$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: XtFleDKS2dQHLO4JkagU+FwT7s1hq4GHwPLaHiJiKCU= Subject key identifier: AE:EF:4F:6B:74:52:1A:33:90:A2:21:6D:3F:8A:10:65:FE:10:CD:6A Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 5602215FF08C5A27919CF432C4E1FA44A2162A41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 049B Signing time: Mon 27 Apr 2026 04:58:47 +0000 Manifest this update: Mon 27 Apr 2026 04:53:47 +0000 Manifest next update: Tue 28 Apr 2026 04:59:47 +0000 Files and hashes: 1: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: 00ioxpNqpcBf6EFjGxnu8Byt1ceBzWGssCS8ncrqpQE=) 2: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=) 3: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=) 4: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=) 5: 3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa (hash: /3IEW/L0xD5c+gjtCpGu3f4OnNilISvSgo/f0RfHoCg=) 6: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=) 7: 3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa (hash: jaYCwKUfN1ahphjmuCip8Xd6KyVekTXlh6eiv1lr6wE=) 8: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=) 9: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=) 10: 34332e3235352e38322e302f32342d3234203d3e20383334.roa (hash: icPb5M6Y/CPwkJET9vdKSzs0dBOYlGKaymEwUa2ujW8=) 11: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:02:21:5f:f0:8c:5a:27:91:9c:f4:32:c4:e1:fa:44:a2:16:2a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Apr 27 04:53:47 2026 GMT Not After : Apr 28 04:59:47 2026 GMT Subject: CN=AEEF4F6B74521A3390A2216D3F8A1065FE10CD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:93:e3:eb:92:68:35:ed:93:6b:1e:70:6c:de: 95:19:66:9b:46:db:cf:fa:85:e2:1e:e1:70:2b:03: 25:5a:d8:d7:b5:46:d3:b1:41:a1:0b:f7:ac:99:ae: 58:5f:01:fb:e0:fc:0a:e9:cd:65:79:b7:aa:0d:56: 41:da:39:83:3f:19:ce:fc:52:ca:23:d9:3d:45:ef: 5e:7c:3f:34:7d:95:3d:d4:cb:e6:08:bc:de:ad:76: 23:cf:96:76:31:64:63:38:f5:bd:06:e8:d8:72:e0: c6:fc:34:8d:7f:53:f0:a7:dd:10:da:16:92:57:97: 1d:1a:0c:a4:68:7d:39:43:e4:e6:dd:c7:75:3c:bc: 39:b9:34:c3:60:62:3d:fe:14:8d:c8:8a:ed:80:02: b5:bd:17:07:eb:9f:7f:34:06:ff:5e:80:ac:19:34: ad:41:e6:6d:ff:34:df:e3:7d:3e:d1:0d:00:33:d4: 39:07:97:cf:62:00:54:b1:21:c1:d2:a4:af:be:50: 82:5e:2b:43:9b:96:9d:a2:33:fc:c1:92:b7:48:c9: 8b:92:48:c4:4a:5e:4e:27:26:ca:6f:16:62:11:53: 87:9c:3d:dc:ee:09:f5:da:35:f0:48:2a:cb:5a:09: 86:06:bc:d3:c6:70:58:f7:e9:d3:a5:16:d8:f1:6c: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EF:4F:6B:74:52:1A:33:90:A2:21:6D:3F:8A:10:65:FE:10:CD:6A X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:34:8f:dc:61:3a:52:f5:58:e1:66:d7:28:ad:54:03:1e:ea: f6:4d:5f:40:45:a6:1e:d0:51:66:c9:64:21:1f:90:ba:c0:3d: a5:c3:85:d4:ae:69:79:74:a3:ab:92:49:04:86:17:9d:26:1f: d7:88:e5:58:af:a0:47:1a:d4:08:8b:72:96:77:a0:30:76:49: 52:2b:54:09:46:19:ec:e8:b9:e0:5d:bf:f6:95:b7:fc:0d:dd: 68:ed:10:13:4b:1b:1a:e1:d9:40:8f:27:d9:1a:6f:86:e4:bf: 33:12:70:0e:34:4a:89:60:b9:f2:53:36:d8:10:ac:02:20:fa: 0d:4e:ff:cf:95:bb:f9:86:b8:ec:48:d7:24:99:48:a1:83:80: 92:8a:62:73:cd:1a:92:9f:b1:c6:9c:b1:e2:3d:ad:6c:25:14: ff:1b:5a:7b:84:21:e3:e6:df:8f:f7:1d:46:cf:e4:64:9c:52: 9b:a8:9c:d7:2e:9c:ba:5e:0a:0e:d6:e8:09:f3:b7:28:93:93: 1f:ca:f6:50:b9:ad:0e:da:26:c3:f3:bb:95:fa:2f:68:b3:c6: 16:44:f5:29:18:84:6c:e7:0a:6a:02:4d:64:01:86:22:e2:30: 32:34:27:16:15:0f:c4:66:90:98:0f:62:49:10:92:34:3a:91: f2:ad:b1:b5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVgIhX/CMWieRnPQyxOH6RKIWKkEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MDQyNzA0NTM0N1oX DTI2MDQyODA0NTk0N1owMzExMC8GA1UEAxMoQUVFRjRGNkI3NDUyMUEzMzkwQTIy MTZEM0Y4QTEwNjVGRTEwQ0Q2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMyT4+uSaDXtk2secGzelRlmm0bbz/qF4h7hcCsDJVrY17VG07FBoQv3rJmu WF8B++D8CunNZXm3qg1WQdo5gz8ZzvxSyiPZPUXvXnw/NH2VPdTL5gi83q12I8+W djFkYzj1vQbo2HLgxvw0jX9T8KfdENoWkleXHRoMpGh9OUPk5t3HdTy8Obk0w2Bi Pf4UjciK7YACtb0XB+uffzQG/16ArBk0rUHmbf803+N9PtENADPUOQeXz2IAVLEh wdKkr75Qgl4rQ5uWnaIz/MGSt0jJi5JIxEpeTicmym8WYhFTh5w93O4J9do18Egq y1oJhga808ZwWPfp06UW2PFsWQkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSu709r dFIaM5CiIW0/ihBl/hDNajAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAKDSP3GE6UvVY4WbXKK1UAx7q9k1fQEWmHtBRZslkIR+QusA9 pcOF1K5peXSjq5JJBIYXnSYf14jlWK+gRxrUCItylnegMHZJUitUCUYZ7Oi54F2/ 9pW3/A3daO0QE0sbGuHZQI8n2RpvhuS/MxJwDjRKiWC58lM22BCsAiD6DU7/z5W7 +Ya47EjXJJlIoYOAkopic80akp+xxpyx4j2tbCUU/xtae4Qh4+bfj/cdRs/kZJxS m6ic1y6cul4KDtboCfO3KJOTH8r2ULmtDtomw/O7lfovaLPGFkT1KRiEbOcKagJN ZAGGIuIwMjQnFhUPxGaQmA9iSRCSNDqR8q2xtQ== -----END CERTIFICATE-----Generated at Mon Apr 27 15:06:31 2026 by rpki-client