$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json) Hash identifier: bUam1mg39y5x3ap+Yp1z6tNDqt4m/VTrLD49E6+m9MY= Subject key identifier: 47:45:D6:20:35:E8:F9:6B:93:33:DF:E2:2E:99:2D:D4:D3:AD:D4:89 Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Certificate serial: 78708FD15B2E5DF351010CEE67097B607E53BD74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft Manifest number: 08CA Signing time: Thu 19 Mar 2026 02:19:54 +0000 Manifest this update: Thu 19 Mar 2026 02:14:54 +0000 Manifest next update: Fri 20 Mar 2026 03:04:54 +0000 Files and hashes: 1: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=) 2: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=) 3: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=) 4: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=) 5: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: 1dPaIveIM1JzoNZr4q1M6w38NGTCNjrqjPy91/PyNao=) 6: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=) 7: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=) 8: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=) 9: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=) 10: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=) 11: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 03:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:70:8f:d1:5b:2e:5d:f3:51:01:0c:ee:67:09:7b:60:7e:53:bd:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Validity Not Before: Mar 19 02:14:54 2026 GMT Not After : Mar 20 03:04:54 2026 GMT Subject: CN=4745D62035E8F96B9333DFE22E992DD4D3ADD489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7e:a4:ef:e3:20:f1:95:a4:65:78:9b:be:e1: 23:36:46:2f:ff:da:50:ca:78:b9:52:4e:f7:8c:44: 39:78:67:5f:71:92:dc:dd:1a:7d:82:f3:d1:fb:4e: 73:bf:15:2c:8a:e0:cd:fe:a4:ff:94:c4:fc:6f:de: d1:0f:41:14:65:00:f7:0f:48:5e:a3:7c:e7:dd:30: 4b:22:67:df:50:35:32:8f:c4:a9:d2:a3:97:8e:c0: 61:86:d5:e9:7a:ca:b5:1b:63:20:11:f1:56:f9:14: dc:ea:64:19:90:05:94:13:e8:dd:e7:2a:3d:de:a5: 80:f0:cf:8b:4d:67:1c:b1:a7:52:e1:cf:69:30:e4: 6e:f5:86:b6:9c:5f:39:59:3f:37:67:91:ab:3c:55: a1:c1:d1:e2:41:97:a7:d9:f6:d9:fd:3f:28:35:c6: 65:7f:c2:5f:c8:1d:68:19:fd:c6:38:01:f2:fd:80: 98:af:ff:8f:37:21:cd:02:78:f0:ec:7a:39:b0:25: 6a:02:89:74:af:78:d0:42:4e:23:b1:1e:ed:f8:35: 79:a5:58:35:94:5f:bc:db:c3:19:62:f7:72:c8:be: 49:b9:30:65:72:93:13:a2:b7:d2:2c:b4:3f:51:9d: 11:0e:28:98:f9:99:d4:ba:ee:90:80:d7:11:9c:30: 9f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:45:D6:20:35:E8:F9:6B:93:33:DF:E2:2E:99:2D:D4:D3:AD:D4:89 X509v3 Authority Key Identifier: keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:11:fb:04:3d:ce:f3:1c:35:9d:73:d4:ee:82:5e:c3:2e:da: ef:e6:c0:54:fd:76:12:80:23:fb:2a:92:5f:2b:e3:de:15:22: 67:0f:f1:72:1a:22:ba:8b:24:7d:95:49:7b:e4:bc:42:fe:53: a0:88:70:5e:1d:88:1d:04:db:25:02:21:d6:20:b1:9b:81:99: 3e:e7:87:25:74:46:b7:92:56:08:df:72:d4:25:d9:01:12:c7: 52:fa:b8:b7:b3:07:a5:57:37:a3:6b:e4:4a:04:66:ca:f9:e2: ec:22:dc:2e:bc:d4:26:82:4e:3d:1e:5c:7c:28:a3:98:cf:82: 20:78:76:d9:d8:d7:20:a8:e7:23:7a:79:81:81:7f:b3:7c:76: a9:e9:ca:9b:c4:28:87:7e:d0:73:5e:e3:72:39:fc:f8:ce:ef: df:05:44:df:15:9d:aa:21:61:0b:c9:53:fc:2d:31:d1:73:06: 79:50:89:b1:3d:78:6f:a4:31:16:38:d4:60:6b:8e:cc:cb:44: 52:aa:f8:6e:5f:53:c8:a1:c5:c1:75:63:5d:b4:cf:8f:22:c3: 46:1f:ed:e8:0e:01:ce:c1:7b:7a:0c:57:23:d2:78:c6:f4:90: 3e:b9:e4:58:8e:e2:83:61:f9:62:ab:b4:88:03:7c:28:21:87: 46:9b:10:d5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUeHCP0VsuXfNRAQzuZwl7YH5TvXQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2 MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI2MDMxOTAyMTQ1NFoX DTI2MDMyMDAzMDQ1NFowMzExMC8GA1UEAxMoNDc0NUQ2MjAzNUU4Rjk2QjkzMzNE RkUyMkU5OTJERDREM0FERDQ4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKB+pO/jIPGVpGV4m77hIzZGL//aUMp4uVJO94xEOXhnX3GS3N0afYLz0ftO c78VLIrgzf6k/5TE/G/e0Q9BFGUA9w9IXqN8590wSyJn31A1Mo/EqdKjl47AYYbV 6XrKtRtjIBHxVvkU3OpkGZAFlBPo3ecqPd6lgPDPi01nHLGnUuHPaTDkbvWGtpxf OVk/N2eRqzxVocHR4kGXp9n22f0/KDXGZX/CX8gdaBn9xjgB8v2AmK//jzchzQJ4 8Ox6ObAlagKJdK940EJOI7Ee7fg1eaVYNZRfvNvDGWL3csi+SbkwZXKTE6K30iy0 P1GdEQ4omPmZ1LrukIDXEZwwn6cCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRHRdYg Nej5a5Mz3+IumS3U063UiTAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5 ODAwMDAvMC85ODlEMzJENUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAMhH7BD3O8xw1nXPU7oJewy7a7+bAVP12EoAj+yqSXyvj3hUi Zw/xchoiuoskfZVJe+S8Qv5ToIhwXh2IHQTbJQIh1iCxm4GZPueHJXRGt5JWCN9y 1CXZARLHUvq4t7MHpVc3o2vkSgRmyvni7CLcLrzUJoJOPR5cfCijmM+CIHh22djX IKjnI3p5gYF/s3x2qenKm8Qoh37Qc17jcjn8+M7v3wVE3xWdqiFhC8lT/C0x0XMG eVCJsT14b6QxFjjUYGuOzMtEUqr4bl9TyKHFwXVjXbTPjyLDRh/t6A4BzsF7egxX I9J4xvSQPrnkWI7ig2H5Yqu0iAN8KCGHRpsQ1Q== -----END CERTIFICATE-----Generated at Thu Mar 19 13:46:42 2026 by rpki-client