
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json)
Hash identifier: IdybfvpOcs0wVFj8ENOCX/25xpXwCrOJMy0SxLG73Q0=
Subject key identifier: 11:3A:21:F2:B3:EA:A8:00:B7:60:1A:8B:8C:06:DE:ED:CF:C4:0E:99
Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Certificate serial: 0999FC7ED01FF74AE064A9CC0D49A280B8632700
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
Manifest number: 0375
Signing time: Sat 03 Oct 2026 21:26:32 +0000
Manifest this update: Sat 03 Oct 2026 21:21:32 +0000
Manifest next update: Mon 05 Oct 2026 00:59:32 +0000
Files and hashes: 1: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=)
2: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: hV5hj4KiwpJuroTbegwGihexkWAKT4Z3jEEK8buXppw=)
3: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: XCFQR4hI12Tjgtit3SEE2XJc52bIvb2OFixoEnv1lfk=)
4: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ=)
5: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: VcmsnRsgmQnBSJtXlXxQZTY4P3vXZvCafvFQMqv4vfA=)
6: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: 7QCONFpvmyuNf5zvgrCNMc+J3LAExntNG5Qv6K3hEbs=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 00:59:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:99:fc:7e:d0:1f:f7:4a:e0:64:a9:cc:0d:49:a2:80:b8:63:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Validity
Not Before: Oct 3 21:21:32 2026 GMT
Not After : Oct 5 00:59:32 2026 GMT
Subject: CN=113A21F2B3EAA800B7601A8B8C06DEEDCFC40E99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:a6:12:04:9f:8f:a0:10:ff:0a:d9:e5:09:
fa:73:27:d3:70:08:5e:dd:30:fc:3a:73:37:d9:09:
cc:98:8d:41:da:a1:4a:70:77:e8:82:91:b0:cb:61:
0f:21:7a:56:b1:05:ed:be:a1:e2:a2:4b:21:e1:fc:
db:34:4c:27:c6:14:e2:07:1b:aa:c6:82:00:54:4e:
7f:85:22:da:8e:bc:82:47:d9:30:35:ab:a2:47:c3:
c3:61:1a:1a:16:dd:f7:8a:2b:c6:4b:d5:ad:38:55:
d0:72:76:a5:d9:7c:f7:d1:68:b8:e7:ca:be:c4:83:
98:70:62:1d:13:09:a8:a5:9e:2d:72:0e:de:6d:59:
3d:45:38:6f:7b:ec:1b:a4:29:cb:f6:cb:65:3b:d1:
6c:7a:a9:f1:24:83:ad:48:1e:a0:8f:d2:1b:87:20:
f7:13:ec:e1:6b:2e:f1:2b:a0:9c:df:d8:17:45:5b:
a9:07:a9:5a:4e:21:d1:ee:47:71:8b:f1:9a:ba:10:
3f:e6:44:56:c2:cf:67:0f:d3:f4:7a:1e:76:0b:a7:
e0:8f:7b:0e:54:d2:41:e0:a6:88:57:fd:3e:bc:49:
69:bb:ae:58:66:66:cd:d0:e3:4b:df:e0:76:5c:68:
4a:e8:78:3b:e8:2f:6e:3b:db:79:cb:d4:0e:cf:1e:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3A:21:F2:B3:EA:A8:00:B7:60:1A:8B:8C:06:DE:ED:CF:C4:0E:99
X509v3 Authority Key Identifier:
keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9e:40:1f:86:4b:53:d4:ad:19:4d:09:df:f5:a3:bf:90:98:
08:a6:5a:22:18:0b:2e:42:d5:f3:4d:9f:41:4f:38:96:a7:ef:
2d:bf:dc:d8:17:6e:63:33:97:c4:54:3a:bd:93:d7:5d:7f:ff:
4f:57:34:59:59:0e:93:39:9f:06:89:b7:57:66:e1:f9:6c:e0:
0d:b7:f4:9c:34:9f:60:a8:44:98:0f:c1:1e:6b:a4:ef:f2:16:
e7:4c:ae:1f:7a:8e:e2:d7:63:9f:dc:02:b1:fc:0a:28:8e:87:
d7:c6:1d:1f:85:bd:f4:87:84:8f:44:63:ac:73:5a:ed:ae:e8:
06:9f:9e:35:3b:9a:b5:60:fa:10:3a:05:89:2b:ef:d1:e2:4d:
9b:37:e1:6d:5f:2d:ed:7c:22:47:5c:12:5f:6c:77:bb:a6:42:
31:0b:36:e4:4d:6c:14:be:4c:6b:a9:66:cc:cd:83:93:0c:8a:
35:b9:2d:7c:7c:9d:d1:b9:9d:ea:30:bc:da:29:85:89:a0:25:
22:da:10:75:c5:fa:08:90:90:ec:ad:d4:6a:65:87:2d:56:35:
9f:66:15:84:ed:f8:5d:9d:fa:0d:28:45:95:21:aa:60:62:7d:
ae:13:0e:18:df:91:ef:52:8f:82:c9:0f:79:52:fb:92:6c:1e:
c2:8b:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:56:03 2026 by rpki-client