$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: ctEp044LLUNq0PMpYjkMhikBXthTVG0bpscggREkVDM= Subject key identifier: 9F:4F:8C:BE:4D:31:E6:85:22:4D:D0:1A:13:22:7D:6E:B4:FF:56:47 Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 558E875C8AC90C3C2CEE70752EC9C2101BD30B49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 0256 Signing time: Sat 14 Mar 2026 16:07:44 +0000 Manifest this update: Sat 14 Mar 2026 16:02:44 +0000 Manifest next update: Sun 15 Mar 2026 17:54:44 +0000 Files and hashes: 1: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=) 2: 3130332e32352e3132342e302f32342d3234203d3e2039343537.roa (hash: B+ADVjoTHnyVRxwPayXW8Wr41jua47v7vFKOzXKix6M=) 3: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=) 4: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=) 5: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: o04H9Xv8223MoeACHmtDXMA6NusvKKdBlTlPvQGd3S4=) 6: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Mar 2026 17:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:8e:87:5c:8a:c9:0c:3c:2c:ee:70:75:2e:c9:c2:10:1b:d3:0b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Mar 14 16:02:44 2026 GMT Not After : Mar 15 17:54:44 2026 GMT Subject: CN=9F4F8CBE4D31E685224DD01A13227D6EB4FF5647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:27:5c:f3:51:39:69:85:9f:10:85:fe:f0:63: e9:0c:5e:ec:ea:29:f3:63:76:b0:09:c8:ba:ff:39: 3e:f1:c9:fa:06:5e:4c:50:8f:d0:52:e9:7f:23:6a: 01:df:e4:ed:86:36:94:f9:fc:93:11:f1:33:95:dd: 4a:78:d7:b8:22:df:e5:21:61:3b:c3:c5:e2:41:91: 56:ba:82:da:38:e0:76:a5:36:b7:3f:20:2f:dd:20: 6c:04:77:a1:3e:2a:20:4d:2f:41:5b:aa:0a:40:9e: 3d:cb:05:ae:2b:b3:d9:ec:aa:44:d6:a8:52:cf:ff: f2:3c:19:d4:95:99:09:2b:35:d3:56:71:b0:ab:c5: 44:f4:35:a5:9f:3c:62:00:b1:06:5c:54:8a:6f:19: 25:9b:7a:48:56:37:53:ba:9c:93:88:1d:ed:41:46: 9f:97:a0:b2:0a:d7:7e:ee:82:90:6b:ea:41:3f:19: 5b:78:f1:dc:09:ae:ff:47:83:2f:88:bd:79:1f:aa: ad:b4:15:ea:18:b1:54:a5:f0:87:3d:fc:1e:44:28: 11:52:ac:5a:4d:52:e0:e9:07:95:00:9d:48:26:82: 61:12:a6:48:ba:7b:c3:e0:fa:de:b9:14:db:b8:93: a5:d1:25:a2:1c:47:1c:ff:28:25:41:68:89:98:29: d2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4F:8C:BE:4D:31:E6:85:22:4D:D0:1A:13:22:7D:6E:B4:FF:56:47 X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c6:a3:bc:36:ec:87:c8:de:cf:21:07:fb:a1:d9:ed:f4:9e: 35:ea:63:33:b9:b0:90:51:1c:91:e9:2c:34:10:9d:d5:45:30: f1:66:6b:51:ef:b1:33:46:a5:d2:55:a9:99:95:8f:61:a9:f1: 47:b9:d6:c2:e2:6e:64:40:36:2c:e3:f0:f0:7d:c6:51:d3:72: 82:57:27:ed:84:b0:0d:48:6d:46:79:6e:65:df:bf:0c:04:7e: 4a:7c:ca:22:cb:28:69:88:3a:e3:c9:7a:17:26:27:cb:6d:47: b1:e9:7e:7f:9a:e2:3e:d9:14:f3:61:f4:7b:a8:e0:66:79:7e: b5:01:e9:22:40:38:f7:81:64:49:11:26:f3:ad:92:5a:a3:2b: f8:ef:3f:54:4c:ff:3c:7a:85:98:62:a4:4d:0b:b4:0c:9d:00: 91:af:d3:78:2e:c1:54:35:78:53:66:5e:8d:2c:db:b9:47:26: 79:70:fb:ec:92:13:ad:cc:31:c4:4d:fa:9a:82:65:7a:98:ae: 34:94:1c:99:c1:b6:46:44:02:1a:c7:84:c1:aa:50:39:c1:30: 89:a6:bd:e4:d1:ef:e5:5c:f5:6b:c2:e2:ea:cb:75:ff:bd:84: 20:89:19:5c:36:e7:49:a2:1b:4f:18:de:c9:80:a2:f8:76:6e: 94:3d:8e:cf -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVY6HXIrJDDws7nB1LsnCEBvTC0kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI2MDMxNDE2MDI0NFoX DTI2MDMxNTE3NTQ0NFowMzExMC8GA1UEAxMoOUY0RjhDQkU0RDMxRTY4NTIyNERE MDFBMTMyMjdENkVCNEZGNTY0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANknXPNROWmFnxCF/vBj6Qxe7Oop82N2sAnIuv85PvHJ+gZeTFCP0FLpfyNq Ad/k7YY2lPn8kxHxM5XdSnjXuCLf5SFhO8PF4kGRVrqC2jjgdqU2tz8gL90gbAR3 oT4qIE0vQVuqCkCePcsFriuz2eyqRNaoUs//8jwZ1JWZCSs101ZxsKvFRPQ1pZ88 YgCxBlxUim8ZJZt6SFY3U7qck4gd7UFGn5egsgrXfu6CkGvqQT8ZW3jx3Amu/0eD L4i9eR+qrbQV6hixVKXwhz38HkQoEVKsWk1S4OkHlQCdSCaCYRKmSLp7w+D63rkU 27iTpdElohxHHP8oJUFoiZgp0osCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSfT4y+ TTHmhSJN0BoTIn1utP9WRzAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAdsajvDbsh8jezyEH+6HZ7fSeNepjM7mwkFEckeksNBCd1UUw 8WZrUe+xM0al0lWpmZWPYanxR7nWwuJuZEA2LOPw8H3GUdNyglcn7YSwDUhtRnlu Zd+/DAR+SnzKIssoaYg648l6FyYny21Hsel+f5riPtkU82H0e6jgZnl+tQHpIkA4 94FkSREm862SWqMr+O8/VEz/PHqFmGKkTQu0DJ0Aka/TeC7BVDV4U2ZejSzbuUcm eXD77JITrcwxxE36moJlepiuNJQcmcG2RkQCGseEwapQOcEwiaa95NHv5Vz1a8Li 6st1/72EIIkZXDbnSaIbTxjeyYCi+HZulD2Ozw== -----END CERTIFICATE-----Generated at Sat Mar 14 19:40:03 2026 by rpki-client