$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: UeANyc8m3uY6CPcb5/2/Z/CQ4ukjdHx1AD9KTvqSl4E= Subject key identifier: F2:B5:E2:1E:6F:DE:21:54:C2:3D:9F:C4:50:8B:6F:15:54:35:7A:CA Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 5E5DF78FAF3E14445F67FBF799426E158509F762 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 045E Signing time: Thu 12 Mar 2026 11:47:44 +0000 Manifest this update: Thu 12 Mar 2026 11:42:44 +0000 Manifest next update: Fri 13 Mar 2026 11:57:44 +0000 Files and hashes: 1: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: WmEwEEAhTgmyk3Oy0CJdlFnxuYNUu34xbHcNYm6Fj/s=) 2: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=) 3: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=) 4: 3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa (hash: jaYCwKUfN1ahphjmuCip8Xd6KyVekTXlh6eiv1lr6wE=) 5: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=) 6: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=) 7: 34332e3235352e38322e302f32342d3234203d3e20383334.roa (hash: icPb5M6Y/CPwkJET9vdKSzs0dBOYlGKaymEwUa2ujW8=) 8: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=) 9: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=) 10: 3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa (hash: /3IEW/L0xD5c+gjtCpGu3f4OnNilISvSgo/f0RfHoCg=) 11: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 11:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5d:f7:8f:af:3e:14:44:5f:67:fb:f7:99:42:6e:15:85:09:f7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Mar 12 11:42:44 2026 GMT Not After : Mar 13 11:57:44 2026 GMT Subject: CN=F2B5E21E6FDE2154C23D9FC4508B6F1554357ACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:80:70:e0:c3:56:34:f6:45:a0:bc:2f:49: 18:df:3d:47:73:b8:62:74:5e:70:06:5d:1f:22:a5: cc:a0:0a:ae:fa:4e:ba:c0:a2:ab:bc:84:7e:df:0f: 26:3f:1f:be:00:37:02:c4:c8:6c:3b:68:bf:8a:f4: 71:6c:6c:cd:0e:c7:6d:54:89:e1:00:1b:f6:03:e3: 4a:ea:dc:65:d2:b8:73:8b:16:39:9b:55:5e:76:2e: 46:58:aa:8a:4d:d5:62:bf:f9:7b:61:75:b8:d6:4e: e8:6b:d9:1b:6c:8c:2f:1a:f2:28:6e:22:2b:05:d0: a3:84:27:93:99:43:fa:c6:6a:fe:cb:c8:4c:75:ad: 1c:76:5d:7b:81:0a:e8:77:e4:84:45:a1:28:8c:0b: b0:40:e8:c1:47:62:16:8f:47:45:85:e3:60:f4:95: 29:44:69:3d:35:5c:3b:0e:86:07:3c:28:ec:7e:84: 5a:60:6f:e6:46:f5:a9:20:35:0a:c8:66:5f:aa:f3: cd:c1:0c:e5:a6:d9:26:fb:3a:8a:ca:af:96:16:c5: 58:ef:49:5a:a8:c3:77:88:e3:02:04:3f:57:f2:41: ad:5e:2c:6d:89:04:73:c6:5e:7e:50:6d:79:7e:ec: fd:22:cb:2f:13:0f:2e:92:e8:ac:de:74:2d:7c:1e: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B5:E2:1E:6F:DE:21:54:C2:3D:9F:C4:50:8B:6F:15:54:35:7A:CA X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:97:32:62:5d:99:2a:eb:72:9e:29:a4:5e:16:81:a9:24:e3: aa:ec:99:42:d7:57:77:ef:14:46:07:b5:4c:52:54:d2:bb:ae: df:1c:0b:c8:c5:2f:0b:8c:7c:32:4c:18:94:f6:77:ca:5a:49: ec:33:6b:b3:21:30:62:8c:8e:94:e2:36:d2:e7:3e:c3:f3:6a: 40:79:3f:b6:af:d9:be:63:3e:e3:59:53:b3:11:34:55:7c:2d: 67:22:f6:a5:5f:61:33:e0:ec:26:5e:5a:3c:c9:27:bc:99:72: db:60:42:96:06:60:6e:a2:0f:f9:40:72:0e:df:02:28:57:c0: 67:60:18:7c:ce:ba:9e:8f:5b:45:a6:d1:d8:c8:b0:97:c6:72: 04:53:98:b9:10:49:33:63:cd:6e:8d:d0:d1:2c:8f:be:5a:aa: 15:79:91:5c:fd:7f:e5:91:f2:c6:ca:fd:35:5c:0b:e8:23:83: a9:e7:60:35:ad:e4:46:7f:04:f1:b5:2a:f7:9f:38:45:db:c1: c8:25:5a:66:f0:fb:04:7e:7c:fb:19:e3:ec:da:b4:67:18:41: 32:98:55:50:10:d5:59:b9:27:49:2e:16:b7:de:7c:1f:ae:ab: 58:13:25:67:d0:d4:fd:ee:7a:71:fe:74:c0:7d:04:c4:02:17: 88:e5:7a:4e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXl33j68+FERfZ/v3mUJuFYUJ92IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MDMxMjExNDI0NFoX DTI2MDMxMzExNTc0NFowMzExMC8GA1UEAxMoRjJCNUUyMUU2RkRFMjE1NEMyM0Q5 RkM0NTA4QjZGMTU1NDM1N0FDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALh4gHDgw1Y09kWgvC9JGN89R3O4YnRecAZdHyKlzKAKrvpOusCiq7yEft8P Jj8fvgA3AsTIbDtov4r0cWxszQ7HbVSJ4QAb9gPjSurcZdK4c4sWOZtVXnYuRliq ik3VYr/5e2F1uNZO6GvZG2yMLxryKG4iKwXQo4Qnk5lD+sZq/svITHWtHHZde4EK 6HfkhEWhKIwLsEDowUdiFo9HRYXjYPSVKURpPTVcOw6GBzwo7H6EWmBv5kb1qSA1 CshmX6rzzcEM5abZJvs6isqvlhbFWO9JWqjDd4jjAgQ/V/JBrV4sbYkEc8ZeflBt eX7s/SLLLxMPLpLorN50LXwe2GcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTyteIe b94hVMI9n8RQi28VVDV6yjAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAe5cyYl2ZKutynimkXhaBqSTjquyZQtdXd+8URge1TFJU0ruu 3xwLyMUvC4x8MkwYlPZ3ylpJ7DNrsyEwYoyOlOI20uc+w/NqQHk/tq/ZvmM+41lT sxE0VXwtZyL2pV9hM+DsJl5aPMknvJly22BClgZgbqIP+UByDt8CKFfAZ2AYfM66 no9bRabR2Miwl8ZyBFOYuRBJM2PNbo3Q0SyPvlqqFXmRXP1/5ZHyxsr9NVwL6COD qedgNa3kRn8E8bUq9584RdvByCVaZvD7BH58+xnj7Nq0ZxhBMphVUBDVWbknSS4W t958H66rWBMlZ9DU/e56cf50wH0ExAIXiOV6Tg== -----END CERTIFICATE-----Generated at Thu Mar 12 21:26:55 2026 by rpki-client