
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
File: 5C6CE387337886989FB3C3D4E6186A370B728D50.mft (raw, json)
Hash identifier: pWhvu5YEPpavVfQto4BXL9IHWXUIsalOK7p6nzYE++Y=
Subject key identifier: E7:7B:6D:AC:47:9A:80:0D:D9:95:D0:F5:5B:8C:E6:A0:9E:78:DD:ED
Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
Certificate issuer: /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Certificate serial: 063B349A8C1E3B15CF2B04553079D0F9C0EA4445
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
Manifest number: 12
Signing time: Tue 21 Apr 2026 15:06:32 +0000
Manifest this update: Tue 21 Apr 2026 15:01:32 +0000
Manifest next update: Wed 22 Apr 2026 16:35:32 +0000
Files and hashes: 1: 5C6CE387337886989FB3C3D4E6186A370B728D50.crl (hash: DdRCC629mZCdjvO8nN74D+kYrmnU61DDw/uuKYOP/EA=)
2: 323430373a396534303a3a2f33322d3438203d3e2038383838.roa (hash: CT8MGxoF5jRnFfM8LvVS4erJkAdXGfhtp9GsS8cjI0c=)
3: 3130332e3136392e39322e302f32332d3234203d3e2038383838.roa (hash: 2ynH3ZlcLbUkfH9QxYt0drp47MV4SL9VdzeXUvA/9DM=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 16:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:3b:34:9a:8c:1e:3b:15:cf:2b:04:55:30:79:d0:f9:c0:ea:44:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Validity
Not Before: Apr 21 15:01:32 2026 GMT
Not After : Apr 22 16:35:32 2026 GMT
Subject: CN=E77B6DAC479A800DD995D0F55B8CE6A09E78DDED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:a0:ac:3b:b4:e4:c8:de:f5:81:d0:bc:4a:
05:04:f0:89:03:30:23:3b:e9:1f:0c:0c:6b:1e:b6:
27:56:bf:90:26:f4:9b:3c:97:7f:81:06:33:90:94:
99:ba:59:f7:0b:f4:9e:d6:5a:6a:7d:33:f7:f1:11:
85:8e:b4:37:cf:e8:e4:fe:3b:70:49:58:ba:db:0c:
36:68:ed:3d:f4:f5:27:54:22:23:9f:36:83:63:05:
d0:29:ce:8b:6d:71:83:5d:93:80:f0:63:b5:42:7c:
f8:c4:20:c1:d3:3d:4c:58:06:09:ce:55:d5:81:be:
bb:34:e5:f1:13:26:6b:d8:3b:80:3c:b4:7b:13:01:
8c:24:b2:d8:73:99:22:60:ff:af:94:cc:29:e2:64:
2a:73:4b:a7:21:38:ed:ef:33:4f:50:33:50:fa:40:
4f:cf:dd:21:12:e6:0e:cd:c1:6f:c5:96:18:e0:1f:
e6:95:12:12:13:01:68:f0:63:4a:13:4d:8f:7d:c4:
08:0b:67:e5:94:85:5c:a6:4c:aa:c2:d0:a4:a4:cd:
53:6d:80:54:30:83:f4:87:61:07:08:19:e4:26:4d:
1c:15:f8:f2:46:9c:1d:68:29:45:5b:bf:21:ea:3a:
6b:58:6a:c6:21:d2:89:6a:17:a6:36:59:27:0f:e4:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7B:6D:AC:47:9A:80:0D:D9:95:D0:F5:5B:8C:E6:A0:9E:78:DD:ED
X509v3 Authority Key Identifier:
keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:2a:af:4c:1b:57:f1:e5:68:42:30:9e:bf:24:92:c4:5a:de:
29:ad:b0:66:09:70:8f:ea:6a:1c:a0:28:cc:4e:0c:40:a8:52:
b7:89:aa:b9:19:3b:80:39:40:95:11:38:7d:83:53:3f:00:ca:
50:40:62:56:7a:3c:d7:1d:b9:d7:26:8c:4d:60:6e:7a:67:da:
87:91:d0:25:79:2a:5d:24:3d:72:00:34:19:0d:9e:8b:e6:3d:
43:d6:37:51:4a:13:1b:80:87:1d:32:f9:6e:f0:3b:e6:7c:35:
0d:17:66:e8:45:1f:e9:8c:e9:b3:57:80:3e:ec:8f:49:9f:af:
09:d5:84:fb:6f:68:0f:eb:79:26:93:6f:90:d9:70:b3:db:4f:
75:53:33:81:5c:e0:9e:22:05:d2:2f:29:fe:88:0e:c8:1c:19:
a2:3f:3e:0b:1d:9a:2f:ee:98:c5:9e:cd:76:77:b3:d8:3b:bb:
a5:3e:95:8b:f1:bd:e6:b2:fe:ae:0e:4e:42:38:35:16:9b:6e:
00:91:31:24:fe:dd:20:07:5a:97:8d:a1:bc:7b:5e:98:49:87:
41:f7:6b:91:c0:65:6f:49:6d:c2:17:5e:aa:d6:7f:63:eb:88:
b9:ce:8d:55:98:15:bb:6c:64:46:b9:69:5b:7b:68:92:72:2c:
2c:47:be:55
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUBjs0moweOxXPKwRVMHnQ+cDqREUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQzQ0QTAwMDAwMTEwLwYDVQQFEyg1QzZDRTM4NzMz
Nzg4Njk4OUZCM0MzRDRFNjE4NkEzNzBCNzI4RDUwMB4XDTI2MDQyMTE1MDEzMloX
DTI2MDQyMjE2MzUzMlowMzExMC8GA1UEAxMoRTc3QjZEQUM0NzlBODAwREQ5OTVE
MEY1NUI4Q0U2QTA5RTc4RERFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANProKw7tOTI3vWB0LxKBQTwiQMwIzvpHwwMax62J1a/kCb0mzyXf4EGM5CU
mbpZ9wv0ntZaan0z9/ERhY60N8/o5P47cElYutsMNmjtPfT1J1QiI582g2MF0CnO
i21xg12TgPBjtUJ8+MQgwdM9TFgGCc5V1YG+uzTl8RMma9g7gDy0exMBjCSy2HOZ
ImD/r5TMKeJkKnNLpyE47e8zT1AzUPpAT8/dIRLmDs3Bb8WWGOAf5pUSEhMBaPBj
ShNNj33ECAtn5ZSFXKZMqsLQpKTNU22AVDCD9IdhBwgZ5CZNHBX48kacHWgpRVu/
Ieo6a1hqxiHSiWoXpjZZJw/k/78CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBTne22s
R5qADdmV0PVbjOagnnjd7TAfBgNVHSMEGDAWgBRcbOOHM3iGmJ+zw9TmGGo3C3KN
UDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzYzLzVDNkNFMzg3MzM3ODg2OTg5RkIzQzNENEU2
MTg2QTM3MEI3MjhENTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL1hHempoek40aHBpZnM4UFU1aGhxTnd0eWpWQS5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNjMvNUM2Q0UzODczMzc4ODY5ODlGQjNDM0Q0RTYxODZB
MzcwQjcyOEQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAOUqr0wbV/HlaEIwnr8kksRa3imtsGYJcI/q
ahygKMxODECoUreJqrkZO4A5QJUROH2DUz8AylBAYlZ6PNcdudcmjE1gbnpn2oeR
0CV5Kl0kPXIANBkNnovmPUPWN1FKExuAhx0y+W7wO+Z8NQ0XZuhFH+mM6bNXgD7s
j0mfrwnVhPtvaA/reSaTb5DZcLPbT3VTM4Fc4J4iBdIvKf6IDsgcGaI/Pgsdmi/u
mMWezXZ3s9g7u6U+lYvxveay/q4OTkI4NRabbgCRMST+3SAHWpeNobx7XphJh0H3
a5HAZW9JbcIXXqrWf2PriLnOjVWYFbtsZEa5aVt7aJJyLCxHvlU=
-----END CERTIFICATE-----
Generated at Wed Apr 22 05:22:57 2026 by rpki-client