$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: STHnYtaAlr+KMdrqtQ/ANK/0RGjjPrxdG5oEsQpUYO0= Subject key identifier: B2:E8:30:1A:8E:D0:37:4B:B9:1D:D1:8E:24:73:12:6A:50:3D:EE:FF Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 597FB4A06B26E5A2329E7A24A3B868D8F9965BBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 03A8 Signing time: Tue 04 Nov 2025 18:24:32 +0000 Manifest this update: Tue 04 Nov 2025 18:19:32 +0000 Manifest next update: Wed 05 Nov 2025 22:19:32 +0000 Files and hashes: 1: 3130332e3233382e3133312e302f32342d3234203d3e2039333034.roa (hash: xJHD6oJOmKsdm6y2bTs9H7Pd88grt6jIjKGTOKL3muY=) 2: 3130332e3233382e3133302e302f32342d3234203d3e2039333034.roa (hash: VxvWKIapnz/NHAaRWVjdN31at45PwCfti5amyZ3Xs/Y=) 3: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (hash: R06pByin/m/phSrNQN6fLr1e43axG1JDp2GOwtmPcDQ=) 4: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: befyV0hRkZPjsj2HiXn8OpPP07iuTlgDyNJrlhl8VkA=) 5: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: S8rFfs7IoEg3XYYnsyLOBvR6RACIA3juzHhODPn7ChQ=) 6: 34332e3235352e38312e302f32342d3234203d3e20313531393634.roa (hash: 4e0hnp+mBksFQSBkEEMhLS8Zc6XMB5AlAB7ew9DvGO8=) 7: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=) 8: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=) 9: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: TuWjLB1Ta7NUXYhSMiqZAB+bTJGSCwMtRcWCmOEZOfg=) 10: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=) 11: 3130332e3233382e3132382e302f32342d3234203d3e20313338303737.roa (hash: 5sZFV0hCMUC2n4iWJ3AfJgpDZ6n5Bs/7eOe7YiQjRcQ=) 12: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: E4ONBceQGtTtMJwjbxI/zmDC8SS3yBbRlcMhg4vXlLU=) 13: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: YRgjmmE+nVi/PAXhqb3JUaahbh35VPMhIEe6x6m98Ho=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:7f:b4:a0:6b:26:e5:a2:32:9e:7a:24:a3:b8:68:d8:f9:96:5b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Nov 4 18:19:32 2025 GMT Not After : Nov 5 22:19:32 2025 GMT Subject: CN=B2E8301A8ED0374BB91DD18E2473126A503DEEFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e6:2f:1a:54:73:c0:ce:b6:e2:ed:4e:51:ff: d1:65:bc:d4:f0:48:b3:6c:06:7c:51:78:1d:20:e4: 48:14:b3:8d:4a:43:99:b5:46:b5:f5:35:f7:ed:4c: 77:28:20:07:61:93:ed:5f:dd:e1:5f:fa:0d:41:34: 59:f4:70:f5:18:20:db:b3:56:2f:77:a6:24:48:e1: 57:78:d9:4f:66:53:a8:7c:7b:a4:08:27:65:02:11: 43:45:4b:88:90:af:da:4b:a1:f0:86:78:95:a2:9a: f1:38:56:6c:5a:f6:3b:4b:4f:8c:78:3b:db:d5:a1: 73:cc:28:92:a4:62:1b:69:01:16:7b:33:b0:94:7f: fe:0a:23:5d:46:f2:20:b3:2f:45:ca:4e:96:0b:ac: 4b:d3:e5:1f:d4:0a:05:62:3c:42:5f:60:64:3a:33: ef:65:b8:86:4e:6a:10:d8:8c:16:17:0b:31:24:93: d9:09:21:b5:1e:1e:c7:7e:c9:eb:d9:12:66:6e:ea: 23:cb:7d:c2:ac:29:56:69:88:ed:7c:0d:61:5d:e3: 36:ac:a7:94:ae:5b:20:d0:c9:12:d1:cd:95:d2:d8: 8f:27:3b:7a:c9:3b:c9:0f:a4:62:c5:f0:c3:0e:29: bc:12:0b:bb:e4:7e:fd:09:6c:44:34:43:70:ad:e8: a1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E8:30:1A:8E:D0:37:4B:B9:1D:D1:8E:24:73:12:6A:50:3D:EE:FF X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:69:49:10:5d:4b:6a:df:da:42:55:13:1f:67:5b:60:3a:ea: 32:29:5d:e8:0f:5b:e2:cf:b8:f4:72:2b:d2:42:81:68:50:0b: 4c:a1:ba:93:20:ee:35:fe:80:52:3c:71:e5:91:10:85:20:f2: b7:78:75:44:5e:8e:5a:83:33:8d:8c:c7:36:26:14:af:cc:8f: 94:7f:5d:9d:f6:60:0e:8b:e9:c9:40:76:36:df:e0:12:30:e5: 49:37:02:02:21:bd:0f:0c:d8:0b:d6:f5:70:e8:85:e7:db:d4: 89:1c:7a:64:06:bd:dd:ff:c9:c6:9f:55:72:59:bd:54:b2:9a: aa:94:39:b0:05:1a:a4:ed:9d:78:f3:34:34:9d:49:fa:67:40: 69:2b:9f:bb:5c:12:ea:ea:4b:c6:e5:0e:76:25:53:94:ca:6f: ce:37:dd:a5:8b:65:a7:c3:d5:9d:99:c8:c1:1c:e7:b8:48:c9: bb:de:74:74:b1:03:b5:a2:06:25:d5:ed:21:a4:69:e1:7b:70: 18:5b:f0:56:fe:e5:a7:d4:cc:e2:1d:3d:0a:7f:bb:aa:b9:46: 69:6d:83:1b:12:ad:f1:d8:70:28:73:fa:fa:86:5c:b0:32:f6: a1:19:a5:bb:c1:35:ab:7f:a1:04:12:9a:da:40:d0:78:d8:66: 39:2a:eb:fa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWX+0oGsm5aIynnoko7ho2PmWW7wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MTEwNDE4MTkzMloX DTI1MTEwNTIyMTkzMlowMzExMC8GA1UEAxMoQjJFODMwMUE4RUQwMzc0QkI5MURE MThFMjQ3MzEyNkE1MDNERUVGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/mLxpUc8DOtuLtTlH/0WW81PBIs2wGfFF4HSDkSBSzjUpDmbVGtfU19+1M dyggB2GT7V/d4V/6DUE0WfRw9Rgg27NWL3emJEjhV3jZT2ZTqHx7pAgnZQIRQ0VL iJCv2kuh8IZ4laKa8ThWbFr2O0tPjHg729Whc8wokqRiG2kBFnszsJR//gojXUby ILMvRcpOlgusS9PlH9QKBWI8Ql9gZDoz72W4hk5qENiMFhcLMSST2QkhtR4ex37J 69kSZm7qI8t9wqwpVmmI7XwNYV3jNqynlK5bINDJEtHNldLYjyc7esk7yQ+kYsXw ww4pvBILu+R+/QlsRDRDcK3ooQECAwEAAaOCAhswggIXMB0GA1UdDgQWBBSy6DAa jtA3S7kd0Y4kcxJqUD3u/zAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAD2lJEF1Lat/aQlUTH2dbYDrqMild6A9b4s+49HIr0kKBaFAL TKG6kyDuNf6AUjxx5ZEQhSDyt3h1RF6OWoMzjYzHNiYUr8yPlH9dnfZgDovpyUB2 Nt/gEjDlSTcCAiG9DwzYC9b1cOiF59vUiRx6ZAa93f/Jxp9Vclm9VLKaqpQ5sAUa pO2dePM0NJ1J+mdAaSufu1wS6upLxuUOdiVTlMpvzjfdpYtlp8PVnZnIwRznuEjJ u950dLEDtaIGJdXtIaRp4XtwGFvwVv7lp9TM4h09Cn+7qrlGaW2DGxKt8dhwKHP6 +oZcsDL2oRmlu8E1q3+hBBKa2kDQeNhmOSrr+g== -----END CERTIFICATE-----Generated at Wed Nov 5 05:11:11 2025 by rpki-client