$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: Df6EOb3GX3E40UgfaBCj4O+CpMy9x6p2v2pcN+RNg2o= Subject key identifier: 26:19:61:6D:9B:A9:D6:EA:24:0C:C3:38:96:97:BB:DD:44:B8:B6:3C Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 43D60A60B048CB8B10D1695B11E60227FFCB0919 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 030D Signing time: Sun 20 Jul 2025 07:59:52 +0000 Manifest this update: Sun 20 Jul 2025 07:54:52 +0000 Manifest next update: Mon 21 Jul 2025 08:54:52 +0000 Files and hashes: 1: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: S8rFfs7IoEg3XYYnsyLOBvR6RACIA3juzHhODPn7ChQ=) 2: 34332e3235352e38312e302f32342d3234203d3e20313431313538.roa (hash: SQWzDg71lRig1vikM6oroRmKP7jytIrlrfxg8Lw3ga4=) 3: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: 34ZLdvJWRlaz+jTDs3YF3eEhOoQyE7fhuoEG/fJaNVY=) 4: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: yMcRnNxJZCs4sSLFHBiZST6DU/1T0d8jEA3Da9/uRKk=) 5: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (hash: 5hWADdZsX05Xm71wk93nvrisrc0F3dwJlLqjnpXhvtY=) 6: 3130332e3233382e3133302e302f32342d3234203d3e20313336363231.roa (hash: 8igxHKxo2njqbR2D8BiOevPTCdiGc26mhB2WmzLUUOQ=) 7: 3130332e3233382e3132382e302f32342d3234203d3e20313338303737.roa (hash: 5sZFV0hCMUC2n4iWJ3AfJgpDZ6n5Bs/7eOe7YiQjRcQ=) 8: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: YRgjmmE+nVi/PAXhqb3JUaahbh35VPMhIEe6x6m98Ho=) 9: 3130332e3233382e3133312e302f32342d3234203d3e20383334.roa (hash: 6IgcwjRKb6astouhD9WExOS+krHxCK0bUKZX+Qgmb5s=) 10: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: befyV0hRkZPjsj2HiXn8OpPP07iuTlgDyNJrlhl8VkA=) 11: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: E4ONBceQGtTtMJwjbxI/zmDC8SS3yBbRlcMhg4vXlLU=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 08:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d6:0a:60:b0:48:cb:8b:10:d1:69:5b:11:e6:02:27:ff:cb:09:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Jul 20 07:54:52 2025 GMT Not After : Jul 21 08:54:52 2025 GMT Subject: CN=2619616D9BA9D6EA240CC3389697BBDD44B8B63C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:76:4c:ed:c1:aa:76:6c:1b:e0:21:1c:0a: 8f:27:9f:7b:a9:44:f6:1e:08:a6:ab:01:96:6e:30: 01:5e:ca:f2:51:a0:0d:8d:65:7f:4c:b5:63:67:40: 6c:c9:37:74:fc:9c:c2:f9:e5:2f:82:77:ba:30:35: f7:f5:d5:6f:2e:99:cc:ca:76:68:88:fd:0d:e2:cb: a9:2a:fd:0e:6b:cb:e5:09:ce:e9:64:73:a1:9e:9e: ac:eb:e1:c9:59:e0:ba:dd:b5:38:24:1e:5d:c9:5c: 77:7a:19:3f:5a:99:eb:94:c8:b5:60:3b:34:d0:1e: 15:31:80:e4:84:a1:59:ce:af:df:43:25:5a:36:6b: 44:63:f4:31:43:99:52:01:ed:a9:c4:83:ba:9a:3b: 7c:d3:fb:27:4a:69:22:69:92:08:15:5d:0b:8f:7a: 93:1d:8f:bb:c3:9b:d2:d3:33:9a:69:2a:ff:7b:1c: 49:fb:fc:4f:ed:35:9d:fa:88:6f:2a:a8:20:cf:a8: 79:3c:44:76:3d:2a:8b:32:cd:ce:98:06:49:22:14: 3f:76:a0:bf:2c:7a:55:67:c1:1e:4f:a2:8b:42:10: ec:11:5f:e0:04:3e:ca:0b:c0:49:1e:0a:99:69:77: f3:47:be:61:e7:0b:a5:0d:f4:88:aa:91:97:52:61: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:19:61:6D:9B:A9:D6:EA:24:0C:C3:38:96:97:BB:DD:44:B8:B6:3C X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e8:8b:9d:15:bc:c7:b6:7d:f0:7c:d2:9f:49:47:1f:5b:b6: bb:32:fb:2b:ad:5a:ae:4b:a7:b6:48:46:46:19:ee:d1:73:eb: 85:8d:aa:36:87:64:f4:80:12:7a:d6:64:3c:1c:2e:75:4c:a0: fb:72:65:27:bb:da:b4:45:10:c0:76:b6:f4:1d:ac:34:90:71: e5:ad:95:0c:44:d3:d6:00:e0:2c:95:8f:3c:bd:fd:9a:dd:41: b9:8e:8f:b8:8d:03:32:97:7a:5e:c5:2b:25:89:14:ff:42:35: 24:a8:51:e2:81:53:44:0d:ff:12:fe:32:35:cc:43:62:b9:e0: 38:99:5e:c8:de:b8:35:ab:ff:7d:29:d0:72:d0:65:23:8f:9d: 53:af:e6:69:b1:be:c6:37:c0:54:ec:72:6c:27:42:ea:b1:48: 1c:ac:a3:68:e0:7e:81:d1:4a:e1:71:ab:c1:3b:f6:9a:7b:60: c0:9c:22:12:bc:85:a2:ef:ee:bc:58:db:a0:e8:4f:42:c2:ee: ab:1f:b1:f1:12:86:c1:6d:e6:48:fb:d9:60:74:d9:c6:b6:61: 4f:92:bf:88:f1:97:4e:9e:50:c5:fd:1d:32:e1:ef:9b:ab:0a: 36:37:0e:69:f3:3a:a9:54:0c:f6:a4:95:ae:7c:9b:a8:19:60: db:b5:bb:d8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQ9YKYLBIy4sQ0WlbEeYCJ//LCRkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MDcyMDA3NTQ1MloX DTI1MDcyMTA4NTQ1MlowMzExMC8GA1UEAxMoMjYxOTYxNkQ5QkE5RDZFQTI0MEND MzM4OTY5N0JCREQ0NEI4QjYzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNjdkztwap2bBvgIRwKjyefe6lE9h4IpqsBlm4wAV7K8lGgDY1lf0y1Y2dA bMk3dPycwvnlL4J3ujA19/XVby6ZzMp2aIj9DeLLqSr9DmvL5QnO6WRzoZ6erOvh yVngut21OCQeXclcd3oZP1qZ65TItWA7NNAeFTGA5IShWc6v30MlWjZrRGP0MUOZ UgHtqcSDupo7fNP7J0ppImmSCBVdC496kx2Pu8Ob0tMzmmkq/3scSfv8T+01nfqI byqoIM+oeTxEdj0qizLNzpgGSSIUP3agvyx6VWfBHk+ii0IQ7BFf4AQ+ygvASR4K mWl380e+YecLpQ30iKqRl1JhRXkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQmGWFt m6nW6iQMwziWl7vdRLi2PDAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAIOiLnRW8x7Z98HzSn0lHH1u2uzL7K61arkuntkhGRhnu0XPr hY2qNodk9IASetZkPBwudUyg+3JlJ7vatEUQwHa29B2sNJBx5a2VDETT1gDgLJWP PL39mt1BuY6PuI0DMpd6XsUrJYkU/0I1JKhR4oFTRA3/Ev4yNcxDYrngOJleyN64 Nav/fSnQctBlI4+dU6/mabG+xjfAVOxybCdC6rFIHKyjaOB+gdFK4XGrwTv2mntg wJwiEryFou/uvFjboOhPQsLuqx+x8RKGwW3mSPvZYHTZxrZhT5K/iPGXTp5Qxf0d MuHvm6sKNjcOafM6qVQM9qSVrnybqBlg27W72A== -----END CERTIFICATE-----Generated at Sun Jul 20 15:22:44 2025 by rpki-client