$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: y9uuc4xp+yrX8JGzctV8WP4HaV7cmL/WRAQwShP7w5I= Subject key identifier: C4:94:E8:30:57:44:4E:8D:0B:5C:E6:B5:7B:56:AA:70:25:66:03:39 Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 01F3DA0787E179027DC8ECBEAACF3C226C51CC46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 0395 Signing time: Tue 21 Oct 2025 12:24:08 +0000 Manifest this update: Tue 21 Oct 2025 12:19:08 +0000 Manifest next update: Wed 22 Oct 2025 14:29:08 +0000 Files and hashes: 1: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=) 2: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=) 3: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: S8rFfs7IoEg3XYYnsyLOBvR6RACIA3juzHhODPn7ChQ=) 4: 3130332e3233382e3132382e302f32342d3234203d3e20313338303737.roa (hash: 5sZFV0hCMUC2n4iWJ3AfJgpDZ6n5Bs/7eOe7YiQjRcQ=) 5: 34332e3235352e38312e302f32342d3234203d3e20313531393634.roa (hash: 4e0hnp+mBksFQSBkEEMhLS8Zc6XMB5AlAB7ew9DvGO8=) 6: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: uORkwwq4ZLOQMRazrtccDOJtO6J9+eyJZDfa7XX2uNs=) 7: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: YRgjmmE+nVi/PAXhqb3JUaahbh35VPMhIEe6x6m98Ho=) 8: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=) 9: 3130332e3233382e3133302e302f32342d3234203d3e2039333034.roa (hash: VxvWKIapnz/NHAaRWVjdN31at45PwCfti5amyZ3Xs/Y=) 10: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: befyV0hRkZPjsj2HiXn8OpPP07iuTlgDyNJrlhl8VkA=) 11: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (hash: R06pByin/m/phSrNQN6fLr1e43axG1JDp2GOwtmPcDQ=) 12: 3130332e3233382e3133312e302f32342d3234203d3e2039333034.roa (hash: xJHD6oJOmKsdm6y2bTs9H7Pd88grt6jIjKGTOKL3muY=) 13: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: E4ONBceQGtTtMJwjbxI/zmDC8SS3yBbRlcMhg4vXlLU=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f3:da:07:87:e1:79:02:7d:c8:ec:be:aa:cf:3c:22:6c:51:cc:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Oct 21 12:19:08 2025 GMT Not After : Oct 22 14:29:08 2025 GMT Subject: CN=C494E83057444E8D0B5CE6B57B56AA7025660339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:60:6d:44:8a:e8:3e:10:55:3b:89:d7:fd: cc:52:35:2b:8d:19:c7:33:b7:ce:f2:37:cd:49:34: 58:43:51:76:bf:5a:82:bc:46:5d:c8:3f:1f:1c:ea: ce:2d:1e:6a:ab:8e:c5:18:9e:21:09:0f:03:a8:bd: 28:09:fc:2b:4a:95:81:46:d9:f0:8a:79:17:95:34: 57:f6:69:14:e6:a5:8b:d8:bf:ff:ce:29:d0:f0:bd: bc:7e:dc:34:87:b8:3d:d3:d9:43:86:17:c3:9b:b9: 1b:b9:79:bb:ff:20:2d:51:f6:22:db:c7:34:6e:13: f9:c2:cc:90:31:b8:93:c6:15:0d:be:e4:bc:2e:15: 30:2b:24:56:ee:a8:c3:74:4b:ce:60:5c:13:04:b7: 44:90:45:53:c0:6e:07:f1:31:5a:0d:d6:b0:14:3a: 17:1a:5c:6f:00:86:e4:ab:8b:f3:4d:3f:81:7d:7c: ab:86:e6:de:f2:a9:ef:10:bb:66:c0:5e:b2:0f:20: fc:5f:5b:62:d9:4b:23:2b:bb:11:f9:4d:8e:e1:99: 9b:df:d8:07:4a:34:b5:ad:9d:9b:8f:82:da:2d:32: 09:4f:ab:a2:00:e1:33:37:8a:65:3f:e8:0d:fe:8d: 6e:00:59:9c:b5:cd:e2:3a:7d:45:07:9a:8c:d5:36: 0d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:94:E8:30:57:44:4E:8D:0B:5C:E6:B5:7B:56:AA:70:25:66:03:39 X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:99:64:8d:d2:7a:09:52:ea:35:cd:e4:78:70:87:8c:07:a6: 1b:ab:3b:c2:30:b5:f9:10:27:da:0c:dc:9e:08:47:ee:7b:87: 8e:2b:61:00:94:ef:b4:2b:47:df:ba:91:ab:23:f2:1c:f3:59: 76:35:4b:2c:73:0f:e3:a7:bd:cd:29:22:ec:01:67:b5:70:68: e1:97:d2:44:d2:b4:09:26:da:9d:ba:8c:9f:02:2e:26:f9:26: 1e:cd:b0:54:34:2a:ea:38:4b:fc:71:0e:38:21:1a:ca:c1:12: 97:d9:6f:82:ec:2e:cd:34:2e:38:c4:0f:ae:c8:f7:3c:df:ba: 5d:41:f0:a5:47:b5:96:0a:78:68:27:b4:5d:83:b7:5a:71:68: 57:bb:fc:22:dc:21:d9:f5:86:69:19:77:06:3d:89:0d:44:99: 8a:3c:c6:63:20:8f:2c:57:53:bb:5d:eb:a5:92:ec:68:d6:e9: 95:d0:94:85:fa:dd:d5:84:8a:24:88:f6:89:37:66:45:79:77: 83:3d:14:4a:3e:f4:c6:85:75:62:3a:d9:bf:ac:91:de:a1:55: 28:bf:62:82:22:b9:a5:7c:19:17:eb:40:10:07:ce:ed:03:32: 92:d1:7a:4e:7c:05:aa:d1:0e:55:46:08:14:30:08:dd:33:60: 0a:4b:a2:1a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAfPaB4fheQJ9yOy+qs88ImxRzEYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MTAyMTEyMTkwOFoX DTI1MTAyMjE0MjkwOFowMzExMC8GA1UEAxMoQzQ5NEU4MzA1NzQ0NEU4RDBCNUNF NkI1N0I1NkFBNzAyNTY2MDMzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSXYG1Eiug+EFU7idf9zFI1K40ZxzO3zvI3zUk0WENRdr9agrxGXcg/Hxzq zi0eaquOxRieIQkPA6i9KAn8K0qVgUbZ8Ip5F5U0V/ZpFOali9i//84p0PC9vH7c NIe4PdPZQ4YXw5u5G7l5u/8gLVH2ItvHNG4T+cLMkDG4k8YVDb7kvC4VMCskVu6o w3RLzmBcEwS3RJBFU8BuB/ExWg3WsBQ6FxpcbwCG5KuL800/gX18q4bm3vKp7xC7 ZsBesg8g/F9bYtlLIyu7EflNjuGZm9/YB0o0ta2dm4+C2i0yCU+rogDhMzeKZT/o Df6NbgBZnLXN4jp9RQeajNU2DQ8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBTElOgw V0ROjQtc5rV7VqpwJWYDOTAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEADJlkjdJ6CVLqNc3keHCHjAemG6s7wjC1+RAn2gzcnghH7nuH jithAJTvtCtH37qRqyPyHPNZdjVLLHMP46e9zSki7AFntXBo4ZfSRNK0CSbanbqM nwIuJvkmHs2wVDQq6jhL/HEOOCEaysESl9lvguwuzTQuOMQPrsj3PN+6XUHwpUe1 lgp4aCe0XYO3WnFoV7v8Itwh2fWGaRl3Bj2JDUSZijzGYyCPLFdTu13rpZLsaNbp ldCUhfrd1YSKJIj2iTdmRXl3gz0USj70xoV1YjrZv6yR3qFVKL9igiK5pXwZF+tA EAfO7QMyktF6TnwFqtEOVUYIFDAI3TNgCkuiGg== -----END CERTIFICATE-----Generated at Wed Oct 22 01:56:17 2025 by rpki-client