
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json)
Hash identifier: V0aSuHApBZlFmpkMaHrJq/y3AnppPCeocmuKZFyj8pw=
Subject key identifier: BD:13:B1:59:2C:0B:99:C1:64:8E:10:62:1F:B1:03:66:AB:3D:6D:91
Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Certificate serial: 445333E5EDC9801AD45774B1A3D083790D263B26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
Manifest number: 03AD
Signing time: Sat 14 Nov 2026 18:00:16 +0000
Manifest this update: Sat 14 Nov 2026 17:55:16 +0000
Manifest next update: Sun 15 Nov 2026 19:15:16 +0000
Files and hashes: 1: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: 7QCONFpvmyuNf5zvgrCNMc+J3LAExntNG5Qv6K3hEbs=)
2: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: VcmsnRsgmQnBSJtXlXxQZTY4P3vXZvCafvFQMqv4vfA=)
3: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: XCFQR4hI12Tjgtit3SEE2XJc52bIvb2OFixoEnv1lfk=)
4: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ=)
5: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: ymd1lDfMat0snaTlxqUB4RNHV4h7F4u5nMc5k/hYHVs=)
6: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 19:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:53:33:e5:ed:c9:80:1a:d4:57:74:b1:a3:d0:83:79:0d:26:3b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Validity
Not Before: Nov 14 17:55:16 2026 GMT
Not After : Nov 15 19:15:16 2026 GMT
Subject: CN=BD13B1592C0B99C1648E10621FB10366AB3D6D91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:62:61:2f:9a:44:df:f8:5d:6c:1e:50:45:
6f:92:90:aa:db:6b:ee:5e:56:20:c0:7a:21:1a:fd:
1d:9a:d5:d8:2f:05:60:9a:16:4e:81:36:86:ca:f8:
e7:fb:15:cd:f1:34:42:99:5e:0e:8d:bf:a0:47:2d:
58:33:24:4b:6e:b6:cb:6d:b6:1b:a1:2f:b7:41:19:
f8:b9:4f:d2:bf:32:bd:bc:aa:d8:1c:6a:b3:14:21:
b7:9f:c1:8c:23:bf:09:33:da:69:74:77:61:ea:3b:
40:db:21:a7:3e:ac:bc:a8:ad:7e:3a:44:03:6e:1d:
19:dd:74:ae:aa:25:4b:d6:db:a9:60:2f:98:20:cb:
18:ee:5f:dc:45:62:67:dd:79:aa:a7:28:49:4e:bd:
df:e7:5a:7e:08:0d:5b:86:09:52:74:73:2f:de:72:
74:d4:bf:69:c5:c2:86:8b:cb:eb:3a:4a:09:0d:62:
68:35:d4:55:0d:97:3a:e9:3b:81:30:fa:11:49:57:
9a:83:cc:2c:9c:23:23:1e:cf:e3:fc:a6:18:2e:c5:
1f:b0:b6:b0:eb:87:d4:b2:a2:cf:df:55:ac:a6:0b:
e8:5f:1a:e5:69:08:62:f4:67:c4:44:8e:90:cb:99:
ea:3f:32:46:d5:32:aa:d1:2b:99:90:66:6d:81:14:
d1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:13:B1:59:2C:0B:99:C1:64:8E:10:62:1F:B1:03:66:AB:3D:6D:91
X509v3 Authority Key Identifier:
keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:06:2c:81:ba:aa:f8:ae:21:cc:6d:a0:b3:71:4c:34:ba:29:
66:45:0a:d5:f3:1c:1b:7a:82:0c:c4:16:31:ba:06:5b:3f:3b:
55:de:0b:e7:fe:fa:47:3b:22:87:e4:16:51:80:2f:a6:65:46:
29:2d:fd:4d:78:9e:59:4b:20:9e:a0:57:b2:50:42:56:ee:06:
e6:c6:bf:b3:e2:8c:a1:7c:be:00:2a:9c:85:fd:cb:0a:91:40:
bd:92:6d:8a:4a:5e:42:24:3d:4f:86:32:a4:92:c6:59:e4:ed:
0f:ef:18:e8:61:05:0c:26:00:5c:5b:33:c9:fb:84:cc:ee:46:
e8:06:b8:ad:e0:74:aa:f8:16:24:ef:fe:0c:c4:08:7a:e5:9f:
22:f0:1e:bb:2d:69:7e:bc:aa:dd:84:c6:4b:c4:87:2b:19:ab:
79:e3:4b:ba:10:21:2b:d6:ac:1a:3f:cc:ce:fc:e7:72:2d:79:
75:cd:19:57:cb:04:77:51:80:58:76:b0:33:ed:2b:99:3c:4f:
6f:56:9a:6e:a3:c4:97:71:97:93:6e:7e:ff:53:15:da:71:ea:
ed:95:c3:89:9f:87:25:44:9f:86:c6:20:85:8c:d6:e3:10:f7:
7b:3e:2e:2d:ba:5e:4b:d1:a0:dc:bc:16:34:02:b1:83:58:25:
a5:59:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:09:50 2026 by rpki-client