
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json)
Hash identifier: SW2EuKC/pkJTi/4Lmytz1RDDjtLlxqJEYFUk6K/sSpk=
Subject key identifier: A4:74:E8:4F:1E:21:B7:F2:97:A0:AC:E4:55:87:29:E7:37:74:3D:C3
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 6DA178F6FB7EC475B7AF5E4E49BAEDFB750B3A46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
Manifest number: 0194
Signing time: Thu 23 Oct 2025 21:09:11 +0000
Manifest this update: Thu 23 Oct 2025 21:04:11 +0000
Manifest next update: Sat 25 Oct 2025 00:08:11 +0000
Files and hashes: 1: 3130332e32352e3132342e302f32342d3234203d3e20323134303235.roa (hash: A7+uqKWRKehgMh2v+Hl0ZrUAOPvByGRYLcbE3daaXQo=)
2: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=)
3: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=)
4: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: 3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=)
5: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: GkO3XDjIu6eFFSUq2+T2ygZGR3jCZD1VkzoZeLvaYbY=)
6: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 00:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a1:78:f6:fb:7e:c4:75:b7:af:5e:4e:49:ba:ed:fb:75:0b:3a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Validity
Not Before: Oct 23 21:04:11 2025 GMT
Not After : Oct 25 00:08:11 2025 GMT
Subject: CN=A474E84F1E21B7F297A0ACE4558729E737743DC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:fd:0c:bd:d8:6c:1e:19:2f:2a:f6:e6:12:
e8:a7:64:b2:87:08:0f:66:3d:d5:11:8f:9b:f9:38:
4e:3f:0d:de:a9:9f:52:c6:85:df:b9:34:60:67:d3:
f3:77:37:40:79:93:25:66:79:31:13:68:27:08:34:
f4:82:0c:df:72:65:8e:13:36:12:11:53:7f:aa:c7:
a9:1d:ed:75:4b:8b:f4:cb:3a:cb:a0:3d:15:08:cb:
e9:92:c2:05:0c:cf:4c:df:ff:68:67:2b:7b:43:79:
1a:a7:51:cd:22:95:93:76:73:e9:0d:66:bd:a9:16:
ee:b7:ce:f5:ff:63:6c:dc:06:1d:24:7d:32:50:96:
3f:d6:40:f7:9b:40:8c:fe:b9:1e:48:26:99:dd:7f:
24:81:a5:11:04:75:bb:88:6b:ab:76:49:b1:98:b0:
4b:47:e3:0a:aa:94:6c:47:01:e6:5a:ff:0b:78:24:
af:be:6e:71:65:20:e5:0a:80:3d:a7:f8:a8:f5:ed:
6a:e2:01:f7:88:1e:d9:38:d3:0f:96:26:a6:86:05:
ab:ff:b0:f1:70:de:5a:58:63:2c:66:44:b0:62:d7:
a1:55:05:3d:85:a9:52:f7:33:f0:d8:ea:5b:2e:59:
41:6e:62:74:15:b2:d8:bb:55:10:79:68:f3:b3:d1:
47:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:74:E8:4F:1E:21:B7:F2:97:A0:AC:E4:55:87:29:E7:37:74:3D:C3
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e6:80:eb:3a:e7:b7:ff:88:1a:5a:00:76:68:da:14:0a:33:
4a:c4:6a:00:36:c0:30:3a:43:4e:36:1e:ee:a1:3e:bd:12:90:
00:65:46:8c:46:71:50:e8:9a:29:f2:e1:1b:76:54:7e:f7:18:
a4:45:09:c6:8d:0f:7e:36:f3:c1:2d:b5:7a:5a:bf:d3:4d:0c:
eb:a7:f1:43:67:21:a0:91:57:81:a9:ed:af:0e:3c:10:a7:5a:
9c:20:ce:77:b8:50:0d:c3:42:cf:15:56:3e:55:09:1e:1a:2f:
10:98:06:25:93:f5:a6:6d:cb:7f:be:d7:e2:50:d4:12:c8:41:
16:80:14:94:f8:c5:5c:da:b2:a9:d0:79:cc:35:48:af:2e:54:
9d:e1:d9:c2:ff:7f:e9:9c:49:e8:49:15:3e:7b:13:d0:f6:98:
9b:12:9f:33:31:06:99:f0:3a:ca:0d:51:ce:59:01:ad:da:b3:
fd:fc:5a:db:9f:ab:cb:59:dd:d6:3c:db:71:f5:f0:94:8e:21:
5c:23:0a:86:0a:75:20:1d:08:81:46:ac:8e:c9:a9:13:eb:36:
86:d6:e3:46:f7:a6:ac:30:fc:8b:7c:a1:27:01:53:29:f4:aa:
e9:b5:58:b0:f8:d4:cd:fe:87:34:d0:50:4b:21:82:73:95:c9:
31:3e:45:5e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbaF49vt+xHW3r15OSbrt+3ULOkYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy
N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MTAyMzIxMDQxMVoX
DTI1MTAyNTAwMDgxMVowMzExMC8GA1UEAxMoQTQ3NEU4NEYxRTIxQjdGMjk3QTBB
Q0U0NTU4NzI5RTczNzc0M0RDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMot/Qy92GweGS8q9uYS6KdksocID2Y91RGPm/k4Tj8N3qmfUsaF37k0YGfT
83c3QHmTJWZ5MRNoJwg09IIM33JljhM2EhFTf6rHqR3tdUuL9Ms6y6A9FQjL6ZLC
BQzPTN//aGcre0N5GqdRzSKVk3Zz6Q1mvakW7rfO9f9jbNwGHSR9MlCWP9ZA95tA
jP65Hkgmmd1/JIGlEQR1u4hrq3ZJsZiwS0fjCqqUbEcB5lr/C3gkr75ucWUg5QqA
Paf4qPXtauIB94ge2TjTD5YmpoYFq/+w8XDeWlhjLGZEsGLXoVUFPYWpUvcz8Njq
Wy5ZQW5idBWy2LtVEHlo87PRRzcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSkdOhP
HiG38pegrORVhynnN3Q9wzAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy
MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx
Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB
ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAjeaA6zrnt/+IGloAdmjaFAozSsRqADbAMDpDTjYe7qE+vRKQ
AGVGjEZxUOiaKfLhG3ZUfvcYpEUJxo0PfjbzwS21elq/000M66fxQ2choJFXgant
rw48EKdanCDOd7hQDcNCzxVWPlUJHhovEJgGJZP1pm3Lf77X4lDUEshBFoAUlPjF
XNqyqdB5zDVIry5UneHZwv9/6ZxJ6EkVPnsT0PaYmxKfMzEGmfA6yg1RzlkBrdqz
/fxa25+ry1nd1jzbcfXwlI4hXCMKhgp1IB0IgUasjsmpE+s2htbjRvemrDD8i3yh
JwFTKfSq6bVYsPjUzf6HNNBQSyGCc5XJMT5FXg==
-----END CERTIFICATE-----
Generated at Fri Oct 24 09:14:32 2025 by rpki-client