$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: 72Epk6m+12Am/2IcQX8kaFC5xyXKHoff4MmNNMFmSyI= Subject key identifier: 3E:C8:73:F0:38:10:C7:20:42:3F:32:4C:2B:F0:68:E6:49:30:FC:3A Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 43EF91801B9B015868C1B2999FE198EFA11A42D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 0299 Signing time: Thu 01 May 2025 00:54:53 +0000 Manifest this update: Thu 01 May 2025 00:49:53 +0000 Manifest next update: Fri 02 May 2025 02:59:53 +0000 Files and hashes: 1: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: 34ZLdvJWRlaz+jTDs3YF3eEhOoQyE7fhuoEG/fJaNVY=) 2: 3130332e3233382e3132382e302f32342d3234203d3e20313531313036.roa (hash: 3hCx1gk12xhMekKDCa3KegcT7N4B/xxsoqqdlY9CXYI=) 3: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (hash: 5hWADdZsX05Xm71wk93nvrisrc0F3dwJlLqjnpXhvtY=) 4: 3130332e3233382e3133312e302f32342d3234203d3e20313531313036.roa (hash: zZ9adMjyAK6V+yaM2Aa/8/uAbDXUgk34Q/LvbI/Y3H4=) 5: 34332e3235352e38312e302f32342d3234203d3e20313431313538.roa (hash: SQWzDg71lRig1vikM6oroRmKP7jytIrlrfxg8Lw3ga4=) 6: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: befyV0hRkZPjsj2HiXn8OpPP07iuTlgDyNJrlhl8VkA=) 7: 3130332e3233382e3133302e302f32342d3234203d3e20313531313036.roa (hash: jHJxFEmDKUe2EPjbWcOLzV9LPmr1X1VjgRAMMGlG0Mw=) 8: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: S8rFfs7IoEg3XYYnsyLOBvR6RACIA3juzHhODPn7ChQ=) 9: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: lXdn9X5Pvb6q4aZNtkierwIGdaeXjWflU20HDbqG5bE=) 10: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: E4ONBceQGtTtMJwjbxI/zmDC8SS3yBbRlcMhg4vXlLU=) 11: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: YRgjmmE+nVi/PAXhqb3JUaahbh35VPMhIEe6x6m98Ho=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ef:91:80:1b:9b:01:58:68:c1:b2:99:9f:e1:98:ef:a1:1a:42:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: May 1 00:49:53 2025 GMT Not After : May 2 02:59:53 2025 GMT Subject: CN=3EC873F03810C720423F324C2BF068E64930FC3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:18:e1:24:2a:d5:b3:d1:34:24:07:d7:62:c7: af:39:fd:1e:29:7e:f9:c5:04:65:b4:85:2e:ab:65: 9d:6c:e5:5e:b0:03:be:c7:50:84:6d:54:18:9a:b5: b5:51:57:18:45:a7:7c:2f:3b:3f:ec:d5:79:bf:9d: f3:82:19:c9:dc:ef:d7:42:86:3f:a6:e8:1c:85:7f: 2f:50:5d:02:7c:86:72:da:5c:f8:39:32:fc:46:40: ae:6f:20:ff:91:4b:b5:c7:ea:08:10:d9:9a:16:12: 22:2e:9c:2f:90:d3:1b:ce:a6:06:4c:ca:9c:5d:17: be:07:18:c9:e9:10:f6:a9:50:83:9f:57:f2:9e:35: ad:87:d7:06:e2:43:25:c4:de:91:01:95:8b:90:40: 97:98:e7:7b:8d:b4:43:49:06:bf:76:c7:5d:e8:56: fa:8d:52:5c:29:57:87:97:d0:67:a3:15:76:88:4b: 87:74:df:02:7f:a5:b6:8c:d3:03:51:d5:65:45:6d: dd:73:5b:a1:fc:ba:a8:4e:66:30:98:0a:96:09:54: 84:09:ad:c3:32:a1:3f:7e:43:29:d7:dd:ef:c0:e6: 9d:fe:48:fa:6d:df:ca:7d:ae:78:2f:cf:3f:b2:43: 8d:b1:07:9e:3d:69:10:70:22:91:39:c3:b0:ea:74: ff:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C8:73:F0:38:10:C7:20:42:3F:32:4C:2B:F0:68:E6:49:30:FC:3A X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:29:ea:2c:db:f4:a3:db:e5:a6:93:83:97:65:79:df:6e:5b: 6b:8d:da:f0:dc:c5:5c:67:b2:70:39:8a:6a:25:f7:3b:9a:90: 29:16:23:be:74:75:e4:53:bf:12:5f:45:f8:ec:1e:20:5d:33: 5e:2f:6c:a1:07:f4:3a:cb:8d:c4:b4:af:a9:79:c8:57:ca:b3: fa:bf:5a:1b:e3:b6:90:90:9c:1d:70:4d:fb:d7:d9:bf:95:22: a0:be:21:09:c1:49:90:e3:07:de:c5:14:6c:08:e8:5b:e2:71: 79:91:6a:22:0e:d5:14:a4:98:06:d5:48:b3:e7:a3:31:93:3a: c6:fb:73:03:33:15:f7:a5:ea:cf:41:f7:48:fd:23:24:f3:bd: a7:8f:b3:4f:ae:f0:b0:74:47:43:16:80:62:fd:5a:14:df:26: 93:39:d7:c0:39:cb:2f:21:55:4e:2a:b4:75:88:5c:7e:af:ba: 6f:11:6c:c8:73:3b:6e:7d:bb:a4:b2:3e:2f:1e:42:35:9a:c7: 8d:7f:a4:ad:1d:fb:c2:84:ec:7a:a1:44:03:c0:8a:ff:77:6f: 0d:30:d3:7d:60:64:8b:90:b5:8c:ae:77:9e:3a:ff:e4:a1:1d: 6b:f2:55:5f:8a:de:3d:37:5b:57:09:cd:a7:ac:fc:45:fa:89: de:f4:86:0e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQ++RgBubAVhowbKZn+GY76EaQtIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MDUwMTAwNDk1M1oX DTI1MDUwMjAyNTk1M1owMzExMC8GA1UEAxMoM0VDODczRjAzODEwQzcyMDQyM0Yz MjRDMkJGMDY4RTY0OTMwRkMzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMY4SQq1bPRNCQH12LHrzn9Hil++cUEZbSFLqtlnWzlXrADvsdQhG1UGJq1 tVFXGEWnfC87P+zVeb+d84IZydzv10KGP6boHIV/L1BdAnyGctpc+Dky/EZArm8g /5FLtcfqCBDZmhYSIi6cL5DTG86mBkzKnF0XvgcYyekQ9qlQg59X8p41rYfXBuJD JcTekQGVi5BAl5jne420Q0kGv3bHXehW+o1SXClXh5fQZ6MVdohLh3TfAn+ltozT A1HVZUVt3XNbofy6qE5mMJgKlglUhAmtwzKhP35DKdfd78Dmnf5I+m3fyn2ueC/P P7JDjbEHnj1pEHAikTnDsOp0/5cCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQ+yHPw OBDHIEI/Mkwr8GjmSTD8OjAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEANinqLNv0o9vlppODl2V5325ba43a8NzFXGeycDmKaiX3O5qQ KRYjvnR15FO/El9F+OweIF0zXi9soQf0OsuNxLSvqXnIV8qz+r9aG+O2kJCcHXBN +9fZv5UioL4hCcFJkOMH3sUUbAjoW+JxeZFqIg7VFKSYBtVIs+ejMZM6xvtzAzMV 96Xqz0H3SP0jJPO9p4+zT67wsHRHQxaAYv1aFN8mkznXwDnLLyFVTiq0dYhcfq+6 bxFsyHM7bn27pLI+Lx5CNZrHjX+krR37woTseqFEA8CK/3dvDTDTfWBki5C1jK53 njr/5KEda/JVX4rePTdbVwnNp6z8RfqJ3vSGDg== -----END CERTIFICATE-----Generated at Thu May 1 06:13:55 2025 by rpki-client