$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft File: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json) Hash identifier: mHVS9tIfSThQlBQ+iO4khzIFbpA4JXxAtUFDZkdnOco= Subject key identifier: 84:DD:88:AB:70:B6:EB:5E:2E:15:DC:D0:43:B2:21:BB:26:F3:27:E0 Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Certificate serial: 17E9363ACAB9B404FBED14F1F2CD1A71A7B4FF59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft Manifest number: 0784 Signing time: Wed 20 May 2026 22:59:27 +0000 Manifest this update: Wed 20 May 2026 22:54:27 +0000 Manifest next update: Fri 22 May 2026 01:57:27 +0000 Files and hashes: 1: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ciSHjom7uhsnTUry3euH0kEf+ood81S/2eHdQ8CkHns=) 2: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: TyUQXYW/Z9X7LSxau+0o+4cjIXJiQzcIYmIWKatiFMc=) 3: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: /tu1GLPgmx3L59lA9DS67uY00dm6i5Wm3Y/TLJzZPPI=) 4: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: DF0B2w1ci15U2MWgi9NHF/RrZ7F8ylilgRl/5FkgJoA=) 5: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: yVZN8uUTOOhqgDafcuJzyObo6OYnTkFGrZV6T9wM9pM=) 6: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: C2kwc1lNU5vRVAwTXWHXpsZGvUZr+qB5YRdxQBrkLJ8=) 7: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: Fe1UVCyCNYuLeK/2YClSqpX8AFGVDlpgAyiB6HZMqgE=) 8: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: Wnz7iyh9clZuDDpLGVNNBZJ0JgoGPtAKZ8B2Ynr6Xgc=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 01:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e9:36:3a:ca:b9:b4:04:fb:ed:14:f1:f2:cd:1a:71:a7:b4:ff:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Validity Not Before: May 20 22:54:27 2026 GMT Not After : May 22 01:57:27 2026 GMT Subject: CN=84DD88AB70B6EB5E2E15DCD043B221BB26F327E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:29:99:4b:3e:64:55:6e:49:d0:77:c5:d3:81: 92:6f:99:05:ca:61:0b:bf:01:05:34:f4:ab:d2:5d: 37:d9:a2:90:0a:71:20:88:a6:ba:0c:ea:c0:4b:d2: 0e:ed:1b:5a:57:81:27:13:45:d1:d8:c7:a4:a6:c5: bd:be:09:1d:3d:5b:b1:77:db:49:64:85:d2:66:1c: de:5e:0e:90:d2:de:80:bd:b7:f0:b1:22:aa:dd:c9: 3b:e2:0b:d1:a0:42:e9:ea:d9:be:1e:81:b3:68:0c: be:70:df:db:94:00:9e:8c:5e:1c:ea:2a:6b:5c:5f: 6b:37:5c:fc:d2:a6:aa:fd:78:02:f8:12:24:15:1d: 06:8f:d0:d0:d8:4e:d1:ee:e4:86:c4:40:43:d4:64: 88:d2:ef:80:d0:f8:3a:a0:03:43:4c:dd:e2:48:b2: 9d:07:61:b4:a9:62:8a:de:ed:8b:05:79:5d:d9:f6: b1:e9:a6:a3:41:58:d3:d7:3b:5e:f1:ba:38:aa:a2: ba:c8:fe:7d:ed:e9:28:53:eb:7d:0d:89:f8:59:ac: 1b:88:85:e2:10:d2:d5:0b:68:db:c2:b1:b4:ab:bf: ed:c9:c8:e9:7d:1d:72:f5:09:31:7f:81:37:f2:4c: 09:1d:0f:69:1a:2e:85:0a:93:54:11:4b:fc:9c:dc: 2a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DD:88:AB:70:B6:EB:5E:2E:15:DC:D0:43:B2:21:BB:26:F3:27:E0 X509v3 Authority Key Identifier: keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:dd:54:35:7b:ce:04:a1:db:17:bb:42:af:bf:92:85:0f:e1: 18:87:d3:dc:43:db:3a:9a:b8:bd:86:cc:4d:f5:2a:75:2d:7f: cf:17:98:61:80:d3:52:84:33:eb:22:1d:1a:ca:a0:a5:df:d5: 0a:52:54:4b:1f:29:5a:05:21:40:d4:4e:36:35:bb:7d:44:25: 32:5a:f9:e8:89:e9:54:71:8e:f1:3a:46:28:9a:77:64:37:86: 89:e3:ea:a7:bb:ab:e4:47:4a:1d:fd:ae:f6:03:97:f6:71:11: 91:a2:b9:14:0e:f2:06:7d:bd:2c:53:2c:1a:6f:ba:d8:b0:3b: 32:61:2c:af:63:94:7e:ba:a4:95:70:85:50:20:c5:21:ca:0e: 45:38:db:8d:b8:f8:16:5b:3c:88:d9:35:fa:ef:a6:a8:e5:0c: 22:8e:80:98:60:cc:ef:91:7d:ae:bf:29:b6:00:8b:a1:9a:90: 1f:82:e2:af:55:94:b8:ce:82:ea:e1:1c:d8:b5:7c:9f:c4:71: 0c:71:b2:f1:53:30:9a:d2:4e:bf:ed:75:73:5a:dd:60:90:23: 3e:0a:76:f5:a3:7e:48:c1:a1:99:63:34:9d:da:d6:d2:60:59: 18:ef:3b:2e:1a:67:e5:7f:84:49:a8:d8:b7:ba:f6:fb:37:70: b3:0e:6a:a0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUF+k2Osq5tAT77RTx8s0acae0/1kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI2MDUyMDIyNTQyN1oX DTI2MDUyMjAxNTcyN1owMzExMC8GA1UEAxMoODRERDg4QUI3MEI2RUI1RTJFMTVE Q0QwNDNCMjIxQkIyNkYzMjdFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIwpmUs+ZFVuSdB3xdOBkm+ZBcphC78BBTT0q9JdN9mikApxIIimugzqwEvS Du0bWleBJxNF0djHpKbFvb4JHT1bsXfbSWSF0mYc3l4OkNLegL238LEiqt3JO+IL 0aBC6erZvh6Bs2gMvnDf25QAnoxeHOoqa1xfazdc/NKmqv14AvgSJBUdBo/Q0NhO 0e7khsRAQ9RkiNLvgND4OqADQ0zd4kiynQdhtKliit7tiwV5Xdn2semmo0FY09c7 XvG6OKqiusj+fe3pKFPrfQ2J+FmsG4iF4hDS1Qto28KxtKu/7cnI6X0dcvUJMX+B N/JMCR0PaRouhQqTVBFL/JzcKmUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSE3Yir cLbrXi4V3NBDsiG7JvMn4DAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w M2psZkN5XzhudUVTbnpBTFEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNC9CNzM1MUIwNUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAsd1UNXvOBKHbF7tCr7+ShQ/hGIfT3EPbOpq4vYbMTfUqdS1/ zxeYYYDTUoQz6yIdGsqgpd/VClJUSx8pWgUhQNRONjW7fUQlMlr56InpVHGO8TpG KJp3ZDeGiePqp7ur5EdKHf2u9gOX9nERkaK5FA7yBn29LFMsGm+62LA7MmEsr2OU frqklXCFUCDFIcoORTjbjbj4Fls8iNk1+u+mqOUMIo6AmGDM75F9rr8ptgCLoZqQ H4Lir1WUuM6C6uEc2LV8n8RxDHGy8VMwmtJOv+11c1rdYJAjPgp29aN+SMGhmWM0 ndrW0mBZGO87Lhpn5X+ESajYt7r2+zdwsw5qoA== -----END CERTIFICATE-----Generated at Thu May 21 14:43:44 2026 by rpki-client