$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: 7QFgKR0Zdq+fytoG0nAYAs3zR2x/eqDt51J1PpXXot0= Subject key identifier: 2D:BF:E7:70:42:00:B9:E3:0C:FA:69:CC:70:2F:96:6A:BA:60:15:0D Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 2B533F1BBEFCCD71CEAF4A1D412F6F37F17AD59D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 04D6 Signing time: Thu 11 Jun 2026 10:43:51 +0000 Manifest this update: Thu 11 Jun 2026 10:38:51 +0000 Manifest next update: Fri 12 Jun 2026 12:49:51 +0000 Files and hashes: 1: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=) 2: 3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa (hash: jaYCwKUfN1ahphjmuCip8Xd6KyVekTXlh6eiv1lr6wE=) 3: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=) 4: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=) 5: 34332e3235352e38322e302f32342d3234203d3e20383334.roa (hash: icPb5M6Y/CPwkJET9vdKSzs0dBOYlGKaymEwUa2ujW8=) 6: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=) 7: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=) 8: 3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa (hash: /3IEW/L0xD5c+gjtCpGu3f4OnNilISvSgo/f0RfHoCg=) 9: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: mWeCFaTB5LR5eBtyLsfQPzUS2ZvB1IrNEOT0yY/0//U=) 10: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=) 11: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:53:3f:1b:be:fc:cd:71:ce:af:4a:1d:41:2f:6f:37:f1:7a:d5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Jun 11 10:38:51 2026 GMT Not After : Jun 12 12:49:51 2026 GMT Subject: CN=2DBFE7704200B9E30CFA69CC702F966ABA60150D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f3:5b:32:b2:c6:8c:a3:7f:fb:74:ed:dc:88: 45:79:08:7e:df:53:51:e8:d3:c8:6b:ad:48:e7:b0: 54:b5:90:f1:f7:9a:c9:76:a4:c4:ed:09:3c:ef:21: f4:39:59:b4:63:eb:41:a1:88:85:73:cf:da:1e:df: 98:0d:f0:92:21:66:ec:2f:ac:68:90:e8:8f:bc:ed: 9e:b6:54:72:a6:d4:b2:2d:d2:9d:fc:bf:83:48:17: 38:4a:66:14:1e:dc:b8:dc:f7:66:91:f6:75:3f:b3: d7:4a:ae:07:1b:1c:c0:35:94:5f:95:d7:bb:12:c7: 4b:93:cc:a2:98:b3:af:d8:a8:81:24:70:5b:3b:77: bc:f4:81:e4:10:e0:8e:9f:c2:18:9d:1b:b9:cf:a6: 12:ff:f5:b2:69:38:af:29:b2:77:4d:be:d7:fe:1a: 89:84:b0:dc:cb:77:65:20:47:05:05:f5:a7:63:af: cf:db:0d:4b:87:5b:8e:b6:56:27:b3:96:ea:c1:b2: d5:cb:30:61:bc:8b:46:e4:10:64:24:98:3c:f8:24: e1:fd:5b:c1:25:a5:17:a5:83:a8:5c:f5:6f:c8:a9: 90:fa:8b:a6:c3:43:d0:84:f4:28:ca:6b:60:bf:ec: e4:f5:79:d7:ca:5e:93:92:c2:2f:33:da:88:41:eb: 97:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BF:E7:70:42:00:B9:E3:0C:FA:69:CC:70:2F:96:6A:BA:60:15:0D X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:73:13:1a:3a:b5:db:30:19:7f:e0:5f:e5:77:97:b2:99:ea: 92:ab:2b:85:41:ae:90:5f:57:90:ad:4e:eb:69:83:1f:99:fb: 96:35:f9:5a:3c:f9:d9:d2:a1:61:c8:37:97:0f:0e:6f:54:17: 4f:3c:70:9d:b4:8d:87:95:b3:b1:97:43:a5:c6:9f:d3:89:c4: e6:c2:cb:5d:10:39:11:c8:f3:2b:ee:99:c0:18:ea:88:82:04: 35:99:88:00:a6:4f:d8:96:a7:0a:a4:90:3b:97:31:3a:bb:14: 9d:1f:1a:17:fc:d0:bc:dc:fd:a2:a6:cf:5b:c9:c9:76:32:77: 9a:d1:d8:4c:e4:74:e4:91:2a:1a:e4:bc:09:9d:0b:54:87:70: f6:3b:50:ff:fc:b9:c3:8e:9a:5a:1c:28:a2:ab:3e:51:51:f8: 51:90:37:21:45:81:07:32:e1:80:fb:71:0f:d8:21:d7:9e:f0: 5f:2d:34:a9:eb:ba:4a:d8:f5:96:ff:82:d4:0e:0a:9d:ab:16: 48:a6:85:56:07:be:b0:18:e0:a2:d6:68:74:1a:36:75:a3:e2: b2:6f:21:4f:70:cf:4d:1a:e7:80:56:e2:13:7b:a9:aa:d6:85: 77:9b:24:4b:32:51:f5:ee:5d:5c:ef:b1:e4:01:1c:37:c6:8c: 3c:fa:c0:ef -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUK1M/G778zXHOr0odQS9vN/F61Z0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MDYxMTEwMzg1MVoX DTI2MDYxMjEyNDk1MVowMzExMC8GA1UEAxMoMkRCRkU3NzA0MjAwQjlFMzBDRkE2 OUNDNzAyRjk2NkFCQTYwMTUwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHzWzKyxoyjf/t07dyIRXkIft9TUejTyGutSOewVLWQ8feayXakxO0JPO8h 9DlZtGPrQaGIhXPP2h7fmA3wkiFm7C+saJDoj7ztnrZUcqbUsi3Snfy/g0gXOEpm FB7cuNz3ZpH2dT+z10quBxscwDWUX5XXuxLHS5PMopizr9iogSRwWzt3vPSB5BDg jp/CGJ0buc+mEv/1smk4rymyd02+1/4aiYSw3Mt3ZSBHBQX1p2Ovz9sNS4dbjrZW J7OW6sGy1cswYbyLRuQQZCSYPPgk4f1bwSWlF6WDqFz1b8ipkPqLpsND0IT0KMpr YL/s5PV518pek5LCLzPaiEHrl3UCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQtv+dw QgC54wz6acxwL5ZqumAVDTAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAcnMTGjq12zAZf+Bf5XeXspnqkqsrhUGukF9XkK1O62mDH5n7 ljX5Wjz52dKhYcg3lw8Ob1QXTzxwnbSNh5WzsZdDpcaf04nE5sLLXRA5EcjzK+6Z wBjqiIIENZmIAKZP2JanCqSQO5cxOrsUnR8aF/zQvNz9oqbPW8nJdjJ3mtHYTOR0 5JEqGuS8CZ0LVIdw9jtQ//y5w46aWhwooqs+UVH4UZA3IUWBBzLhgPtxD9gh157w Xy00qeu6Stj1lv+C1A4KnasWSKaFVge+sBjgotZodBo2daPism8hT3DPTRrngFbi E3upqtaFd5skSzJR9e5dXO+x5AEcN8aMPPrA7w== -----END CERTIFICATE-----Generated at Thu Jun 11 17:48:59 2026 by rpki-client