$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json) Hash identifier: hgW7KYUgfDsgNQ0g0dncyLIhl1yLVOu4J3YwoF30d2o= Subject key identifier: 87:AA:AC:9E:E6:9E:CD:30:EF:82:51:A1:1C:B0:43:51:AF:6B:B4:3D Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Certificate serial: 6F1111A0A6A92485EF6D2586E4FBAAAABD66A700 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft Manifest number: 01AC Signing time: Thu 18 Sep 2025 05:56:00 +0000 Manifest this update: Thu 18 Sep 2025 05:51:00 +0000 Manifest next update: Fri 19 Sep 2025 09:08:00 +0000 Files and hashes: 1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: S4bU/QApWdMHyApABHBR2G0HNNv9y4jgfVMeWNNKVAE=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Sep 2025 09:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:11:11:a0:a6:a9:24:85:ef:6d:25:86:e4:fb:aa:aa:bd:66:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Validity Not Before: Sep 18 05:51:00 2025 GMT Not After : Sep 19 09:08:00 2025 GMT Subject: CN=87AAAC9EE69ECD30EF8251A11CB04351AF6BB43D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:44:e5:6a:39:7f:b0:30:a8:f2:5d:4d:db:83: d3:34:8f:8f:74:63:ae:c5:61:1f:77:63:64:51:65: d3:3c:f9:8d:d4:f8:b3:9d:62:2c:57:63:e0:74:d4: 25:eb:d3:8d:7b:7e:3d:71:2d:87:3f:7b:2f:60:12: a4:a6:5d:90:65:eb:0b:e6:64:d7:7b:fe:43:88:df: 3b:2c:d3:ef:96:f4:65:24:87:aa:72:68:cc:0c:19: 64:d1:55:99:18:89:e3:e4:e1:b1:e6:40:fa:71:1e: 10:3b:3a:25:c3:21:ea:45:82:c0:a4:9c:8a:e2:46: d9:be:03:57:f6:ca:0d:c6:e9:03:38:2b:22:95:95: a9:e0:14:1e:8b:ed:a8:3d:94:2e:37:4e:c8:25:dd: c8:38:fa:e6:2c:93:b2:66:aa:32:76:4e:ca:1d:8b: 79:75:8f:36:22:90:d8:d4:d4:ac:ee:9b:d0:28:cb: 77:07:94:2b:47:3e:b5:59:98:80:3d:6a:ff:0c:ca: 61:65:19:5f:72:e8:a6:92:48:e4:3d:88:b4:ff:93: 5b:58:6a:68:d6:8d:0f:e0:3d:21:12:84:5f:3a:56: 25:d1:f3:19:c3:e1:b6:4f:ea:f1:e2:23:cf:2c:a2: e5:71:d0:02:df:2b:e1:4e:93:3b:8f:47:92:83:7e: c1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AA:AC:9E:E6:9E:CD:30:EF:82:51:A1:1C:B0:43:51:AF:6B:B4:3D X509v3 Authority Key Identifier: keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:6a:37:96:d3:8e:97:42:cd:ff:bd:5f:33:f1:e4:fd:82:98: c2:12:97:fb:3a:0d:01:1a:ea:70:d3:c0:82:79:2e:90:25:0b: 22:ad:d1:e7:0c:62:56:b0:21:a9:a8:6e:2a:48:35:b3:40:f0: 63:76:e4:c2:77:47:d8:26:f6:68:17:ff:f4:05:31:81:7f:8a: 16:80:e3:7b:f5:12:29:57:72:09:95:25:e8:5a:7d:b5:5a:ed: d5:fe:a2:f9:97:d8:87:43:7f:0a:4f:ab:47:46:6f:23:c8:f0: e3:a8:c7:14:c5:0f:0e:2b:2e:6f:d1:91:40:fd:a4:18:2f:a5: f0:67:11:a0:21:48:9f:84:0e:07:55:88:81:7c:3c:fb:eb:b6: 32:d4:c2:23:8c:a5:a5:c3:bf:f3:8c:eb:e0:67:5b:c4:a5:36: 73:15:ed:39:33:5f:1c:01:dc:c5:7a:21:68:8e:5c:b1:e7:f2: ef:5c:ed:c1:40:ad:9f:c1:dc:50:21:ff:1b:92:2a:69:49:4a: 66:f0:cd:8b:24:cf:31:d2:3c:d7:b2:dd:75:60:bf:6d:d1:25: 91:bc:d3:52:d5:53:f6:38:d4:b3:3a:2e:d8:01:cb:1e:75:41: 7c:58:5f:4a:59:01:1e:00:f7:84:e4:8a:10:be:64:36:ed:8a: 75:fc:dd:d7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbxERoKapJIXvbSWG5Puqqr1mpwAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDhCRjcwMDAwMTEwLwYDVQQFEygzMzlGRkE5MzM1 N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwMB4XDTI1MDkxODA1NTEwMFoX DTI1MDkxOTA5MDgwMFowMzExMC8GA1UEAxMoODdBQUFDOUVFNjlFQ0QzMEVGODI1 MUExMUNCMDQzNTFBRjZCQjQzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI1E5Wo5f7AwqPJdTduD0zSPj3RjrsVhH3djZFFl0zz5jdT4s51iLFdj4HTU JevTjXt+PXEthz97L2ASpKZdkGXrC+Zk13v+Q4jfOyzT75b0ZSSHqnJozAwZZNFV mRiJ4+ThseZA+nEeEDs6JcMh6kWCwKSciuJG2b4DV/bKDcbpAzgrIpWVqeAUHovt qD2ULjdOyCXdyDj65iyTsmaqMnZOyh2LeXWPNiKQ2NTUrO6b0CjLdweUK0c+tVmY gD1q/wzKYWUZX3LoppJI5D2ItP+TW1hqaNaND+A9IRKEXzpWJdHzGcPhtk/q8eIj zyyi5XHQAt8r4U6TO49HkoN+wYcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSHqqye 5p7NMO+CUaEcsENRr2u0PTAfBgNVHSMEGDAWgBQzn/qTNX+vJhQoKfq/Ilrq5Bc3 8DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJGNzAwMDAvMC8zMzlGRkE5 MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NNV82a3pWX3J5 WVVLQ242dnlKYTZ1UVhOX0EuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJG NzAwMDAvMC8zMzlGRkE5MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0Yw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEA5Go3ltOOl0LN/71fM/Hk/YKYwhKX+zoNARrqcNPAgnkukCUL Iq3R5wxiVrAhqahuKkg1s0DwY3bkwndH2Cb2aBf/9AUxgX+KFoDje/USKVdyCZUl 6Fp9tVrt1f6i+ZfYh0N/Ck+rR0ZvI8jw46jHFMUPDisub9GRQP2kGC+l8GcRoCFI n4QOB1WIgXw8++u2MtTCI4ylpcO/84zr4GdbxKU2cxXtOTNfHAHcxXohaI5csefy 71ztwUCtn8HcUCH/G5IqaUlKZvDNiyTPMdI817LddWC/bdElkbzTUtVT9jjUszou 2AHLHnVBfFhfSlkBHgD3hOSKEL5kNu2Kdfzd1w== -----END CERTIFICATE-----Generated at Fri Sep 19 01:17:43 2025 by rpki-client