$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: kEXUM/4SQ0aA/e0NgV5Jqo63KeFdsL340LBp2ubJ+hQ= Subject key identifier: A1:5E:CC:CD:B8:A4:BF:81:B1:3F:B5:47:25:9E:71:F0:CB:08:8B:83 Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 11A313F827879F537AB7A8992FEFA3357985A4D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 032A Signing time: Sat 09 Aug 2025 22:34:54 +0000 Manifest this update: Sat 09 Aug 2025 22:29:54 +0000 Manifest next update: Mon 11 Aug 2025 02:32:54 +0000 Files and hashes: 1: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: p8RtqDjzreuS4RRZkvnwO82vtT0l763IaaM+jAvyOms=) 2: 3130332e3233382e3132382e302f32342d3234203d3e20313338303737.roa (hash: 5sZFV0hCMUC2n4iWJ3AfJgpDZ6n5Bs/7eOe7YiQjRcQ=) 3: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: befyV0hRkZPjsj2HiXn8OpPP07iuTlgDyNJrlhl8VkA=) 4: 3130332e3233382e3133302e302f32332d3234203d3e20383334.roa (hash: x8Og/MM0VC8p7vLhIh3nCmqBrRFXe6bvi3OEjyEjNSk=) 5: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: 34ZLdvJWRlaz+jTDs3YF3eEhOoQyE7fhuoEG/fJaNVY=) 6: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (hash: 5hWADdZsX05Xm71wk93nvrisrc0F3dwJlLqjnpXhvtY=) 7: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: E4ONBceQGtTtMJwjbxI/zmDC8SS3yBbRlcMhg4vXlLU=) 8: 34332e3235352e38312e302f32342d3234203d3e20313431313538.roa (hash: SQWzDg71lRig1vikM6oroRmKP7jytIrlrfxg8Lw3ga4=) 9: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: S8rFfs7IoEg3XYYnsyLOBvR6RACIA3juzHhODPn7ChQ=) 10: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: YRgjmmE+nVi/PAXhqb3JUaahbh35VPMhIEe6x6m98Ho=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 02:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a3:13:f8:27:87:9f:53:7a:b7:a8:99:2f:ef:a3:35:79:85:a4:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Aug 9 22:29:54 2025 GMT Not After : Aug 11 02:32:54 2025 GMT Subject: CN=A15ECCCDB8A4BF81B13FB547259E71F0CB088B83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:42:e1:0f:9c:32:42:0d:26:5b:9d:c6:02:f0: 77:7c:5f:e8:ae:3d:e4:84:db:44:7d:59:49:f0:ac: 1b:37:d6:03:04:33:94:9c:0c:51:3e:01:65:c4:bc: 06:df:df:f6:7f:fd:29:10:48:00:cf:1f:c0:1d:97: 1d:6d:c7:57:3e:ec:f5:00:ae:53:71:ae:e6:64:11: 6a:5e:02:dd:f5:48:28:e7:72:35:cb:c1:c4:65:35: 0c:5f:bf:02:60:26:3e:57:c7:13:43:cb:2b:16:38: f5:20:63:e5:0e:ff:79:07:32:07:ed:7d:8d:0b:b3: 98:da:6a:d3:98:bd:72:f3:15:b0:b8:d3:58:76:7d: a6:c9:59:23:6a:b9:a9:2c:18:b0:c5:67:c5:61:53: be:c1:bd:c2:70:b5:21:d5:22:e0:fc:b4:82:14:7b: a8:b8:68:83:9f:6a:ab:32:2a:33:92:29:f5:c1:bd: 9d:23:f4:16:12:50:bb:76:f6:50:78:cc:da:f6:c4: 8e:9f:ac:df:b5:8c:6a:63:8d:39:a8:08:16:04:de: e3:e3:ba:95:71:fe:25:69:ea:cf:57:b1:07:34:72: 82:18:9c:8a:c1:8f:7f:0e:8c:2d:fe:ae:6d:38:3b: d0:26:2b:eb:6e:8b:37:1a:e0:96:bd:31:54:00:99: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5E:CC:CD:B8:A4:BF:81:B1:3F:B5:47:25:9E:71:F0:CB:08:8B:83 X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:bf:6c:0a:7c:4a:da:05:87:a7:33:80:39:0b:7e:a1:ed:11: 45:c1:d3:13:8b:a8:c5:3b:f3:26:ec:1e:4b:c3:d3:94:75:e5: fd:72:8c:6d:aa:79:1e:47:02:07:bc:65:5a:b8:fb:f6:9f:4c: 09:13:74:f1:6a:5e:f2:dd:54:4b:64:87:51:05:8a:d7:29:50: 75:e8:c8:d9:ed:c9:5b:55:bf:f9:46:cf:e7:5e:7d:dd:71:97: 7d:7d:0d:87:2d:35:4f:7c:9b:c3:1b:50:5e:e9:cd:3d:c9:30: fd:31:5a:95:82:5f:ce:70:71:09:a0:09:f1:c3:9b:4d:a1:bd: 93:51:85:cd:c2:15:cd:45:2b:ba:44:89:a4:2e:9a:97:24:9c: 25:41:2d:fb:c0:50:4a:5d:56:fb:00:bf:fc:21:89:ea:5d:b2: c7:76:01:99:94:b1:0a:fc:a8:f2:4e:f1:cb:bb:e9:01:a6:6f: 10:aa:0c:6b:93:ac:8e:d5:1d:12:3b:72:3a:ce:32:4c:ec:7c: 6d:53:09:ab:18:56:70:b7:17:65:bd:e2:59:01:ac:91:ec:4b: f8:ad:7b:8b:45:59:23:d7:01:82:57:55:2e:13:75:0d:65:09: e1:4a:76:91:1a:91:1b:20:c9:92:72:28:1f:34:f6:3b:2c:89: fa:7a:af:f3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUEaMT+CeHn1N6t6iZL++jNXmFpNQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MDgwOTIyMjk1NFoX DTI1MDgxMTAyMzI1NFowMzExMC8GA1UEAxMoQTE1RUNDQ0RCOEE0QkY4MUIxM0ZC NTQ3MjU5RTcxRjBDQjA4OEI4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOJC4Q+cMkINJludxgLwd3xf6K495ITbRH1ZSfCsGzfWAwQzlJwMUT4BZcS8 Bt/f9n/9KRBIAM8fwB2XHW3HVz7s9QCuU3Gu5mQRal4C3fVIKOdyNcvBxGU1DF+/ AmAmPlfHE0PLKxY49SBj5Q7/eQcyB+19jQuzmNpq05i9cvMVsLjTWHZ9pslZI2q5 qSwYsMVnxWFTvsG9wnC1IdUi4Py0ghR7qLhog59qqzIqM5Ip9cG9nSP0FhJQu3b2 UHjM2vbEjp+s37WMamONOagIFgTe4+O6lXH+JWnqz1exBzRyghicisGPfw6MLf6u bTg70CYr626LNxrglr0xVACZZx8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBShXszN uKS/gbE/tUclnnHwywiLgzAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAVb9sCnxK2gWHpzOAOQt+oe0RRcHTE4uoxTvzJuweS8PTlHXl /XKMbap5HkcCB7xlWrj79p9MCRN08Wpe8t1US2SHUQWK1ylQdejI2e3JW1W/+UbP 51593XGXfX0Nhy01T3ybwxtQXunNPckw/TFalYJfznBxCaAJ8cObTaG9k1GFzcIV zUUrukSJpC6alyScJUEt+8BQSl1W+wC//CGJ6l2yx3YBmZSxCvyo8k7xy7vpAaZv EKoMa5OsjtUdEjtyOs4yTOx8bVMJqxhWcLcXZb3iWQGskexL+K17i0VZI9cBgldV LhN1DWUJ4Up2kRqRGyDJknIoHzT2OyyJ+nqv8w== -----END CERTIFICATE-----Generated at Sun Aug 10 18:12:31 2025 by rpki-client