$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: maH45H8HGqYOiJhGoJhIcPwCnQYtNyUfLh1xEX0nKbw= Subject key identifier: 76:5D:9E:B2:43:79:7B:D1:7A:AA:D1:F3:4A:81:90:FD:F2:7B:74:8F Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 745F433F1C94755AD1AD5A8ED85330FA71E3BED4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 86 Signing time: Fri 04 Apr 2025 16:34:16 +0000 Manifest this update: Fri 04 Apr 2025 16:29:16 +0000 Manifest next update: Sat 05 Apr 2025 16:45:16 +0000 Files and hashes: 1: 3130332e32352e3132342e302f32342d3234203d3e203230343733.roa (hash: 8k5xMj72vdeb02tvhBSSTZSUb9XJjAZCB0tiP/qA9IU=) 2: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: 3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=) 3: 3130332e32352e3132342e302f32342d3234203d3e203136353039.roa (hash: 0ULEQRz2ldMvt+RFzaD6gYHgW85Kkj7F+ioCi2gyZr8=) 4: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=) 5: 3130332e32352e3132352e302f32342d3234203d3e20313530363534.roa (hash: TKkmbX2rZAc1MWXE3pRutjjB5Wb/b242gTsyLM3JxT4=) 6: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=) 7: 3130332e32352e3132342e302f32342d3234203d3e203134363138.roa (hash: N/UGLKyCF1nlWGfA4MlZFn9fe9dMDYLHEgBApUdM/AQ=) 8: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: v7VsnCKjWy70/alisi2sXsDYpPX0Bv+VoJrWQc1pwnM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 16:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5f:43:3f:1c:94:75:5a:d1:ad:5a:8e:d8:53:30:fa:71:e3:be:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000 Validity Not Before: Apr 4 16:29:16 2025 GMT Not After : Apr 5 16:45:16 2025 GMT Subject: CN=765D9EB243797BD17AAAD1F34A8190FDF27B748F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:45:28:c4:a5:ea:e7:59:0a:2a:92:54:bb: 52:9f:34:57:0d:53:88:19:44:3f:2f:7b:9e:c8:17: 1a:41:d5:91:90:59:b9:49:f0:83:6e:84:bc:a5:16: 46:5f:fd:a8:e5:1b:1b:f7:6c:5d:6b:6f:97:53:7d: 17:31:16:ee:6c:a6:aa:9c:4b:b3:65:09:cb:1e:cd: c7:cb:18:f9:ff:eb:d8:79:75:97:c6:46:40:5d:4e: 31:1f:ca:f2:6f:82:d4:8e:c2:83:3d:5c:4f:a9:0d: 8c:c0:40:a0:40:45:1f:e7:b1:ec:e0:66:46:a2:1d: 88:89:17:f8:46:bd:41:c7:a0:4b:1d:e7:36:c1:50: ea:25:71:8c:31:30:01:e9:87:68:a6:74:fb:26:c4: e6:61:fc:da:8b:d8:b3:24:c1:ce:88:e1:2c:4b:18: 6c:0d:d7:35:78:d5:0f:b8:dc:e9:b9:75:e7:d1:2a: e7:26:36:ae:91:3d:9d:f6:49:6a:f9:39:5a:18:d9: c3:2c:01:3e:58:96:9c:91:e7:01:9d:c7:1d:84:3a: e0:79:fe:7a:c8:4b:eb:84:57:db:63:e5:2b:6f:8b: 1a:24:fc:57:87:25:2e:59:71:22:5a:06:0f:5d:e3: 05:a8:46:93:6f:5c:90:e8:a6:1e:8d:e2:b1:59:45: 0d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5D:9E:B2:43:79:7B:D1:7A:AA:D1:F3:4A:81:90:FD:F2:7B:74:8F X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:25:bc:8b:2b:33:60:73:b8:f4:95:bc:59:ea:de:34:ce:15: db:45:e9:88:fb:d4:da:b6:53:fd:9e:26:b9:85:ed:a0:38:b7: f4:ed:b2:2b:35:67:1a:c9:ec:89:4e:e1:e7:e6:e5:27:fa:84: ac:6a:47:39:88:0e:ca:e9:20:62:0d:ba:19:dd:07:33:5c:a2: 8d:a7:b4:d1:f0:e9:e0:cd:42:80:02:5b:c5:32:61:35:76:3e: be:5b:aa:9b:83:18:3f:6f:30:9f:d7:b7:cc:1a:6b:eb:a7:2d: 48:4f:af:c3:3a:d8:e7:88:e6:58:93:e6:bc:13:dd:22:3d:9a: 28:4c:40:f0:75:32:63:a3:09:05:0e:c9:ef:2a:88:30:71:4d: 28:0e:42:da:99:0d:a1:ac:68:5f:2f:31:71:4f:eb:1d:c5:fe: 87:4e:c0:6e:3d:4f:de:40:79:38:c8:f9:d7:1a:b1:e6:42:eb: 30:b3:80:bf:d3:8e:22:bb:93:15:85:e5:92:77:f8:f7:37:a0: ff:fe:3d:e5:7e:ad:80:e4:fe:2e:b4:78:56:ef:28:44:2a:fe: a0:18:be:ce:8b:9a:56:60:1a:56:05:e1:53:4d:b5:fb:88:34: db:3a:f5:32:2c:9f:7a:0e:42:09:8e:a3:1f:cd:92:4e:b7:58: 8c:ec:a2:03 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdF9DPxyUdVrRrVqO2FMw+nHjvtQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MDQwNDE2MjkxNloX DTI1MDQwNTE2NDUxNlowMzExMC8GA1UEAxMoNzY1RDlFQjI0Mzc5N0JEMTdBQUFE MUYzNEE4MTkwRkRGMjdCNzQ4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhLRSjEpernWQoqklS7Up80Vw1TiBlEPy97nsgXGkHVkZBZuUnwg26EvKUW Rl/9qOUbG/dsXWtvl1N9FzEW7mymqpxLs2UJyx7Nx8sY+f/r2Hl1l8ZGQF1OMR/K 8m+C1I7Cgz1cT6kNjMBAoEBFH+ex7OBmRqIdiIkX+Ea9QcegSx3nNsFQ6iVxjDEw AemHaKZ0+ybE5mH82ovYsyTBzojhLEsYbA3XNXjVD7jc6bl159Eq5yY2rpE9nfZJ avk5WhjZwywBPliWnJHnAZ3HHYQ64Hn+eshL64RX22PlK2+LGiT8V4clLllxIloG D13jBahGk29ckOimHo3isVlFDb0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBR2XZ6y Q3l70Xqq0fNKgZD98nt0jzAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAkyW8iyszYHO49JW8WereNM4V20XpiPvU2rZT/Z4muYXtoDi3 9O2yKzVnGsnsiU7h5+blJ/qErGpHOYgOyukgYg26Gd0HM1yijae00fDp4M1CgAJb xTJhNXY+vluqm4MYP28wn9e3zBpr66ctSE+vwzrY54jmWJPmvBPdIj2aKExA8HUy Y6MJBQ7J7yqIMHFNKA5C2pkNoaxoXy8xcU/rHcX+h07Abj1P3kB5OMj51xqx5kLr MLOAv9OOIruTFYXlknf49zeg//495X6tgOT+LrR4Vu8oRCr+oBi+zouaVmAaVgXh U021+4g02zr1Miyfeg5CCY6jH82STrdYjOyiAw== -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:42 2025 by rpki-client