$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: cVN9hIDno6GpJpsEB3VrjkNLBtKxE7VYxeVRB8R2m4A= Subject key identifier: 2B:3B:66:F8:20:5F:54:0A:A6:DF:3D:BC:A9:E0:00:22:66:FF:F6:76 Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 47D989EC761F496E0958BB06CFF778248EA0384E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 02E0 Signing time: Wed 18 Jun 2025 01:01:06 +0000 Manifest this update: Wed 18 Jun 2025 00:56:06 +0000 Manifest next update: Thu 19 Jun 2025 04:30:06 +0000 Files and hashes: 1: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: E4ONBceQGtTtMJwjbxI/zmDC8SS3yBbRlcMhg4vXlLU=) 2: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: S8rFfs7IoEg3XYYnsyLOBvR6RACIA3juzHhODPn7ChQ=) 3: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: befyV0hRkZPjsj2HiXn8OpPP07iuTlgDyNJrlhl8VkA=) 4: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: YRgjmmE+nVi/PAXhqb3JUaahbh35VPMhIEe6x6m98Ho=) 5: 3130332e3233382e3133312e302f32342d3234203d3e203233353332.roa (hash: EocrPN7oy6EUyv4FnfOIDKqYSpn6P9J+KZyYh7hogWM=) 6: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: 34ZLdvJWRlaz+jTDs3YF3eEhOoQyE7fhuoEG/fJaNVY=) 7: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: /1QRuel6D6PFOyIPg3CQJkS1pDaGkLQNsp8+U2RiHGg=) 8: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (hash: 5hWADdZsX05Xm71wk93nvrisrc0F3dwJlLqjnpXhvtY=) 9: 3130332e3233382e3133302e302f32342d3234203d3e20313336363231.roa (hash: 8igxHKxo2njqbR2D8BiOevPTCdiGc26mhB2WmzLUUOQ=) 10: 34332e3235352e38312e302f32342d3234203d3e20313431313538.roa (hash: SQWzDg71lRig1vikM6oroRmKP7jytIrlrfxg8Lw3ga4=) 11: 3130332e3233382e3132382e302f32342d3234203d3e20313338303737.roa (hash: 5sZFV0hCMUC2n4iWJ3AfJgpDZ6n5Bs/7eOe7YiQjRcQ=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d9:89:ec:76:1f:49:6e:09:58:bb:06:cf:f7:78:24:8e:a0:38:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Jun 18 00:56:06 2025 GMT Not After : Jun 19 04:30:06 2025 GMT Subject: CN=2B3B66F8205F540AA6DF3DBCA9E0002266FFF676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:eb:b7:a4:9a:07:d7:0a:df:4d:13:1c:66:da: 3a:17:8a:ce:7a:9e:38:92:04:6a:ae:d6:0c:d7:86: 94:14:4a:25:50:c1:39:6f:d8:02:c4:5f:6f:fe:9c: ad:29:71:9a:e2:59:76:ce:64:08:83:53:33:c3:d8: 3b:54:e9:a6:ef:6b:24:e7:48:1e:bd:d9:12:4e:29: bd:22:cc:15:c1:d3:9a:88:17:fb:03:f6:a0:38:9d: 66:41:27:cb:51:a9:06:7b:5d:7e:16:c0:a6:71:a2: f8:ee:c7:98:25:b5:1e:7c:3d:fc:f9:4a:65:9c:a2: 6e:f1:b2:56:91:4a:04:65:6a:df:c8:b1:bb:48:38: f3:5b:c0:26:57:98:df:dd:9b:dc:5e:66:86:2b:74: ac:cf:70:c3:6d:eb:04:a8:2f:1f:80:58:20:93:f8: ed:d2:ca:06:7a:3c:bc:c0:48:ef:7b:22:33:6d:da: cf:70:ee:7f:fb:3b:be:73:ca:08:49:1a:83:d8:48: 24:b3:1e:12:a5:86:9f:7f:85:ed:bb:6f:b0:7d:d8: 65:b0:e5:a2:76:31:35:c2:1c:d0:b5:88:8e:67:39: 6e:71:c7:29:31:9d:7b:f1:ec:dd:ac:b3:a0:a8:b1: 83:f6:ab:8e:fd:45:23:bb:0b:7f:56:2b:53:af:72: 96:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3B:66:F8:20:5F:54:0A:A6:DF:3D:BC:A9:E0:00:22:66:FF:F6:76 X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:7f:1c:45:51:a9:20:2d:c6:9f:95:5b:29:b9:ff:43:9d:84: ea:1b:50:63:60:03:2d:3e:ef:26:3a:66:a1:a0:98:fa:14:de: 1d:e2:04:61:67:b9:94:43:a5:07:15:b4:6b:6b:49:59:81:d5: 08:a9:1d:fd:e0:9d:9e:01:e3:19:02:a0:55:8b:2e:0f:70:c0: 7f:44:30:7d:d7:5c:91:4a:b4:c5:38:24:21:2b:9b:09:1f:90: b1:ee:d5:01:e9:57:8e:ce:7e:7c:26:b3:0d:50:64:c3:6f:05: 6d:59:0c:7c:a4:02:2d:fb:ae:50:14:cd:5d:48:d9:bb:43:4d: e7:fb:bd:45:b5:66:1c:ea:53:be:05:f9:59:2b:1c:5b:50:73: 62:d6:49:fa:7e:1e:4c:5c:5b:d2:3d:7b:4d:3e:4d:34:24:f6: ed:7f:1f:16:62:59:f7:78:4a:b1:84:bf:3d:c1:2d:c2:94:7d: 08:4f:de:c1:63:1a:70:a5:a3:00:10:bb:89:59:05:33:44:37: 8a:63:be:35:c5:2d:3d:16:50:da:36:7d:2b:91:66:47:d0:ed: 0e:27:c7:de:ce:10:70:19:89:f2:ed:2e:0d:4a:41:17:40:f4: b9:19:95:e5:a3:91:12:f8:44:22:5f:5e:26:58:57:67:3d:7f: 3c:04:e5:d6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUR9mJ7HYfSW4JWLsGz/d4JI6gOE4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MDYxODAwNTYwNloX DTI1MDYxOTA0MzAwNlowMzExMC8GA1UEAxMoMkIzQjY2RjgyMDVGNTQwQUE2REYz REJDQTlFMDAwMjI2NkZGRjY3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPrrt6SaB9cK300THGbaOheKznqeOJIEaq7WDNeGlBRKJVDBOW/YAsRfb/6c rSlxmuJZds5kCINTM8PYO1Tppu9rJOdIHr3ZEk4pvSLMFcHTmogX+wP2oDidZkEn y1GpBntdfhbApnGi+O7HmCW1Hnw9/PlKZZyibvGyVpFKBGVq38ixu0g481vAJleY 392b3F5mhit0rM9ww23rBKgvH4BYIJP47dLKBno8vMBI73siM23az3Duf/s7vnPK CEkag9hIJLMeEqWGn3+F7btvsH3YZbDlonYxNcIc0LWIjmc5bnHHKTGde/Hs3ayz oKixg/arjv1FI7sLf1YrU69ylr8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBQrO2b4 IF9UCqbfPbyp4AAiZv/2djAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEApH8cRVGpIC3Gn5VbKbn/Q52E6htQY2ADLT7vJjpmoaCY+hTe HeIEYWe5lEOlBxW0a2tJWYHVCKkd/eCdngHjGQKgVYsuD3DAf0QwfddckUq0xTgk ISubCR+Qse7VAelXjs5+fCazDVBkw28FbVkMfKQCLfuuUBTNXUjZu0NN5/u9RbVm HOpTvgX5WSscW1BzYtZJ+n4eTFxb0j17TT5NNCT27X8fFmJZ93hKsYS/PcEtwpR9 CE/ewWMacKWjABC7iVkFM0Q3imO+NcUtPRZQ2jZ9K5FmR9DtDifH3s4QcBmJ8u0u DUpBF0D0uRmV5aOREvhEIl9eJlhXZz1/PATl1g== -----END CERTIFICATE-----Generated at Wed Jun 18 20:26:54 2025 by rpki-client