$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: XnJAtmLqvnbQn4IXvdlC+faF3XNMoRDfq1NzzuyBTzo= Subject key identifier: 8C:CF:C8:75:53:F0:19:E0:D5:DA:46:92:29:6E:34:5E:2D:74:AC:52 Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 43D1FB3FA57BE3FFE43B3AF9747840B4CD7F63B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 0592 Signing time: Sun 25 Oct 2026 21:50:14 +0000 Manifest this update: Sun 25 Oct 2026 21:45:14 +0000 Manifest next update: Tue 27 Oct 2026 01:29:14 +0000 Files and hashes: 1: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=) 2: 3130332e3233382e3132382e302f32342d3234203d3e20383334.roa (hash: UrfKF10uUTv4Q/1dYjAlo4kXXtIWK8p5Z4ct5BPye0E=) 3: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: UeVTfn68R0LdGwhBHFcZ5BBp1siueZcbyg5aXpQZnmc=) 4: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=) 5: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: Up7ZjSCdm+fpdm+JoNxhBOJjtDjefWXuYo3dhJU7lVU=) 6: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: 7ng0Lz0v75i9UIOOgIh6OtvWrPo/NJYnzs1xeOHzW3c=) 7: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=) 8: 34332e3235352e38322e302f32342d3234203d3e20323130313130.roa (hash: PB0a+a2Gy49HBYeDS5tizGYeq0RhqGsRJr6JdjueuOg=) 9: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: d/rCauRqikxS+AAiZYtHNGhAJx18WwDHv+7pCkcm0mQ=) 10: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: mRp4vY4H0by9mj0sSASpANHm18slHi1+kwE1GgClbCA=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 01:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d1:fb:3f:a5:7b:e3:ff:e4:3b:3a:f9:74:78:40:b4:cd:7f:63:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Oct 25 21:45:14 2026 GMT Not After : Oct 27 01:29:14 2026 GMT Subject: CN=8CCFC87553F019E0D5DA4692296E345E2D74AC52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:92:30:af:43:54:49:79:4b:d1:3e:c8:6a: f8:71:4d:af:73:4c:b5:c4:a7:18:43:a5:67:13:c9: 98:2a:12:da:9e:57:98:94:a7:9d:50:46:08:6f:c7: b9:de:b1:61:ea:7e:1b:10:48:ec:6e:5e:ac:c1:27: 57:84:72:57:44:f1:73:39:db:2e:37:a6:11:9d:d7: 33:22:76:be:6a:98:6f:87:0f:6c:8a:a1:f9:23:57: 2a:90:9a:2f:11:69:11:9e:0a:b6:83:83:5d:d1:9d: 2d:62:be:7e:81:d6:70:a7:19:7e:f9:c2:20:47:c9: 35:87:ba:14:31:e0:32:5d:dd:30:3c:d6:3d:77:03: 61:15:01:8e:2c:4a:8f:16:47:b4:a8:7d:53:34:c2: 5a:0f:a7:1b:85:58:3e:45:a1:aa:42:c6:f0:8e:af: ff:d4:c2:b7:2b:8d:75:96:ba:1c:b7:ce:a6:92:f7: af:a7:cc:97:49:bc:37:d3:54:5a:33:e2:0d:23:6f: df:88:74:b3:1d:25:ac:dc:44:dc:02:5e:23:6c:75: 75:51:5b:3e:22:c0:0e:db:40:67:6b:4a:3a:51:aa: d4:a1:fe:dd:46:79:35:e6:48:68:08:6a:c9:4b:7f: d8:55:2c:1c:c1:c8:33:a6:c5:c1:74:85:2e:19:c6: ef:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CF:C8:75:53:F0:19:E0:D5:DA:46:92:29:6E:34:5E:2D:74:AC:52 X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:44:66:26:be:88:9f:72:6c:e7:78:13:b9:99:7e:39:5b:b7: a0:2b:d5:00:eb:9f:81:54:d5:9d:86:5a:6b:83:ec:7c:63:17: a8:ae:f7:25:fb:eb:82:ff:49:71:40:26:39:2b:82:be:b3:0d: b0:98:11:e6:8b:da:de:35:65:73:00:77:1f:c0:b2:d3:98:11: ad:9d:14:80:17:e8:99:00:10:a1:53:0d:d7:d4:84:fc:c3:3e: 25:be:19:16:6a:80:6a:9c:a6:df:bd:1d:a3:a5:04:30:03:e2: e8:9f:f3:59:d4:7a:9b:13:1b:eb:30:e8:99:19:54:71:2a:ce: 0f:58:7a:21:23:eb:5d:b9:4d:55:a4:ac:91:a1:70:c5:34:82: b9:aa:a7:f2:83:3a:c1:cd:9f:39:b8:a7:1e:95:62:e9:83:1c: 16:9c:14:9e:ad:c5:a6:00:8a:43:cc:a1:dc:5e:d2:10:12:9c: 7e:6b:21:a6:dd:00:17:91:8e:5a:3f:87:2c:4b:c5:27:fb:44: a7:ca:28:bd:0d:0d:95:25:0a:ae:ee:1c:ef:f3:32:44:8f:32: 41:4d:45:36:de:9f:cd:e3:ab:e0:52:c8:23:2e:02:58:71:43: 92:4f:58:71:25:5b:fe:7c:23:24:b7:73:38:9b:0b:ea:ff:8c: 16:fc:80:24 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQ9H7P6V74//kOzr5dHhAtM1/Y7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MTAyNTIxNDUxNFoX DTI2MTAyNzAxMjkxNFowMzExMC8GA1UEAxMoOENDRkM4NzU1M0YwMTlFMEQ1REE0 NjkyMjk2RTM0NUUyRDc0QUM1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4okjCvQ1RJeUvRPshq+HFNr3NMtcSnGEOlZxPJmCoS2p5XmJSnnVBGCG/H ud6xYep+GxBI7G5erMEnV4RyV0TxcznbLjemEZ3XMyJ2vmqYb4cPbIqh+SNXKpCa LxFpEZ4KtoODXdGdLWK+foHWcKcZfvnCIEfJNYe6FDHgMl3dMDzWPXcDYRUBjixK jxZHtKh9UzTCWg+nG4VYPkWhqkLG8I6v/9TCtyuNdZa6HLfOppL3r6fMl0m8N9NU WjPiDSNv34h0sx0lrNxE3AJeI2x1dVFbPiLADttAZ2tKOlGq1KH+3UZ5NeZIaAhq yUt/2FUsHMHIM6bFwXSFLhnG74sCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSMz8h1 U/AZ4NXaRpIpbjReLXSsUjAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAP0RmJr6In3Js53gTuZl+OVu3oCvVAOufgVTVnYZaa4PsfGMX qK73Jfvrgv9JcUAmOSuCvrMNsJgR5ova3jVlcwB3H8Cy05gRrZ0UgBfomQAQoVMN 19SE/MM+Jb4ZFmqAapym370do6UEMAPi6J/zWdR6mxMb6zDomRlUcSrOD1h6ISPr XblNVaSskaFwxTSCuaqn8oM6wc2fObinHpVi6YMcFpwUnq3FpgCKQ8yh3F7SEBKc fmshpt0AF5GOWj+HLEvFJ/tEp8oovQ0NlSUKru4c7/MyRI8yQU1FNt6fzeOr4FLI Iy4CWHFDkk9YcSVb/nwjJLdzOJsL6v+MFvyAJA== -----END CERTIFICATE-----Generated at Mon Oct 26 03:40:13 2026 by rpki-client