:7d:57:a3:df:
96:74:5f:49:09:99:5c:8b:a4:eb:ad:a8:7e:24:b7:
00:f7:47:6b:31:58:3f:77:30:6d:b4:5c:db:fe:33:
d2:07:87:5f:1d:f6:94:4b:bf:d6:46:67:1b:e5:1d:
c1:e0:5e:09:60:62:9f:0d:ca:5f:a1:fa:ac:ef:0a:
1c:cf:e0:af:dd:91:02:8d:b6:56:9a:58:b3:c1:b1:
fe:f6:2b:e7:fc:2d:3d:51:24:c7:4e:dc:11:a7:e8:
f5:96:15:72:ec:92:d1:54:75:03:42:10:b5:e9:34:
5c:8d:e7:a0:89:ec:26:e9:6c:d9:eb:80:bb:c7:3f:
86:5e:78:3d:d0:cb:10:26:17:f9:5b:43:dc:dd:6d:
01:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1F:D5:58:57:77:10:B9:FA:0F:43:C8:7C:77:D0:DD:AE:23:89:E5
X509v3 Authority Key Identifier:
keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8d:7a:68:8b:1b:d2:e8:c0:44:91:45:55:b9:97:50:03:12:
d0:18:22:d0:ad:73:ac:73:b0:63:46:0d:f2:4d:cc:ba:36:38:
9c:49:91:21:21:02:e9:1b:e5:19:7c:e4:23:90:c4:a7:a0:67:
7b:9f:65:1f:99:3a:81:63:ab:47:51:52:c1:e1:aa:1a:38:56:
c5:85:f3:73:05:d1:36:da:06:62:5f:b2:8d:a8:a5:92:2e:52:
64:96:29:e7:95:cc:a7:19:c8:4a:a9:85:8c:a1:d4:ea:db:82:
3f:a1:59:6f:be:70:a0:42:9a:db:9c:69:64:b9:17:94:28:09:
de:75:12:23:ad:30:85:4d:36:bd:6d:4a:6f:85:88:77:17:a2:
c5:5d:4e:95:9f:2c:63:1a:3e:65:b7:b3:3f:49:2b:48:89:94:
9e:01:73:a4:5b:04:ad:cd:7d:4a:6c:8d:f3:ba:e3:1d:eb:81:
15:b8:7f:8b:e7:4e:43:9a:7f:b5:5c:a0:66:b2:ac:34:c5:00:
98:43:7f:cb:b3:21:cf:0c:67:41:37:28:b3:7e:3b:1d:ac:0c:
8f:a8:c6:84:b9:46:0e:ac:9c:26:81:51:42:92:49:dd:57:5a:
03:99:df:a6:ef:d7:e2:9d:ec:f4:5b:de:6c:a5:f6:e8:ed:87:
fc:0e:04:db
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVtNMI6PLohMNRDBefl721Lg1dWYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1
Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI2MDQxOTAwMzgzNVoX
DTI2MDQyMDAxMDQzNVowMzExMC8GA1UEAxMoQkQxRkQ1NTg1Nzc3MTBCOUZBMEY0
M0M4N0M3N0QwRERBRTIzODlFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALhF69VaAOIDR2FWB7IP8cnnqmoN/+lZThdoYQHslUM4orISBkXNWYzFSWKn
R6O1i8tteJKWFXIgOi3UeVZ8mnU7Cu2fjtV3C1V/pPWrdDbclrp9575BKtX+OK4n
BpLJmY8KknPCUSBCJIGzj7MU+1ApFOR9V6PflnRfSQmZXIuk662ofiS3APdHazFY
P3cwbbRc2/4z0geHXx32lEu/1kZnG+UdweBeCWBinw3KX6H6rO8KHM/gr92RAo22
VppYs8Gx/vYr5/wtPVEkx07cEafo9ZYVcuyS0VR1A0IQtek0XI3noInsJuls2euA
u8c/hl54PdDLECYX+VtD3N1tAbcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBS9H9VY
V3cQufoPQ8h8d9DdriOJ5TAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c
ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw
RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp
UXl0TDNMX1RJUG1vdHQzSHMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUx
MDAwMDAvMC81RDcwN0IwRDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdC
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAbY16aIsb0ujARJFFVbmXUAMS0Bgi0K1zrHOwY0YN8k3MujY4
nEmRISEC6RvlGXzkI5DEp6Bne59lH5k6gWOrR1FSweGqGjhWxYXzcwXRNtoGYl+y
jailki5SZJYp55XMpxnISqmFjKHU6tuCP6FZb75woEKa25xpZLkXlCgJ3nUSI60w
hU02vW1Kb4WIdxeixV1OlZ8sYxo+ZbezP0krSImUngFzpFsErc19SmyN87rjHeuB
Fbh/i+dOQ5p/tVygZrKsNMUAmEN/y7MhzwxnQTcos347HawMj6jGhLlGDqycJoFR
QpJJ3VdaA5nfpu/X4p3s9FvebKX26O2H/A4E2w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:09:56 2026 by rpki-client