
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json)
Hash identifier: Wg6L9TsXHcEPhjraGJ3siUfXVOJokg8IPNgt6iDyOgI=
Subject key identifier: 3C:FF:C5:09:9A:19:4A:4B:9F:EC:B0:31:C7:8E:E3:4D:79:D0:D4:27
Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Certificate serial: 310CEA308EDD95C67AD84EAA0CA004A5704B36C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
Manifest number: 0315
Signing time: Thu 23 Jul 2026 12:11:09 +0000
Manifest this update: Thu 23 Jul 2026 12:06:09 +0000
Manifest next update: Fri 24 Jul 2026 15:06:09 +0000
Files and hashes: 1: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: 7QCONFpvmyuNf5zvgrCNMc+J3LAExntNG5Qv6K3hEbs=)
2: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: 2pHYFNhpresl2Qe+bmQCdeuqTmZNLu6JpjLmSUgR1DM=)
3: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: POeaLZ7jyGbDhNwka17vD8hm5iiL/jnjTj3d8a5jHPw=)
4: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=)
5: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: alUAtty8Po/pyw3drPw6iYF6izKkQTvqUecKsneBVLE=)
6: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 15:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0c:ea:30:8e:dd:95:c6:7a:d8:4e:aa:0c:a0:04:a5:70:4b:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Validity
Not Before: Jul 23 12:06:09 2026 GMT
Not After : Jul 24 15:06:09 2026 GMT
Subject: CN=3CFFC5099A194A4B9FECB031C78EE34D79D0D427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:c4:95:0d:2f:66:91:90:4a:b7:96:ef:90:
5d:68:17:ed:27:1b:79:27:0f:33:ef:f6:fb:76:f2:
ea:3c:ca:54:ca:77:8d:48:d4:b8:30:50:52:6d:80:
01:23:a5:a9:64:26:ac:ce:24:82:eb:62:29:bd:dd:
ec:16:d6:3e:a9:b5:3d:8e:12:22:f6:2b:1c:ba:2a:
72:02:18:64:e2:5b:33:df:d9:82:66:6e:bb:cd:e7:
df:67:19:fd:0b:1d:5d:c4:15:ab:f2:ac:16:ec:76:
11:0c:a4:a2:23:d3:9a:c6:f9:ad:f4:7a:6d:30:9e:
4c:00:fa:91:7a:60:0c:84:1a:b8:e5:69:fd:30:91:
9d:3b:36:f7:9f:b0:8d:53:79:07:35:1a:a1:7f:bd:
f7:e4:44:85:57:13:d6:53:0c:e7:0b:0b:ef:c5:84:
bd:31:25:55:ef:d1:74:b5:f1:80:32:7e:d7:13:62:
00:74:3f:3b:c7:49:f9:4c:e6:21:4c:95:e3:2c:bc:
36:13:0f:6b:50:b5:38:d9:62:42:56:2d:5f:af:3a:
82:16:ab:b7:80:59:14:39:ff:07:a2:f2:14:4a:7f:
b4:d6:3a:cc:d3:c0:9c:2f:b0:c5:4b:8b:27:67:8d:
1f:e4:cc:b2:f2:c0:b1:c7:c3:74:4b:c1:49:39:91:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FF:C5:09:9A:19:4A:4B:9F:EC:B0:31:C7:8E:E3:4D:79:D0:D4:27
X509v3 Authority Key Identifier:
keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8f:61:36:f6:2f:af:bb:bd:f8:d4:0b:cf:a1:62:ee:18:c8:
9e:bd:d5:e7:a2:dc:26:57:dd:33:59:b9:bb:05:8e:fa:bc:09:
7d:75:89:5c:b1:f2:54:bc:b2:ef:99:76:90:92:1d:16:28:bf:
8b:f8:8d:e2:f5:62:d1:76:81:be:e2:b6:7b:c3:6b:61:de:6d:
0a:3b:0a:23:e5:92:68:36:93:65:68:ed:bb:b2:aa:a0:85:f4:
82:7c:c4:e7:f0:93:07:ab:64:c4:00:19:a2:87:4e:1e:ed:d1:
95:0b:c5:db:e8:23:19:03:99:c5:09:61:e6:6b:dc:c7:d9:05:
c1:06:5b:6a:94:0b:d3:03:11:92:4b:35:a7:50:a8:2a:37:77:
20:a6:e0:6a:df:12:bc:45:22:0c:df:4f:b6:9e:98:3f:12:29:
12:6b:7b:1a:ff:df:b5:aa:ad:36:bd:e8:0b:8d:35:85:73:36:
45:93:d1:2a:c5:dc:e4:42:e3:74:85:3f:29:98:ed:f6:c8:b5:
eb:93:49:e9:85:48:d5:7e:68:15:eb:40:9c:36:74:22:a2:63:
dc:01:8b:dc:7f:e8:c5:48:cc:40:62:1c:c4:fb:f2:86:a9:57:
4f:f9:c8:c8:60:63:8d:52:e2:45:7d:4a:dc:05:fb:ea:7b:76:
58:82:93:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:24 2026 by rpki-client