$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json) Hash identifier: DWymnYchvDkG0U0ntTe2vD9aKqXnyeKEt4QXQiaIeXg= Subject key identifier: C8:54:03:25:80:CD:32:36:7B:1A:FA:7F:BD:CC:C1:2E:8C:C0:0F:00 Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Certificate serial: 32023C812A59BA09F939B4416719A32FDFB259F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft Manifest number: 02F4 Signing time: Wed 20 May 2026 23:30:18 +0000 Manifest this update: Wed 20 May 2026 23:25:18 +0000 Manifest next update: Fri 22 May 2026 00:58:18 +0000 Files and hashes: 1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: aErwZUZQfDvUWOboyMuQMAToHQYw8BnRQ2jNaD+jbTk=) 2: 3130332e3232332e3138342e302f32332d3234203d3e20313335303237.roa (hash: g8Tw9Ss3ogaL2/E788moJ1DCuoJI7+nYIfSvQGup0po=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 00:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:02:3c:81:2a:59:ba:09:f9:39:b4:41:67:19:a3:2f:df:b2:59:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Validity Not Before: May 20 23:25:18 2026 GMT Not After : May 22 00:58:18 2026 GMT Subject: CN=C854032580CD32367B1AFA7FBDCCC12E8CC00F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:ae:03:a8:cc:41:f3:85:79:e0:44:49:74: d8:ba:9b:6e:f4:39:56:1b:55:06:a4:ea:29:6d:49: 24:92:68:2b:78:9e:93:ee:dc:c6:82:a4:c0:60:7f: 0a:85:2a:47:94:11:25:86:39:a9:e9:1a:af:44:6d: 86:d6:4a:b9:30:89:d3:3b:e0:c0:d5:1b:b4:48:0a: 67:9f:f5:96:de:03:29:93:9a:35:12:41:a9:03:8c: 1a:19:46:d4:a2:4c:d3:4f:fc:96:38:03:ff:3e:e8: b0:a9:26:7b:03:af:a7:cf:ca:69:ad:dc:fd:73:2f: ee:2a:2d:e9:d6:c3:fa:2f:87:19:f5:d0:3b:47:19: 7c:38:2b:0b:e7:0a:18:f2:77:3b:23:73:10:6f:ab: 0d:f9:31:62:5c:30:d5:aa:c2:4d:cf:04:6a:b2:e3: 76:f9:c6:e3:a4:9c:3d:55:ae:ed:e0:ed:cc:ed:6f: 5d:54:99:77:e5:b6:02:b1:4b:0e:ec:98:6e:90:77: 1b:dc:3b:23:2b:60:ca:3a:a9:bd:76:5c:07:9b:90: de:1f:07:fe:ff:b9:a1:5b:c4:3a:13:f7:6d:82:57: cc:a5:49:56:36:0b:b5:40:e9:d7:ef:dd:d0:d1:c5: c4:fc:13:c7:26:7e:4c:de:ce:16:80:42:55:7c:9d: 92:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:54:03:25:80:CD:32:36:7B:1A:FA:7F:BD:CC:C1:2E:8C:C0:0F:00 X509v3 Authority Key Identifier: keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:4f:51:dc:67:5a:e7:51:05:cc:87:3b:31:ba:6d:e6:22:90: 77:8c:e0:ff:90:e1:4b:0a:32:8b:42:a1:e8:60:54:44:57:9a: bd:9e:19:39:ab:15:97:14:dc:99:97:64:bc:77:cc:eb:08:57: ee:c9:24:b7:44:76:33:03:1d:bc:14:64:04:69:f7:de:b9:78: 8e:94:54:39:97:c0:31:de:ff:73:23:25:34:29:72:b1:ce:1d: 10:ee:be:5a:f5:c8:ba:3e:06:4c:5e:9d:71:2d:83:82:2a:bf: f8:63:47:03:e0:92:42:38:c4:f5:ab:8a:82:5c:d0:52:dc:f5: 54:a7:7d:63:07:f1:00:92:77:02:f0:5c:ca:56:b6:e2:f7:b7: b7:52:d0:ff:64:85:8b:fc:df:33:df:79:40:df:08:06:82:93: b2:70:53:ed:75:d5:03:04:83:8a:13:f3:db:ae:66:16:6a:3f: 4a:63:72:e5:99:de:d3:03:4f:8c:c7:31:6c:75:01:4c:1c:8f: 9e:33:93:ad:24:92:9f:ca:02:e2:2b:a6:cc:52:7a:e7:83:56: 2c:19:a9:f9:df:34:ba:45:f3:88:29:82:8e:1f:76:4d:c8:f6: 7f:b5:e1:fe:65:57:69:80:79:89:56:36:57:08:ce:f8:3a:24: 45:48:e8:5e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMgI8gSpZugn5ObRBZxmjL9+yWfIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDhCRjcwMDAwMTEwLwYDVQQFEygzMzlGRkE5MzM1 N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwMB4XDTI2MDUyMDIzMjUxOFoX DTI2MDUyMjAwNTgxOFowMzExMC8GA1UEAxMoQzg1NDAzMjU4MENEMzIzNjdCMUFG QTdGQkRDQ0MxMkU4Q0MwMEYwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQbrgOozEHzhXngREl02LqbbvQ5VhtVBqTqKW1JJJJoK3iek+7cxoKkwGB/ CoUqR5QRJYY5qekar0RthtZKuTCJ0zvgwNUbtEgKZ5/1lt4DKZOaNRJBqQOMGhlG 1KJM00/8ljgD/z7osKkmewOvp8/Kaa3c/XMv7iot6dbD+i+HGfXQO0cZfDgrC+cK GPJ3OyNzEG+rDfkxYlww1arCTc8EarLjdvnG46ScPVWu7eDtzO1vXVSZd+W2ArFL DuyYbpB3G9w7IytgyjqpvXZcB5uQ3h8H/v+5oVvEOhP3bYJXzKVJVjYLtUDp1+/d 0NHFxPwTxyZ+TN7OFoBCVXydktkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTIVAMl gM0yNnsa+n+9zMEujMAPADAfBgNVHSMEGDAWgBQzn/qTNX+vJhQoKfq/Ilrq5Bc3 8DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJGNzAwMDAvMC8zMzlGRkE5 MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NNV82a3pWX3J5 WVVLQ242dnlKYTZ1UVhOX0EuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJG NzAwMDAvMC8zMzlGRkE5MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0Yw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEASE9R3Gda51EFzIc7Mbpt5iKQd4zg/5DhSwoyi0Kh6GBURFea vZ4ZOasVlxTcmZdkvHfM6whX7skkt0R2MwMdvBRkBGn33rl4jpRUOZfAMd7/cyMl NClysc4dEO6+WvXIuj4GTF6dcS2Dgiq/+GNHA+CSQjjE9auKglzQUtz1VKd9Ywfx AJJ3AvBcyla24ve3t1LQ/2SFi/zfM995QN8IBoKTsnBT7XXVAwSDihPz265mFmo/ SmNy5Zne0wNPjMcxbHUBTByPnjOTrSSSn8oC4iumzFJ654NWLBmp+d80ukXziCmC jh92Tcj2f7Xh/mVXaYB5iVY2VwjO+DokRUjoXg== -----END CERTIFICATE-----Generated at Thu May 21 13:21:54 2026 by rpki-client