$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json) Hash identifier: a+L8MYjjzNyMBR91eVEbOEaeWMqXzMvtMO4JWZvd530= Subject key identifier: FE:EB:15:6E:A7:EE:D6:93:F3:19:06:BC:C5:38:5B:1D:8D:30:71:BE Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Certificate serial: 48E91E48F859EADFD19D6D2C6EF1018CBB5AC0A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft Manifest number: 0367 Signing time: Wed 23 Sep 2026 07:11:32 +0000 Manifest this update: Wed 23 Sep 2026 07:06:32 +0000 Manifest next update: Thu 24 Sep 2026 08:48:32 +0000 Files and hashes: 1: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: 9bAvikxQlP5qR0dP6+VGTVto3SHbQqG2YMfk7bZ5dWQ=) 2: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: 7QCONFpvmyuNf5zvgrCNMc+J3LAExntNG5Qv6K3hEbs=) 3: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ=) 4: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: VcmsnRsgmQnBSJtXlXxQZTY4P3vXZvCafvFQMqv4vfA=) 5: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: XCFQR4hI12Tjgtit3SEE2XJc52bIvb2OFixoEnv1lfk=) 6: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e9:1e:48:f8:59:ea:df:d1:9d:6d:2c:6e:f1:01:8c:bb:5a:c0:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Validity Not Before: Sep 23 07:06:32 2026 GMT Not After : Sep 24 08:48:32 2026 GMT Subject: CN=FEEB156EA7EED693F31906BCC5385B1D8D3071BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:6c:0c:c3:ad:82:b5:09:dd:27:fb:e4:38: 8a:bd:97:cf:db:55:1b:0d:d0:ba:97:71:2b:b6:78: 24:c4:50:4d:af:ea:b3:9c:fa:f6:19:88:d3:24:34: bc:b4:59:37:4c:00:41:87:79:96:59:97:57:42:7e: b5:b9:28:93:41:6e:ce:fd:c5:b8:d7:b6:8b:6e:f5: a6:ff:4f:e1:ab:e3:c1:b0:53:ff:34:4f:98:cf:f1: b7:c3:d4:a0:23:a8:0b:76:63:70:29:7c:8e:8c:15: fd:91:1e:92:c4:32:6e:ce:c6:2b:ba:1d:ae:33:a9: ef:ee:52:af:3a:86:45:ee:5b:34:af:6e:21:bf:75: 43:b2:8c:42:78:47:9a:49:bd:c7:c3:f4:17:22:18: 53:32:e3:6e:fd:d8:08:c5:3b:bf:f3:38:da:e6:07: 35:7c:3e:46:b9:09:ab:2c:b6:8e:5a:4f:12:f2:5e: 4c:0f:12:5e:f5:ab:fb:f9:15:73:0d:0a:5d:c3:ab: e5:77:b5:0d:2c:08:cb:94:72:c6:d1:b1:31:e4:88: ce:6e:ec:96:e4:f3:89:05:b2:23:6b:f6:c5:85:8d: 46:c1:4a:1c:d2:91:b2:fa:10:1b:59:93:29:65:b3: b5:bc:65:ce:bb:33:f8:0a:ce:49:53:46:8a:90:68: c1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EB:15:6E:A7:EE:D6:93:F3:19:06:BC:C5:38:5B:1D:8D:30:71:BE X509v3 Authority Key Identifier: keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:b9:b7:f7:91:c1:ce:3d:4f:d7:60:72:97:82:c8:bd:2c:78: aa:19:71:72:1f:4e:53:9d:9c:c0:31:e5:34:88:e0:98:cf:b5: 30:58:8f:6e:ba:4a:34:5b:8f:cf:28:28:1c:65:cb:53:fd:f6: 7b:4c:a5:db:67:49:bb:f9:97:8a:ec:62:64:11:21:e8:63:f0: 07:b2:da:58:72:3c:7c:d1:9d:c8:18:87:a5:c3:eb:39:6f:22: 3f:5c:94:7a:b6:9f:23:23:a9:12:bf:91:a4:cd:c1:42:79:8c: b3:8f:b3:61:a4:37:24:59:09:bd:13:88:07:91:19:e8:dd:46: 28:6a:48:f5:e6:a9:dc:44:cd:cb:e4:c4:3b:fe:d9:45:b2:bb: 2f:3a:09:46:75:d9:c0:df:13:b2:92:48:60:db:47:a6:54:de: a3:f8:96:65:eb:6c:78:55:84:f6:e8:4b:04:92:5d:6f:ea:e8: 03:ef:6e:4e:78:53:29:d5:86:39:46:92:af:5f:8d:2a:f2:b4: e8:6c:33:2f:a7:13:09:01:1e:a8:d1:db:b1:78:7b:5c:6c:fb: e5:b4:1a:bf:7d:14:52:5b:05:69:a3:9a:65:c6:6a:ea:bd:ac: da:15:31:31:31:21:9c:2a:1b:54:2e:15:4c:7d:6d:1c:70:38: 25:b8:0a:5b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSOkeSPhZ6t/RnW0sbvEBjLtawKEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1 Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI2MDkyMzA3MDYzMloX DTI2MDkyNDA4NDgzMlowMzExMC8GA1UEAxMoRkVFQjE1NkVBN0VFRDY5M0YzMTkw NkJDQzUzODVCMUQ4RDMwNzFCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM5kbAzDrYK1Cd0n++Q4ir2Xz9tVGw3QupdxK7Z4JMRQTa/qs5z69hmI0yQ0 vLRZN0wAQYd5llmXV0J+tbkok0Fuzv3FuNe2i271pv9P4avjwbBT/zRPmM/xt8PU oCOoC3ZjcCl8jowV/ZEeksQybs7GK7odrjOp7+5SrzqGRe5bNK9uIb91Q7KMQnhH mkm9x8P0FyIYUzLjbv3YCMU7v/M42uYHNXw+RrkJqyy2jlpPEvJeTA8SXvWr+/kV cw0KXcOr5Xe1DSwIy5RyxtGxMeSIzm7sluTziQWyI2v2xYWNRsFKHNKRsvoQG1mT KWWztbxlzrsz+ArOSVNGipBowaUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBT+6xVu p+7Wk/MZBrzFOFsdjTBxvjAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp UXl0TDNMX1RJUG1vdHQzSHMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUx MDAwMDAvMC81RDcwN0IwRDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAYrm395HBzj1P12Byl4LIvSx4qhlxch9OU52cwDHlNIjgmM+1 MFiPbrpKNFuPzygoHGXLU/32e0yl22dJu/mXiuxiZBEh6GPwB7LaWHI8fNGdyBiH pcPrOW8iP1yUerafIyOpEr+RpM3BQnmMs4+zYaQ3JFkJvROIB5EZ6N1GKGpI9eap 3ETNy+TEO/7ZRbK7LzoJRnXZwN8TspJIYNtHplTeo/iWZetseFWE9uhLBJJdb+ro A+9uTnhTKdWGOUaSr1+NKvK06GwzL6cTCQEeqNHbsXh7XGz75bQav30UUlsFaaOa ZcZq6r2s2hUxMTEhnCobVC4VTH1tHHA4JbgKWw== -----END CERTIFICATE-----Generated at Thu Sep 24 01:55:58 2026 by rpki-client