$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft File: 30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json) Hash identifier: VisuGVS0x+LU1Ua5MTwxgSZkAPWkCke6BHt1XsGQAGs= Subject key identifier: 3F:71:9C:A1:CC:7D:B2:05:6F:3D:B0:58:88:66:6C:D1:2A:EF:E7:AB Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0 Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0 Certificate serial: 0750C091D0B483CC4440F7A106570CCEC727AA74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft Manifest number: 0666 Signing time: Mon 20 Oct 2025 03:02:08 +0000 Manifest this update: Mon 20 Oct 2025 02:57:08 +0000 Manifest next update: Tue 21 Oct 2025 05:44:08 +0000 Files and hashes: 1: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: /+sJT+4M3YxlKiSTmSS+QE+W2EVnE9RJ/vLKVPLkgic=) 2: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: yogL8/81axQDf/PWzTASWBYKmDx9+f4U8iWDqKSfbiU=) 3: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: OFQUaZfxmar8QdwOWotCs19NcWRunbT96cEQtkG/1Oc=) 4: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: AacMK/o+EGwbexdyQnNpqANBm/Ur+Me6iiiCxtD0quE=) 5: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: qktH9CmoSMi4zY7SUgxfdRgLAlOa3yTYkuOYxTloRPw=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 05:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:50:c0:91:d0:b4:83:cc:44:40:f7:a1:06:57:0c:ce:c7:27:aa:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0 Validity Not Before: Oct 20 02:57:08 2025 GMT Not After : Oct 21 05:44:08 2025 GMT Subject: CN=3F719CA1CC7DB2056F3DB05888666CD12AEFE7AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:35:db:92:f5:5e:82:5a:e6:cb:e3:4e:11:ea: 8c:2f:2a:c0:1d:ac:4c:c2:06:28:00:44:e6:4f:18: 16:da:90:34:84:57:9b:15:f1:3e:a3:bd:3d:91:7d: 56:91:6a:77:07:f9:d4:86:84:58:9f:d5:94:11:3f: f0:ec:ed:c7:31:99:82:71:c6:e9:8e:4a:bf:d6:cb: 50:90:2b:c1:01:4e:69:97:b7:f5:f0:c6:38:22:0c: d3:bd:8a:8a:51:d7:f2:06:46:65:91:64:0e:2d:b8: 7c:f2:1a:5c:32:66:d0:fa:6e:45:98:1b:4f:fa:d0: e4:fa:19:5c:47:b0:1b:ba:13:30:24:8d:11:2d:e2: 2d:d5:b1:97:59:2c:0c:d9:b4:c7:ac:4c:24:cd:62: aa:cd:42:18:27:95:81:dd:38:62:67:e2:ca:6f:df: 68:6d:bf:80:f2:42:7e:f8:7e:32:bf:60:72:74:09: e1:c1:84:16:94:2b:11:10:c7:1c:67:a8:4c:e9:d3: 6b:fa:91:cb:1d:aa:89:1c:ca:8a:55:ec:e2:05:61: 39:3b:3a:18:06:85:4d:14:71:3b:f6:c7:4c:15:a1: 2c:92:4b:7b:06:2d:59:5e:8d:bf:40:65:f2:14:81: 01:07:c1:0e:ab:e3:8e:3f:e4:db:fd:95:66:ae:06: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:71:9C:A1:CC:7D:B2:05:6F:3D:B0:58:88:66:6C:D1:2A:EF:E7:AB X509v3 Authority Key Identifier: keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0a:c9:a6:7e:c6:3f:d1:e2:fe:6b:f8:5e:9b:5a:f8:df:fe: 87:a6:af:13:b5:20:ed:89:72:02:e4:ba:4f:d2:18:0d:4c:b1: 23:0b:e6:1b:23:be:3a:4f:e8:24:51:32:47:e8:2e:42:1a:ec: 21:cb:f7:b6:0a:9c:76:bc:63:f4:fa:d2:50:a7:9b:54:dd:98: dc:49:c8:53:63:da:ed:ab:55:56:cc:36:0a:e2:81:cb:1c:23: 49:cf:e6:e2:de:af:bf:2a:6a:cf:23:1c:fb:a1:15:50:c9:df: 77:08:46:1f:7d:47:e2:dc:5b:a1:2a:7d:94:83:78:92:df:b0: 47:2c:aa:65:88:05:cb:79:e7:7e:27:34:fc:d1:ec:37:ed:b3: 77:7a:81:7e:39:a1:e4:eb:b3:fa:c0:c0:c1:9d:1f:a8:c6:f8: 64:c2:31:ef:91:01:d5:da:f2:d8:9e:ec:c3:97:16:d1:63:bc: 6f:1f:29:58:43:2d:c6:6d:f1:a3:0f:81:cf:59:ba:9e:8b:d1: 9d:f4:89:a8:12:1b:cf:b1:44:ad:13:e8:d4:93:a2:7f:db:78: f1:ad:a6:ab:91:bf:68:d8:e1:03:7d:8c:2f:b2:e2:de:be:5b: 33:55:0b:aa:dc:90:b8:33:f1:62:6f:3c:c1:ac:dd:45:8d:4f: f7:31:d3:83 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUB1DAkdC0g8xEQPehBlcMzscnqnQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTA1MzAwMDAwMTEwLwYDVQQFEygzMDM1NkVGNDZE NTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwMB4XDTI1MTAyMDAyNTcwOFoX DTI1MTAyMTA1NDQwOFowMzExMC8GA1UEAxMoM0Y3MTlDQTFDQzdEQjIwNTZGM0RC MDU4ODg2NjZDRDEyQUVGRTdBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALI125L1XoJa5svjThHqjC8qwB2sTMIGKABE5k8YFtqQNIRXmxXxPqO9PZF9 VpFqdwf51IaEWJ/VlBE/8OztxzGZgnHG6Y5Kv9bLUJArwQFOaZe39fDGOCIM072K ilHX8gZGZZFkDi24fPIaXDJm0PpuRZgbT/rQ5PoZXEewG7oTMCSNES3iLdWxl1ks DNm0x6xMJM1iqs1CGCeVgd04Ymfiym/faG2/gPJCfvh+Mr9gcnQJ4cGEFpQrERDH HGeoTOnTa/qRyx2qiRzKilXs4gVhOTs6GAaFTRRxO/bHTBWhLJJLewYtWV6Nv0Bl 8hSBAQfBDqvjjj/k2/2VZq4GAwECAwEAAaOCAhswggIXMB0GA1UdDgQWBBQ/cZyh zH2yBW89sFiIZmzRKu/nqzAfBgNVHSMEGDAWgBQwNW70bVlNpXx2lwERg6z/4EYT 4DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMC8zMDM1NkVG NDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NRFZ1OUcxWlRh VjhkcGNCRVlPc18tQkdFLUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvMC8zMDM1NkVGNDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0Uw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAAQrJpn7GP9Hi/mv4Xpta+N/+h6avE7Ug7YlyAuS6T9IYDUyx IwvmGyO+Ok/oJFEyR+guQhrsIcv3tgqcdrxj9PrSUKebVN2Y3EnIU2Pa7atVVsw2 CuKByxwjSc/m4t6vvypqzyMc+6EVUMnfdwhGH31H4txboSp9lIN4kt+wRyyqZYgF y3nnfic0/NHsN+2zd3qBfjmh5Ouz+sDAwZ0fqMb4ZMIx75EB1dry2J7sw5cW0WO8 bx8pWEMtxm3xow+Bz1m6novRnfSJqBIbz7FErRPo1JOif9t48a2mq5G/aNjhA32M L7Li3r5bM1ULqtyQuDPxYm88wazdRY1P9zHTgw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:09 2025 by rpki-client