$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: RZ3HB7zIwD/uiCYQrCBIav+L7FC7DBVsP1AXRGSOfXU= Subject key identifier: 50:49:21:37:EC:9D:14:3A:11:31:43:64:50:A1:DA:4C:6A:AC:C4:C6 Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 4C1FD5B9A785E987197DC432DBB932555AFC5F5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 0153 Signing time: Fri 05 Sep 2025 22:50:57 +0000 Manifest this update: Fri 05 Sep 2025 22:45:57 +0000 Manifest next update: Sat 06 Sep 2025 23:47:57 +0000 Files and hashes: 1: 3130332e32352e3132342e302f32342d3234203d3e203134363138.roa (hash: N/UGLKyCF1nlWGfA4MlZFn9fe9dMDYLHEgBApUdM/AQ=) 2: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: 3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=) 3: 3130332e32352e3132342e302f32342d3234203d3e203230343733.roa (hash: 8k5xMj72vdeb02tvhBSSTZSUb9XJjAZCB0tiP/qA9IU=) 4: 3130332e32352e3132342e302f32342d3234203d3e203136353039.roa (hash: 0ULEQRz2ldMvt+RFzaD6gYHgW85Kkj7F+ioCi2gyZr8=) 5: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: tb153Vr54RWfM3IgzIUBb//vjbs9l9DOuHXG1GDD8EQ=) 6: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=) 7: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=) 8: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 23:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:1f:d5:b9:a7:85:e9:87:19:7d:c4:32:db:b9:32:55:5a:fc:5f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Sep 5 22:45:57 2025 GMT Not After : Sep 6 23:47:57 2025 GMT Subject: CN=50492137EC9D143A1131436450A1DA4C6AACC4C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:bc:76:b6:fd:a5:b7:0b:5c:08:7f:8e:66: 8d:19:e8:e0:17:d9:b3:64:0a:61:9d:c7:e5:51:25: bd:13:f9:8c:3b:b6:22:07:03:18:78:b7:87:78:fe: 12:f9:c2:43:09:d2:f7:e9:05:a4:6e:4c:ff:c5:0f: 28:f9:e5:a6:64:73:b0:37:03:55:47:1d:62:8e:e0: d7:59:1d:b4:7f:52:b9:b3:21:81:b8:3c:be:d1:2c: 8e:70:e2:03:fa:6c:0a:ca:c2:b6:67:b5:8a:8b:f2: d1:26:c8:0e:7a:d9:9d:56:c0:c8:2e:5a:7f:5b:c7: 35:b4:eb:d7:b0:1d:7b:9c:d5:0b:3f:b3:c1:60:d9: b6:a9:3d:6c:59:3d:c4:41:fe:74:22:38:62:1b:b3: df:a0:46:2d:fb:0f:f5:fd:b2:c5:6e:d9:a5:7f:8e: 81:2a:a7:c6:0b:46:5a:b0:95:2e:a7:f6:89:11:b0: ef:60:a7:64:99:cf:17:f4:b3:ba:eb:e1:c3:fb:cf: 20:97:39:9f:0f:e4:dd:1d:34:d4:51:56:96:d2:00: 81:07:48:27:b7:70:4a:c2:17:da:88:de:e6:08:9c: ab:4f:ef:1e:45:d6:59:9f:50:a5:c7:2d:9e:3d:0c: 94:d2:7c:e9:45:b0:ef:42:e6:6a:cb:e4:58:e3:5c: 75:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:49:21:37:EC:9D:14:3A:11:31:43:64:50:A1:DA:4C:6A:AC:C4:C6 X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2a:b4:48:06:83:d1:d5:5f:6f:6d:ad:41:e9:25:55:b1:ea: 15:b0:8d:a7:96:79:29:e8:90:c9:72:49:4e:6f:cd:0a:2f:9e: d3:40:47:38:7d:4a:60:34:49:ff:b1:fa:85:51:61:de:81:bb: e8:a3:6c:80:dc:1e:e8:ea:49:e1:56:a0:56:a9:95:b7:6f:2a: ba:bf:f6:66:7f:75:9f:15:4c:dc:38:45:3b:a7:7b:51:2a:2b: 29:84:2a:e0:fe:d6:33:f9:e9:a7:62:c1:2e:50:31:80:1f:be: aa:33:f9:1a:30:bb:bf:11:71:be:6e:61:f0:98:72:52:73:06: 13:be:bc:55:2c:fe:7a:e3:46:b4:29:cb:ff:8e:ca:ac:4b:18: b2:6b:97:86:ce:dd:f7:9d:58:fe:7a:78:fa:34:f9:8d:30:66: 9f:fb:04:d9:9a:7e:49:ba:74:43:7e:69:ee:9c:ff:84:34:6e: d0:c9:46:04:b1:0b:28:da:f0:83:a8:77:f7:23:ba:7b:b7:06: 67:84:c6:01:ef:22:13:d1:4b:6f:49:dc:d7:e5:fc:bd:c7:f2: 67:24:77:00:98:f7:9c:cb:84:8d:08:56:40:1f:0e:82:4a:9f: 28:b4:32:b7:d8:5c:be:20:a7:88:80:b9:7b:75:4e:79:31:ef: e0:5b:5b:d1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTB/VuaeF6YcZfcQy27kyVVr8X14wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MDkwNTIyNDU1N1oX DTI1MDkwNjIzNDc1N1owMzExMC8GA1UEAxMoNTA0OTIxMzdFQzlEMTQzQTExMzE0 MzY0NTBBMURBNEM2QUFDQzRDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALf+vHa2/aW3C1wIf45mjRno4BfZs2QKYZ3H5VElvRP5jDu2IgcDGHi3h3j+ EvnCQwnS9+kFpG5M/8UPKPnlpmRzsDcDVUcdYo7g11kdtH9SubMhgbg8vtEsjnDi A/psCsrCtme1iovy0SbIDnrZnVbAyC5af1vHNbTr17Ade5zVCz+zwWDZtqk9bFk9 xEH+dCI4Yhuz36BGLfsP9f2yxW7ZpX+OgSqnxgtGWrCVLqf2iRGw72CnZJnPF/Sz uuvhw/vPIJc5nw/k3R001FFWltIAgQdIJ7dwSsIX2oje5gicq0/vHkXWWZ9Qpcct nj0MlNJ86UWw70LmasvkWONcde0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBRQSSE3 7J0UOhExQ2RQodpMaqzExjAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAbyq0SAaD0dVfb22tQeklVbHqFbCNp5Z5KeiQyXJJTm/NCi+e 00BHOH1KYDRJ/7H6hVFh3oG76KNsgNwe6OpJ4VagVqmVt28qur/2Zn91nxVM3DhF O6d7USorKYQq4P7WM/npp2LBLlAxgB++qjP5GjC7vxFxvm5h8JhyUnMGE768VSz+ euNGtCnL/47KrEsYsmuXhs7d951Y/np4+jT5jTBmn/sE2Zp+Sbp0Q35p7pz/hDRu 0MlGBLELKNrwg6h39yO6e7cGZ4TGAe8iE9FLb0nc1+X8vcfyZyR3AJj3nMuEjQhW QB8OgkqfKLQyt9hcviCniIC5e3VOeTHv4Ftb0Q== -----END CERTIFICATE-----Generated at Sat Sep 6 15:35:21 2025 by rpki-client