$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json) Hash identifier: 5wwRLTLr53XOiT0Dm9RObm3nhfZra9jl3rNRKc7Q4RI= Subject key identifier: 16:15:09:5A:86:83:FA:53:FC:EB:5A:79:18:6F:4E:75:C8:D0:DA:91 Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Certificate serial: 572757E60B84F01436059D2270BC9ADA1ECA91F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft Manifest number: 0167 Signing time: Sat 06 Sep 2025 12:50:57 +0000 Manifest this update: Sat 06 Sep 2025 12:45:57 +0000 Manifest next update: Sun 07 Sep 2025 15:24:57 +0000 Files and hashes: 1: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: dWKT00qs5cM+dsmLNsL3yQpNxuNQ8bTJoSvgvdsQNHU=) 2: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: lh0a38K8JAllhrAcZvOqWh+3NCJyyj25skARvaE+EWo=) 3: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: LfF8fU+QkX6d5K08nkQmulF4/9qGZmobs40531E0EuE=) 4: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: baGBWXcDrtK+cAVKGJBMAmZee53ol0gPCj9NO0O551w=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 15:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:27:57:e6:0b:84:f0:14:36:05:9d:22:70:bc:9a:da:1e:ca:91:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Validity Not Before: Sep 6 12:45:57 2025 GMT Not After : Sep 7 15:24:57 2025 GMT Subject: CN=1615095A8683FA53FCEB5A79186F4E75C8D0DA91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6d:a7:e4:e6:a6:22:4d:32:d8:a4:02:d0:a4: d0:f7:c8:06:d8:ab:65:bd:ca:d0:8a:4b:1c:9b:ef: 9a:38:2c:76:41:f0:9b:13:9f:65:64:52:3a:08:86: 25:3e:9a:db:4c:64:01:81:0a:15:56:6b:6a:ff:27: 10:61:b8:8b:f7:26:15:73:9e:46:17:2d:32:b5:ba: e2:64:79:f8:2e:00:66:50:0c:72:9f:83:e9:1a:15: f3:47:41:44:cf:e0:06:fb:d5:4b:d9:34:ca:f8:35: 20:a6:56:1c:93:2f:78:a5:55:32:5e:6d:a2:54:f1: ac:f1:9f:94:b1:ff:5e:67:23:f4:a7:9a:59:32:18: 86:20:a2:25:2b:41:90:4f:ff:8b:8a:ab:06:e1:00: 46:d9:15:c1:2e:16:77:08:ce:e1:d4:ab:f2:33:2f: 1e:65:a8:82:01:d0:53:9c:e4:c8:cb:f1:59:6b:9c: 48:bd:2a:40:de:5a:86:38:35:5e:12:c4:e1:34:1e: f0:f9:46:b4:64:3a:05:07:56:23:57:5c:a2:f4:82: 98:6e:fe:d8:96:14:7f:cc:5b:02:b0:c0:f1:ac:ee: da:49:80:41:fa:8b:6f:58:1b:b7:0e:12:de:f7:db: 34:b6:95:49:79:d2:9b:91:8d:79:2d:ae:d7:e2:d3: a2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:15:09:5A:86:83:FA:53:FC:EB:5A:79:18:6F:4E:75:C8:D0:DA:91 X509v3 Authority Key Identifier: keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fc:2c:a6:8b:a5:f9:6c:53:a7:c5:1c:d7:ee:c7:16:4b:04: ba:ac:ba:89:77:aa:f8:3f:2e:1d:f1:ab:68:d1:04:2d:0f:99: 51:5d:29:f8:a2:bc:78:3c:75:0d:86:53:6e:e9:b4:b8:29:2a: af:89:2c:34:35:9c:c9:63:5b:ac:87:2d:f8:00:1b:23:08:c2: f0:f0:93:95:38:63:e8:14:9a:b1:de:80:03:b9:7d:b2:99:9c: 3b:1f:45:73:9e:3b:63:69:69:14:e4:ef:8b:12:ab:6d:2c:c9: 01:62:8d:b3:2d:ee:b8:39:e1:32:c0:81:a5:cc:08:ac:df:dc: 38:28:c8:20:66:e5:ef:42:95:be:8a:b0:a1:b6:ef:f3:de:ba: 5b:bc:e4:4f:a2:3e:e9:1d:3e:84:bc:56:21:a2:24:1f:d2:36: 07:5e:a9:e0:8b:06:fe:ef:cf:b5:14:77:20:6e:7c:2f:66:8b: fd:10:f3:69:f5:1e:05:e0:cb:41:8b:80:b9:63:00:b4:cd:7b: f0:08:04:42:a1:d4:92:e2:40:60:a0:f0:98:01:24:e0:89:ac: 0b:6e:8e:11:3e:e9:8e:47:84:e4:f5:ef:a6:61:17:83:70:2f: 28:7b:08:a3:05:c3:4b:21:c9:2e:fb:6f:8d:c1:1c:b4:82:4e: 3f:41:1d:ad -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVydX5guE8BQ2BZ0icLya2h7KkfkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1 Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI1MDkwNjEyNDU1N1oX DTI1MDkwNzE1MjQ1N1owMzExMC8GA1UEAxMoMTYxNTA5NUE4NjgzRkE1M0ZDRUI1 QTc5MTg2RjRFNzVDOEQwREE5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOVtp+TmpiJNMtikAtCk0PfIBtirZb3K0IpLHJvvmjgsdkHwmxOfZWRSOgiG JT6a20xkAYEKFVZrav8nEGG4i/cmFXOeRhctMrW64mR5+C4AZlAMcp+D6RoV80dB RM/gBvvVS9k0yvg1IKZWHJMveKVVMl5tolTxrPGflLH/Xmcj9KeaWTIYhiCiJStB kE//i4qrBuEARtkVwS4WdwjO4dSr8jMvHmWoggHQU5zkyMvxWWucSL0qQN5ahjg1 XhLE4TQe8PlGtGQ6BQdWI1dcovSCmG7+2JYUf8xbArDA8azu2kmAQfqLb1gbtw4S 3vfbNLaVSXnSm5GNeS2u1+LTotUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQWFQla hoP6U/zrWnkYb051yNDakTAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp UXl0TDNMX1RJUG1vdHQzSHMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUx MDAwMDAvMC81RDcwN0IwRDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAm/wspoul+WxTp8Uc1+7HFksEuqy6iXeq+D8uHfGraNEELQ+Z UV0p+KK8eDx1DYZTbum0uCkqr4ksNDWcyWNbrIct+AAbIwjC8PCTlThj6BSasd6A A7l9spmcOx9Fc547Y2lpFOTvixKrbSzJAWKNsy3uuDnhMsCBpcwIrN/cOCjIIGbl 70KVvoqwobbv8966W7zkT6I+6R0+hLxWIaIkH9I2B16p4IsG/u/PtRR3IG58L2aL /RDzafUeBeDLQYuAuWMAtM178AgEQqHUkuJAYKDwmAEk4ImsC26OET7pjkeE5PXv pmEXg3AvKHsIowXDSyHJLvtvjcEctIJOP0EdrQ== -----END CERTIFICATE-----Generated at Sat Sep 6 14:36:05 2025 by rpki-client