
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json)
Hash identifier: h7gXmJ2R3hnl+kgFfG5y1hjDH49JokvMPm0q/MjcCAM=
Subject key identifier: EE:91:31:4E:1A:99:B2:52:4C:CC:4E:44:8E:BB:8B:4A:7A:CE:41:71
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial: 7CE75EC2C88823456598FD93C860F27648911C71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
Manifest number: 0523
Signing time: Mon 26 Oct 2026 20:52:24 +0000
Manifest this update: Mon 26 Oct 2026 20:47:24 +0000
Manifest next update: Wed 28 Oct 2026 00:35:24 +0000
Files and hashes: 1: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: Pl9O4/hrvE6XGRQRdZrkpmgI5or6MNwU7UHHLgiYTIk=)
2: 4B1987D5160068092602529871C93EA320045A75.crl (hash: k9BhlGSqaslEq8KrLe1MYn6Gj68q63XGTVsmnwkVLU8=)
3: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=)
4: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: NYSfNKEeXeiCy1PYWrh3Md4+9WQ/qoda1KGdtTCYbc4=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e7:5e:c2:c8:88:23:45:65:98:fd:93:c8:60:f2:76:48:91:1c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
Validity
Not Before: Oct 26 20:47:24 2026 GMT
Not After : Oct 28 00:35:24 2026 GMT
Subject: CN=EE91314E1A99B2524CCC4E448EBB8B4A7ACE4171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:4f:3d:0c:f2:db:02:ec:58:b1:bc:01:79:
c5:ea:61:1b:89:b8:08:4e:8d:00:7f:9c:49:33:75:
d3:74:e9:1d:cd:43:74:2a:5b:52:a5:41:b6:69:43:
a1:1f:0a:8a:3e:f1:ee:67:d9:78:c8:59:23:3a:14:
20:f4:6f:c1:86:29:30:7a:8c:90:68:6a:c1:39:da:
7d:4f:18:df:7c:80:0c:c1:8a:d4:90:af:2d:42:9d:
5d:4e:f5:d1:92:01:9f:f7:5e:a4:36:91:b9:89:91:
7f:1a:70:a6:b6:11:e5:0d:31:49:d2:55:1e:73:96:
c1:c5:7f:96:f7:d1:23:f1:4d:4f:4a:3a:97:43:f8:
0a:a4:73:39:2c:6d:17:43:4f:f4:42:6f:d8:08:76:
1e:f5:c2:df:db:f4:77:2b:cf:08:96:d2:ff:13:e2:
66:4d:5e:08:c2:87:52:d1:8c:54:5b:d3:ce:82:88:
cf:81:28:18:77:09:65:6e:3b:09:07:f7:de:d4:b8:
7e:06:6c:f4:76:0e:64:02:81:27:6e:3d:5d:cf:d1:
7d:c1:a6:f0:00:1e:75:f1:19:f6:b6:2b:38:4a:1a:
21:b3:6c:f6:e2:19:a8:6c:21:b4:cb:d5:41:a7:41:
29:63:40:3d:83:9e:1d:2d:43:d7:b7:ec:1f:9e:2a:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:91:31:4E:1A:99:B2:52:4C:CC:4E:44:8E:BB:8B:4A:7A:CE:41:71
X509v3 Authority Key Identifier:
keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:40:33:af:1b:8c:dd:13:67:45:5a:03:af:15:fd:bf:db:72:
22:c3:dd:07:9d:7e:5b:58:08:f5:13:bf:e9:d4:70:b2:52:4b:
14:10:c0:0d:92:30:12:95:0c:43:70:25:25:97:60:69:3f:d0:
9b:53:e8:f7:dc:5e:e3:12:d0:01:01:4f:22:53:24:46:5e:21:
0a:26:48:9f:e2:9b:5d:3f:af:91:71:8f:59:21:42:6f:b7:47:
a9:59:9e:59:36:de:c7:82:26:de:b4:20:b0:80:f9:7d:e7:e8:
f2:6d:36:8b:c1:c7:94:f4:2b:4c:79:94:a8:51:86:95:53:ee:
f9:47:60:ba:27:b0:ff:1e:08:e5:77:19:6f:35:2c:da:21:ed:
5e:86:f2:c5:20:8c:e4:c1:10:96:fb:07:25:50:eb:ea:5f:f6:
1c:98:4f:41:98:8c:2b:7f:f9:ea:d5:13:ec:ed:a3:00:7c:93:
ab:f6:b7:89:2f:08:9c:16:2c:f2:86:b1:84:11:e9:82:a6:bb:
8e:79:76:c8:88:ac:03:bc:86:a5:a2:a6:12:f7:21:f1:eb:9e:
de:f8:a6:47:ad:0b:de:bc:f2:b2:68:2e:c4:6a:58:ce:28:22:
39:3b:03:08:23:1c:ff:25:03:cb:f4:40:21:d0:f8:65:6e:31:
85:34:ac:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:15:12 2026 by rpki-client