$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft File: 30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json) Hash identifier: oj/JUMVTStIoULVn7YjRuWLwgJKiYKC/jejxuKx8PDI= Subject key identifier: 71:F2:F4:53:B4:41:93:4D:0E:23:26:EF:E7:65:5E:DA:13:72:AA:7C Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0 Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0 Certificate serial: 2A50B19D8FE031972D0DAEB430BDA237CC0BB1F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft Manifest number: 0642 Signing time: Thu 03 Jul 2025 02:16:53 +0000 Manifest this update: Thu 03 Jul 2025 02:11:53 +0000 Manifest next update: Fri 04 Jul 2025 04:13:53 +0000 Files and hashes: 1: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: OFQUaZfxmar8QdwOWotCs19NcWRunbT96cEQtkG/1Oc=) 2: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: L0lWQ5cza5vzg//b4IOx6GUQ2FbNhEwtk8QfgcTn3pQ=) 3: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: /+sJT+4M3YxlKiSTmSS+QE+W2EVnE9RJ/vLKVPLkgic=) 4: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: 4g1HxEDKigjLST14XCsr3JEE07Hl2U9+tfMkYiYWKHg=) 5: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: yogL8/81axQDf/PWzTASWBYKmDx9+f4U8iWDqKSfbiU=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 04:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:50:b1:9d:8f:e0:31:97:2d:0d:ae:b4:30:bd:a2:37:cc:0b:b1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0 Validity Not Before: Jul 3 02:11:53 2025 GMT Not After : Jul 4 04:13:53 2025 GMT Subject: CN=71F2F453B441934D0E2326EFE7655EDA1372AA7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:76:7e:43:15:24:3b:f7:98:c2:47:a0:fd: e8:5d:e3:e1:44:8e:e6:31:54:be:5f:c2:93:1e:e0: 6e:44:da:03:20:eb:10:e7:45:16:49:86:69:85:1b: e2:f7:b8:f7:f3:d3:f2:c9:b0:45:f6:8c:20:e8:1c: f1:67:f6:bc:6f:a5:79:1c:59:48:d2:fd:a1:47:91: fe:e9:24:86:59:c4:f5:f4:97:49:93:0d:a2:15:f5: 35:0d:68:ae:ef:1e:d0:22:84:0f:67:43:a4:ac:b2: 35:8b:30:6e:5d:ea:a5:22:81:e2:fa:dc:b8:e8:86: b0:5d:af:49:e5:29:7d:ba:f0:66:de:17:4b:25:6c: 66:2e:be:35:e0:b1:3b:db:b1:f5:0e:01:15:c9:3d: 48:bd:24:a1:b0:30:32:9b:3b:fa:15:ab:b6:f3:3f: 29:8c:cf:b2:92:3b:05:28:3a:40:b5:40:ee:a9:bd: e6:6b:2b:4e:77:67:79:16:49:71:6e:8b:29:b0:09: 0d:47:f0:04:56:6a:37:2d:3f:92:8b:e1:86:d7:12: 09:6d:6f:54:85:17:9a:c8:24:f4:16:de:ab:f0:ed: 0f:5f:97:b2:a0:bc:91:1b:90:57:7b:ea:44:6d:21: 18:4e:32:3c:3a:1e:a9:dc:5f:89:53:dc:0f:84:58: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F2:F4:53:B4:41:93:4D:0E:23:26:EF:E7:65:5E:DA:13:72:AA:7C X509v3 Authority Key Identifier: keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4a:8b:ae:11:88:84:cf:43:0d:f1:38:ea:5c:94:17:87:24: fb:62:bd:78:22:64:62:4a:bf:75:19:52:ed:13:34:0d:df:e8: 02:0a:74:7a:d6:f4:81:9a:e1:e2:f1:1c:ad:85:d3:d5:da:57: 2e:ea:3c:cd:34:3b:92:ce:e8:43:49:48:6c:fe:9b:0d:0e:34: 3c:ae:7c:30:24:97:e6:f7:75:bc:20:5b:c6:b2:6e:55:9d:5c: 28:46:0d:2e:e3:c6:aa:13:d1:3a:fb:b9:82:44:3f:2b:e8:ad: b8:86:73:06:2c:07:84:4f:45:a8:9c:55:7b:1e:81:e9:6d:0a: b1:b3:06:1e:1a:ee:17:e8:2e:d6:2f:ff:96:6b:36:41:36:56: 22:b8:fd:d7:97:8c:4c:2f:af:70:9f:7d:e1:41:07:be:f7:8b: 79:e2:17:07:41:41:ba:bc:56:bd:71:3b:e3:a4:bb:9a:f9:bd: 8c:90:1b:dc:c2:83:e4:fb:cd:21:8d:01:cb:33:fd:30:41:50: f6:96:8e:b6:63:c3:fb:13:3c:80:d7:98:b4:91:9b:de:16:d6: 1c:e9:c9:b9:9d:21:0b:75:a1:64:d5:bc:2c:9a:75:d4:a0:8b: 15:8b:ba:ae:c1:96:8e:0e:0c:25:c8:c1:de:98:1e:0c:61:95: 4e:8c:d6:e8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKlCxnY/gMZctDa60ML2iN8wLsfkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTA1MzAwMDAwMTEwLwYDVQQFEygzMDM1NkVGNDZE NTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwMB4XDTI1MDcwMzAyMTE1M1oX DTI1MDcwNDA0MTM1M1owMzExMC8GA1UEAxMoNzFGMkY0NTNCNDQxOTM0RDBFMjMy NkVGRTc2NTVFREExMzcyQUE3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJsedn5DFSQ795jCR6D96F3j4USO5jFUvl/Ckx7gbkTaAyDrEOdFFkmGaYUb 4ve49/PT8smwRfaMIOgc8Wf2vG+leRxZSNL9oUeR/ukkhlnE9fSXSZMNohX1NQ1o ru8e0CKED2dDpKyyNYswbl3qpSKB4vrcuOiGsF2vSeUpfbrwZt4XSyVsZi6+NeCx O9ux9Q4BFck9SL0kobAwMps7+hWrtvM/KYzPspI7BSg6QLVA7qm95msrTndneRZJ cW6LKbAJDUfwBFZqNy0/kovhhtcSCW1vVIUXmsgk9Bbeq/DtD1+XsqC8kRuQV3vq RG0hGE4yPDoeqdxfiVPcD4RY3rcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRx8vRT tEGTTQ4jJu/nZV7aE3KqfDAfBgNVHSMEGDAWgBQwNW70bVlNpXx2lwERg6z/4EYT 4DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMC8zMDM1NkVG NDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NRFZ1OUcxWlRh VjhkcGNCRVlPc18tQkdFLUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvMC8zMDM1NkVGNDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0Uw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAbkqLrhGIhM9DDfE46lyUF4ck+2K9eCJkYkq/dRlS7RM0Dd/o Agp0etb0gZrh4vEcrYXT1dpXLuo8zTQ7ks7oQ0lIbP6bDQ40PK58MCSX5vd1vCBb xrJuVZ1cKEYNLuPGqhPROvu5gkQ/K+ituIZzBiwHhE9FqJxVex6B6W0KsbMGHhru F+gu1i//lms2QTZWIrj915eMTC+vcJ994UEHvveLeeIXB0FBurxWvXE746S7mvm9 jJAb3MKD5PvNIY0ByzP9MEFQ9paOtmPD+xM8gNeYtJGb3hbWHOnJuZ0hC3WhZNW8 LJp11KCLFYu6rsGWjg4MJcjB3pgeDGGVTozW6A== -----END CERTIFICATE-----Generated at Thu Jul 3 21:09:55 2025 by rpki-client