$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json) Hash identifier: Ntqc1Pb892YxOcOdMARbGkzmLbwZTbJfIkStui7Ds5s= Subject key identifier: 81:03:80:9B:19:F7:38:D7:E9:66:75:79:04:37:98:6B:88:89:99:77 Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Certificate serial: 244204703B70F614966E97CCF76533DC57A0A5B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft Manifest number: 01A5 Signing time: Wed 22 Oct 2025 00:19:08 +0000 Manifest this update: Wed 22 Oct 2025 00:14:08 +0000 Manifest next update: Thu 23 Oct 2025 03:22:08 +0000 Files and hashes: 1: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: LfF8fU+QkX6d5K08nkQmulF4/9qGZmobs40531E0EuE=) 2: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: POeaLZ7jyGbDhNwka17vD8hm5iiL/jnjTj3d8a5jHPw=) 3: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: baGBWXcDrtK+cAVKGJBMAmZee53ol0gPCj9NO0O551w=) 4: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: ZitFTTDvBhL+NngGHadSk16KJGCf15dynzngvOhofVw=) 5: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: 2pHYFNhpresl2Qe+bmQCdeuqTmZNLu6JpjLmSUgR1DM=) 6: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: lh0a38K8JAllhrAcZvOqWh+3NCJyyj25skARvaE+EWo=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:42:04:70:3b:70:f6:14:96:6e:97:cc:f7:65:33:dc:57:a0:a5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Validity Not Before: Oct 22 00:14:08 2025 GMT Not After : Oct 23 03:22:08 2025 GMT Subject: CN=8103809B19F738D7E96675790437986B88899977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:08:aa:12:ba:29:b2:b8:e9:8c:69:b0:da:a6: 7d:e1:94:59:4f:2f:29:ec:a5:31:45:37:50:4c:69: 79:d4:66:ca:fd:57:0a:a4:db:99:a9:1c:6c:45:25: 13:a9:a4:41:85:ce:37:bc:ba:ab:95:58:d6:e1:7d: c2:7d:43:86:1f:fb:46:88:19:77:86:75:8b:77:c3: ed:0e:53:a4:5e:47:dc:63:82:88:66:ca:38:cd:89: 3c:8b:a2:2e:fe:48:41:8a:cb:b7:54:66:88:84:5d: fe:28:fe:69:2b:62:f1:b3:70:3e:b0:b8:c3:17:0e: 3e:c6:6e:e4:17:f8:33:1c:3b:e9:19:c2:de:08:0b: 3a:a9:02:a3:ab:70:5a:3d:97:05:dc:b0:eb:ee:5b: 57:8a:f5:5c:3a:f0:84:30:e8:4a:a2:39:2b:d0:29: 8b:3f:0a:08:6b:5d:19:33:33:bc:3d:e2:2c:7e:5c: 31:30:fc:83:94:75:d1:94:ec:18:3f:b7:30:da:d8: 1b:46:20:ea:25:b3:65:4c:c9:4c:c4:83:46:09:05: f4:0e:86:63:2e:93:87:40:b3:76:cb:04:ae:d7:b6: 44:2f:df:47:33:83:4c:33:3e:4c:65:b9:37:8b:dc: 37:ab:e5:72:b7:5a:d2:55:ce:44:5a:be:1d:23:0d: c9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:03:80:9B:19:F7:38:D7:E9:66:75:79:04:37:98:6B:88:89:99:77 X509v3 Authority Key Identifier: keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e0:44:34:1c:9d:45:bd:7c:b2:f8:42:4c:84:f1:b0:32:c2: e6:52:7f:44:4e:64:25:c4:c9:7c:12:93:eb:f3:28:85:e8:4d: ae:8a:ef:32:2c:66:da:4d:7c:95:44:13:ca:68:fe:ee:4d:42: cf:1b:ea:e1:30:61:9f:93:7b:d1:ab:e8:bb:25:e1:eb:ae:64: 32:d3:7f:f6:b7:a0:b5:3a:18:2c:9b:ec:66:0d:be:05:48:88: 65:75:ec:5b:42:1a:28:78:8c:8c:d7:c0:f3:bb:f5:31:27:91: d7:c4:9a:cf:34:fc:04:19:90:01:f7:0a:59:02:82:e4:91:ae: 8e:53:29:25:de:58:4f:dd:8f:29:fa:5a:8f:90:bb:d6:b4:9e: d4:46:c7:d9:49:c6:23:cf:58:a1:29:dd:64:a6:2d:4b:83:ad: 47:5b:3f:bb:d1:a8:f6:a7:a4:e1:b1:94:e8:8e:bb:73:37:70: 06:d3:a2:9e:ee:7b:2a:74:ab:e5:04:24:ab:1b:4b:88:87:7c: bb:d1:67:5a:a9:f7:f8:ff:7d:54:7c:0e:d7:52:4d:90:77:53: 09:0e:17:90:47:66:e9:d5:48:0c:f1:9f:ff:21:72:7a:d5:69: ad:f1:9d:42:1e:dd:33:42:8b:19:61:e1:7f:10:f9:75:17:40: e0:56:80:e1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJEIEcDtw9hSWbpfM92Uz3FegpbkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1 Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI1MTAyMjAwMTQwOFoX DTI1MTAyMzAzMjIwOFowMzExMC8GA1UEAxMoODEwMzgwOUIxOUY3MzhEN0U5NjY3 NTc5MDQzNzk4NkI4ODg5OTk3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsIqhK6KbK46YxpsNqmfeGUWU8vKeylMUU3UExpedRmyv1XCqTbmakcbEUl E6mkQYXON7y6q5VY1uF9wn1Dhh/7RogZd4Z1i3fD7Q5TpF5H3GOCiGbKOM2JPIui Lv5IQYrLt1RmiIRd/ij+aSti8bNwPrC4wxcOPsZu5Bf4Mxw76RnC3ggLOqkCo6tw Wj2XBdyw6+5bV4r1XDrwhDDoSqI5K9Apiz8KCGtdGTMzvD3iLH5cMTD8g5R10ZTs GD+3MNrYG0Yg6iWzZUzJTMSDRgkF9A6GYy6Th0CzdssErte2RC/fRzODTDM+TGW5 N4vcN6vlcrda0lXORFq+HSMNydUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSBA4Cb Gfc41+lmdXkEN5hriImZdzAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp UXl0TDNMX1RJUG1vdHQzSHMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUx MDAwMDAvMC81RDcwN0IwRDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAauBENBydRb18svhCTITxsDLC5lJ/RE5kJcTJfBKT6/MohehN rorvMixm2k18lUQTymj+7k1Czxvq4TBhn5N70avouyXh665kMtN/9regtToYLJvs Zg2+BUiIZXXsW0IaKHiMjNfA87v1MSeR18SazzT8BBmQAfcKWQKC5JGujlMpJd5Y T92PKfpaj5C71rSe1EbH2UnGI89YoSndZKYtS4OtR1s/u9Go9qek4bGU6I67czdw BtOinu57KnSr5QQkqxtLiId8u9FnWqn3+P99VHwO11JNkHdTCQ4XkEdm6dVIDPGf /yFyetVprfGdQh7dM0KLGWHhfxD5dRdA4FaA4Q== -----END CERTIFICATE-----Generated at Wed Oct 22 12:32:09 2025 by rpki-client