$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: C1etVpLjafPcKFYSpBOui/5ccDrOkHZWsXTFvXQDpGo= Subject key identifier: AC:25:6B:2E:EC:7D:BC:9F:D2:A2:FA:E1:D2:DF:74:70:AB:B1:A8:6D Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 25A249D601514773C5A579C91A0E82E89F275268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 0564 Signing time: Wed 23 Sep 2026 06:51:32 +0000 Manifest this update: Wed 23 Sep 2026 06:46:32 +0000 Manifest next update: Thu 24 Sep 2026 07:16:32 +0000 Files and hashes: 1: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: b6u2Z5FgkhkIzvOVlWpuJfewNLP0WzEnnCWzbYJWhW4=) 2: 3130332e3233382e3132382e302f32342d3234203d3e20343031333632.roa (hash: P5xfE/35+9mCNNnRvCUJHBuEvQxYIb/KToGW491AoaM=) 3: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: UeVTfn68R0LdGwhBHFcZ5BBp1siueZcbyg5aXpQZnmc=) 4: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=) 5: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=) 6: 34332e3235352e38322e302f32342d3234203d3e20323130313130.roa (hash: PB0a+a2Gy49HBYeDS5tizGYeq0RhqGsRJr6JdjueuOg=) 7: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=) 8: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: mRp4vY4H0by9mj0sSASpANHm18slHi1+kwE1GgClbCA=) 9: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: Up7ZjSCdm+fpdm+JoNxhBOJjtDjefWXuYo3dhJU7lVU=) 10: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a2:49:d6:01:51:47:73:c5:a5:79:c9:1a:0e:82:e8:9f:27:52:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Sep 23 06:46:32 2026 GMT Not After : Sep 24 07:16:32 2026 GMT Subject: CN=AC256B2EEC7DBC9FD2A2FAE1D2DF7470ABB1A86D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:40:4a:35:de:97:ae:71:a8:1e:d8:bb:04:e9: b8:f1:03:4b:48:6d:da:06:e2:09:b7:21:5f:2a:f0: 11:d3:92:5f:c2:12:e8:d2:24:d7:bc:47:4a:3c:49: a3:b8:a2:d4:af:94:0c:28:47:75:d2:74:ad:4d:e2: f9:fe:d9:bf:6a:f7:88:c3:af:32:7b:f4:4f:42:96: 35:08:79:28:04:d8:f5:b7:27:99:96:01:00:0b:2b: 74:2f:d7:d6:9a:40:8d:1f:36:60:76:9e:85:38:99: 2e:05:b9:e5:fe:0d:2d:7e:2a:45:9c:2e:20:a8:81: b4:ca:c8:da:fa:34:3b:be:6f:6d:49:aa:06:de:f9: c1:04:16:16:63:9e:8f:ac:de:77:5f:fb:80:dd:e3: 85:a3:58:b4:02:73:c6:cb:f1:d3:51:4e:fa:7e:1e: 5d:23:af:10:11:de:80:06:0c:6b:25:05:58:e3:0f: a5:80:97:8d:d3:1d:5b:2f:b0:35:f7:92:3c:58:11: 50:94:7f:dc:24:70:30:2d:a6:51:76:df:a7:50:b8: 01:57:21:3b:9e:b0:e4:a1:3b:22:fa:26:90:3e:a8: d9:6a:dc:98:af:73:a4:0e:42:8a:61:4e:8a:14:a9: 61:9d:4e:27:3f:2a:56:28:e1:f2:84:f5:93:1d:09: 76:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:25:6B:2E:EC:7D:BC:9F:D2:A2:FA:E1:D2:DF:74:70:AB:B1:A8:6D X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2b:ec:65:b1:0e:3b:70:92:aa:8b:bc:26:92:63:1a:0f:20: e4:32:ba:fc:47:c8:bf:16:3c:29:5e:5a:c2:5a:0f:ae:79:1a: 62:37:d6:bc:da:59:70:91:73:0b:d6:3e:da:73:c8:4a:e0:46: 89:6e:b3:89:05:69:b5:72:88:77:c9:ef:41:82:c4:37:01:c7: 0d:a8:56:a1:84:9a:45:49:17:f3:09:31:c3:1a:79:ae:28:0a: d2:1b:f4:83:f2:0b:d7:6c:fb:28:b5:83:a4:76:9d:74:80:ee: 3b:99:e0:10:fc:95:5f:0f:0a:c2:43:90:ea:85:04:81:8c:1e: 9b:54:b2:09:56:f1:3d:a7:a7:89:2d:54:bd:b5:a8:fe:e5:db: d2:c9:d3:93:4b:e0:0d:a3:e8:fc:2a:d8:93:3a:c7:dc:d0:a1: a4:5d:eb:7f:db:8e:29:65:8e:af:1e:e7:7b:80:0e:a3:fb:27: 9f:d1:77:2d:e3:d5:f7:17:09:48:13:3b:bf:27:a2:51:b3:51: 75:3e:17:b3:ee:1a:10:b0:39:26:22:d9:b7:aa:d0:da:76:15: 46:98:d3:72:2b:c3:bc:15:50:54:60:2e:d7:6c:a9:4d:2c:9d: ea:97:7d:49:3e:09:6a:fe:bf:45:8c:cf:73:66:34:6b:e8:26: b2:c6:a1:88 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJaJJ1gFRR3PFpXnJGg6C6J8nUmgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MDkyMzA2NDYzMloX DTI2MDkyNDA3MTYzMlowMzExMC8GA1UEAxMoQUMyNTZCMkVFQzdEQkM5RkQyQTJG QUUxRDJERjc0NzBBQkIxQTg2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNASjXel65xqB7YuwTpuPEDS0ht2gbiCbchXyrwEdOSX8IS6NIk17xHSjxJ o7ii1K+UDChHddJ0rU3i+f7Zv2r3iMOvMnv0T0KWNQh5KATY9bcnmZYBAAsrdC/X 1ppAjR82YHaehTiZLgW55f4NLX4qRZwuIKiBtMrI2vo0O75vbUmqBt75wQQWFmOe j6zed1/7gN3jhaNYtAJzxsvx01FO+n4eXSOvEBHegAYMayUFWOMPpYCXjdMdWy+w NfeSPFgRUJR/3CRwMC2mUXbfp1C4AVchO56w5KE7IvomkD6o2WrcmK9zpA5CimFO ihSpYZ1OJz8qVijh8oT1kx0JdnECAwEAAaOCAhswggIXMB0GA1UdDgQWBBSsJWsu 7H28n9Ki+uHS33Rwq7GobTAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAWivsZbEOO3CSqou8JpJjGg8g5DK6/EfIvxY8KV5awloPrnka YjfWvNpZcJFzC9Y+2nPISuBGiW6ziQVptXKId8nvQYLENwHHDahWoYSaRUkX8wkx wxp5rigK0hv0g/IL12z7KLWDpHaddIDuO5ngEPyVXw8KwkOQ6oUEgYwem1SyCVbx PaeniS1UvbWo/uXb0snTk0vgDaPo/CrYkzrH3NChpF3rf9uOKWWOrx7ne4AOo/sn n9F3LePV9xcJSBM7vyeiUbNRdT4Xs+4aELA5JiLZt6rQ2nYVRpjTcivDvBVQVGAu 12ypTSyd6pd9ST4Jav6/RYzPc2Y0a+gmssahiA== -----END CERTIFICATE-----Generated at Wed Sep 23 11:15:36 2026 by rpki-client