$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft File: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json) Hash identifier: +mneLLbe8hH3eUJwdoofU235nA0DPLbRq2myvV0WkOw= Subject key identifier: F2:16:9A:2B:1D:26:B4:7C:EC:0B:A8:80:C5:36:56:34:1B:46:8E:DB Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Certificate serial: 469F655099A34401ADBA3B8E8B87E91237FE74E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft Manifest number: 0737 Signing time: Wed 25 Mar 2026 18:26:13 +0000 Manifest this update: Wed 25 Mar 2026 18:21:13 +0000 Manifest next update: Thu 26 Mar 2026 19:15:13 +0000 Files and hashes: 1: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: /tu1GLPgmx3L59lA9DS67uY00dm6i5Wm3Y/TLJzZPPI=) 2: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ciSHjom7uhsnTUry3euH0kEf+ood81S/2eHdQ8CkHns=) 3: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: L9alQ1hzd/NdwtErixdBAd7kRHg+3CsxYjm2ipOQ4e4=) 4: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: yVZN8uUTOOhqgDafcuJzyObo6OYnTkFGrZV6T9wM9pM=) 5: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: Wnz7iyh9clZuDDpLGVNNBZJ0JgoGPtAKZ8B2Ynr6Xgc=) 6: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: Fe1UVCyCNYuLeK/2YClSqpX8AFGVDlpgAyiB6HZMqgE=) 7: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: TyUQXYW/Z9X7LSxau+0o+4cjIXJiQzcIYmIWKatiFMc=) 8: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: DF0B2w1ci15U2MWgi9NHF/RrZ7F8ylilgRl/5FkgJoA=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 19:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:9f:65:50:99:a3:44:01:ad:ba:3b:8e:8b:87:e9:12:37:fe:74:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Validity Not Before: Mar 25 18:21:13 2026 GMT Not After : Mar 26 19:15:13 2026 GMT Subject: CN=F2169A2B1D26B47CEC0BA880C53656341B468EDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7c:db:48:a3:b2:ad:66:77:9b:11:dc:12:aa: 79:e6:31:f4:b4:22:fa:57:be:cf:a9:aa:e2:1e:c4: f2:e1:a3:7a:04:52:31:33:21:38:81:cd:f4:38:67: bb:96:41:0e:7f:64:24:03:c8:aa:b1:0a:b2:d8:ae: da:bb:5e:02:48:af:1c:fe:ac:4c:43:06:57:63:1a: ec:a2:af:5c:e6:3e:6f:8d:c8:93:14:43:1e:3a:0a: 1f:39:62:9e:9f:4e:9f:f7:9d:55:20:6e:23:6f:92: 81:1c:e0:ed:b9:b9:08:af:de:dc:1c:b6:66:77:50: 0d:ce:88:70:59:d4:3d:fc:14:9b:a2:bd:ae:d8:bb: 5f:65:be:50:7a:44:4d:e3:84:fd:2b:60:56:c4:ac: 83:29:32:e7:a5:d9:bb:af:b4:0a:77:1f:54:51:e2: 3d:73:74:97:85:45:0b:51:3c:89:29:c8:b7:8b:18: a2:c0:d6:9b:65:61:88:b2:92:d9:64:ad:0f:fe:7a: 45:ef:27:c5:09:47:17:67:7e:26:0d:cc:f8:58:eb: f8:33:86:9a:0e:1c:a8:b1:71:c1:ef:13:4b:e2:2f: 65:3f:a0:a7:7e:fe:a2:84:54:5f:b6:52:8a:4d:7c: 7e:75:1d:3a:44:c9:fe:ac:d2:73:48:33:03:a1:ce: 21:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:16:9A:2B:1D:26:B4:7C:EC:0B:A8:80:C5:36:56:34:1B:46:8E:DB X509v3 Authority Key Identifier: keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:46:4e:e0:bb:5f:41:b1:ca:3b:5c:0a:7b:27:45:0f:d7:0d: 48:e7:79:8a:ab:3a:96:4f:be:b6:a1:b3:95:c8:f7:97:d8:3e: 85:16:d0:ef:33:b8:0c:3d:cc:13:28:0c:2a:64:42:a9:df:11: 77:43:54:21:7c:01:bc:2c:b4:29:3b:f6:85:2d:44:11:7a:95: ca:52:cc:4e:10:5d:88:7d:82:cf:98:1f:08:08:5d:da:17:e6: da:9e:fe:fd:35:3e:d2:6e:d3:6a:01:f3:9a:fd:ce:7a:6a:80: 48:61:38:01:61:f4:1c:5d:70:ae:9e:99:bb:4c:77:74:88:d7: ef:06:df:fe:3a:3f:ec:21:2e:d3:ed:f3:5b:c5:18:73:44:78: ec:16:94:3f:22:40:46:7e:a2:ad:a3:73:a0:29:5f:60:69:fd: fc:d7:90:de:46:80:a4:60:9b:8e:18:be:73:12:42:89:26:c6: a9:62:d1:bd:23:b5:b4:ba:8d:3d:06:02:7e:e6:5c:30:a6:a7: 12:1c:c5:13:86:e7:fd:10:fe:58:7d:43:ff:87:c9:50:78:16: ee:b4:2a:3e:7e:f7:b8:b1:20:2c:5b:0f:99:04:d6:c2:67:13: 81:00:45:98:a8:10:03:ef:31:62:46:68:2a:a9:26:fc:83:6b: ef:9e:44:be -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURp9lUJmjRAGtujuOi4fpEjf+dOAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI2MDMyNTE4MjExM1oX DTI2MDMyNjE5MTUxM1owMzExMC8GA1UEAxMoRjIxNjlBMkIxRDI2QjQ3Q0VDMEJB ODgwQzUzNjU2MzQxQjQ2OEVEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMx820ijsq1md5sR3BKqeeYx9LQi+le+z6mq4h7E8uGjegRSMTMhOIHN9Dhn u5ZBDn9kJAPIqrEKstiu2rteAkivHP6sTEMGV2Ma7KKvXOY+b43IkxRDHjoKHzli np9On/edVSBuI2+SgRzg7bm5CK/e3By2ZndQDc6IcFnUPfwUm6K9rti7X2W+UHpE TeOE/StgVsSsgyky56XZu6+0CncfVFHiPXN0l4VFC1E8iSnIt4sYosDWm2VhiLKS 2WStD/56Re8nxQlHF2d+Jg3M+Fjr+DOGmg4cqLFxwe8TS+IvZT+gp37+ooRUX7ZS ik18fnUdOkTJ/qzSc0gzA6HOIQUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTyFpor HSa0fOwLqIDFNlY0G0aO2zAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w M2psZkN5XzhudUVTbnpBTFEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNC9CNzM1MUIwNUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAe0ZO4LtfQbHKO1wKeydFD9cNSOd5iqs6lk++tqGzlcj3l9g+ hRbQ7zO4DD3MEygMKmRCqd8Rd0NUIXwBvCy0KTv2hS1EEXqVylLMThBdiH2Cz5gf CAhd2hfm2p7+/TU+0m7TagHzmv3OemqASGE4AWH0HF1wrp6Zu0x3dIjX7wbf/jo/ 7CEu0+3zW8UYc0R47BaUPyJARn6iraNzoClfYGn9/NeQ3kaApGCbjhi+cxJCiSbG qWLRvSO1tLqNPQYCfuZcMKanEhzFE4bn/RD+WH1D/4fJUHgW7rQqPn73uLEgLFsP mQTWwmcTgQBFmKgQA+8xYkZoKqkm/INr755Evg== -----END CERTIFICATE-----Generated at Thu Mar 26 11:14:28 2026 by rpki-client