$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json) Hash identifier: yK6PpoHeerlGL1EPZGytgYzXHZNwFMFxiC0jQdZJrok= Subject key identifier: 14:02:33:64:2D:BF:D8:2D:26:13:39:4A:66:9B:72:08:D5:EE:2A:20 Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Certificate serial: 1DAD3231456C965D69524D1D5D9A029C902F2D59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft Manifest number: 0161 Signing time: Thu 24 Jul 2025 01:59:52 +0000 Manifest this update: Thu 24 Jul 2025 01:54:52 +0000 Manifest next update: Fri 25 Jul 2025 03:05:52 +0000 Files and hashes: 1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: eQcnB6SyKnmEOkqA/ZoYGT9Ht0eUgyoYmdseJgsVXB4=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 03:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ad:32:31:45:6c:96:5d:69:52:4d:1d:5d:9a:02:9c:90:2f:2d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Validity Not Before: Jul 24 01:54:52 2025 GMT Not After : Jul 25 03:05:52 2025 GMT Subject: CN=140233642DBFD82D2613394A669B7208D5EE2A20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:49:d5:4a:dd:a8:94:21:88:55:bb:9e:0e: fa:a6:bc:33:f4:7d:1b:93:51:87:ef:81:e3:bd:77: e0:10:25:96:86:dc:a8:dc:20:b6:1e:92:45:49:8d: 7f:2a:64:8e:3a:c1:f9:22:c2:0b:1c:5a:cb:77:a0: 8d:0f:cb:7d:15:49:19:95:75:2a:d5:97:41:a3:73: b4:f1:13:34:ce:b0:23:c5:37:6f:5e:7a:81:99:af: cd:8c:c5:ed:1a:5f:ed:7c:bb:5e:ab:dc:44:51:f9: 4f:a1:62:18:92:d2:5d:7a:cd:a5:c8:8c:66:59:b5: f8:86:42:56:77:21:b9:a2:80:d2:ae:10:98:a0:ac: f2:80:d9:58:38:e0:f5:8e:33:e1:69:6b:43:c2:fc: 1a:5f:6a:ac:b2:35:e3:6a:af:3e:58:0e:48:80:28: 01:2a:bd:0e:1d:e9:f4:21:b6:01:da:d5:94:9d:d7: 14:85:f4:61:4c:a5:3a:41:ca:27:fb:b0:b3:7d:02: a9:22:d7:0c:93:a6:63:06:97:11:6c:41:4c:52:f2: d4:71:f0:b7:66:b7:f7:f6:61:a6:5c:d8:1c:b1:36: 11:7c:6f:d8:6d:ca:c8:7f:21:a8:38:7b:c6:7e:4c: 23:cc:b9:a9:c6:6e:49:6f:54:82:3a:3b:f5:a0:e4: af:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:02:33:64:2D:BF:D8:2D:26:13:39:4A:66:9B:72:08:D5:EE:2A:20 X509v3 Authority Key Identifier: keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ff:73:cd:06:6f:75:f1:f7:15:bd:1b:c6:45:2c:61:53:e6: d8:14:9d:38:c1:eb:06:f3:f9:11:b0:8c:79:50:f0:5c:54:b5: a2:7c:98:dc:14:88:4e:5b:84:d7:ed:56:8b:d7:b3:bc:49:c4: 50:91:25:3f:e6:ec:c5:61:b2:b4:c0:89:ce:82:22:e8:69:ed: 1d:85:9f:49:96:e7:92:ae:2c:5f:61:29:9b:f8:d9:ff:fa:89: c3:36:f2:a0:d8:94:32:49:71:ef:74:67:63:4d:e1:3a:15:05: ec:25:93:f1:ad:c7:8a:59:a1:f5:f9:e7:3e:b6:83:ed:7c:5f: f6:3a:f9:75:8a:7c:55:86:26:56:4c:e1:c2:ff:b1:3b:2a:66: e9:89:19:cf:45:0e:2b:b6:3a:67:d1:3c:6c:ca:b4:28:77:37: 10:3d:45:70:c0:7e:e6:3f:32:60:55:d9:ee:63:ef:24:92:86: 4e:9f:6c:f9:3b:7e:94:f3:80:09:7f:d9:20:c4:1b:29:80:09: a0:a8:d5:9b:2b:f3:e3:24:95:6c:72:83:81:16:c3:fc:ff:97: fa:c0:f5:e4:74:cb:59:b7:e7:b7:5e:ff:49:06:37:66:5f:49: ad:c6:3f:a9:ab:ca:45:da:bc:33:05:fa:16:db:73:26:75:ae: 6b:06:32:fc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHa0yMUVsll1pUk0dXZoCnJAvLVkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDhCRjcwMDAwMTEwLwYDVQQFEygzMzlGRkE5MzM1 N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwMB4XDTI1MDcyNDAxNTQ1MloX DTI1MDcyNTAzMDU1MlowMzExMC8GA1UEAxMoMTQwMjMzNjQyREJGRDgyRDI2MTMz OTRBNjY5QjcyMDhENUVFMkEyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhvSdVK3aiUIYhVu54O+qa8M/R9G5NRh++B47134BAllobcqNwgth6SRUmN fypkjjrB+SLCCxxay3egjQ/LfRVJGZV1KtWXQaNztPETNM6wI8U3b156gZmvzYzF 7Rpf7Xy7XqvcRFH5T6FiGJLSXXrNpciMZlm1+IZCVnchuaKA0q4QmKCs8oDZWDjg 9Y4z4WlrQ8L8Gl9qrLI142qvPlgOSIAoASq9Dh3p9CG2AdrVlJ3XFIX0YUylOkHK J/uws30CqSLXDJOmYwaXEWxBTFLy1HHwt2a39/ZhplzYHLE2EXxv2G3KyH8hqDh7 xn5MI8y5qcZuSW9Ugjo79aDkrw8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBQUAjNk Lb/YLSYTOUpmm3II1e4qIDAfBgNVHSMEGDAWgBQzn/qTNX+vJhQoKfq/Ilrq5Bc3 8DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJGNzAwMDAvMC8zMzlGRkE5 MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NNV82a3pWX3J5 WVVLQ242dnlKYTZ1UVhOX0EuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJG NzAwMDAvMC8zMzlGRkE5MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0Yw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEApf9zzQZvdfH3Fb0bxkUsYVPm2BSdOMHrBvP5EbCMeVDwXFS1 onyY3BSITluE1+1Wi9ezvEnEUJElP+bsxWGytMCJzoIi6GntHYWfSZbnkq4sX2Ep m/jZ//qJwzbyoNiUMklx73RnY03hOhUF7CWT8a3Hilmh9fnnPraD7Xxf9jr5dYp8 VYYmVkzhwv+xOypm6YkZz0UOK7Y6Z9E8bMq0KHc3ED1FcMB+5j8yYFXZ7mPvJJKG Tp9s+Tt+lPOACX/ZIMQbKYAJoKjVmyvz4ySVbHKDgRbD/P+X+sD15HTLWbfnt17/ SQY3Zl9JrcY/qavKRdq8MwX6FttzJnWuawYy/A== -----END CERTIFICATE-----Generated at Thu Jul 24 04:59:52 2025 by rpki-client