$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json) Hash identifier: RaWXZOe+OhmULetH0rnB+nAOdy7pku0U2qBrGkO7q2o= Subject key identifier: 41:0F:6B:32:67:13:86:0C:A9:21:63:F9:48:BC:60:61:0B:B9:5B:D8 Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Certificate serial: 7CA76DE90E45C65EAEDF93458F65F398CE8D95FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft Manifest number: 0119 Signing time: Sat 31 May 2025 12:15:33 +0000 Manifest this update: Sat 31 May 2025 12:10:33 +0000 Manifest next update: Sun 01 Jun 2025 14:01:33 +0000 Files and hashes: 1: 3130332e3232332e3138342e302f32332d3234203d3e20313531313036.roa (hash: CBbZdYOvzs1t+tqtDF6Ts0Z4cSe+M4/U5oUl3sp2oLk=) 2: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: svBiqJZiF69uK6AjSXfyR2wtMwoJNGrB9aovXcrdCqE=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Jun 2025 14:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a7:6d:e9:0e:45:c6:5e:ae:df:93:45:8f:65:f3:98:ce:8d:95:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Validity Not Before: May 31 12:10:33 2025 GMT Not After : Jun 1 14:01:33 2025 GMT Subject: CN=410F6B326713860CA92163F948BC60610BB95BD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:5f:7e:61:b4:72:fe:ab:22:2d:c5:78:6e: 2a:60:ca:8f:c8:c9:66:e9:18:9c:3b:a7:6b:11:d3: a5:d9:b9:3f:b0:b4:36:6b:18:4c:22:2d:a8:30:03: bf:e6:7a:e3:a6:33:3f:f9:b4:77:94:bb:3b:7f:25: 58:51:0a:ae:f4:9f:03:ec:8a:28:b1:2e:d4:63:63: 85:90:8d:e6:ad:c2:92:5b:77:bd:28:5a:c8:a7:4c: a4:d8:94:29:e7:7b:28:6a:5b:a0:15:d4:9e:29:54: 23:25:94:61:21:83:50:02:a7:a7:99:25:57:a8:f0: f7:69:08:a8:b0:b0:ad:46:eb:48:07:ed:41:8e:80: 26:1e:f4:85:a1:d7:27:ca:b1:49:01:96:1f:87:b3: 77:11:33:4b:94:5b:b5:06:5d:f5:a9:31:d7:a7:ef: 23:03:c4:58:3b:e1:1f:bb:ba:68:00:05:22:88:e6: 6d:72:53:4d:ec:62:42:2b:db:08:d2:5a:f8:53:d9: 58:1c:e3:4d:33:7b:bb:32:8d:7a:b5:d0:ce:8b:3e: 0d:36:9d:9b:10:cc:eb:7f:1d:20:21:50:c1:dd:e7: b2:23:92:fe:a2:07:7c:e4:80:82:00:4a:af:6f:c4: 7c:57:13:2f:2a:73:a2:33:c6:37:ad:a7:fd:4a:fe: 20:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0F:6B:32:67:13:86:0C:A9:21:63:F9:48:BC:60:61:0B:B9:5B:D8 X509v3 Authority Key Identifier: keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:fa:f2:e1:33:e2:44:09:ef:31:bf:81:ce:e0:4b:3e:58:dd: 0f:bd:66:18:cb:3e:a4:73:03:0d:d0:7e:57:6a:45:91:40:81: 26:51:6f:5a:e8:10:6f:33:d9:dd:8e:e2:08:8c:3c:a9:cb:4b: d3:2f:a2:79:25:8d:59:44:65:10:d1:04:4d:ee:a3:47:bc:7e: e6:f6:4e:a8:b5:ea:46:9a:3e:43:49:22:2d:6e:42:e3:d2:0b: 52:99:1d:21:73:4a:95:c9:91:16:ef:a6:34:50:3e:26:2b:68: a2:39:73:26:e6:bf:90:9a:ec:13:22:85:b5:52:30:9d:85:b9: fe:55:00:63:66:76:39:99:05:96:8e:a7:77:76:b5:4c:f3:d1: 57:3f:e1:71:d7:d6:d1:0a:b5:eb:49:04:de:d6:02:29:5f:50: 12:53:a1:3f:1d:8d:a3:0f:9d:2a:93:37:88:08:0c:53:5b:d6: 84:b0:f8:df:38:51:22:7a:f5:0a:01:d6:e6:15:57:33:ae:ce: 78:a1:67:92:d0:12:3b:f8:6f:c9:82:80:a4:89:20:fc:83:43: 4c:fd:d9:81:bc:0f:a2:d5:10:39:16:53:7b:38:42:5f:a1:85: 9c:d3:49:f6:d8:d5:47:68:57:12:04:d4:1b:4c:0a:8e:40:9a: 41:2b:37:4f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfKdt6Q5Fxl6u35NFj2XzmM6NlfowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDhCRjcwMDAwMTEwLwYDVQQFEygzMzlGRkE5MzM1 N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwMB4XDTI1MDUzMTEyMTAzM1oX DTI1MDYwMTE0MDEzM1owMzExMC8GA1UEAxMoNDEwRjZCMzI2NzEzODYwQ0E5MjE2 M0Y5NDhCQzYwNjEwQkI5NUJEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmjX35htHL+qyItxXhuKmDKj8jJZukYnDunaxHTpdm5P7C0NmsYTCItqDAD v+Z646YzP/m0d5S7O38lWFEKrvSfA+yKKLEu1GNjhZCN5q3Cklt3vShayKdMpNiU Ked7KGpboBXUnilUIyWUYSGDUAKnp5klV6jw92kIqLCwrUbrSAftQY6AJh70haHX J8qxSQGWH4ezdxEzS5RbtQZd9akx16fvIwPEWDvhH7u6aAAFIojmbXJTTexiQivb CNJa+FPZWBzjTTN7uzKNerXQzos+DTadmxDM638dICFQwd3nsiOS/qIHfOSAggBK r2/EfFcTLypzojPGN62n/Ur+IFsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRBD2sy ZxOGDKkhY/lIvGBhC7lb2DAfBgNVHSMEGDAWgBQzn/qTNX+vJhQoKfq/Ilrq5Bc3 8DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJGNzAwMDAvMC8zMzlGRkE5 MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NNV82a3pWX3J5 WVVLQ242dnlKYTZ1UVhOX0EuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJG NzAwMDAvMC8zMzlGRkE5MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0Yw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAuPry4TPiRAnvMb+BzuBLPljdD71mGMs+pHMDDdB+V2pFkUCB JlFvWugQbzPZ3Y7iCIw8qctL0y+ieSWNWURlENEETe6jR7x+5vZOqLXqRpo+Q0ki LW5C49ILUpkdIXNKlcmRFu+mNFA+JitoojlzJua/kJrsEyKFtVIwnYW5/lUAY2Z2 OZkFlo6nd3a1TPPRVz/hcdfW0Qq160kE3tYCKV9QElOhPx2Now+dKpM3iAgMU1vW hLD43zhRInr1CgHW5hVXM67OeKFnktASO/hvyYKApIkg/INDTP3ZgbwPotUQORZT ezhCX6GFnNNJ9tjVR2hXEgTUG0wKjkCaQSs3Tw== -----END CERTIFICATE-----Generated at Sat May 31 17:12:52 2025 by rpki-client