
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json)
Hash identifier: v1kvsb832RKiY06If/CVJVU5Dcd/0b3n/PJzNejAAiM=
Subject key identifier: 44:D8:0D:53:1B:9A:D1:E0:9A:60:A0:A4:DE:30:F2:1A:BB:D3:9E:F3
Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Certificate serial: 3D38D36C755FF2BF06408F290DB375733E55A5BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
Manifest number: 02EB
Signing time: Sun 21 Jun 2026 17:43:57 +0000
Manifest this update: Sun 21 Jun 2026 17:38:57 +0000
Manifest next update: Mon 22 Jun 2026 21:36:57 +0000
Files and hashes: 1: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ=)
2: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: POeaLZ7jyGbDhNwka17vD8hm5iiL/jnjTj3d8a5jHPw=)
3: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: 7QCONFpvmyuNf5zvgrCNMc+J3LAExntNG5Qv6K3hEbs=)
4: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=)
5: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: 2pHYFNhpresl2Qe+bmQCdeuqTmZNLu6JpjLmSUgR1DM=)
6: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: AM18NhWQsMP/A66EkanvB2DA/3MO9WoMEzx5kCKy21M=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 21:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:38:d3:6c:75:5f:f2:bf:06:40:8f:29:0d:b3:75:73:3e:55:a5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Validity
Not Before: Jun 21 17:38:57 2026 GMT
Not After : Jun 22 21:36:57 2026 GMT
Subject: CN=44D80D531B9AD1E09A60A0A4DE30F21ABBD39EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:20:a8:0f:02:47:e2:ce:39:30:47:7a:4b:
77:85:74:1a:da:56:8e:e8:8c:65:0a:f2:0d:72:2d:
07:30:5e:45:e0:bd:c8:b7:af:ca:04:f2:2e:c3:b7:
c4:b1:4d:d3:1e:a8:00:fe:9c:0f:5f:9d:fe:b8:ab:
63:4c:16:06:9f:eb:60:2a:c2:10:8f:0c:32:6d:59:
94:1b:c4:5c:39:9a:ab:0f:62:69:65:1e:e3:75:97:
1f:f3:80:5c:d7:47:6f:fc:c0:9f:f4:40:fa:da:57:
2a:be:3e:d9:d6:41:4e:12:c2:cf:84:60:1a:c5:ee:
14:46:08:86:aa:cc:16:b3:6f:83:e5:8f:29:80:35:
3d:02:23:25:48:14:d8:da:e0:c8:05:00:20:29:0c:
1f:9d:9f:91:e5:03:4e:12:1c:f7:ef:9e:36:df:ae:
78:7c:7d:a5:b4:a8:6b:d7:58:a9:5d:d4:3e:b0:5a:
c2:b4:20:09:b7:76:da:20:80:fc:b3:c5:ab:42:85:
64:06:ca:1b:c7:ae:fd:04:26:24:0c:9d:38:08:c6:
8d:ac:8a:3e:0f:7c:e1:b2:99:52:cd:68:be:ab:19:
ef:c4:bf:ee:05:75:3c:89:35:00:56:10:ca:f6:4e:
22:bc:f0:45:f4:59:5a:2d:db:d7:a3:66:84:1d:23:
48:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D8:0D:53:1B:9A:D1:E0:9A:60:A0:A4:DE:30:F2:1A:BB:D3:9E:F3
X509v3 Authority Key Identifier:
keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e0:aa:13:3b:04:ca:3d:62:7e:17:73:7d:d4:eb:21:a6:02:
a1:cf:5f:09:7a:87:87:c1:b9:aa:39:40:55:c3:1b:6c:84:43:
90:f7:c5:d9:26:28:21:6f:9f:9c:cb:d2:92:5a:25:3a:a9:cf:
dc:69:84:de:4e:5b:dc:f8:9d:6d:16:45:c7:da:a1:20:55:42:
e3:74:04:ae:89:c3:8d:7b:48:77:12:f5:4a:58:c0:82:2b:9e:
65:8b:d9:d7:d7:0d:43:1f:75:4d:7a:32:62:97:7b:e9:f8:7c:
ce:65:8a:e9:16:63:f5:f1:c8:d6:6b:c4:7a:10:d1:13:62:de:
67:77:83:42:40:2c:f0:7e:72:8f:52:1a:18:f7:4c:7e:24:50:
4f:5f:60:52:ab:45:fb:65:78:00:fd:69:c6:34:fa:7c:87:af:
8b:bf:1d:22:84:8b:ec:a5:c7:a7:5e:df:0f:cb:ce:7d:58:ac:
70:1e:03:ee:aa:62:48:41:25:ca:05:17:a6:cd:f4:76:c9:e9:
2f:df:04:3a:1d:d2:72:78:9e:54:3a:be:5f:d3:04:64:ce:70:
76:f3:10:3a:1a:82:2a:fe:3c:11:20:88:c2:43:a1:66:93:20:
a6:64:8d:8b:47:43:e9:39:e0:94:f9:b6:12:a8:e2:ff:42:8a:
90:3c:9d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 22:47:45 2026 by rpki-client