$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json) Hash identifier: gBcMqjQPUlComx2jDy+b2gtk8dC4xv1B1HdKjdJaB3A= Subject key identifier: D7:79:4F:B4:AA:B5:42:51:B7:29:D1:57:AD:4D:CF:96:70:B0:38:AA Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 2F09B910D787BF437920C9858E0359F483EC85F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft Manifest number: 040A Signing time: Sun 05 Apr 2026 18:23:00 +0000 Manifest this update: Sun 05 Apr 2026 18:18:00 +0000 Manifest next update: Mon 06 Apr 2026 22:06:00 +0000 Files and hashes: 1: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=) 2: 4B1987D5160068092602529871C93EA320045A75.crl (hash: i9g2TcnpzAkq/+9uVnyyPQERUa475jNFaTwav5pi11I=) 3: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=) 4: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 22:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:09:b9:10:d7:87:bf:43:79:20:c9:85:8e:03:59:f4:83:ec:85:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: Apr 5 18:18:00 2026 GMT Not After : Apr 6 22:06:00 2026 GMT Subject: CN=D7794FB4AAB54251B729D157AD4DCF9670B038AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:23:6a:45:ec:cf:19:f2:fe:dd:01:79:7e: 37:6a:bd:68:3c:90:68:0c:05:9c:2f:dd:d5:b4:5e: 14:55:06:59:c0:10:c6:ea:94:36:36:ad:70:de:e4: f4:bc:85:c9:7b:c1:45:91:73:20:7b:ff:65:79:76: 18:79:f6:35:34:c2:3c:08:2d:3e:0e:10:85:4c:92: 9c:1e:06:d4:1d:1a:4c:a2:25:88:08:4f:38:39:3a: 8d:1a:09:9e:86:aa:fb:a1:a2:36:ec:e0:22:1f:df: d2:04:45:80:51:fb:53:4d:28:31:10:2d:26:65:1d: 9f:0a:82:a9:d9:d3:59:0e:c8:6f:21:25:f1:c6:e3: 4b:30:8e:08:88:45:24:e3:9e:7b:9c:55:bc:d8:24: cc:0a:41:8c:f3:90:df:08:e6:5c:3f:08:b3:13:27: 3a:e6:aa:a0:6e:67:80:95:eb:e7:79:13:2b:97:d9: 57:f5:f3:1a:67:bd:99:21:a0:23:a5:e5:c0:a6:ba: 20:90:d8:f3:24:65:fe:72:c5:65:43:be:e3:56:7f: 52:e7:c4:ed:84:77:d2:66:f8:3a:f5:c6:c7:a8:8a: 06:b2:94:d0:00:8d:e1:7a:21:db:5f:fb:92:e8:c9: 0a:a7:2d:b9:f0:d3:3d:27:ca:29:47:c6:a8:20:a6: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:79:4F:B4:AA:B5:42:51:B7:29:D1:57:AD:4D:CF:96:70:B0:38:AA X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:dc:b5:0d:a6:ac:da:7c:9e:b0:37:e7:fc:51:34:a9:cf:e2: 07:26:24:9e:af:8e:d0:fa:34:19:15:0b:b6:5e:79:1a:d3:67: e5:8a:8e:54:c5:d5:b1:7c:ce:86:3a:ab:66:04:9e:df:56:3e: f1:6c:0e:19:ec:3f:5c:00:52:3d:ff:ae:c9:fa:59:cd:db:ea: 39:1d:87:be:63:2f:b6:a5:c6:1d:6b:65:8a:0e:5f:62:b9:00: bc:63:d6:63:82:56:5b:18:76:ee:f2:51:cf:90:f1:80:77:28: 42:2a:b7:c7:94:b9:4c:12:5d:d5:d1:5f:b2:54:3d:bc:f7:68: 03:2e:8e:75:88:59:1c:e4:df:cf:cc:66:09:5a:35:39:b6:7e: b8:b2:bc:e2:54:40:9a:b5:d7:ad:71:6d:05:fd:f7:67:25:2c: ef:94:51:2b:03:c7:63:c7:95:cf:8a:a9:42:ec:95:d5:bf:b4: 5f:fe:e7:41:7c:fb:f7:84:24:7f:75:68:2a:0c:e5:95:9b:ce: 8a:8a:4b:e4:61:94:86:51:d3:10:50:19:88:39:33:35:39:b8: 0b:20:ce:b4:c6:9a:aa:44:ea:76:6a:af:48:07:1c:a0:e6:ff: c8:fd:25:64:4c:62:3e:e9:ae:23:64:77:cc:89:1f:cb:39:e0: 24:81:65:79 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULwm5ENeHv0N5IMmFjgNZ9IPshfQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI2MDQwNTE4MTgwMFoX DTI2MDQwNjIyMDYwMFowMzExMC8GA1UEAxMoRDc3OTRGQjRBQUI1NDI1MUI3MjlE MTU3QUQ0RENGOTY3MEIwMzhBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJiEI2pF7M8Z8v7dAXl+N2q9aDyQaAwFnC/d1bReFFUGWcAQxuqUNjatcN7k 9LyFyXvBRZFzIHv/ZXl2GHn2NTTCPAgtPg4QhUySnB4G1B0aTKIliAhPODk6jRoJ noaq+6GiNuzgIh/f0gRFgFH7U00oMRAtJmUdnwqCqdnTWQ7IbyEl8cbjSzCOCIhF JOOee5xVvNgkzApBjPOQ3wjmXD8IsxMnOuaqoG5ngJXr53kTK5fZV/XzGme9mSGg I6XlwKa6IJDY8yRl/nLFZUO+41Z/UufE7YR30mb4OvXGx6iKBrKU0ACN4Xoh21/7 kujJCqctufDTPSfKKUfGqCCmLSsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTXeU+0 qrVCUbcp0VetTc+WcLA4qjAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAeNy1Daas2nyesDfn/FE0qc/iByYknq+O0Po0GRULtl55GtNn 5YqOVMXVsXzOhjqrZgSe31Y+8WwOGew/XABSPf+uyfpZzdvqOR2HvmMvtqXGHWtl ig5fYrkAvGPWY4JWWxh27vJRz5DxgHcoQiq3x5S5TBJd1dFfslQ9vPdoAy6OdYhZ HOTfz8xmCVo1ObZ+uLK84lRAmrXXrXFtBf33ZyUs75RRKwPHY8eVz4qpQuyV1b+0 X/7nQXz794Qkf3VoKgzllZvOiopL5GGUhlHTEFAZiDkzNTm4CyDOtMaaqkTqdmqv SAccoOb/yP0lZExiPumuI2R3zIkfyzngJIFleQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:27:57 2026 by rpki-client