$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft File: 30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json) Hash identifier: HciPwoBWOWPTcR4K7Nn533XMPdWAo4jkJQpvEErP1zA= Subject key identifier: 15:9D:BC:D9:00:FD:5B:5B:19:E1:BA:46:5D:6D:4A:2F:C6:53:0A:F2 Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0 Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0 Certificate serial: 7CFDBB0FB6C85DDBC60971B62D018167BD1B05D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft Manifest number: 073A Signing time: Wed 25 Mar 2026 16:01:12 +0000 Manifest this update: Wed 25 Mar 2026 15:56:12 +0000 Manifest next update: Thu 26 Mar 2026 17:40:12 +0000 Files and hashes: 1: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: 2guqc3il/Df3q/hiPOyhywzhF3bNWW294jv3FUSAbQM=) 2: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: 7xp6Qecc5/OOhL0p9AX/cfT6YnZhKTIxBQ5OCdlFvaU=) 3: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: P89acol4H7IHtZrng8/3zSjzqTyCcV/jk3mTBmWqgD0=) 4: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: qktH9CmoSMi4zY7SUgxfdRgLAlOa3yTYkuOYxTloRPw=) 5: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: 4M3Gj7VtwtPss7dq7bEuNaNtbKXrLCHIYjSN8LGXjK0=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 17:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fd:bb:0f:b6:c8:5d:db:c6:09:71:b6:2d:01:81:67:bd:1b:05:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0 Validity Not Before: Mar 25 15:56:12 2026 GMT Not After : Mar 26 17:40:12 2026 GMT Subject: CN=159DBCD900FD5B5B19E1BA465D6D4A2FC6530AF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4a:b6:17:23:4f:ce:65:4e:1b:50:b2:8c:b2: c7:1c:60:f5:b0:34:49:89:fd:00:0b:f5:30:e0:25: fb:fd:3d:4a:2c:f9:cb:60:30:43:6a:6f:96:97:5d: c9:6b:a9:59:dc:71:dc:f4:5c:ae:10:26:57:ec:ec: 18:46:3a:8a:ff:17:d6:44:76:ed:13:f3:da:f5:c0: 77:05:14:5b:c2:22:46:f9:41:9b:e1:f0:e8:5f:49: 98:cc:b2:67:62:0a:0f:46:39:51:ad:cf:c6:81:be: d7:f7:b6:64:df:c4:40:df:08:52:4b:b3:b7:de:52: e7:c8:25:55:d9:86:71:05:e1:74:4c:b9:4e:85:96: 0f:3d:be:7d:a5:97:e2:42:56:f3:bb:d9:2a:f9:e9: 0c:3e:22:a1:1b:b5:63:be:e1:e3:ef:0c:36:a6:98: de:a8:4e:cb:03:5c:61:10:77:be:23:a2:90:30:b7: b3:60:ba:03:e8:dd:ba:00:61:b9:f8:20:ee:24:35: 58:ca:87:a0:c2:b4:d8:c6:42:be:d9:ff:bb:69:0a: a9:25:dd:f9:8c:ed:7e:97:75:4d:3c:56:12:e3:02: 21:42:d2:10:08:39:f6:01:90:e7:44:5d:7a:b2:cb: 0b:e9:8c:7c:be:2f:b1:31:fb:7f:c2:87:49:91:fb: 2c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9D:BC:D9:00:FD:5B:5B:19:E1:BA:46:5D:6D:4A:2F:C6:53:0A:F2 X509v3 Authority Key Identifier: keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8b:82:53:0d:d4:f0:10:89:cf:4d:2e:52:f7:51:b4:b1:ef: 67:57:c2:d0:be:68:23:d1:5d:b3:20:6b:a8:7a:59:4a:5f:0c: ae:9a:2c:7d:23:43:c6:92:be:a3:6d:3a:63:b8:ac:5a:77:15: b3:4e:ba:16:17:c9:d8:a9:6e:12:81:0f:bf:ee:10:77:fa:d8: a3:bd:d6:3e:ed:02:e3:58:9c:57:e6:90:35:e8:87:3c:cc:9e: 73:66:25:bd:a8:4f:f2:90:12:1b:c5:98:73:82:b6:d6:2d:d4: 82:27:9b:88:33:d2:3a:1b:71:fe:dc:8e:f4:7f:2b:29:f1:1b: 72:13:3d:bb:a2:20:92:9d:8a:22:6c:bb:05:f4:91:a9:5c:7d: 0b:77:c2:70:d7:1a:8e:5e:a8:65:1c:ce:6d:87:3e:64:4b:52: f3:21:a9:37:50:50:aa:16:ff:b5:53:ab:dc:90:03:70:a2:b8: 87:79:6c:3e:61:98:35:a5:85:d3:39:af:01:9d:7e:1c:fa:cf: 49:c9:9b:bc:b9:a9:73:aa:51:22:97:ef:a7:f6:d6:4b:cf:61: 78:24:2c:42:63:0c:4b:b0:c6:6e:88:37:de:d3:10:6e:b6:b5: 3a:1f:48:af:e4:d0:01:92:d6:c7:23:50:0d:d3:be:8e:71:f5: 79:5e:a5:7f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfP27D7bIXdvGCXG2LQGBZ70bBdgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTA1MzAwMDAwMTEwLwYDVQQFEygzMDM1NkVGNDZE NTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwMB4XDTI2MDMyNTE1NTYxMloX DTI2MDMyNjE3NDAxMlowMzExMC8GA1UEAxMoMTU5REJDRDkwMEZENUI1QjE5RTFC QTQ2NUQ2RDRBMkZDNjUzMEFGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtKthcjT85lThtQsoyyxxxg9bA0SYn9AAv1MOAl+/09Siz5y2AwQ2pvlpdd yWupWdxx3PRcrhAmV+zsGEY6iv8X1kR27RPz2vXAdwUUW8IiRvlBm+Hw6F9JmMyy Z2IKD0Y5Ua3PxoG+1/e2ZN/EQN8IUkuzt95S58glVdmGcQXhdEy5ToWWDz2+faWX 4kJW87vZKvnpDD4ioRu1Y77h4+8MNqaY3qhOywNcYRB3viOikDC3s2C6A+jdugBh ufgg7iQ1WMqHoMK02MZCvtn/u2kKqSXd+Yztfpd1TTxWEuMCIULSEAg59gGQ50Rd erLLC+mMfL4vsTH7f8KHSZH7LJ0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBQVnbzZ AP1bWxnhukZdbUovxlMK8jAfBgNVHSMEGDAWgBQwNW70bVlNpXx2lwERg6z/4EYT 4DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMC8zMDM1NkVG NDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NRFZ1OUcxWlRh VjhkcGNCRVlPc18tQkdFLUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvMC8zMDM1NkVGNDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0Uw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEATIuCUw3U8BCJz00uUvdRtLHvZ1fC0L5oI9FdsyBrqHpZSl8M rposfSNDxpK+o206Y7isWncVs066FhfJ2KluEoEPv+4Qd/rYo73WPu0C41icV+aQ NeiHPMyec2YlvahP8pASG8WYc4K21i3UgiebiDPSOhtx/tyO9H8rKfEbchM9u6Ig kp2KImy7BfSRqVx9C3fCcNcajl6oZRzObYc+ZEtS8yGpN1BQqhb/tVOr3JADcKK4 h3lsPmGYNaWF0zmvAZ1+HPrPScmbvLmpc6pRIpfvp/bWS89heCQsQmMMS7DGbog3 3tMQbra1Oh9Ir+TQAZLWxyNQDdO+jnH1eV6lfw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:43 2026 by rpki-client