$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json) Hash identifier: NcNaJHsezguV0n9r1W5/yYh6tK3uc3bqSLj4NDTGmUw= Subject key identifier: 0C:A7:BC:1D:62:72:39:4A:E2:B3:57:6C:20:B5:9F:AD:D0:D3:B2:B1 Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Certificate serial: 2EB05F0C66BBA8AFB9AE950CD83946D74E35AE9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft Manifest number: 026B Signing time: Mon 16 Mar 2026 18:27:47 +0000 Manifest this update: Mon 16 Mar 2026 18:22:47 +0000 Manifest next update: Tue 17 Mar 2026 22:23:47 +0000 Files and hashes: 1: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: POeaLZ7jyGbDhNwka17vD8hm5iiL/jnjTj3d8a5jHPw=) 2: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: 2pHYFNhpresl2Qe+bmQCdeuqTmZNLu6JpjLmSUgR1DM=) 3: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ=) 4: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: pUnrkwwY//NlAs5oeQci6ch5BD/oyHyaGm+tH+jOLqE=) 5: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: 7QCONFpvmyuNf5zvgrCNMc+J3LAExntNG5Qv6K3hEbs=) 6: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 22:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b0:5f:0c:66:bb:a8:af:b9:ae:95:0c:d8:39:46:d7:4e:35:ae:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Validity Not Before: Mar 16 18:22:47 2026 GMT Not After : Mar 17 22:23:47 2026 GMT Subject: CN=0CA7BC1D6272394AE2B3576C20B59FADD0D3B2B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:85:af:21:c9:84:aa:2a:05:75:f9:33:30:09: 92:99:0b:fb:af:43:6c:87:8f:73:16:1f:ae:ef:48: 8c:5b:66:c9:09:01:01:d5:e5:31:ab:98:59:56:4f: 89:96:d9:ad:55:91:fc:b9:b8:b8:78:48:e8:51:81: eb:61:9c:01:3a:e3:9d:98:3b:f4:7f:2a:ec:36:d5: 05:f5:58:a0:df:1d:97:f5:08:33:71:96:25:bc:2b: 9b:fd:1a:9a:ef:0f:25:84:68:d1:c9:bb:f1:40:06: 23:40:be:94:1f:07:45:2e:e2:be:b4:55:c3:0a:87: d9:6e:06:54:ec:7f:ef:e9:f5:25:6a:63:48:65:3a: 39:20:b2:b8:6e:3b:44:77:70:37:a8:6e:0d:dd:18: 40:b8:c0:be:73:0a:3c:08:93:cf:5c:3b:31:ec:9d: 82:cc:63:d6:d9:20:c4:bc:99:f1:4e:0c:46:60:2c: 7a:6d:7e:43:cb:bf:69:69:98:f9:3a:e6:8f:67:d3: d3:75:de:a3:a8:fe:d9:91:33:d9:7d:1a:2d:3a:b4: 9c:66:7b:fd:2f:44:a7:a3:d2:16:86:4a:05:4c:2f: 09:e0:f2:c8:e4:70:dc:2b:4a:e1:84:44:8d:ca:95: 60:c5:11:c2:e9:f1:44:4b:89:1b:f7:fb:73:9c:ae: b7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A7:BC:1D:62:72:39:4A:E2:B3:57:6C:20:B5:9F:AD:D0:D3:B2:B1 X509v3 Authority Key Identifier: keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:18:0a:4a:d8:73:7b:b4:cc:63:41:9c:95:06:15:cb:c9:d6: a6:c0:93:d2:e6:49:eb:3e:d2:7a:ea:2a:3a:b3:39:2a:ac:79: bf:59:88:2a:af:88:90:fe:9b:fd:09:13:2c:b1:c3:db:ac:47: 2a:bd:1e:d6:c0:47:1e:92:cb:99:65:80:16:c8:20:ea:78:aa: 3f:6a:d8:49:32:7c:f2:8c:25:12:e7:43:48:7c:0d:ce:c3:27: 80:ce:57:cf:c1:21:d7:31:62:a2:e6:29:d3:79:90:e1:f8:63: 4e:dc:7c:50:b7:8d:fd:11:3c:cf:fb:4c:5f:5b:65:d3:27:5d: a5:2b:8e:30:6f:e6:5c:dc:d0:cc:c4:6d:f3:08:f5:88:ef:4b: 2f:61:48:e0:08:9c:1b:ff:c2:6e:84:d1:ff:b9:1d:3f:b0:ea: 08:52:27:a9:91:a4:c8:89:d1:c1:2c:73:67:9b:0b:c4:ea:59: a9:0b:ab:6f:1f:f2:ab:e0:e2:c1:30:f4:73:c0:54:97:f8:1c: d9:ea:96:78:d3:0f:c5:8d:b2:4e:c6:33:71:03:b9:b4:15:bf: 64:19:21:84:60:da:db:b3:20:7c:de:7f:02:47:2f:6b:90:a3: 28:1b:2f:b2:8c:88:dd:0c:25:ff:f9:5d:0b:1f:da:79:90:87: a7:19:f8:53 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULrBfDGa7qK+5rpUM2DlG1041rpowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1 Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI2MDMxNjE4MjI0N1oX DTI2MDMxNzIyMjM0N1owMzExMC8GA1UEAxMoMENBN0JDMUQ2MjcyMzk0QUUyQjM1 NzZDMjBCNTlGQUREMEQzQjJCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANyFryHJhKoqBXX5MzAJkpkL+69DbIePcxYfru9IjFtmyQkBAdXlMauYWVZP iZbZrVWR/Lm4uHhI6FGB62GcATrjnZg79H8q7DbVBfVYoN8dl/UIM3GWJbwrm/0a mu8PJYRo0cm78UAGI0C+lB8HRS7ivrRVwwqH2W4GVOx/7+n1JWpjSGU6OSCyuG47 RHdwN6huDd0YQLjAvnMKPAiTz1w7Meydgsxj1tkgxLyZ8U4MRmAsem1+Q8u/aWmY +Trmj2fT03Xeo6j+2ZEz2X0aLTq0nGZ7/S9Ep6PSFoZKBUwvCeDyyORw3CtK4YRE jcqVYMURwunxREuJG/f7c5yutwsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQMp7wd YnI5SuKzV2wgtZ+t0NOysTAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp UXl0TDNMX1RJUG1vdHQzSHMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUx MDAwMDAvMC81RDcwN0IwRDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEA3hgKSthze7TMY0GclQYVy8nWpsCT0uZJ6z7SeuoqOrM5Kqx5 v1mIKq+IkP6b/QkTLLHD26xHKr0e1sBHHpLLmWWAFsgg6niqP2rYSTJ88owlEudD SHwNzsMngM5Xz8Eh1zFiouYp03mQ4fhjTtx8ULeN/RE8z/tMX1tl0yddpSuOMG/m XNzQzMRt8wj1iO9LL2FI4AicG//CboTR/7kdP7DqCFInqZGkyInRwSxzZ5sLxOpZ qQurbx/yq+DiwTD0c8BUl/gc2eqWeNMPxY2yTsYzcQO5tBW/ZBkhhGDa27MgfN5/ Akcva5CjKBsvsoyI3Qwl//ldCx/aeZCHpxn4Uw== -----END CERTIFICATE-----Generated at Tue Mar 17 04:01:31 2026 by rpki-client