$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json) Hash identifier: Kn6orZegm5+RlcU0L5Kn9Zgt7kvfiZwZfCDZp/PkemI= Subject key identifier: C0:7D:50:A1:47:BE:D8:50:9B:12:1E:E3:4F:72:DA:BE:71:D1:F0:63 Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 40B4255DB380A0793A383B3F58893DE10777BE00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft Manifest number: 04DC Signing time: Sat 05 Sep 2026 01:14:08 +0000 Manifest this update: Sat 05 Sep 2026 01:09:08 +0000 Manifest next update: Sun 06 Sep 2026 02:30:08 +0000 Files and hashes: 1: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=) 2: 4B1987D5160068092602529871C93EA320045A75.crl (hash: JR+jvuYmJQ5qQUYQAt3aEI2IH+V0knUTSwi7X1NZLY8=) 3: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=) 4: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 02:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b4:25:5d:b3:80:a0:79:3a:38:3b:3f:58:89:3d:e1:07:77:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: Sep 5 01:09:08 2026 GMT Not After : Sep 6 02:30:08 2026 GMT Subject: CN=C07D50A147BED8509B121EE34F72DABE71D1F063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9f:59:da:73:08:7b:98:65:04:18:21:2c:0b: 65:24:ee:26:c3:a9:e5:1b:e8:8f:09:d2:21:d9:ec: d3:c8:01:d5:a1:ab:be:13:c9:c2:b3:c7:7d:9c:af: 9f:aa:75:69:f2:c1:30:7e:8d:da:22:db:9d:44:50: e3:fd:4c:3f:2f:47:6d:db:e0:bb:d6:7e:fb:4d:6a: 6d:ad:dc:48:13:5d:f9:a3:48:d9:38:82:ea:0b:44: 5c:d5:e4:0e:e6:88:c0:62:13:82:be:97:c1:3f:e0: 2b:cc:24:b9:90:6e:19:df:3b:68:e9:f2:54:94:bd: 1a:28:95:33:11:db:cb:67:fc:f8:6e:9c:8f:9e:f2: 36:22:0b:af:39:91:26:71:10:ed:3e:c1:e6:90:b7: 29:f0:84:5b:71:0f:bf:1a:7b:39:69:c2:2d:e1:ad: ea:68:4c:aa:72:d8:99:32:ec:7d:5a:44:76:7b:3d: d6:a3:1f:48:22:88:b0:c5:93:81:94:63:88:ab:f2: 16:5c:7e:8f:66:9e:16:73:b3:1a:8c:16:7e:fa:fd: 2b:71:80:7b:3f:e2:d9:13:40:fc:5c:f2:33:cd:9e: ca:e6:ab:16:74:d9:54:12:6f:5e:d5:6e:5f:8a:fb: 32:76:13:d5:5e:28:5e:51:49:c5:42:d5:f3:cf:0d: 78:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7D:50:A1:47:BE:D8:50:9B:12:1E:E3:4F:72:DA:BE:71:D1:F0:63 X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5f:5d:d1:21:3d:ce:2b:37:2f:a9:74:46:8f:ff:de:03:7f: b9:56:6d:0e:52:15:e7:28:39:0f:c9:13:8e:8c:e1:79:36:c3: ee:e4:1e:2c:7a:6b:86:5c:f2:8b:76:83:90:98:b7:e8:c4:ed: d1:2e:32:cc:75:5c:a6:ba:75:c9:5b:b8:ee:f5:8b:f4:64:3b: 87:6e:1c:f9:3d:13:1b:b1:ee:28:2c:33:e4:e6:34:c3:78:5b: 90:d5:4d:6c:12:b0:ee:9e:c1:4c:72:38:01:b8:67:0e:a0:0f: d5:5c:f7:e9:92:85:00:64:27:0d:10:7c:0a:37:3d:fe:50:b7: eb:b6:ee:e0:ae:36:bc:ea:0f:a6:0c:4f:5b:e6:62:b2:01:2d: 3b:be:ff:46:1f:8a:09:51:96:de:66:be:d3:63:63:67:d3:0d: 33:6f:1e:12:6a:d5:85:f8:26:31:5e:d9:57:7d:8c:5c:8f:13: 67:57:c8:d6:b3:f0:52:67:1c:34:15:af:3c:d4:f2:34:cc:45: 66:6b:24:49:f0:2c:c5:be:db:62:96:4a:78:4c:30:09:66:50: e6:5f:6a:e7:85:70:d5:f2:2b:a5:ab:5c:f3:6f:66:ce:da:c9: 68:5b:8c:f3:79:d9:7d:e3:5a:8d:02:67:ca:67:6b:30:76:ce: 74:81:dd:1b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQLQlXbOAoHk6ODs/WIk94Qd3vgAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI2MDkwNTAxMDkwOFoX DTI2MDkwNjAyMzAwOFowMzExMC8GA1UEAxMoQzA3RDUwQTE0N0JFRDg1MDlCMTIx RUUzNEY3MkRBQkU3MUQxRjA2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOGfWdpzCHuYZQQYISwLZSTuJsOp5RvojwnSIdns08gB1aGrvhPJwrPHfZyv n6p1afLBMH6N2iLbnURQ4/1MPy9Hbdvgu9Z++01qba3cSBNd+aNI2TiC6gtEXNXk DuaIwGITgr6XwT/gK8wkuZBuGd87aOnyVJS9GiiVMxHby2f8+G6cj57yNiILrzmR JnEQ7T7B5pC3KfCEW3EPvxp7OWnCLeGt6mhMqnLYmTLsfVpEdns91qMfSCKIsMWT gZRjiKvyFlx+j2aeFnOzGowWfvr9K3GAez/i2RNA/FzyM82eyuarFnTZVBJvXtVu X4r7MnYT1V4oXlFJxULV888NeI0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBTAfVCh R77YUJsSHuNPctq+cdHwYzAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEALl9d0SE9zis3L6l0Ro//3gN/uVZtDlIV5yg5D8kTjozheTbD 7uQeLHprhlzyi3aDkJi36MTt0S4yzHVcprp1yVu47vWL9GQ7h24c+T0TG7HuKCwz 5OY0w3hbkNVNbBKw7p7BTHI4AbhnDqAP1Vz36ZKFAGQnDRB8Cjc9/lC367bu4K42 vOoPpgxPW+ZisgEtO77/Rh+KCVGW3ma+02NjZ9MNM28eEmrVhfgmMV7ZV32MXI8T Z1fI1rPwUmccNBWvPNTyNMxFZmskSfAsxb7bYpZKeEwwCWZQ5l9q54Vw1fIrpatc 829mztrJaFuM83nZfeNajQJnymdrMHbOdIHdGw== -----END CERTIFICATE-----Generated at Sat Sep 5 10:58:26 2026 by rpki-client