$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json) Hash identifier: +5iDH4EgkB62Okv5RKn41pZ7s2bLRyJCLYZOICyJUlE= Subject key identifier: 17:1E:30:DE:92:AD:49:82:D0:53:E7:C7:48:77:16:80:25:9D:6B:E3 Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Certificate serial: 33C0064C49D3D8FCF724817D5A0C5B64EB7FA02A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft Manifest number: 0127 Signing time: Sun 20 Jul 2025 16:14:52 +0000 Manifest this update: Sun 20 Jul 2025 16:09:52 +0000 Manifest next update: Mon 21 Jul 2025 19:13:52 +0000 Files and hashes: 1: 34332e3235322e32302e302f32342d3234203d3e2037323234.roa (hash: xYue4w2wkAleXxGW4xAr0l0Ri4xd4/JeSpxq5osVBR8=) 2: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: baGBWXcDrtK+cAVKGJBMAmZee53ol0gPCj9NO0O551w=) 3: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: LfF8fU+QkX6d5K08nkQmulF4/9qGZmobs40531E0EuE=) 4: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: UYN2M33pRoAlUjrreudZ944WPkb+9FEYmjvVimqm674=) 5: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: lh0a38K8JAllhrAcZvOqWh+3NCJyyj25skARvaE+EWo=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 19:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c0:06:4c:49:d3:d8:fc:f7:24:81:7d:5a:0c:5b:64:eb:7f:a0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Validity Not Before: Jul 20 16:09:52 2025 GMT Not After : Jul 21 19:13:52 2025 GMT Subject: CN=171E30DE92AD4982D053E7C748771680259D6BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a2:d5:47:38:f3:0c:78:b1:5b:e3:2a:ec:16: 58:ca:61:4d:d8:1a:4b:de:ca:38:4b:4a:20:01:de: a3:60:8b:e2:61:7d:2b:13:fa:4f:82:a2:4a:68:a4: a5:95:b7:d0:1d:56:29:ac:5a:26:f6:f9:be:69:0a: 2b:d2:a2:49:b9:a1:fe:f9:15:5e:99:13:27:80:1e: c4:19:b8:1d:e1:20:79:f8:43:e1:23:18:8c:ba:47: 6f:ca:c9:a2:c8:1d:81:3f:41:da:70:ef:30:cb:db: a2:97:0c:de:cd:fd:87:74:80:b3:14:68:d9:8f:db: 55:4a:9a:ed:fc:09:e6:12:f9:da:f0:9c:b8:9b:6e: 6d:c6:df:9a:96:34:bd:de:45:76:63:ee:91:6d:26: 85:24:83:e9:40:23:79:80:43:3b:fd:5b:48:99:14: e1:02:cf:e2:af:06:14:8e:56:06:43:be:28:6e:ac: d9:15:05:f8:79:f1:1b:dc:d7:2c:f1:59:eb:17:9f: 4e:04:8f:2e:f9:ad:6c:42:34:15:be:87:5f:47:7e: 50:87:93:e1:c9:e3:d5:ce:67:bd:de:5d:34:62:9b: 69:03:47:9d:fb:f0:a0:39:7c:55:3c:80:1a:51:75: fd:39:2b:dc:e4:59:27:89:80:6e:75:7a:78:22:4a: d7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1E:30:DE:92:AD:49:82:D0:53:E7:C7:48:77:16:80:25:9D:6B:E3 X509v3 Authority Key Identifier: keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:5a:94:8c:21:6c:05:3d:44:08:fe:e9:c5:72:22:74:63:ac: cc:ff:b6:4d:22:63:54:50:36:0b:bf:aa:ae:4e:68:00:1a:95: e7:c4:c4:23:2c:27:d0:10:eb:e7:53:81:52:42:fe:c0:fb:4a: 4d:1c:3b:ad:a3:2e:d3:3c:19:e4:76:51:9d:45:eb:f6:e2:5e: d7:9c:ac:9f:88:fb:0a:8d:0e:4e:00:58:09:58:2d:ae:39:fa: ea:55:d1:70:8d:58:2d:29:22:d5:c2:b6:2c:64:d0:f7:92:0e: ac:80:b0:39:2a:61:bf:f1:6a:5c:10:b0:4a:55:68:9e:46:82: f4:3d:ce:e7:5a:55:16:f8:ed:07:20:6d:1f:23:2a:36:b0:c2: fd:7d:d4:f5:8b:3b:61:9d:97:db:14:29:78:53:db:96:62:ee: eb:ac:ff:4b:5b:73:c2:0d:62:77:51:be:9b:c4:13:03:c9:0f: 9f:13:5a:0e:a2:fa:86:fc:32:6d:38:aa:c5:6d:7f:f9:8f:c9: 94:be:9d:58:72:ed:26:01:2d:10:20:43:fd:56:4f:03:d0:a8: 98:32:97:2a:83:76:6d:84:12:47:31:cd:3c:38:b4:39:ca:9c: ac:dc:70:da:2f:1a:70:39:f4:d9:e4:6b:eb:54:df:2e:06:6d: cb:d8:ef:49 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUM8AGTEnT2Pz3JIF9WgxbZOt/oCowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1 Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI1MDcyMDE2MDk1MloX DTI1MDcyMTE5MTM1MlowMzExMC8GA1UEAxMoMTcxRTMwREU5MkFENDk4MkQwNTNF N0M3NDg3NzE2ODAyNTlENkJFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPmi1Uc48wx4sVvjKuwWWMphTdgaS97KOEtKIAHeo2CL4mF9KxP6T4KiSmik pZW30B1WKaxaJvb5vmkKK9KiSbmh/vkVXpkTJ4AexBm4HeEgefhD4SMYjLpHb8rJ osgdgT9B2nDvMMvbopcM3s39h3SAsxRo2Y/bVUqa7fwJ5hL52vCcuJtubcbfmpY0 vd5FdmPukW0mhSSD6UAjeYBDO/1bSJkU4QLP4q8GFI5WBkO+KG6s2RUF+HnxG9zX LPFZ6xefTgSPLvmtbEI0Fb6HX0d+UIeT4cnj1c5nvd5dNGKbaQNHnfvwoDl8VTyA GlF1/Tkr3ORZJ4mAbnV6eCJK1+kCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQXHjDe kq1JgtBT58dIdxaAJZ1r4zAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp UXl0TDNMX1RJUG1vdHQzSHMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUx MDAwMDAvMC81RDcwN0IwRDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAFFqUjCFsBT1ECP7pxXIidGOszP+2TSJjVFA2C7+qrk5oABqV 58TEIywn0BDr51OBUkL+wPtKTRw7raMu0zwZ5HZRnUXr9uJe15ysn4j7Co0OTgBY CVgtrjn66lXRcI1YLSki1cK2LGTQ95IOrICwOSphv/FqXBCwSlVonkaC9D3O51pV FvjtByBtHyMqNrDC/X3U9Ys7YZ2X2xQpeFPblmLu66z/S1tzwg1id1G+m8QTA8kP nxNaDqL6hvwybTiqxW1/+Y/JlL6dWHLtJgEtECBD/VZPA9ComDKXKoN2bYQSRzHN PDi0OcqcrNxw2i8acDn02eRr61TfLgZty9jvSQ== -----END CERTIFICATE-----Generated at Mon Jul 21 02:12:23 2025 by rpki-client