$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: gOHtdg59PsCfGmGltTGaCsgGx/tS6lQwI9+MVJw6Ipo= Subject key identifier: 0F:29:E3:73:04:BC:79:56:B8:E4:23:12:C7:39:15:2A:C4:D3:7E:D2 Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 7DC633336353F0C8B574CE82B4DEF0F485CEA664 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: D1 Signing time: Sat 31 May 2025 00:20:33 +0000 Manifest this update: Sat 31 May 2025 00:15:33 +0000 Manifest next update: Sun 01 Jun 2025 01:30:33 +0000 Files and hashes: 1: 3130332e32352e3132352e302f32342d3234203d3e20313530363534.roa (hash: TKkmbX2rZAc1MWXE3pRutjjB5Wb/b242gTsyLM3JxT4=) 2: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=) 3: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: OP6p/gkDUKIHZUIjl7m2t27pxMFX5PnKMfT0XRQY2rA=) 4: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=) 5: 3130332e32352e3132342e302f32342d3234203d3e203136353039.roa (hash: 0ULEQRz2ldMvt+RFzaD6gYHgW85Kkj7F+ioCi2gyZr8=) 6: 3130332e32352e3132342e302f32342d3234203d3e203134363138.roa (hash: N/UGLKyCF1nlWGfA4MlZFn9fe9dMDYLHEgBApUdM/AQ=) 7: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: 3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=) 8: 3130332e32352e3132342e302f32342d3234203d3e203230343733.roa (hash: 8k5xMj72vdeb02tvhBSSTZSUb9XJjAZCB0tiP/qA9IU=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Jun 2025 01:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c6:33:33:63:53:f0:c8:b5:74:ce:82:b4:de:f0:f4:85:ce:a6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: May 31 00:15:33 2025 GMT Not After : Jun 1 01:30:33 2025 GMT Subject: CN=0F29E37304BC7956B8E42312C739152AC4D37ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2d:6d:ef:1e:45:45:c4:46:a2:c9:b9:15:0f: 21:76:8c:a0:20:04:e9:be:3d:3c:25:ac:41:60:12: cd:b7:5d:b8:87:24:11:8a:b3:d0:4d:55:c5:a6:f6: a6:f5:2f:7d:36:54:01:25:93:54:bd:ad:2e:66:12: 23:d0:47:f4:c5:1f:7e:fe:37:9c:f1:7e:de:a5:0c: 50:60:e5:3d:94:a1:de:89:b7:19:78:71:84:0a:7f: a6:a6:5a:d6:68:cb:4d:d8:3e:46:d7:ff:ff:ee:46: 2e:46:15:93:f6:6e:56:c8:b4:97:8c:3b:92:fe:27: ee:88:7a:8c:be:3f:64:25:3f:43:63:14:66:fc:0e: 19:6f:6c:b8:97:99:b5:21:9f:ee:92:05:e6:43:e8: 8a:67:1d:b5:ca:d0:22:59:e5:33:79:45:cc:fa:00: 37:31:87:1b:56:23:64:9a:37:a8:ee:0e:2f:2f:bc: bb:ac:02:73:1b:0d:26:ef:56:ba:c2:38:80:50:62: ce:d1:78:bd:8f:fc:c7:22:d7:a6:3b:be:3f:29:36: bf:6f:8a:3b:f2:86:57:f2:36:87:c3:a3:c5:f4:94: 0f:50:ea:08:80:cd:09:9f:a6:15:5b:0b:40:0e:d9: 95:d2:aa:12:51:be:fa:44:71:30:d8:eb:72:2c:d5: 26:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:29:E3:73:04:BC:79:56:B8:E4:23:12:C7:39:15:2A:C4:D3:7E:D2 X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:20:65:88:49:b3:e5:b2:72:0b:5f:25:29:bb:09:ae:7d:39: 7c:e5:f3:36:77:19:30:d4:07:46:e0:29:96:f0:8c:e5:05:e4: 68:62:74:4a:38:99:d2:4e:b5:34:a5:10:00:ae:41:18:56:fc: cd:0c:b1:e2:4e:e6:47:c1:8d:8e:0c:92:26:4f:d0:8c:89:51: 18:fd:4b:a7:fe:fa:99:9f:8a:44:6c:64:27:32:37:af:48:7b: f6:e3:f8:32:2b:1a:55:42:26:5b:95:53:e2:a5:10:c8:ef:54: ee:09:9e:0c:fa:61:50:22:f2:b9:8b:62:e3:63:4d:c1:74:39: 7f:16:d4:53:17:48:d3:77:fd:d9:f3:4b:16:65:a2:7b:32:99: 87:ec:f6:77:82:4a:df:de:a0:c2:88:82:6f:83:3c:2c:89:6f: e1:99:20:b1:44:55:20:3a:dc:1c:da:f6:d1:e8:22:41:d0:de: 9f:d0:40:ae:8d:5a:7c:ef:ee:e9:67:0b:e3:60:ed:98:31:df: 0a:e2:c9:08:d4:d0:35:2d:48:92:38:6e:01:06:db:a4:b2:b3: b1:2c:ac:3d:c5:e3:d7:88:36:90:ee:35:6c:49:84:43:b1:67: 01:8c:e3:49:76:c9:17:38:f2:db:db:bb:cd:1c:21:7d:18:77: 55:06:f7:dc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfcYzM2NT8Mi1dM6CtN7w9IXOpmQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MDUzMTAwMTUzM1oX DTI1MDYwMTAxMzAzM1owMzExMC8GA1UEAxMoMEYyOUUzNzMwNEJDNzk1NkI4RTQy MzEyQzczOTE1MkFDNEQzN0VEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMgtbe8eRUXERqLJuRUPIXaMoCAE6b49PCWsQWASzbdduIckEYqz0E1Vxab2 pvUvfTZUASWTVL2tLmYSI9BH9MUffv43nPF+3qUMUGDlPZSh3om3GXhxhAp/pqZa 1mjLTdg+Rtf//+5GLkYVk/ZuVsi0l4w7kv4n7oh6jL4/ZCU/Q2MUZvwOGW9suJeZ tSGf7pIF5kPoimcdtcrQIlnlM3lFzPoANzGHG1YjZJo3qO4OLy+8u6wCcxsNJu9W usI4gFBiztF4vY/8xyLXpju+Pyk2v2+KO/KGV/I2h8OjxfSUD1DqCIDNCZ+mFVsL QA7ZldKqElG++kRxMNjrcizVJvUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQPKeNz BLx5VrjkIxLHORUqxNN+0jAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAFiBliEmz5bJyC18lKbsJrn05fOXzNncZMNQHRuAplvCM5QXk aGJ0SjiZ0k61NKUQAK5BGFb8zQyx4k7mR8GNjgySJk/QjIlRGP1Lp/76mZ+KRGxk JzI3r0h79uP4MisaVUImW5VT4qUQyO9U7gmeDPphUCLyuYti42NNwXQ5fxbUUxdI 03f92fNLFmWiezKZh+z2d4JK396gwoiCb4M8LIlv4ZkgsURVIDrcHNr20egiQdDe n9BAro1afO/u6WcL42DtmDHfCuLJCNTQNS1IkjhuAQbbpLKzsSysPcXj14g2kO41 bEmEQ7FnAYzjSXbJFzjy29u7zRwhfRh3VQb33A== -----END CERTIFICATE-----Generated at Sat May 31 16:28:45 2025 by rpki-client