$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: /G0DH61pHCZVHMbpo4sj3UwUzIwhkvdJ4Db/LARIBP8= Subject key identifier: 3F:F6:FA:4B:14:5B:F4:A8:0C:88:16:6E:62:6F:EF:84:DD:93:0D:38 Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 011E1CE8F54392210439729BB5292DAD88264210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 0352 Signing time: Fri 05 Sep 2025 17:45:57 +0000 Manifest this update: Fri 05 Sep 2025 17:40:57 +0000 Manifest next update: Sat 06 Sep 2025 20:24:57 +0000 Files and hashes: 1: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: /k6jTWNduiDGptW4+6OB4921e0YRhhtAl7IytYMvVCM=) 2: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (hash: 5hWADdZsX05Xm71wk93nvrisrc0F3dwJlLqjnpXhvtY=) 3: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: YRgjmmE+nVi/PAXhqb3JUaahbh35VPMhIEe6x6m98Ho=) 4: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: S8rFfs7IoEg3XYYnsyLOBvR6RACIA3juzHhODPn7ChQ=) 5: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: E4ONBceQGtTtMJwjbxI/zmDC8SS3yBbRlcMhg4vXlLU=) 6: 3130332e3233382e3133312e302f32342d3234203d3e20383334.roa (hash: uR6J+wDhHW6iJWcjlS3D/NgdsRX/KCHSv/gczr3BqWU=) 7: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: 34ZLdvJWRlaz+jTDs3YF3eEhOoQyE7fhuoEG/fJaNVY=) 8: 34332e3235352e38312e302f32342d3234203d3e20383334.roa (hash: UBX7pQhUkqVlB0o1+fxCEqYurXO8Pm4LyMR/YcHzNIs=) 9: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: befyV0hRkZPjsj2HiXn8OpPP07iuTlgDyNJrlhl8VkA=) 10: 3130332e3233382e3132382e302f32342d3234203d3e20313338303737.roa (hash: 5sZFV0hCMUC2n4iWJ3AfJgpDZ6n5Bs/7eOe7YiQjRcQ=) 11: 3130332e3233382e3133302e302f32342d3234203d3e20323133343034.roa (hash: 0t7ldh54zvdsSveMZy06MhLdyjIZtHukNx1jlJgyUSE=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 20:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1e:1c:e8:f5:43:92:21:04:39:72:9b:b5:29:2d:ad:88:26:42:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Sep 5 17:40:57 2025 GMT Not After : Sep 6 20:24:57 2025 GMT Subject: CN=3FF6FA4B145BF4A80C88166E626FEF84DD930D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:46:56:4c:5b:d4:b8:df:e5:c0:88:36:3e: d8:87:4c:39:bf:59:46:73:96:60:af:37:f3:3c:3b: 35:a5:e1:32:df:b9:40:b1:7c:50:a6:d2:86:4e:b1: 56:c8:9c:47:1e:e2:ea:11:2e:90:b7:12:b4:35:83: c8:9d:16:a4:85:7e:d7:18:38:5d:c7:7d:bb:c0:8f: c2:f0:1f:f1:ff:1d:d6:9c:d8:e7:2b:cb:66:05:75: fa:09:bf:62:93:a0:39:30:0e:a1:1c:fd:b0:62:dc: e0:03:8c:79:7a:f5:41:d6:ee:31:2c:e5:65:83:06: 88:59:7f:32:f6:17:80:9e:81:44:b9:d6:60:db:9a: 0e:0f:be:45:cb:35:a5:69:c2:67:69:f4:70:0a:ea: 31:8f:42:3a:c7:bd:2d:f1:73:50:04:f0:d0:34:ac: ec:6c:7e:ed:bf:75:0c:fd:c6:b9:1c:92:66:d8:bd: 23:30:21:69:45:bc:d7:89:c8:c0:fd:b6:b3:c0:64: a9:70:36:df:83:12:4b:af:d8:79:70:1b:74:f9:90: 3b:83:07:73:3c:33:66:4a:7a:82:04:4b:02:d6:c6: a6:fa:2f:0a:97:91:36:a7:2e:fd:40:6e:a6:7d:11: ff:f6:f4:eb:72:64:0a:9c:c6:5f:ed:70:8f:9e:03: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F6:FA:4B:14:5B:F4:A8:0C:88:16:6E:62:6F:EF:84:DD:93:0D:38 X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e1:74:6b:9b:37:67:08:84:69:40:e5:05:ca:46:da:79:51: 5d:37:70:66:50:38:b5:9d:f8:69:06:13:bb:16:b7:41:1c:67: 7f:0f:32:76:f9:c4:51:9e:9e:98:e7:47:55:1c:c3:0d:a3:60: 45:fe:68:81:3f:be:50:6a:66:ec:6f:ea:71:41:44:90:4f:56: ff:d1:f3:6e:72:38:8a:62:96:a7:57:aa:bf:c7:d6:76:dd:78: 41:e7:96:45:61:66:17:1d:52:ba:7a:d3:1b:e1:d6:ef:47:6b: 22:4a:0b:e8:da:ae:bc:e5:ea:32:1a:c1:47:9f:33:dd:8d:a4: b1:a4:dc:63:07:92:6e:d5:31:22:65:dd:ee:98:0d:af:93:9a: 1a:31:2e:b6:05:f6:d2:a6:c0:9a:a1:ad:54:48:b1:19:0e:b8: d9:2d:3c:a7:56:70:bb:a0:8d:05:92:b9:ee:fa:28:29:43:36: 31:ad:d6:97:6d:20:fb:0b:ad:f8:20:2d:a9:dc:c6:22:2b:12: b6:9b:7d:b8:7a:a4:6f:ef:e3:34:3d:1a:b8:70:ec:1a:86:72: c4:c7:77:9d:ec:cc:b8:72:18:52:a7:dc:83:66:ed:8c:cf:66: d4:ab:ef:52:71:30:6a:24:f6:83:84:32:42:98:39:af:e2:5e: 21:ad:2c:60 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAR4c6PVDkiEEOXKbtSktrYgmQhAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MDkwNTE3NDA1N1oX DTI1MDkwNjIwMjQ1N1owMzExMC8GA1UEAxMoM0ZGNkZBNEIxNDVCRjRBODBDODgx NjZFNjI2RkVGODRERDkzMEQzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtURlZMW9S43+XAiDY+2IdMOb9ZRnOWYK838zw7NaXhMt+5QLF8UKbShk6x VsicRx7i6hEukLcStDWDyJ0WpIV+1xg4Xcd9u8CPwvAf8f8d1pzY5yvLZgV1+gm/ YpOgOTAOoRz9sGLc4AOMeXr1QdbuMSzlZYMGiFl/MvYXgJ6BRLnWYNuaDg++Rcs1 pWnCZ2n0cArqMY9COse9LfFzUATw0DSs7Gx+7b91DP3GuRySZti9IzAhaUW814nI wP22s8BkqXA234MSS6/YeXAbdPmQO4MHczwzZkp6ggRLAtbGpvovCpeRNqcu/UBu pn0R//b063JkCpzGX+1wj54D9zsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQ/9vpL FFv0qAyIFm5ib++E3ZMNODAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEASuF0a5s3ZwiEaUDlBcpG2nlRXTdwZlA4tZ34aQYTuxa3QRxn fw8ydvnEUZ6emOdHVRzDDaNgRf5ogT++UGpm7G/qcUFEkE9W/9HzbnI4imKWp1eq v8fWdt14QeeWRWFmFx1SunrTG+HW70drIkoL6NquvOXqMhrBR58z3Y2ksaTcYweS btUxImXd7pgNr5OaGjEutgX20qbAmqGtVEixGQ642S08p1Zwu6CNBZK57vooKUM2 Ma3Wl20g+wut+CAtqdzGIisStpt9uHqkb+/jND0auHDsGoZyxMd3nezMuHIYUqfc g2btjM9m1KvvUnEwaiT2g4QyQpg5r+JeIa0sYA== -----END CERTIFICATE-----Generated at Sat Sep 6 12:06:27 2025 by rpki-client