$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: eGYJRBQznOjSvTgh7nxZtlsmUEy11BQwuMidvimoxsY= Subject key identifier: 22:35:54:2A:E6:BD:0A:26:4D:BD:B8:6F:8C:9F:98:F5:D9:B4:21:B6 Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 62B7396DA60530FBDBE9147980079FD14E516841 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 0276 Signing time: Fri 04 Apr 2025 18:44:16 +0000 Manifest this update: Fri 04 Apr 2025 18:39:16 +0000 Manifest next update: Sat 05 Apr 2025 19:54:16 +0000 Files and hashes: 1: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: befyV0hRkZPjsj2HiXn8OpPP07iuTlgDyNJrlhl8VkA=) 2: 3130332e3233382e3133302e302f32342d3234203d3e20313531313036.roa (hash: jHJxFEmDKUe2EPjbWcOLzV9LPmr1X1VjgRAMMGlG0Mw=) 3: 34332e3235352e38312e302f32342d3234203d3e20313431313538.roa (hash: SQWzDg71lRig1vikM6oroRmKP7jytIrlrfxg8Lw3ga4=) 4: 3130332e3233382e3132382e302f32342d3234203d3e20313531313036.roa (hash: 3hCx1gk12xhMekKDCa3KegcT7N4B/xxsoqqdlY9CXYI=) 5: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: 34ZLdvJWRlaz+jTDs3YF3eEhOoQyE7fhuoEG/fJaNVY=) 6: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: wEFaHNMPPphJoUBdUgf/V9Lc1NIksBJNZxyWMOw8vQQ=) 7: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: S8rFfs7IoEg3XYYnsyLOBvR6RACIA3juzHhODPn7ChQ=) 8: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: E4ONBceQGtTtMJwjbxI/zmDC8SS3yBbRlcMhg4vXlLU=) 9: 3130332e3233382e3133312e302f32342d3234203d3e20313531313036.roa (hash: zZ9adMjyAK6V+yaM2Aa/8/uAbDXUgk34Q/LvbI/Y3H4=) 10: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (hash: 5hWADdZsX05Xm71wk93nvrisrc0F3dwJlLqjnpXhvtY=) 11: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: YRgjmmE+nVi/PAXhqb3JUaahbh35VPMhIEe6x6m98Ho=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 19:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b7:39:6d:a6:05:30:fb:db:e9:14:79:80:07:9f:d1:4e:51:68:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000 Validity Not Before: Apr 4 18:39:16 2025 GMT Not After : Apr 5 19:54:16 2025 GMT Subject: CN=2235542AE6BD0A264DBDB86F8C9F98F5D9B421B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:06:31:78:82:cc:72:17:09:27:8e:ca:a5:19: a3:ad:40:82:9c:db:06:9b:9e:06:a3:6c:a7:07:ce: 42:6a:48:85:b4:ee:92:10:72:c0:51:89:fe:c4:03: a6:bd:ed:a6:37:c5:74:0f:d4:ce:34:c7:40:af:1f: 05:6f:e6:73:fd:67:4a:2a:52:c8:66:19:0a:a3:10: fe:c4:32:10:c4:86:47:8e:c6:85:e6:4d:c1:5e:3d: 3f:6c:2d:3c:28:1f:a3:2a:e8:89:fa:f7:21:03:1a: 72:96:54:6f:0f:2f:a0:96:5a:47:69:57:4a:d2:07: 81:4c:ce:f4:b0:05:3d:44:44:47:e8:4f:ed:d3:25: 88:48:ae:d4:63:41:28:f7:ab:51:6f:30:f9:7d:ca: 64:86:17:3c:dc:28:7e:66:3f:aa:72:4d:f5:f9:a7: 52:35:4c:9d:0b:dc:43:b9:05:25:1c:08:e9:19:95: ef:21:53:8f:64:45:78:8e:42:46:8d:0c:33:40:4a: 0a:db:2f:58:f2:3e:3c:5d:92:5d:d9:5e:cf:9d:39: 64:a3:bd:0e:fb:44:1b:cc:b0:78:1a:9b:f9:50:ee: c6:b1:5d:c2:ea:89:f3:de:62:a0:79:d0:32:5f:ed: 99:c8:fa:f3:c6:06:b4:b6:79:35:fc:73:8c:46:33: 48:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:35:54:2A:E6:BD:0A:26:4D:BD:B8:6F:8C:9F:98:F5:D9:B4:21:B6 X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:14:94:22:37:9e:f4:c1:29:a8:ef:e1:f0:16:4c:ee:02:b1: 96:c2:c0:78:f2:0f:f6:c9:2c:69:8c:f1:b2:dd:1a:15:70:81: 84:e8:bb:83:b3:f8:7d:cd:57:9d:59:f4:ee:e1:d5:63:d5:ff: 13:1d:aa:14:ef:53:ba:8e:3b:3d:8a:4e:27:87:ea:91:be:1e: a0:38:7c:87:b7:39:72:5d:f1:6a:e5:80:28:8d:09:6b:70:ac: 99:85:52:50:4c:bc:90:68:21:da:23:ee:0c:a4:8e:60:7b:2b: 37:af:77:e8:77:8b:9a:99:ea:84:e3:3f:65:44:4a:04:10:bf: 86:ef:d0:16:f9:73:c8:6c:34:ed:de:60:64:fa:af:6f:3d:02: d7:a1:50:d0:42:94:79:d9:bc:4e:28:c1:1a:84:34:ff:e4:2e: 09:d5:ff:46:51:23:b8:96:6a:3b:07:bb:e4:2b:bf:0e:4b:af: 4a:19:c2:e7:0f:af:ed:34:b2:ed:52:61:82:20:c5:99:fe:3b: ac:98:f3:23:d9:62:b2:e5:2f:eb:ab:65:3f:57:5f:63:7a:c0: 81:84:8c:bf:91:a1:b4:28:0b:8c:bf:fd:c2:e1:90:3e:ed:da: 47:6a:2f:33:96:98:96:26:37:c3:0f:52:81:ac:0f:0e:0f:3d: 6e:55:fd:14 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYrc5baYFMPvb6RR5gAef0U5RaEEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MDQwNDE4MzkxNloX DTI1MDQwNTE5NTQxNlowMzExMC8GA1UEAxMoMjIzNTU0MkFFNkJEMEEyNjREQkRC ODZGOEM5Rjk4RjVEOUI0MjFCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYGMXiCzHIXCSeOyqUZo61AgpzbBpueBqNspwfOQmpIhbTukhBywFGJ/sQD pr3tpjfFdA/UzjTHQK8fBW/mc/1nSipSyGYZCqMQ/sQyEMSGR47GheZNwV49P2wt PCgfoyroifr3IQMacpZUbw8voJZaR2lXStIHgUzO9LAFPURER+hP7dMliEiu1GNB KPerUW8w+X3KZIYXPNwofmY/qnJN9fmnUjVMnQvcQ7kFJRwI6RmV7yFTj2RFeI5C Ro0MM0BKCtsvWPI+PF2SXdlez505ZKO9DvtEG8yweBqb+VDuxrFdwuqJ895ioHnQ Ml/tmcj688YGtLZ5NfxzjEYzSAsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQiNVQq 5r0KJk29uG+Mn5j12bQhtjAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAgBSUIjee9MEpqO/h8BZM7gKxlsLAePIP9sksaYzxst0aFXCB hOi7g7P4fc1XnVn07uHVY9X/Ex2qFO9Tuo47PYpOJ4fqkb4eoDh8h7c5cl3xauWA KI0Ja3CsmYVSUEy8kGgh2iPuDKSOYHsrN6936HeLmpnqhOM/ZURKBBC/hu/QFvlz yGw07d5gZPqvbz0C16FQ0EKUedm8TijBGoQ0/+QuCdX/RlEjuJZqOwe75Cu/Dkuv ShnC5w+v7TSy7VJhgiDFmf47rJjzI9lisuUv66tlP1dfY3rAgYSMv5GhtCgLjL/9 wuGQPu3aR2ovM5aYliY3ww9SgawPDg89blX9FA== -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:54 2025 by rpki-client