$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: DKcJ8AQByxDKFvg58nSLgt7wGhtMZsb/N5giaFrVaQo= Subject key identifier: 72:D3:6F:8A:60:E3:47:25:44:E7:AE:17:88:16:9C:8A:63:A0:6D:47 Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 346EB5E2B1AF3D3AAAF60AB7BB01C282041F8CD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 0560 Signing time: Sun 20 Sep 2026 07:03:55 +0000 Manifest this update: Sun 20 Sep 2026 06:58:55 +0000 Manifest next update: Mon 21 Sep 2026 09:18:55 +0000 Files and hashes: 1: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: mRp4vY4H0by9mj0sSASpANHm18slHi1+kwE1GgClbCA=) 2: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=) 3: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: UeVTfn68R0LdGwhBHFcZ5BBp1siueZcbyg5aXpQZnmc=) 4: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=) 5: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=) 6: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: Up7ZjSCdm+fpdm+JoNxhBOJjtDjefWXuYo3dhJU7lVU=) 7: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=) 8: 3130332e3233382e3132382e302f32342d3234203d3e20343031333632.roa (hash: P5xfE/35+9mCNNnRvCUJHBuEvQxYIb/KToGW491AoaM=) 9: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: HRt7hcIjTJvt0xfTp18lrejEbcUzuXCy6z6k54jtrlk=) 10: 34332e3235352e38322e302f32342d3234203d3e20323130313130.roa (hash: PB0a+a2Gy49HBYeDS5tizGYeq0RhqGsRJr6JdjueuOg=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 09:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:6e:b5:e2:b1:af:3d:3a:aa:f6:0a:b7:bb:01:c2:82:04:1f:8c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Sep 20 06:58:55 2026 GMT Not After : Sep 21 09:18:55 2026 GMT Subject: CN=72D36F8A60E3472544E7AE1788169C8A63A06D47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:60:d9:22:04:82:90:be:28:e6:c9:74:66:85: f2:93:7b:78:59:5b:37:65:c8:62:55:a5:84:6b:86: a8:2f:ea:1a:d2:34:47:01:a8:05:5e:e0:d9:0f:98: 12:63:f8:00:14:07:42:56:6c:18:1b:f6:71:5b:37: 05:87:d6:a4:08:a9:95:0c:eb:2c:b2:28:84:f4:4c: f9:26:7e:cc:7b:3c:2c:74:b5:89:a7:48:69:a3:c3: 8f:f9:80:1b:87:1a:ba:a6:c6:31:4b:d8:20:4b:e6: a5:9f:9d:94:05:5e:c9:72:20:b8:47:01:71:00:99: ea:26:77:82:99:4c:28:9f:c2:ac:22:50:c8:8a:58: f5:fc:d0:c1:dd:e9:82:5d:89:30:32:8d:16:88:30: 8e:f6:77:b0:f6:6b:fe:ce:22:25:27:c2:7f:4d:51: cb:f5:b3:02:61:84:f1:02:31:32:29:63:d5:77:07: 29:9c:01:6d:f6:5a:7d:95:96:9f:80:a0:b6:6b:f1: ee:6f:07:96:13:70:73:fb:c1:a7:ec:18:b3:7b:f1: 1e:04:8e:7a:4a:0f:67:8a:21:12:cd:f3:79:f2:39: a9:aa:b3:92:87:37:0c:d9:f9:64:50:66:82:d3:1f: cd:64:55:15:1b:42:3c:23:d2:c4:8c:2b:6a:92:a7: 3b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D3:6F:8A:60:E3:47:25:44:E7:AE:17:88:16:9C:8A:63:A0:6D:47 X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:14:1e:0f:02:80:0f:22:2f:24:d3:81:d4:17:f3:5e:65:d2: e2:00:b4:35:3b:a2:1d:1d:73:69:00:f9:27:f4:a5:bf:fc:6b: 2b:bb:c3:96:7a:21:23:01:26:62:33:a8:7b:8a:67:a1:4c:4d: 54:83:cc:22:b5:39:bb:ef:92:1a:18:b6:24:eb:32:9f:1a:57: 28:34:0f:c8:80:71:ce:07:07:8b:8d:cf:c9:fb:22:cb:f9:48: 82:5c:38:85:d8:a2:cf:de:a9:35:0b:da:2e:92:04:53:df:67: fe:a9:cd:13:b7:ea:fc:0a:a4:17:74:50:a1:44:65:aa:37:d9: bb:a3:da:e2:dd:25:8c:8a:2c:9d:47:69:a1:7f:51:96:63:3a: da:08:97:61:d6:bc:3f:13:30:34:c5:21:1d:97:46:3a:f1:cf: ba:9b:58:32:cb:74:e0:28:de:63:37:f6:75:5c:ae:dd:69:db: d1:48:4a:05:52:53:24:0e:9c:8c:d3:4f:0a:9f:a6:40:79:c4: e8:31:c6:3f:9b:63:2c:f6:2f:26:83:07:be:a3:51:e1:0f:a1: e5:66:ae:09:34:b3:60:76:7b:60:63:f3:55:c6:89:85:54:c3: 81:9b:e2:19:59:2e:b7:e9:d7:cc:33:5a:2f:8f:22:db:f2:8e: 2b:41:d4:32 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNG614rGvPTqq9gq3uwHCggQfjNAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MDkyMDA2NTg1NVoX DTI2MDkyMTA5MTg1NVowMzExMC8GA1UEAxMoNzJEMzZGOEE2MEUzNDcyNTQ0RTdB RTE3ODgxNjlDOEE2M0EwNkQ0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN9g2SIEgpC+KObJdGaF8pN7eFlbN2XIYlWlhGuGqC/qGtI0RwGoBV7g2Q+Y EmP4ABQHQlZsGBv2cVs3BYfWpAiplQzrLLIohPRM+SZ+zHs8LHS1iadIaaPDj/mA G4cauqbGMUvYIEvmpZ+dlAVeyXIguEcBcQCZ6iZ3gplMKJ/CrCJQyIpY9fzQwd3p gl2JMDKNFogwjvZ3sPZr/s4iJSfCf01Ry/WzAmGE8QIxMilj1XcHKZwBbfZafZWW n4Cgtmvx7m8HlhNwc/vBp+wYs3vxHgSOekoPZ4ohEs3zefI5qaqzkoc3DNn5ZFBm gtMfzWRVFRtCPCPSxIwrapKnO3cCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRy02+K YONHJUTnrheIFpyKY6BtRzAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAghQeDwKADyIvJNOB1BfzXmXS4gC0NTuiHR1zaQD5J/Slv/xr K7vDlnohIwEmYjOoe4pnoUxNVIPMIrU5u++SGhi2JOsynxpXKDQPyIBxzgcHi43P yfsiy/lIglw4hdiiz96pNQvaLpIEU99n/qnNE7fq/AqkF3RQoURlqjfZu6Pa4t0l jIosnUdpoX9RlmM62giXYda8PxMwNMUhHZdGOvHPuptYMst04CjeYzf2dVyu3Wnb 0UhKBVJTJA6cjNNPCp+mQHnE6DHGP5tjLPYvJoMHvqNR4Q+h5WauCTSzYHZ7YGPz VcaJhVTDgZviGVkut+nXzDNaL48i2/KOK0HUMg== -----END CERTIFICATE-----Generated at Sun Sep 20 18:20:54 2026 by rpki-client