
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
File: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json)
Hash identifier: 9g6k6b9iuHH6lNByUcvY/edsOAdXiVb2bi3rfze1Eao=
Subject key identifier: 56:A1:92:69:BD:46:6F:8A:A6:7D:C5:A2:C7:19:D1:33:C2:22:C7:ED
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 173B9535150AC50B50B03AA01962715613866887
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
Manifest number: 0833
Signing time: Wed 23 Sep 2026 12:20:34 +0000
Manifest this update: Wed 23 Sep 2026 12:15:34 +0000
Manifest next update: Thu 24 Sep 2026 15:38:34 +0000
Files and hashes: 1: 3230332e372e3139362e302f32332d3233203d3e20313334303930.roa (hash: qaOra+xDLyRhqdf//j4nvjjhMuhgOEsIZ5B8fiKTKxU=)
2: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: a7JbZMr92zzHbEOXrpI0N91OQAaQL4UiyFM6BOscqZE=)
3: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: fkFkv4x2RJF8ikeWNYi3IpWqQO/j13TZnucB+1TubjI=)
4: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: rzinuF8M1yOollf04EvErWnWH6T2XoPt2D2UOC4d8Tk=)
5: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: CY5QK2CYlvnk1d4kODd483fXqi3iH3cnaf3suFV6q3k=)
6: 3230332e372e3139362e302f32342d3234203d3e2037353436.roa (hash: V95Z++X1BN0ujeiUpldiRsUT1wl/Vx8TaPKCLXBi9zI=)
7: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: Yif9zAcaCiGPMsa6nFpzg5c6EtmMp4yn18LmSsTMSYg=)
8: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ouqx4LxaBgGUkmuXMINywcsMwqU0N6ifWFXfDupPMm0=)
9: 3230332e372e3139372e302f32342d3234203d3e2039343439.roa (hash: vAwqdvaW6yc2XtCDVw1UZNeo44zGvcl9i5o3oiFTQWo=)
10: 3230332e372e3139372e302f32342d3234203d3e2037353436.roa (hash: 63Xbycua4Mi8GYHYLibG9AGPdZZeGwzqJEcmfJT9ybE=)
11: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: aNPv9QWVtH9n+gnLXuZ6dzxPw4I7fQPByYNoN2wj0vw=)
12: 3230332e372e3139362e302f32342d3234203d3e20313334303930.roa (hash: /LpdqHnCJJlwCcOi3CqIbxGlAHdFFT95xe2Q0VqmA3E=)
13: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: fDoR67VqgO4UC2WoFr3onY00uK4pxdsfonbFV6yqmUw=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 15:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:3b:95:35:15:0a:c5:0b:50:b0:3a:a0:19:62:71:56:13:86:68:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Sep 23 12:15:34 2026 GMT
Not After : Sep 24 15:38:34 2026 GMT
Subject: CN=56A19269BD466F8AA67DC5A2C719D133C222C7ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:81:66:08:78:74:ae:cc:c3:6c:3c:4a:58:
d7:1f:29:65:f7:ab:03:5d:4b:08:51:a6:f2:84:17:
db:22:24:1c:46:51:09:85:97:96:e0:36:e9:f8:5b:
b6:d4:ac:12:b2:6f:e7:7d:ed:e9:ce:ba:a1:74:02:
22:53:31:d1:a8:66:85:7a:46:81:7e:e8:bf:30:16:
a0:6a:a0:a8:47:b1:af:0a:ab:0a:a9:27:a0:4f:28:
ab:f4:d8:2a:47:dc:97:e6:cb:61:e9:27:c8:b6:62:
2d:8e:6a:d8:80:47:62:75:0e:64:6e:d0:63:15:86:
20:a8:12:ad:23:5b:a7:90:e5:f6:26:5f:7a:5a:ca:
4f:9b:60:94:c3:bb:c1:12:4b:26:22:2e:95:9b:b4:
1f:f1:17:b2:9f:52:77:c3:6d:5e:92:82:f0:3c:1b:
aa:43:50:ec:f8:6f:2b:87:97:7c:c1:1d:27:f6:62:
23:31:5f:02:60:16:cb:8e:9b:a2:d1:88:67:27:97:
95:b4:bf:06:5d:a5:8e:a2:79:59:74:11:e2:4e:24:
23:f7:fd:99:ed:9b:1b:c9:e8:29:ce:13:17:ae:22:
73:2b:64:b9:c7:2e:30:a4:d7:2e:87:ee:ee:70:e4:
22:99:0a:62:16:e2:8d:f0:a7:00:20:33:90:21:19:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A1:92:69:BD:46:6F:8A:A6:7D:C5:A2:C7:19:D1:33:C2:22:C7:ED
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f2:77:92:78:ae:af:0c:6f:73:87:53:8e:44:97:22:d7:b7:
e3:88:31:82:b4:28:4e:a5:52:53:b4:fe:51:7c:5d:b6:d9:ca:
d0:ed:f9:f1:98:14:e4:18:77:68:e4:be:36:dd:14:b5:de:57:
8c:53:17:13:b1:21:9c:73:c2:8a:54:49:98:2b:08:ce:1c:15:
17:08:a6:1b:1e:04:51:63:3b:fa:b1:19:7f:32:bf:40:63:ea:
13:e1:a2:f3:8d:96:cc:89:70:c5:e0:94:0f:32:0b:f1:7c:c2:
91:6d:63:fc:f7:45:6b:96:24:6b:dc:0c:91:ec:42:77:b7:7b:
df:2f:e3:60:1a:c0:12:bb:d0:fa:25:b5:97:c7:b1:ae:0d:bd:
bd:63:a8:b9:6c:4c:a6:c3:9d:4f:9f:4e:40:5b:84:e1:bb:1d:
e6:29:e8:71:7c:76:05:0e:9d:e8:9a:be:fc:a0:7f:71:f1:ad:
97:4f:f0:1e:be:4e:4a:55:cd:d2:94:c9:a8:0b:3d:88:c8:23:
10:48:c6:68:b1:8e:ea:fe:13:04:df:87:b5:17:2a:b9:d8:03:
69:41:ac:4e:cd:88:fe:d0:c7:00:da:0a:f7:43:34:32:f3:4e:
46:45:5f:d1:a8:87:6f:6a:b8:98:bd:53:1b:d7:b9:34:2b:74:
7e:cf:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:46:43 2026 by rpki-client