$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json) Hash identifier: HH6Y16CEtmE/tqrFrDPI+Cb4BP1eH9G6nGEXnqQLZhE= Subject key identifier: DF:1F:65:F6:39:AB:D4:03:FD:02:7F:59:BC:0A:41:BB:3E:47:85:2E Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 28035D731776A6DF8D1BA9A72B828DF505A2DDCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft Manifest number: 0296 Signing time: Mon 28 Apr 2025 17:59:53 +0000 Manifest this update: Mon 28 Apr 2025 17:54:53 +0000 Manifest next update: Tue 29 Apr 2025 19:17:53 +0000 Files and hashes: 1: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: 6TD0ExxI9ccPudQnGn576h3HMZ4GLpugMFB0CMcEPcY=) 2: 3130332e3233382e3133302e302f32342d3234203d3e20313531313036.roa (hash: jHJxFEmDKUe2EPjbWcOLzV9LPmr1X1VjgRAMMGlG0Mw=) 3: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: befyV0hRkZPjsj2HiXn8OpPP07iuTlgDyNJrlhl8VkA=) 4: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: S8rFfs7IoEg3XYYnsyLOBvR6RACIA3juzHhODPn7ChQ=) 5: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: 34ZLdvJWRlaz+jTDs3YF3eEhOoQyE7fhuoEG/fJaNVY=) 6: 3130332e3233382e3132382e302f32342d3234203d3e20313531313036.roa (hash: 3hCx1gk12xhMekKDCa3KegcT7N4B/xxsoqqdlY9CXYI=) 7: 3130332e3233382e3133312e302f32342d3234203d3e20313531313036.roa (hash: zZ9adMjyAK6V+yaM2Aa/8/uAbDXUgk34Q/LvbI/Y3H4=) 8: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: YRgjmmE+nVi/PAXhqb3JUaahbh35VPMhIEe6x6m98Ho=) 9: 34332e3235352e38312e302f32342d3234203d3e20313431313538.roa (hash: SQWzDg71lRig1vikM6oroRmKP7jytIrlrfxg8Lw3ga4=) 10: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: E4ONBceQGtTtMJwjbxI/zmDC8SS3yBbRlcMhg4vXlLU=) 11: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (hash: 5hWADdZsX05Xm71wk93nvrisrc0F3dwJlLqjnpXhvtY=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 19:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:03:5d:73:17:76:a6:df:8d:1b:a9:a7:2b:82:8d:f5:05:a2:dd:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Apr 28 17:54:53 2025 GMT Not After : Apr 29 19:17:53 2025 GMT Subject: CN=DF1F65F639ABD403FD027F59BC0A41BB3E47852E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:d3:aa:41:53:b8:ff:68:e2:bc:11:6d:cd: 03:2e:56:a0:76:81:40:f1:62:bd:3c:f9:4e:10:0a: 11:66:78:5d:39:41:51:6a:8a:c0:a8:c3:ca:65:31: e7:41:f9:b5:9c:1c:84:ad:06:83:02:c2:6e:6f:5a: ab:a8:e9:30:d8:1c:ed:30:29:59:ee:b2:eb:5e:43: 60:e4:f6:db:44:8f:7e:bc:78:c0:93:ea:b8:82:fe: bb:81:06:b3:d8:bd:20:79:10:c9:f5:0a:79:aa:00: 7d:1c:40:ad:43:4b:ee:93:07:b9:66:c9:cc:c0:18: e4:83:64:fa:b9:96:a9:a1:ef:5b:d0:92:a2:a6:e2: f1:dc:21:61:6f:2c:86:13:d9:cb:17:fd:22:57:be: 5b:38:dd:73:34:ba:02:02:5b:6f:af:4b:76:3a:78: e2:bb:e6:c3:5e:7f:22:85:02:b1:9b:d4:ae:29:43: 9e:c5:ec:7f:f0:e4:bc:5e:33:95:a9:3a:e0:f2:59: 63:8a:ce:c6:f1:50:b5:65:1c:af:ff:85:dc:de:ba: 0f:77:b1:a5:2c:0f:54:ca:e4:83:46:6c:43:5a:26: b8:5d:a5:65:a5:0b:f7:f0:36:a7:1d:cd:e5:e1:35: 7b:2e:5d:b4:0e:11:d8:c9:a5:45:66:4a:1a:ae:83: 45:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1F:65:F6:39:AB:D4:03:FD:02:7F:59:BC:0A:41:BB:3E:47:85:2E X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:03:91:ba:50:18:23:7e:0d:b7:51:83:14:80:f1:7e:bd:56: ec:cc:e3:72:01:85:c2:8e:45:c5:b1:a4:0a:17:f8:17:77:64: 50:c7:96:a7:0f:64:29:88:e9:ee:d6:a0:57:56:63:4c:69:cc: 2e:ab:2f:42:b7:47:b6:1c:21:f1:47:ec:45:eb:a7:90:e0:f0: df:56:f8:a0:88:0d:4c:f8:f7:80:e6:f3:b6:82:c2:05:08:3c: 38:3e:a9:b4:4b:71:d9:2d:12:0d:77:69:c8:bb:af:3f:85:62: 9e:a2:17:be:16:0e:71:c2:ce:73:75:30:d7:40:b5:00:da:13: d4:bf:8a:98:92:9a:7b:66:92:b3:18:40:0f:78:20:31:47:c0: e7:4c:5d:b8:a6:a5:51:cb:b6:39:34:f7:cc:25:81:21:cc:c0: 46:b7:85:4a:e2:02:da:e8:1d:4c:e3:07:55:51:15:0e:4c:6e: 7a:9a:f2:cf:b5:03:d5:82:12:92:5d:d1:54:49:a1:1b:ed:1d: 1b:dd:53:0d:29:43:c0:b0:b3:3b:5b:3f:8e:7e:f2:e8:b1:1d: 89:4d:9d:ee:bd:db:60:90:ab:1e:70:80:8f:d3:d9:86:70:91: d7:b9:c5:38:0d:d6:45:fb:1f:ec:f7:f8:0c:ef:be:b1:e0:40: d4:9c:cc:4d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKANdcxd2pt+NG6mnK4KN9QWi3c8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MDQyODE3NTQ1M1oX DTI1MDQyOTE5MTc1M1owMzExMC8GA1UEAxMoREYxRjY1RjYzOUFCRDQwM0ZEMDI3 RjU5QkMwQTQxQkIzRTQ3ODUyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqn06pBU7j/aOK8EW3NAy5WoHaBQPFivTz5ThAKEWZ4XTlBUWqKwKjDymUx 50H5tZwchK0GgwLCbm9aq6jpMNgc7TApWe6y615DYOT220SPfrx4wJPquIL+u4EG s9i9IHkQyfUKeaoAfRxArUNL7pMHuWbJzMAY5INk+rmWqaHvW9CSoqbi8dwhYW8s hhPZyxf9Ile+WzjdczS6AgJbb69Ldjp44rvmw15/IoUCsZvUrilDnsXsf/DkvF4z lak64PJZY4rOxvFQtWUcr/+F3N66D3expSwPVMrkg0ZsQ1omuF2lZaUL9/A2px3N 5eE1ey5dtA4R2MmlRWZKGq6DReMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTfH2X2 OavUA/0Cf1m8CkG7PkeFLjAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAKAORulAYI34Nt1GDFIDxfr1W7MzjcgGFwo5FxbGkChf4F3dk UMeWpw9kKYjp7tagV1ZjTGnMLqsvQrdHthwh8UfsReunkODw31b4oIgNTPj3gObz toLCBQg8OD6ptEtx2S0SDXdpyLuvP4VinqIXvhYOccLOc3Uw10C1ANoT1L+KmJKa e2aSsxhAD3ggMUfA50xduKalUcu2OTT3zCWBIczARreFSuIC2ugdTOMHVVEVDkxu epryz7UD1YISkl3RVEmhG+0dG91TDSlDwLCzO1s/jn7y6LEdiU2d7r3bYJCrHnCA j9PZhnCR17nFOA3WRfsf7Pf4DO++seBA1JzMTQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:32 2025 by rpki-client on console.sobornost.net