$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: XuZ3QcyZX2sR0JrO8CYpbNDR/GLghBSK82FJBS9fY5k= Subject key identifier: 5E:C3:B7:BF:B5:E0:74:4E:D1:72:2C:99:77:0B:08:71:1E:97:D7:78 Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 0C7258C61BA7B1150AB5CD49D1F02585542BEF6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 02C7 Signing time: Sat 31 May 2025 00:03:22 +0000 Manifest this update: Fri 30 May 2025 23:58:22 +0000 Manifest next update: Sun 01 Jun 2025 01:32:22 +0000 Files and hashes: 1: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: E4ONBceQGtTtMJwjbxI/zmDC8SS3yBbRlcMhg4vXlLU=) 2: 34332e3235352e38312e302f32342d3234203d3e20313431313538.roa (hash: SQWzDg71lRig1vikM6oroRmKP7jytIrlrfxg8Lw3ga4=) 3: 3130332e3233382e3133302e302f32342d3234203d3e20313336363231.roa (hash: 8igxHKxo2njqbR2D8BiOevPTCdiGc26mhB2WmzLUUOQ=) 4: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: S8rFfs7IoEg3XYYnsyLOBvR6RACIA3juzHhODPn7ChQ=) 5: 3130332e3233382e3132382e302f32342d3234203d3e20383334.roa (hash: kP0TsSyJU+IY/owZpZbe+2MFOBqb7Ph6/KkSLIVVibE=) 6: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: 34ZLdvJWRlaz+jTDs3YF3eEhOoQyE7fhuoEG/fJaNVY=) 7: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: befyV0hRkZPjsj2HiXn8OpPP07iuTlgDyNJrlhl8VkA=) 8: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: 8znyhN1pciG6af26GabtA9PnhRL5Tepkpr/53Xsez8E=) 9: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: YRgjmmE+nVi/PAXhqb3JUaahbh35VPMhIEe6x6m98Ho=) 10: 3130332e3233382e3133312e302f32342d3234203d3e20383334.roa (hash: NBBcCz/idgQK64p2sFvhFCuwsY1pLmzTLLaAlaO0ToA=) 11: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (hash: 5hWADdZsX05Xm71wk93nvrisrc0F3dwJlLqjnpXhvtY=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Jun 2025 01:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:72:58:c6:1b:a7:b1:15:0a:b5:cd:49:d1:f0:25:85:54:2b:ef:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: May 30 23:58:22 2025 GMT Not After : Jun 1 01:32:22 2025 GMT Subject: CN=5EC3B7BFB5E0744ED1722C99770B08711E97D778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:3f:02:38:2d:0d:3d:0b:4e:aa:9a:35:9d: 05:ac:c9:16:55:5b:42:31:fb:55:47:07:e5:a3:05: ee:49:34:cd:0b:5a:3a:e2:cf:da:68:ff:b4:8c:64: 1a:0e:bc:a7:f8:bd:ea:78:b1:b3:0e:e8:67:06:c5: 1d:50:45:87:93:7e:bc:8f:22:35:00:a1:e1:4c:d1: 80:5f:2d:67:53:20:bb:bd:54:f6:e2:fd:5f:f0:43: 86:98:cd:d1:41:77:bd:60:c4:4b:09:90:33:83:0f: 9d:a1:3a:06:28:98:f7:03:74:ac:13:01:58:0e:4f: aa:8e:22:c7:61:34:cf:64:60:00:d0:45:c2:b4:29: 6a:e8:0c:86:18:ab:cc:55:d7:59:18:1b:5d:82:f8: 44:50:7e:d7:1b:f8:ad:2c:fa:38:61:3f:ca:a9:42: fa:33:d9:dd:b0:55:10:3f:db:f4:93:77:73:59:50: 18:8c:e8:73:3e:b3:e1:d3:47:f6:70:0f:dd:03:a7: 26:4d:96:40:f4:e2:6c:62:07:97:de:36:f4:30:22: e3:b3:c6:fc:af:e0:b6:a8:16:78:81:c6:f9:0d:1c: 55:83:58:83:9f:d2:fa:b0:4d:b9:18:dd:86:a4:2c: 07:59:68:c2:ff:d0:f7:89:5d:c8:60:aa:17:d7:23: 94:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C3:B7:BF:B5:E0:74:4E:D1:72:2C:99:77:0B:08:71:1E:97:D7:78 X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:8c:6f:42:ca:c2:a7:62:3f:0d:dd:cf:da:7a:d0:99:b5:2c: 30:9b:2d:06:e8:c2:d7:b5:dc:44:34:3f:67:95:48:ac:aa:58: 90:57:c0:0d:28:b9:58:d0:c7:03:54:0e:98:9f:b9:30:78:87: da:4f:30:cd:3c:66:9f:ff:56:22:67:d3:76:e6:3d:68:82:b4: 65:f4:d8:0c:a0:37:a9:91:8e:04:e9:94:7f:82:d2:97:12:f6: ed:e7:93:50:16:4a:44:cf:9e:30:2d:4e:9e:b2:0b:c3:7b:8e: ea:c5:b0:93:00:b6:bd:38:7f:e5:e5:36:40:e2:29:ca:50:e5: 4b:7a:16:7a:d5:dc:60:2d:b5:f3:44:8e:e6:c3:7a:64:d5:d1: df:b7:52:40:e9:cb:e1:20:0a:96:54:11:5d:a0:fb:75:59:6c: 1d:e0:ea:b5:6c:87:5a:e5:50:1c:6f:29:b2:ce:44:ed:6f:50: 41:cd:5f:dc:1a:28:93:04:74:c6:e8:91:7e:03:3c:e0:90:82: d7:37:72:09:3e:d8:74:4a:48:35:96:fc:64:3e:51:8b:9f:b4: 8e:99:1b:31:29:f4:dc:8c:95:02:cf:e2:10:7b:35:f4:dd:23: 92:41:71:0d:79:ce:79:01:52:57:5f:bd:28:e8:71:3c:ad:81: b4:0e:f6:5d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDHJYxhunsRUKtc1J0fAlhVQr72wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MDUzMDIzNTgyMloX DTI1MDYwMTAxMzIyMlowMzExMC8GA1UEAxMoNUVDM0I3QkZCNUUwNzQ0RUQxNzIy Qzk5NzcwQjA4NzExRTk3RDc3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYNPwI4LQ09C06qmjWdBazJFlVbQjH7VUcH5aMF7kk0zQtaOuLP2mj/tIxk Gg68p/i96nixsw7oZwbFHVBFh5N+vI8iNQCh4UzRgF8tZ1Mgu71U9uL9X/BDhpjN 0UF3vWDESwmQM4MPnaE6BiiY9wN0rBMBWA5Pqo4ix2E0z2RgANBFwrQpaugMhhir zFXXWRgbXYL4RFB+1xv4rSz6OGE/yqlC+jPZ3bBVED/b9JN3c1lQGIzocz6z4dNH 9nAP3QOnJk2WQPTibGIHl9429DAi47PG/K/gtqgWeIHG+Q0cVYNYg5/S+rBNuRjd hqQsB1lowv/Q94ldyGCqF9cjlNcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRew7e/ teB0TtFyLJl3CwhxHpfXeDAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAIIxvQsrCp2I/Dd3P2nrQmbUsMJstBujC17XcRDQ/Z5VIrKpY kFfADSi5WNDHA1QOmJ+5MHiH2k8wzTxmn/9WImfTduY9aIK0ZfTYDKA3qZGOBOmU f4LSlxL27eeTUBZKRM+eMC1OnrILw3uO6sWwkwC2vTh/5eU2QOIpylDlS3oWetXc YC2180SO5sN6ZNXR37dSQOnL4SAKllQRXaD7dVlsHeDqtWyHWuVQHG8pss5E7W9Q Qc1f3BookwR0xuiRfgM84JCC1zdyCT7YdEpINZb8ZD5Ri5+0jpkbMSn03IyVAs/i EHs19N0jkkFxDXnOeQFSV1+9KOhxPK2BtA72XQ== -----END CERTIFICATE-----Generated at Sat May 31 17:01:20 2025 by rpki-client