
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json)
Hash identifier: 8uoNvXlZkzX29657Gza4ErSPVDxK5rHhwGKiFHnql9Q=
Subject key identifier: 89:20:74:9C:D2:19:92:35:74:83:CA:8C:C5:08:23:EB:5D:41:80:35
Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Certificate serial: 15D84323196016FCF6CCD61851833E328EEDE86F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
Manifest number: 02B6
Signing time: Tue 12 May 2026 16:30:06 +0000
Manifest this update: Tue 12 May 2026 16:25:06 +0000
Manifest next update: Wed 13 May 2026 16:59:06 +0000
Files and hashes: 1: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ=)
2: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: 2pHYFNhpresl2Qe+bmQCdeuqTmZNLu6JpjLmSUgR1DM=)
3: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: ETuaGIpx9/yePleesiDAMgiU5A89CooXk6MrVnNo4Ts=)
4: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=)
5: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: 7QCONFpvmyuNf5zvgrCNMc+J3LAExntNG5Qv6K3hEbs=)
6: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: POeaLZ7jyGbDhNwka17vD8hm5iiL/jnjTj3d8a5jHPw=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d8:43:23:19:60:16:fc:f6:cc:d6:18:51:83:3e:32:8e:ed:e8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Validity
Not Before: May 12 16:25:06 2026 GMT
Not After : May 13 16:59:06 2026 GMT
Subject: CN=8920749CD21992357483CA8CC50823EB5D418035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:64:5e:6c:58:9f:44:04:30:df:d7:62:e7:
3c:05:ed:80:15:29:91:51:22:1b:04:92:d1:e8:24:
f4:c8:22:05:09:b7:e4:3d:b5:d3:7a:bc:20:35:ea:
b2:08:1a:94:b3:30:cd:cd:92:87:1a:07:19:58:e6:
89:78:07:4a:7c:40:dc:ff:1f:e1:43:53:fb:bd:9b:
97:d9:37:5f:8d:a1:b9:e1:49:80:28:ac:5d:24:b1:
e3:0d:0e:89:37:75:84:a4:6b:fb:5b:f8:12:83:29:
75:0a:37:a9:db:cd:31:25:66:db:cc:33:90:92:1a:
79:cb:5d:c7:a5:86:cc:ea:7c:e2:77:1e:30:7f:c5:
eb:80:a6:6c:60:dc:49:41:10:81:1e:4f:5a:83:74:
c6:4c:83:15:48:14:fa:95:5a:6b:3e:52:e6:6d:22:
ed:db:df:3d:7f:11:cf:40:40:dc:8c:5a:b9:07:d7:
0b:02:e2:d4:cc:bd:2c:d7:a3:94:f7:fd:a4:db:e7:
a8:86:56:bc:fd:78:61:c0:33:22:60:18:26:7c:e7:
16:be:af:9b:d0:34:c7:b6:90:1e:f5:db:74:1c:97:
ae:0e:a9:ae:ae:05:4b:db:9b:a6:f0:97:6e:c8:b0:
e1:bd:1c:04:4f:11:f6:4d:6b:7b:6a:3e:80:e9:47:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:20:74:9C:D2:19:92:35:74:83:CA:8C:C5:08:23:EB:5D:41:80:35
X509v3 Authority Key Identifier:
keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6f:94:15:e3:98:0a:8b:a4:9b:34:d2:91:69:79:60:49:1a:
46:f0:88:df:ec:b3:49:8c:e3:99:8f:d9:e4:1f:45:24:dc:e3:
fc:2b:49:bd:68:1e:ec:81:ad:24:ec:19:80:96:ad:f4:fc:19:
31:db:17:16:97:2e:60:21:f7:b4:19:5b:58:bb:f6:2f:1c:d3:
ab:6d:b8:e4:1d:bc:e2:6d:2c:87:9a:72:91:ff:f9:43:0d:84:
e7:23:71:1b:87:8c:0d:7a:34:ae:ad:a4:f7:c2:f3:b0:ec:45:
58:2b:08:ba:5c:cd:b8:ee:74:e8:ce:72:e4:2a:dc:62:48:1d:
0d:92:4c:36:85:d0:56:3c:6f:48:f5:d3:89:e8:8f:a9:f3:74:
c6:4b:d3:86:a6:a4:2e:16:dc:14:85:8f:e0:b8:b9:8f:2a:55:
33:88:06:8d:7b:4f:3e:68:cf:26:75:d3:a4:6e:10:14:0b:12:
c9:9e:5a:62:ef:a4:d5:07:39:4f:b3:cc:73:e8:1f:5f:7d:12:
1a:db:95:cb:cf:80:bc:56:d1:f9:ee:74:44:6f:a2:8f:6a:f6:
71:51:a0:61:38:db:b1:32:be:80:7d:09:40:99:c1:b2:79:2e:
73:02:9d:d3:1f:b8:a6:11:cb:49:eb:85:e3:e2:ee:e9:7b:47:
46:3b:e3:af
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFdhDIxlgFvz2zNYYUYM+Mo7t6G8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1
Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI2MDUxMjE2MjUwNloX
DTI2MDUxMzE2NTkwNlowMzExMC8GA1UEAxMoODkyMDc0OUNEMjE5OTIzNTc0ODND
QThDQzUwODIzRUI1RDQxODAzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN+BZF5sWJ9EBDDf12LnPAXtgBUpkVEiGwSS0egk9MgiBQm35D2103q8IDXq
sggalLMwzc2ShxoHGVjmiXgHSnxA3P8f4UNT+72bl9k3X42hueFJgCisXSSx4w0O
iTd1hKRr+1v4EoMpdQo3qdvNMSVm28wzkJIaectdx6WGzOp84nceMH/F64CmbGDc
SUEQgR5PWoN0xkyDFUgU+pVaaz5S5m0i7dvfPX8Rz0BA3IxauQfXCwLi1My9LNej
lPf9pNvnqIZWvP14YcAzImAYJnznFr6vm9A0x7aQHvXbdByXrg6prq4FS9ubpvCX
bsiw4b0cBE8R9k1re2o+gOlHML8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBSJIHSc
0hmSNXSDyozFCCPrXUGANTAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c
ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw
RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp
UXl0TDNMX1RJUG1vdHQzSHMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUx
MDAwMDAvMC81RDcwN0IwRDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdC
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEApG+UFeOYCoukmzTSkWl5YEkaRvCI3+yzSYzjmY/Z5B9FJNzj
/CtJvWge7IGtJOwZgJat9PwZMdsXFpcuYCH3tBlbWLv2LxzTq2245B284m0sh5py
kf/5Qw2E5yNxG4eMDXo0rq2k98LzsOxFWCsIulzNuO506M5y5CrcYkgdDZJMNoXQ
VjxvSPXTieiPqfN0xkvThqakLhbcFIWP4Li5jypVM4gGjXtPPmjPJnXTpG4QFAsS
yZ5aYu+k1Qc5T7PMc+gfX30SGtuVy8+AvFbR+e50RG+ij2r2cVGgYTjbsTK+gH0J
QJnBsnkucwKd0x+4phHLSeuF4+Lu6XtHRjvjrw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:46:22 2026 by rpki-client