$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: QftjVzvpFhqlLdHQiQ5sEcGzykjQJIdV3yxvGUywuBc= Subject key identifier: 20:3B:0B:26:D6:41:29:FD:73:8D:8A:28:F5:46:7A:0B:F8:5A:15:AC Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 7CB5EECB1CD11EA06D63F86CC8B4F10ABFF98AFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 0563 Signing time: Tue 22 Sep 2026 12:16:32 +0000 Manifest this update: Tue 22 Sep 2026 12:11:32 +0000 Manifest next update: Wed 23 Sep 2026 14:50:32 +0000 Files and hashes: 1: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=) 2: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: Up7ZjSCdm+fpdm+JoNxhBOJjtDjefWXuYo3dhJU7lVU=) 3: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=) 4: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=) 5: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: LjDpqFWOYoOAY+7UKHOPbX2oIqQL4EYrPF2/ydliPsc=) 6: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=) 7: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: mRp4vY4H0by9mj0sSASpANHm18slHi1+kwE1GgClbCA=) 8: 34332e3235352e38322e302f32342d3234203d3e20323130313130.roa (hash: PB0a+a2Gy49HBYeDS5tizGYeq0RhqGsRJr6JdjueuOg=) 9: 3130332e3233382e3132382e302f32342d3234203d3e20343031333632.roa (hash: P5xfE/35+9mCNNnRvCUJHBuEvQxYIb/KToGW491AoaM=) 10: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: UeVTfn68R0LdGwhBHFcZ5BBp1siueZcbyg5aXpQZnmc=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b5:ee:cb:1c:d1:1e:a0:6d:63:f8:6c:c8:b4:f1:0a:bf:f9:8a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Sep 22 12:11:32 2026 GMT Not After : Sep 23 14:50:32 2026 GMT Subject: CN=203B0B26D64129FD738D8A28F5467A0BF85A15AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:86:b8:ad:b6:8f:41:bc:6b:25:d6:e9:58:b7: 39:79:61:ad:66:b6:04:78:5f:33:03:44:38:a5:06: b8:8a:92:67:38:d3:58:dd:3a:8e:5b:60:bc:1b:f7: 98:38:21:e4:51:15:8c:c3:bc:d0:1c:e6:d8:3f:0d: ef:dd:01:b2:5d:1e:a2:84:1e:1d:6c:d6:ec:39:e6: 2a:5a:34:34:f6:9c:16:a0:2b:a6:77:10:aa:ff:88: 56:e5:47:bb:01:37:20:d3:ad:5e:68:c7:5b:23:85: 18:db:64:e5:9d:c4:09:10:3f:31:56:07:19:2c:f7: 33:61:72:b7:57:83:f2:44:16:e1:f5:93:49:e5:54: 75:ac:8b:41:c5:94:db:d7:f6:de:88:16:1d:db:9d: 98:28:bb:e6:82:f5:57:38:50:e2:ec:1b:dd:76:5d: fd:c7:eb:50:48:05:aa:46:d7:9f:c1:0c:95:cb:02: c5:ad:ad:0e:da:f0:67:c8:e6:ef:d7:2d:16:17:1d: a2:d1:ac:dd:c3:91:83:c2:f8:1e:ba:72:8f:62:fe: 7d:48:4a:68:07:c9:38:78:c6:78:b6:6a:b7:f2:e7: 55:a7:21:11:39:1a:cb:05:c6:af:a9:b5:28:90:3a: 1b:89:48:01:7d:88:57:61:ed:51:84:8b:af:4a:74: 2c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3B:0B:26:D6:41:29:FD:73:8D:8A:28:F5:46:7A:0B:F8:5A:15:AC X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:9f:3c:8d:b7:96:37:37:90:e1:cd:1a:33:b8:d2:23:98:59: d0:18:95:7d:97:27:10:69:98:1d:57:4c:b1:ea:44:57:39:1c: 73:40:1e:83:8f:83:bd:96:96:42:49:3d:c5:11:22:d5:7c:49: e6:3e:fd:85:d0:30:a9:50:dc:19:40:9e:43:b0:9a:76:4a:01: 1c:72:97:27:c4:56:4e:25:0b:93:09:ee:64:ce:14:6f:18:b2: 55:30:87:97:1f:34:83:c4:25:47:e3:95:42:59:41:6d:f2:bc: db:03:bf:75:b3:ae:84:c3:53:bb:09:2c:3e:60:66:35:fb:ab: 58:1a:52:6d:ff:5b:fc:04:37:e2:0b:63:a0:55:2d:52:a4:0a: 80:58:d7:d2:4a:16:d6:5d:03:2e:1f:5c:66:27:3d:2a:c1:ef: 7d:59:13:5b:bf:a4:69:86:bb:c2:15:c5:ab:e4:5a:05:08:ab: c6:97:99:ae:5d:c4:0a:38:49:ab:c5:f4:aa:65:cb:86:31:35: c9:95:04:3b:0b:79:03:78:86:94:4c:80:74:e7:f2:63:9d:d6: 07:7f:6c:a5:68:43:3d:2e:49:d3:2e:12:77:8b:f1:5b:83:1a: 22:f9:ae:42:a5:94:ba:91:81:8b:f4:2c:8a:dc:13:54:2e:3a: 17:25:86:fa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfLXuyxzRHqBtY/hsyLTxCr/5iv0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MDkyMjEyMTEzMloX DTI2MDkyMzE0NTAzMlowMzExMC8GA1UEAxMoMjAzQjBCMjZENjQxMjlGRDczOEQ4 QTI4RjU0NjdBMEJGODVBMTVBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOqGuK22j0G8ayXW6Vi3OXlhrWa2BHhfMwNEOKUGuIqSZzjTWN06jltgvBv3 mDgh5FEVjMO80Bzm2D8N790Bsl0eooQeHWzW7DnmKlo0NPacFqArpncQqv+IVuVH uwE3INOtXmjHWyOFGNtk5Z3ECRA/MVYHGSz3M2Fyt1eD8kQW4fWTSeVUdayLQcWU 29f23ogWHdudmCi75oL1VzhQ4uwb3XZd/cfrUEgFqkbXn8EMlcsCxa2tDtrwZ8jm 79ctFhcdotGs3cORg8L4Hrpyj2L+fUhKaAfJOHjGeLZqt/LnVachETkaywXGr6m1 KJA6G4lIAX2IV2HtUYSLr0p0LIMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQgOwsm 1kEp/XONiij1RnoL+FoVrDAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEARp88jbeWNzeQ4c0aM7jSI5hZ0BiVfZcnEGmYHVdMsepEVzkc c0Aeg4+DvZaWQkk9xREi1XxJ5j79hdAwqVDcGUCeQ7CadkoBHHKXJ8RWTiULkwnu ZM4UbxiyVTCHlx80g8QlR+OVQllBbfK82wO/dbOuhMNTuwksPmBmNfurWBpSbf9b /AQ34gtjoFUtUqQKgFjX0koW1l0DLh9cZic9KsHvfVkTW7+kaYa7whXFq+RaBQir xpeZrl3ECjhJq8X0qmXLhjE1yZUEOwt5A3iGlEyAdOfyY53WB39spWhDPS5J0y4S d4vxW4MaIvmuQqWUupGBi/QsitwTVC46FyWG+g== -----END CERTIFICATE-----Generated at Wed Sep 23 09:05:44 2026 by rpki-client