$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft File: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json) Hash identifier: /ahvEHahICtPUEublEyhCXQ1Gj5CWY8xoMJK4gBwOcY= Subject key identifier: 85:15:2F:DF:98:5A:0C:92:49:07:01:B0:20:2D:1F:7E:F9:60:3B:03 Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Certificate serial: 31CB11FC3E722F884E83C55B21A9BD2D97F6660B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft Manifest number: 0745 Signing time: Sun 05 Apr 2026 08:27:59 +0000 Manifest this update: Sun 05 Apr 2026 08:22:59 +0000 Manifest next update: Mon 06 Apr 2026 08:27:59 +0000 Files and hashes: 1: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ciSHjom7uhsnTUry3euH0kEf+ood81S/2eHdQ8CkHns=) 2: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: Wnz7iyh9clZuDDpLGVNNBZJ0JgoGPtAKZ8B2Ynr6Xgc=) 3: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: Fe1UVCyCNYuLeK/2YClSqpX8AFGVDlpgAyiB6HZMqgE=) 4: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: yVZN8uUTOOhqgDafcuJzyObo6OYnTkFGrZV6T9wM9pM=) 5: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: TyUQXYW/Z9X7LSxau+0o+4cjIXJiQzcIYmIWKatiFMc=) 6: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: /tu1GLPgmx3L59lA9DS67uY00dm6i5Wm3Y/TLJzZPPI=) 7: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: DF0B2w1ci15U2MWgi9NHF/RrZ7F8ylilgRl/5FkgJoA=) 8: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: pl2GGKrClghtykjFi9+LTTzBtEaSx7lLbOlA+o0qTbE=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 08:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:cb:11:fc:3e:72:2f:88:4e:83:c5:5b:21:a9:bd:2d:97:f6:66:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Validity Not Before: Apr 5 08:22:59 2026 GMT Not After : Apr 6 08:27:59 2026 GMT Subject: CN=85152FDF985A0C92490701B0202D1F7EF9603B03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3b:43:18:f4:4d:52:2b:64:86:64:e2:f5:65: b0:65:cb:f9:4f:1c:ff:42:16:e3:cc:32:05:b7:7f: 68:cd:2f:4f:fc:55:09:96:83:98:09:5f:9a:33:75: 1e:ef:df:ac:fd:60:d2:d2:21:fc:89:20:52:c5:28: 15:50:60:e0:40:d4:8d:e6:09:ab:42:30:1c:50:84: 98:27:a4:43:c5:ca:0e:76:a0:7a:29:90:23:70:bf: 51:7a:9e:4a:64:c9:0a:62:56:92:6b:97:df:2d:15: 63:a6:15:e7:8b:f1:0f:75:3f:b7:f7:a7:8f:7c:1c: d3:49:5d:ca:09:10:ea:d8:ef:2f:5c:a3:b9:9c:8b: 7f:57:c7:ff:77:64:b2:f0:08:3b:56:b2:f6:ca:ad: 2f:68:58:da:a5:5c:40:c8:38:7c:b4:36:6c:54:a1: 30:2e:dc:14:6b:32:ef:01:14:f1:f2:48:ae:92:14: 2d:9e:9e:6c:20:24:0f:d9:af:aa:96:9c:34:37:aa: 70:51:f8:2c:e6:2b:4b:66:12:ad:63:ec:c6:4d:00: 56:27:f4:42:6f:11:9e:b3:7b:27:e7:20:c4:fc:1a: 65:45:91:aa:66:82:1c:7a:56:0a:3e:02:a4:93:58: 47:22:71:a0:7a:b4:b6:28:08:40:24:d4:d0:0a:26: 09:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:15:2F:DF:98:5A:0C:92:49:07:01:B0:20:2D:1F:7E:F9:60:3B:03 X509v3 Authority Key Identifier: keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ba:d6:bb:d5:81:29:0d:e6:b5:a8:4c:fb:29:c2:6f:8e:b1: c6:74:63:95:c2:ce:45:3a:6e:ad:00:a8:53:81:98:0f:33:6c: a2:22:a5:b7:a4:38:4e:f8:19:f3:37:f8:46:df:dc:5a:05:77: 25:65:3e:b2:bb:47:e2:f6:a6:da:87:77:2b:e7:96:08:28:93: cd:00:ba:a0:fe:bf:83:d8:5f:ea:24:d2:a6:33:11:53:53:56: c7:fc:f2:3b:08:2d:4a:8a:d3:2a:79:d7:f0:4a:3e:58:4d:da: f6:9a:58:09:5b:27:22:6d:d4:c5:85:a8:cd:18:f7:88:ad:20: bf:5c:9f:10:29:a2:eb:48:0c:96:4e:62:57:0a:96:04:bb:5b: d7:c7:d4:7b:89:a6:a1:7c:0c:01:a5:e6:40:98:23:2f:aa:0c: 21:30:77:7c:fb:d0:b6:8c:e1:0a:4e:4f:25:72:84:a7:93:2f: da:c0:63:6f:75:b2:46:ce:db:c9:1d:3d:87:4a:49:db:6e:71: 25:9d:c4:6d:d4:9e:bf:33:f9:3e:c5:78:03:f3:bd:74:97:e9: 51:17:f1:64:45:3d:0c:ae:43:d1:ee:fb:f3:90:2b:1c:92:ff: ff:2d:c1:1d:49:da:59:1b:2d:c2:7c:ff:9d:22:d9:0f:e1:75: 33:24:bf:f8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMcsR/D5yL4hOg8VbIam9LZf2ZgswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI2MDQwNTA4MjI1OVoX DTI2MDQwNjA4Mjc1OVowMzExMC8GA1UEAxMoODUxNTJGREY5ODVBMEM5MjQ5MDcw MUIwMjAyRDFGN0VGOTYwM0IwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJc7Qxj0TVIrZIZk4vVlsGXL+U8c/0IW48wyBbd/aM0vT/xVCZaDmAlfmjN1 Hu/frP1g0tIh/IkgUsUoFVBg4EDUjeYJq0IwHFCEmCekQ8XKDnageimQI3C/UXqe SmTJCmJWkmuX3y0VY6YV54vxD3U/t/enj3wc00ldygkQ6tjvL1yjuZyLf1fH/3dk svAIO1ay9sqtL2hY2qVcQMg4fLQ2bFShMC7cFGsy7wEU8fJIrpIULZ6ebCAkD9mv qpacNDeqcFH4LOYrS2YSrWPsxk0AVif0Qm8RnrN7J+cgxPwaZUWRqmaCHHpWCj4C pJNYRyJxoHq0tigIQCTU0AomCRcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSFFS/f mFoMkkkHAbAgLR9++WA7AzAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w M2psZkN5XzhudUVTbnpBTFEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNC9CNzM1MUIwNUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAJLrWu9WBKQ3mtahM+ynCb46xxnRjlcLORTpurQCoU4GYDzNs oiKlt6Q4TvgZ8zf4Rt/cWgV3JWU+srtH4vam2od3K+eWCCiTzQC6oP6/g9hf6iTS pjMRU1NWx/zyOwgtSorTKnnX8Eo+WE3a9ppYCVsnIm3UxYWozRj3iK0gv1yfECmi 60gMlk5iVwqWBLtb18fUe4mmoXwMAaXmQJgjL6oMITB3fPvQtozhCk5PJXKEp5Mv 2sBjb3WyRs7byR09h0pJ225xJZ3EbdSevzP5PsV4A/O9dJfpURfxZEU9DK5D0e77 85ArHJL//y3BHUnaWRstwnz/nSLZD+F1MyS/+A== -----END CERTIFICATE-----Generated at Sun Apr 5 19:41:03 2026 by rpki-client