$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft File: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json) Hash identifier: 0XYX04A1vjYErLpczK07kTbVmFruOtdJ6xraIyUDyaE= Subject key identifier: 3B:68:6D:4A:84:B8:E1:F7:7B:67:26:AB:76:EB:8E:02:BC:AA:37:47 Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Certificate serial: 1EEDD425AB2DFA12C823D4E9A391BE2E9EFCA5A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft Manifest number: 0679 Signing time: Wed 05 Nov 2025 07:28:06 +0000 Manifest this update: Wed 05 Nov 2025 07:23:06 +0000 Manifest next update: Thu 06 Nov 2025 07:40:06 +0000 Files and hashes: 1: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: Wnz7iyh9clZuDDpLGVNNBZJ0JgoGPtAKZ8B2Ynr6Xgc=) 2: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: su5+BG8QWfKNJmCGiTwbPe11KIy9X8qt0vbyFhccC7M=) 3: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: /tu1GLPgmx3L59lA9DS67uY00dm6i5Wm3Y/TLJzZPPI=) 4: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: yVZN8uUTOOhqgDafcuJzyObo6OYnTkFGrZV6T9wM9pM=) 5: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: TyUQXYW/Z9X7LSxau+0o+4cjIXJiQzcIYmIWKatiFMc=) 6: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: Fe1UVCyCNYuLeK/2YClSqpX8AFGVDlpgAyiB6HZMqgE=) 7: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: DF0B2w1ci15U2MWgi9NHF/RrZ7F8ylilgRl/5FkgJoA=) 8: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ciSHjom7uhsnTUry3euH0kEf+ood81S/2eHdQ8CkHns=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ed:d4:25:ab:2d:fa:12:c8:23:d4:e9:a3:91:be:2e:9e:fc:a5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Validity Not Before: Nov 5 07:23:06 2025 GMT Not After : Nov 6 07:40:06 2025 GMT Subject: CN=3B686D4A84B8E1F77B6726AB76EB8E02BCAA3747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3c:dc:7e:1e:17:1c:75:7a:59:ea:1a:b8:cf: 0e:fa:a6:e4:70:44:c3:ab:6e:f1:ae:c6:48:ae:7a: df:f3:c6:56:fa:6e:94:95:fa:42:19:81:82:b4:ff: 97:0a:a9:09:8d:a2:68:96:b6:66:fc:80:36:f1:df: ec:04:e9:62:a1:1b:5d:93:7b:33:79:1e:e0:5a:cd: 18:4e:f9:01:12:61:8c:bd:51:aa:36:84:01:41:0b: 59:07:5f:96:33:5e:9b:02:db:97:8a:ea:67:0a:ed: a7:09:b9:cd:94:49:a8:1d:ff:de:3a:ff:42:d2:d3: 00:b9:a4:5d:49:1b:c1:13:28:cf:56:d1:b4:02:20: 8d:e5:4c:88:9e:5d:a8:85:f8:8e:96:a2:d1:35:57: 1b:80:eb:68:97:b1:c5:93:b2:f8:08:a6:ca:ad:30: fa:61:96:be:9c:d6:4e:94:0c:94:f9:a8:d2:92:d6: e2:4f:36:f9:ef:a1:07:01:3e:de:83:e3:00:cd:b8: 25:bb:36:c8:b4:4e:69:11:67:9a:94:c8:a1:ac:7f: 9f:b2:d5:61:2f:70:4e:80:da:1f:55:d4:e0:9c:f8: 73:9f:3f:96:4a:38:f8:07:89:0a:49:0d:e7:96:0e: 34:71:89:fe:49:da:e7:b7:18:16:b0:5d:4e:9a:2e: bd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:68:6D:4A:84:B8:E1:F7:7B:67:26:AB:76:EB:8E:02:BC:AA:37:47 X509v3 Authority Key Identifier: keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e4:24:08:24:63:8e:ef:91:93:3b:15:d5:f2:65:31:f4:00: 8f:81:a0:09:83:1a:b6:2b:c5:04:58:ce:a8:16:aa:54:4c:d4: a2:7a:41:ed:cf:ab:15:af:46:e4:be:39:02:84:7c:7f:27:05: 2e:b1:24:c0:74:a0:e1:03:1a:e7:b9:00:7a:24:a8:67:dd:d8: 8c:5f:eb:6e:12:d8:39:aa:ec:a9:af:f7:b6:25:53:56:52:bd: bb:e6:ff:6c:eb:8d:ea:d1:12:9a:6a:1e:6a:aa:3d:fc:1e:c4: a2:a5:c7:ec:1d:b9:3e:d0:86:82:5f:f5:3a:3a:0a:c4:1f:74: 7f:fc:06:da:28:29:c6:d7:ae:38:b8:b8:24:36:cb:65:76:af: f8:9c:05:69:f3:81:60:9d:1c:5a:38:a7:4b:68:3c:a6:38:50: 7f:b5:09:3e:7a:2d:ce:b9:17:49:c1:b8:03:a1:96:48:d3:6d: 22:df:f2:95:1e:b6:4b:54:1e:60:cf:b0:61:40:3e:7b:9b:a6: 2d:05:9d:2c:c5:31:2f:56:84:8e:05:a2:08:19:ef:d4:d5:b9: 7e:03:8f:7e:2e:23:4f:29:94:a6:d6:dd:a6:34:6d:90:86:a0: df:7c:49:f3:d0:55:3f:ad:d9:99:45:8e:f2:9d:da:4a:58:89: 9e:7b:c2:cc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHu3UJast+hLII9Tpo5G+Lp78paYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI1MTEwNTA3MjMwNloX DTI1MTEwNjA3NDAwNlowMzExMC8GA1UEAxMoM0I2ODZENEE4NEI4RTFGNzdCNjcy NkFCNzZFQjhFMDJCQ0FBMzc0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPQ83H4eFxx1elnqGrjPDvqm5HBEw6tu8a7GSK563/PGVvpulJX6QhmBgrT/ lwqpCY2iaJa2ZvyANvHf7ATpYqEbXZN7M3ke4FrNGE75ARJhjL1RqjaEAUELWQdf ljNemwLbl4rqZwrtpwm5zZRJqB3/3jr/QtLTALmkXUkbwRMoz1bRtAIgjeVMiJ5d qIX4jpai0TVXG4DraJexxZOy+Aimyq0w+mGWvpzWTpQMlPmo0pLW4k82+e+hBwE+ 3oPjAM24Jbs2yLROaRFnmpTIoax/n7LVYS9wToDaH1XU4Jz4c58/lko4+AeJCkkN 55YONHGJ/kna57cYFrBdTpouvX0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBQ7aG1K hLjh93tnJqt2644CvKo3RzAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w M2psZkN5XzhudUVTbnpBTFEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNC9CNzM1MUIwNUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAPeQkCCRjju+RkzsV1fJlMfQAj4GgCYMativFBFjOqBaqVEzU onpB7c+rFa9G5L45AoR8fycFLrEkwHSg4QMa57kAeiSoZ93YjF/rbhLYOarsqa/3 tiVTVlK9u+b/bOuN6tESmmoeaqo9/B7EoqXH7B25PtCGgl/1OjoKxB90f/wG2igp xteuOLi4JDbLZXav+JwFafOBYJ0cWjinS2g8pjhQf7UJPnotzrkXScG4A6GWSNNt It/ylR62S1QeYM+wYUA+e5umLQWdLMUxL1aEjgWiCBnv1NW5fgOPfi4jTymUptbd pjRtkIag33xJ89BVP63ZmUWO8p3aSliJnnvCzA== -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:32 2025 by rpki-client