$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: isXHdUIq803HKH8y/0MjkxMmTLszdEZugL30d+3E69Y= Subject key identifier: B0:34:D6:F5:AF:03:A0:87:FB:95:2E:8C:20:C7:72:9A:6B:28:4D:5C Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 4C1589F9AF8EA27A0FEF0C8FDB2B158D04511827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 0116 Signing time: Tue 22 Jul 2025 02:29:52 +0000 Manifest this update: Tue 22 Jul 2025 02:24:52 +0000 Manifest next update: Wed 23 Jul 2025 03:25:52 +0000 Files and hashes: 1: 3130332e32352e3132342e302f32342d3234203d3e203134363138.roa (hash: N/UGLKyCF1nlWGfA4MlZFn9fe9dMDYLHEgBApUdM/AQ=) 2: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: 8SWp7gh626pKpx3r6RA3lRPjz40mKVWj3/jepQ2jHhU=) 3: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: 3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=) 4: 3130332e32352e3132342e302f32342d3234203d3e203230343733.roa (hash: 8k5xMj72vdeb02tvhBSSTZSUb9XJjAZCB0tiP/qA9IU=) 5: 3130332e32352e3132342e302f32342d3234203d3e203136353039.roa (hash: 0ULEQRz2ldMvt+RFzaD6gYHgW85Kkj7F+ioCi2gyZr8=) 6: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=) 7: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:15:89:f9:af:8e:a2:7a:0f:ef:0c:8f:db:2b:15:8d:04:51:18:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Jul 22 02:24:52 2025 GMT Not After : Jul 23 03:25:52 2025 GMT Subject: CN=B034D6F5AF03A087FB952E8C20C7729A6B284D5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:73:5b:f4:75:64:3a:2a:a8:e9:09:5d:20: 7f:5c:c1:9c:7e:37:71:18:17:8e:f2:43:85:5d:84: 7e:af:85:99:69:0c:88:96:92:84:8f:a4:43:a6:32: 79:be:16:b9:fc:24:69:86:4c:33:9a:e8:2b:1e:9d: aa:79:8a:f9:45:8a:f2:f3:b2:0c:da:cd:ec:59:c9: 16:fb:75:b5:0d:c3:3e:18:76:96:d6:dc:a1:dd:82: 3a:14:a7:80:ef:29:6c:67:de:53:01:dc:c7:85:81: 14:29:50:02:88:7f:cd:09:72:27:e4:75:5a:61:21: b1:94:fe:90:c1:1e:02:20:59:01:de:cd:91:ee:a5: 37:a6:fb:59:ed:83:45:ff:26:04:fe:5c:91:c7:b7: 0e:de:d8:2d:e1:00:43:8b:5c:46:28:04:ee:8e:da: 5b:0d:48:b1:c0:fc:fd:98:c0:9a:b8:1c:0e:cc:1f: ce:a9:44:84:b0:11:fb:4e:d5:66:48:e2:7d:f6:cd: 22:4e:6c:06:cd:67:1a:9c:12:e7:4f:80:45:d9:31: a4:dd:66:65:10:96:82:23:5f:7b:df:ef:44:85:8f: 8c:24:5d:e1:fe:3e:1c:89:1e:99:ae:ed:f5:29:9b: 56:ac:d8:51:f6:f8:ba:da:58:ed:aa:af:ac:84:9e: 50:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:34:D6:F5:AF:03:A0:87:FB:95:2E:8C:20:C7:72:9A:6B:28:4D:5C X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:8c:7d:51:dd:0a:e3:37:a1:ec:00:60:e0:55:a2:4d:03:b1: 0d:40:e8:81:63:b5:99:00:bf:56:67:7b:b3:75:9d:97:4e:b7: ab:05:84:cb:3f:45:a4:bf:f5:48:05:fa:71:2b:53:71:1b:0e: c4:a7:64:85:f0:5a:3b:48:25:db:0a:b2:cd:fb:c2:23:6c:52: 1b:3c:0e:27:82:66:8c:ef:25:78:29:dd:0d:34:21:ad:c1:10: dc:49:cd:56:f4:3b:34:af:fc:72:e9:ba:0a:38:f0:bf:b7:ec: 47:4b:f7:1d:29:a8:72:77:c7:55:71:41:f8:9c:03:0c:b9:71: 3c:bb:22:a7:88:48:00:dd:8b:98:ce:2c:7e:5b:7a:b7:46:02: a8:8d:21:51:69:28:c5:05:44:21:f9:ec:dd:15:1c:09:08:e2: 9b:58:5f:01:14:20:f0:72:80:ef:4d:e8:7c:9d:b3:24:b1:9b: 9a:3f:80:d0:03:dd:10:b1:52:30:9f:e9:37:3d:a6:b3:7f:05: f9:b1:56:b4:c9:c5:6b:68:da:e9:41:f1:e1:4f:f4:7f:18:84: de:88:82:8a:43:14:48:0e:3b:ea:d5:b7:f1:40:a9:ef:c6:d6: 3f:d2:2c:cb:ed:74:84:a8:9f:12:b1:a4:51:b4:83:17:18:e0: 3f:cd:d1:12 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTBWJ+a+OonoP7wyP2ysVjQRRGCcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MDcyMjAyMjQ1MloX DTI1MDcyMzAzMjU1MlowMzExMC8GA1UEAxMoQjAzNEQ2RjVBRjAzQTA4N0ZCOTUy RThDMjBDNzcyOUE2QjI4NEQ1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK83c1v0dWQ6KqjpCV0gf1zBnH43cRgXjvJDhV2Efq+FmWkMiJaShI+kQ6Yy eb4WufwkaYZMM5roKx6dqnmK+UWK8vOyDNrN7FnJFvt1tQ3DPhh2ltbcod2COhSn gO8pbGfeUwHcx4WBFClQAoh/zQlyJ+R1WmEhsZT+kMEeAiBZAd7Nke6lN6b7We2D Rf8mBP5ckce3Dt7YLeEAQ4tcRigE7o7aWw1IscD8/ZjAmrgcDswfzqlEhLAR+07V ZkjiffbNIk5sBs1nGpwS50+ARdkxpN1mZRCWgiNfe9/vRIWPjCRd4f4+HIkema7t 9SmbVqzYUfb4utpY7aqvrISeULMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSwNNb1 rwOgh/uVLowgx3KaayhNXDAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAoYx9Ud0K4zeh7ABg4FWiTQOxDUDogWO1mQC/Vmd7s3Wdl063 qwWEyz9FpL/1SAX6cStTcRsOxKdkhfBaO0gl2wqyzfvCI2xSGzwOJ4JmjO8leCnd DTQhrcEQ3EnNVvQ7NK/8cum6Cjjwv7fsR0v3HSmocnfHVXFB+JwDDLlxPLsip4hI AN2LmM4sflt6t0YCqI0hUWkoxQVEIfns3RUcCQjim1hfARQg8HKA703ofJ2zJLGb mj+A0APdELFSMJ/pNz2ms38F+bFWtMnFa2ja6UHx4U/0fxiE3oiCikMUSA476tW3 8UCp78bWP9Isy+10hKifErGkUbSDFxjgP83REg== -----END CERTIFICATE-----Generated at Tue Jul 22 19:46:40 2025 by rpki-client