$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: DIWJANQv/Yfc2P9RubWvzdmZhvqS4Jo9wS+8g72UfIE= Subject key identifier: D4:C2:E9:23:BB:F8:62:C6:F4:F1:AF:A1:2A:88:45:C1:BC:6A:85:3F Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 3D6C04E107D59517D8FA00872B11B227C5E49783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 0294 Signing time: Wed 29 Apr 2026 19:19:22 +0000 Manifest this update: Wed 29 Apr 2026 19:14:22 +0000 Manifest next update: Thu 30 Apr 2026 22:30:22 +0000 Files and hashes: 1: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=) 2: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=) 3: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=) 4: 3130332e32352e3132342e302f32342d3234203d3e2039343537.roa (hash: B+ADVjoTHnyVRxwPayXW8Wr41jua47v7vFKOzXKix6M=) 5: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: ND2EKNUYoz7IDXS+VlLtpv5b84f/noWg7t7kM6lVK1U=) 6: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Apr 2026 22:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6c:04:e1:07:d5:95:17:d8:fa:00:87:2b:11:b2:27:c5:e4:97:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Apr 29 19:14:22 2026 GMT Not After : Apr 30 22:30:22 2026 GMT Subject: CN=D4C2E923BBF862C6F4F1AFA12A8845C1BC6A853F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cc:5f:f3:31:6d:cf:63:24:ed:c5:e4:c0:72: f0:b9:6d:0f:11:46:a8:d5:81:b5:0d:32:54:51:02: 47:a8:0a:ec:00:64:a4:b8:44:32:1e:1a:bb:58:9a: 8b:19:b3:6e:16:86:19:68:00:0f:42:11:14:63:5d: 59:a1:29:29:56:82:fe:a6:c7:e6:d9:82:17:5f:66: e7:86:a0:8e:0d:b1:3f:81:e1:bd:ac:49:a5:00:00: 2c:56:0f:b4:39:f3:82:ce:f7:76:be:6f:58:27:9f: d4:56:b5:11:d4:b1:3a:2d:1e:8f:c4:43:31:38:8f: 5c:03:20:47:82:f2:e6:a8:a0:fe:57:86:6e:89:86: de:ab:ca:e0:07:bb:17:ba:7c:f3:dc:87:6e:78:c0: e7:fb:bb:5c:db:b8:71:52:cc:d9:6d:0d:2d:12:93: 5a:d3:b9:6f:68:d9:0b:3e:4a:b6:b5:64:11:17:87: ed:8a:25:61:bf:e9:66:89:5e:1a:31:85:2c:36:be: 13:38:00:f3:c2:07:64:6a:84:0f:d1:88:bd:3a:4b: 9b:58:23:3f:5c:5f:9b:03:63:a4:9a:d6:93:96:0e: b0:9a:54:62:6c:61:fa:7b:b7:02:e9:b3:d6:e9:9c: 73:7d:c6:84:69:11:bf:27:d5:02:e2:f7:56:6e:60: e2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C2:E9:23:BB:F8:62:C6:F4:F1:AF:A1:2A:88:45:C1:BC:6A:85:3F X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:13:ad:14:96:cf:c6:39:1d:df:eb:21:c2:12:92:8c:7f:2c: 47:fe:b1:d2:38:74:9f:13:c6:ca:62:7b:62:0a:0e:ac:b8:8b: d7:6c:9e:76:4c:37:48:fb:18:dc:53:39:2d:54:9a:24:70:5c: fb:b5:b6:f2:b4:20:84:0a:be:d1:11:c0:e7:e9:c3:69:49:c8: 8d:be:7f:be:d6:57:5a:93:39:e2:7c:8d:d4:72:f4:8c:43:4c: 8a:b3:2b:b2:66:b0:7a:4f:1b:c5:07:c2:f2:b9:b8:26:8c:e6: f5:68:a6:5d:e2:68:1b:b3:18:c1:04:5c:fb:2c:bd:d6:19:e6: 62:f6:5b:7b:89:0a:73:0b:0b:33:6b:9d:b0:fc:62:31:79:c4: 0c:d6:18:22:85:53:f3:36:a2:60:c2:2a:69:cd:13:9e:c1:5d: d0:65:82:3e:af:34:51:bb:ae:37:10:57:d6:80:c0:49:46:c3: d0:a5:b6:70:54:b9:b8:5a:44:d7:d8:5c:a3:dc:6c:4d:74:f5: f2:e1:cd:82:5e:59:af:66:ca:fc:8f:38:7a:6c:f3:87:86:82: 6d:19:be:8d:1c:bb:37:91:77:5c:14:f8:25:95:27:33:69:46: 64:74:a5:01:c3:83:60:cc:b7:ae:9c:53:a0:8d:c1:8c:d1:d6: 62:68:08:9c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPWwE4QfVlRfY+gCHKxGyJ8Xkl4MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI2MDQyOTE5MTQyMloX DTI2MDQzMDIyMzAyMlowMzExMC8GA1UEAxMoRDRDMkU5MjNCQkY4NjJDNkY0RjFB RkExMkE4ODQ1QzFCQzZBODUzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANTMX/Mxbc9jJO3F5MBy8LltDxFGqNWBtQ0yVFECR6gK7ABkpLhEMh4au1ia ixmzbhaGGWgAD0IRFGNdWaEpKVaC/qbH5tmCF19m54agjg2xP4HhvaxJpQAALFYP tDnzgs73dr5vWCef1Fa1EdSxOi0ej8RDMTiPXAMgR4Ly5qig/leGbomG3qvK4Ae7 F7p889yHbnjA5/u7XNu4cVLM2W0NLRKTWtO5b2jZCz5KtrVkEReH7YolYb/pZole GjGFLDa+EzgA88IHZGqED9GIvTpLm1gjP1xfmwNjpJrWk5YOsJpUYmxh+nu3Aumz 1umcc33GhGkRvyfVAuL3Vm5g4m8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBTUwukj u/hixvTxr6EqiEXBvGqFPzAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAPhOtFJbPxjkd3+shwhKSjH8sR/6x0jh0nxPGymJ7YgoOrLiL 12yedkw3SPsY3FM5LVSaJHBc+7W28rQghAq+0RHA5+nDaUnIjb5/vtZXWpM54nyN 1HL0jENMirMrsmawek8bxQfC8rm4Jozm9WimXeJoG7MYwQRc+yy91hnmYvZbe4kK cwsLM2udsPxiMXnEDNYYIoVT8zaiYMIqac0TnsFd0GWCPq80UbuuNxBX1oDASUbD 0KW2cFS5uFpE19hco9xsTXT18uHNgl5Zr2bK/I84emzzh4aCbRm+jRy7N5F3XBT4 JZUnM2lGZHSlAcODYMy3rpxToI3BjNHWYmgInA== -----END CERTIFICATE-----Generated at Thu Apr 30 04:25:08 2026 by rpki-client