$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: kaXceqDn7ThZ7SuyACoyLKqHX6oObEg4lnzTiV+dfFE= Subject key identifier: AF:DD:1E:F7:BF:A3:63:FF:44:7C:28:89:09:03:FD:4B:3D:9C:87:2A Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 6A7991E65E1C25051D9FFDC03CD794DA373C2981 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 0515 Signing time: Tue 28 Jul 2026 06:56:09 +0000 Manifest this update: Tue 28 Jul 2026 06:51:09 +0000 Manifest next update: Wed 29 Jul 2026 09:40:09 +0000 Files and hashes: 1: 34332e3235352e38322e302f32342d3234203d3e20383334.roa (hash: icPb5M6Y/CPwkJET9vdKSzs0dBOYlGKaymEwUa2ujW8=) 2: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: /TLmtY2K4Yzac1LcSkV+RCwl3tg+IKhbfHvnNo+uX7I=) 3: 3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa (hash: jaYCwKUfN1ahphjmuCip8Xd6KyVekTXlh6eiv1lr6wE=) 4: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=) 5: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=) 6: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=) 7: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=) 8: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=) 9: 3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa (hash: /3IEW/L0xD5c+gjtCpGu3f4OnNilISvSgo/f0RfHoCg=) 10: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=) 11: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:79:91:e6:5e:1c:25:05:1d:9f:fd:c0:3c:d7:94:da:37:3c:29:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Jul 28 06:51:09 2026 GMT Not After : Jul 29 09:40:09 2026 GMT Subject: CN=AFDD1EF7BFA363FF447C28890903FD4B3D9C872A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:45:a5:f4:a6:2c:af:1a:4b:62:ae:51:7c: ba:7a:79:e6:1f:26:6d:a1:08:03:be:42:3d:f9:63: 01:50:e0:f7:aa:f4:5a:7b:b4:9c:9a:30:ec:73:74: 50:a1:97:3c:99:5c:2c:70:66:e9:54:ba:39:eb:9d: 2e:f6:99:5e:03:c7:52:20:6b:90:aa:6c:a3:99:a9: 47:b0:8f:23:63:e4:9b:62:3b:4a:c7:6c:b7:43:85: 47:7c:7d:ea:ec:4e:ad:25:0d:4b:a0:24:ea:f3:b6: 9e:3d:ff:b5:76:21:a5:4e:cf:e3:bc:01:6b:e3:bf: 66:cc:64:65:70:ec:33:7b:63:e5:fe:f1:04:0b:b1: 5a:00:85:7b:22:0b:59:40:0d:c7:24:35:24:ab:e2: 76:0b:7c:54:ac:f8:87:d7:2e:71:12:e4:38:24:ea: 5a:20:97:6d:c2:38:31:9d:c3:77:0e:60:6b:c8:f8: 06:37:c9:71:7a:2f:ab:1f:83:8b:dd:fa:cc:7f:ed: fb:74:2d:6f:66:7d:02:8d:67:fa:de:28:bf:f8:f2: ac:50:62:d8:49:27:ab:13:ad:12:f8:54:b0:55:b4: f9:b1:65:81:63:b0:c3:40:8f:a4:7c:c4:78:5f:4a: 13:f6:e0:fc:ff:81:5c:cf:09:db:ff:ea:7d:e9:62: b5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DD:1E:F7:BF:A3:63:FF:44:7C:28:89:09:03:FD:4B:3D:9C:87:2A X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:fb:67:1d:ab:0e:47:7c:46:71:78:f4:83:6c:84:3b:0f:ae: 43:98:cb:cd:92:d4:6f:a9:cd:a6:19:fe:49:32:93:3f:4e:fb: 99:a0:21:4e:8b:9d:6b:5c:c6:a6:ea:fb:7e:6d:2f:23:48:36: 39:6c:be:43:d7:5c:20:f2:c0:1e:b3:dc:16:8e:91:ff:d2:36: 48:65:86:2a:e4:bc:0c:2c:64:5d:b2:e3:0f:7f:d7:5b:f0:69: fe:eb:d6:a5:a8:7d:88:45:af:41:1f:4e:d7:96:6d:c6:d9:43: 50:1c:19:4f:48:c0:49:9a:75:39:a8:47:de:91:3b:ee:4e:6a: 8f:aa:03:78:b9:00:e9:f7:86:bb:0e:a2:17:74:a6:fd:36:07: 67:25:43:c4:64:34:42:49:5e:a2:54:f2:14:55:22:40:38:e7: 53:9a:dd:2f:57:33:f4:70:55:06:b7:d0:5c:35:e2:aa:5b:17: 8a:db:40:fb:70:3e:30:bc:0e:f3:e9:f4:82:01:dc:17:83:c3: a5:71:01:fb:71:90:e4:de:ed:c8:97:37:5d:d7:ac:f0:0d:22: d0:9d:1e:43:f2:0e:a7:73:d8:f3:73:38:58:92:a9:57:c9:c7: 7a:27:9a:36:83:f7:29:3b:83:24:64:89:c8:45:a3:73:6a:b8: d9:4d:15:c8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUanmR5l4cJQUdn/3APNeU2jc8KYEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MDcyODA2NTEwOVoX DTI2MDcyOTA5NDAwOVowMzExMC8GA1UEAxMoQUZERDFFRjdCRkEzNjNGRjQ0N0My ODg5MDkwM0ZENEIzRDlDODcyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALK3RaX0piyvGktirlF8unp55h8mbaEIA75CPfljAVDg96r0Wnu0nJow7HN0 UKGXPJlcLHBm6VS6OeudLvaZXgPHUiBrkKpso5mpR7CPI2Pkm2I7Ssdst0OFR3x9 6uxOrSUNS6Ak6vO2nj3/tXYhpU7P47wBa+O/ZsxkZXDsM3tj5f7xBAuxWgCFeyIL WUANxyQ1JKvidgt8VKz4h9cucRLkOCTqWiCXbcI4MZ3Ddw5ga8j4BjfJcXovqx+D i936zH/t+3Qtb2Z9Ao1n+t4ov/jyrFBi2EknqxOtEvhUsFW0+bFlgWOww0CPpHzE eF9KE/bg/P+BXM8J2//qfelitbMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSv3R73 v6Nj/0R8KIkJA/1LPZyHKjAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEApPtnHasOR3xGcXj0g2yEOw+uQ5jLzZLUb6nNphn+STKTP077 maAhTouda1zGpur7fm0vI0g2OWy+Q9dcIPLAHrPcFo6R/9I2SGWGKuS8DCxkXbLj D3/XW/Bp/uvWpah9iEWvQR9O15ZtxtlDUBwZT0jASZp1OahH3pE77k5qj6oDeLkA 6feGuw6iF3Sm/TYHZyVDxGQ0QkleolTyFFUiQDjnU5rdL1cz9HBVBrfQXDXiqlsX ittA+3A+MLwO8+n0ggHcF4PDpXEB+3GQ5N7tyJc3Xdes8A0i0J0eQ/IOp3PY83M4 WJKpV8nHeieaNoP3KTuDJGSJyEWjc2q42U0VyA== -----END CERTIFICATE-----Generated at Tue Jul 28 14:49:52 2026 by rpki-client