$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft File: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json) Hash identifier: VbPVqCwJn75/hQ2oJVKnrOsGs7nw91BhJV74I/E2p5U= Subject key identifier: 66:2D:65:EE:60:59:08:01:3D:B4:B5:10:49:8E:AA:4B:EB:56:95:4A Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Certificate serial: 31377970142B7CEC134B0EB99D80FDA95D75C6EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft Manifest number: 0662 Signing time: Sun 19 Oct 2025 11:47:08 +0000 Manifest this update: Sun 19 Oct 2025 11:42:08 +0000 Manifest next update: Mon 20 Oct 2025 13:49:08 +0000 Files and hashes: 1: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: Fe1UVCyCNYuLeK/2YClSqpX8AFGVDlpgAyiB6HZMqgE=) 2: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: yVZN8uUTOOhqgDafcuJzyObo6OYnTkFGrZV6T9wM9pM=) 3: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ciSHjom7uhsnTUry3euH0kEf+ood81S/2eHdQ8CkHns=) 4: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: DF0B2w1ci15U2MWgi9NHF/RrZ7F8ylilgRl/5FkgJoA=) 5: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: Wnz7iyh9clZuDDpLGVNNBZJ0JgoGPtAKZ8B2Ynr6Xgc=) 6: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: cdy07Tl+w10WBHN6VKPnCTlFt9fs4ty9M2qk3GqzPLA=) 7: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: TyUQXYW/Z9X7LSxau+0o+4cjIXJiQzcIYmIWKatiFMc=) 8: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: /tu1GLPgmx3L59lA9DS67uY00dm6i5Wm3Y/TLJzZPPI=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:37:79:70:14:2b:7c:ec:13:4b:0e:b9:9d:80:fd:a9:5d:75:c6:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Validity Not Before: Oct 19 11:42:08 2025 GMT Not After : Oct 20 13:49:08 2025 GMT Subject: CN=662D65EE605908013DB4B510498EAA4BEB56954A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:70:58:60:fd:e1:28:8d:a4:b7:9e:f3:72:8b: c6:e9:74:2e:12:7e:84:b5:81:24:7f:3a:9a:35:2e: e0:51:47:2b:0d:bf:7f:3b:63:24:53:eb:b6:62:32: 83:ad:40:bd:0d:88:27:d1:e9:a5:2e:ba:5f:fe:26: d0:ff:ec:3b:79:6e:7f:c7:f0:8b:a3:0d:dc:10:a3: 7c:82:d9:7d:fa:b2:be:f9:42:d6:f7:40:05:e4:31: b7:47:73:70:61:8f:f2:3e:0d:3e:b6:11:72:fd:d3: 91:ff:13:c7:55:63:3d:a0:91:6a:d7:fe:96:d8:58: a1:cc:69:ad:3a:09:ac:48:d2:38:0a:75:c4:11:90: 85:b3:e0:9b:7b:cc:d7:2a:41:69:e4:9c:96:64:05: c0:0c:76:60:e6:84:74:3c:4c:97:75:45:dd:01:3e: 6a:f4:e7:a2:de:fe:ad:87:70:a4:4f:2f:bd:38:37: c7:9d:13:e6:47:8c:71:b4:1f:d4:33:7c:fe:fc:e6: fc:eb:e4:cc:ce:f0:a8:d0:e8:f8:03:18:06:e2:a2: d7:ac:75:fd:76:84:16:c3:c4:68:45:a8:71:34:3d: 82:a4:d6:4b:56:88:2b:27:0c:e7:46:e8:8c:58:c5: 60:79:29:2d:fc:b9:5e:f3:04:66:3c:03:6d:26:24: 19:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2D:65:EE:60:59:08:01:3D:B4:B5:10:49:8E:AA:4B:EB:56:95:4A X509v3 Authority Key Identifier: keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b4:c6:0e:99:53:f0:bb:d5:27:15:96:9d:94:f8:56:7f:25: a9:58:9c:07:58:eb:d3:14:52:08:85:2f:a2:52:8e:d1:0d:0b: f8:fa:6b:1e:41:49:0f:af:7f:46:4d:4f:45:85:bc:69:2c:9b: 83:1f:f5:b4:6f:90:98:03:38:71:d9:dc:46:54:95:38:65:3f: fc:00:f7:d9:b1:bc:91:a3:33:86:af:69:33:9e:0b:03:cb:0e: 89:95:f4:9b:87:6b:59:ce:57:0a:6f:dc:c6:61:6e:4e:d8:2e: 79:24:a6:4b:de:cf:1e:d7:28:5f:5d:5d:7b:de:c6:95:9f:61: 07:27:9d:9c:cf:a8:25:63:35:eb:c5:45:94:08:e0:0f:17:b8: e5:4a:f0:62:f7:46:9c:cb:ff:ee:ad:4d:4d:25:1e:cf:46:3c: 99:52:64:ea:61:d0:e1:98:49:d2:40:cc:8f:12:d8:a2:9f:b5: 75:af:aa:29:53:83:0f:b9:5d:19:07:2b:3c:a9:57:ab:cd:a3: 90:21:73:9f:74:b0:77:eb:ce:2f:1f:02:83:b0:3f:01:5b:ac: 7b:3d:fa:cb:4c:c0:cd:44:3d:1a:5f:43:32:8d:3c:67:ff:84: 24:57:3b:5d:58:87:ea:27:ad:3e:1e:ba:ef:46:a0:a6:9d:79: 79:46:82:06 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMTd5cBQrfOwTSw65nYD9qV11xuwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI1MTAxOTExNDIwOFoX DTI1MTAyMDEzNDkwOFowMzExMC8GA1UEAxMoNjYyRDY1RUU2MDU5MDgwMTNEQjRC NTEwNDk4RUFBNEJFQjU2OTU0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdwWGD94SiNpLee83KLxul0LhJ+hLWBJH86mjUu4FFHKw2/fztjJFPrtmIy g61AvQ2IJ9HppS66X/4m0P/sO3luf8fwi6MN3BCjfILZffqyvvlC1vdABeQxt0dz cGGP8j4NPrYRcv3Tkf8Tx1VjPaCRatf+lthYocxprToJrEjSOAp1xBGQhbPgm3vM 1ypBaeSclmQFwAx2YOaEdDxMl3VF3QE+avTnot7+rYdwpE8vvTg3x50T5keMcbQf 1DN8/vzm/OvkzM7wqNDo+AMYBuKi16x1/XaEFsPEaEWocTQ9gqTWS1aIKycM50bo jFjFYHkpLfy5XvMEZjwDbSYkGb8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBRmLWXu YFkIAT20tRBJjqpL61aVSjAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w M2psZkN5XzhudUVTbnpBTFEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNC9CNzM1MUIwNUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAMbTGDplT8LvVJxWWnZT4Vn8lqVicB1jr0xRSCIUvolKO0Q0L +PprHkFJD69/Rk1PRYW8aSybgx/1tG+QmAM4cdncRlSVOGU//AD32bG8kaMzhq9p M54LA8sOiZX0m4drWc5XCm/cxmFuTtgueSSmS97PHtcoX11de97GlZ9hByednM+o JWM168VFlAjgDxe45UrwYvdGnMv/7q1NTSUez0Y8mVJk6mHQ4ZhJ0kDMjxLYop+1 da+qKVODD7ldGQcrPKlXq82jkCFzn3Swd+vOLx8Cg7A/AVusez36y0zAzUQ9Gl9D Mo08Z/+EJFc7XViH6ietPh6670agpp15eUaCBg== -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:41 2025 by rpki-client