
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier: mj+li9OvKqE9JbXgCdVreTFiaFi+ZPcFAy2sXmYXL4Y=
Subject key identifier: CD:9F:D0:97:0D:78:F5:D2:51:C0:AD:B9:00:DA:22:DD:C4:F9:82:C9
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial: 0AFD1EA6CD993999BAD632D7C01FE98B2E2623BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number: 0952
Signing time: Mon 22 Jun 2026 03:53:54 +0000
Manifest this update: Mon 22 Jun 2026 03:48:54 +0000
Manifest next update: Tue 23 Jun 2026 04:49:54 +0000
Files and hashes: 1: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: 7oXfpj3C/mgJ9C72voMZZOZTwU/VWJrw70I4Vj4hZRU=)
2: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: uKziAmnKEFzqB9nfk5eW2+yVcFJdYkRgt8r/NipgvDk=)
3: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: SlyeO73BsaZhNaBtds/ns68oiIGA+OXgFydVUq6b7Yc=)
4: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: Y4k57xRWRy9X0jeYDXKld09T8mLHah2yzMR8vWq3R2M=)
5: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: wD2X/rnLvjYX7xyPB9Jt+GcW/s8Zi1WkDFOO2rKFbBY=)
6: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: nQW/gChgRCJZOUmKfXuBxzd9ebuiuqT7zJMBaxZsIrM=)
7: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: Nop9dkUte9U68fkIB0BsFoUa5JXzDdvq5lKUYj0CyXE=)
8: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: 3ggSTM9Di1FgXo3Ut6sBwZJGn9C5XLQtwoGmuGHyLTs=)
9: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: wx7mDDVDVvssyRRRK7qXWbAqlJxXiOpWt5/RcILxYjM=)
10: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: BuEBPTJ2vfTWlZKFjMl32JrJQqRwp1mqSuqe+EmcFIA=)
11: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: 6bUioHOiplX0nplUReMAUW/pmAQYfQERH31QOiWI09E=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Jun 2026 04:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:fd:1e:a6:cd:99:39:99:ba:d6:32:d7:c0:1f:e9:8b:2e:26:23:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Validity
Not Before: Jun 22 03:48:54 2026 GMT
Not After : Jun 23 04:49:54 2026 GMT
Subject: CN=CD9FD0970D78F5D251C0ADB900DA22DDC4F982C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:43:d3:5a:a6:0f:36:2c:2c:79:21:58:e7:
f4:09:8f:b6:ed:8d:86:df:2c:67:a1:8f:c3:b1:f6:
fb:3a:c7:74:c9:0b:02:81:d1:d9:7d:d3:25:7f:52:
cc:cb:b0:50:90:9c:12:b6:55:26:61:3b:73:bc:5e:
e7:c3:b8:d3:17:ef:b8:a3:2a:fa:6c:c7:3f:b0:36:
13:54:04:87:28:f4:d6:db:8a:55:06:27:98:c6:73:
d1:38:ee:f4:df:4e:e1:ed:63:9b:d9:17:da:e7:10:
d7:8a:b0:06:08:d4:99:b2:09:dd:91:69:a5:e5:33:
0c:04:69:20:b6:1b:b0:a4:a6:7b:76:28:f4:21:21:
d8:fd:98:26:05:7c:83:0e:f7:0e:4b:5f:11:ea:01:
3f:46:3f:d7:fa:24:e7:b5:4e:94:bf:12:95:5c:c6:
c9:4d:2f:43:cc:7a:21:0a:33:35:b1:33:ce:7c:7d:
78:a4:91:a0:fe:4a:5b:01:e0:7b:71:f7:8d:43:c7:
63:1d:49:1e:54:5c:67:3b:21:7c:37:a0:f5:26:1a:
40:48:3d:10:d4:12:cf:32:ce:b9:a4:90:c7:bf:aa:
d9:c7:d0:21:41:45:ba:27:26:99:2e:89:d8:dd:f7:
fd:c8:64:ca:e1:88:8d:fe:12:e1:f5:a8:77:a8:34:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9F:D0:97:0D:78:F5:D2:51:C0:AD:B9:00:DA:22:DD:C4:F9:82:C9
X509v3 Authority Key Identifier:
keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:46:4a:69:19:b1:8d:04:11:50:9f:78:61:71:26:46:dc:06:
83:a5:0b:16:8a:59:11:e3:b2:0d:8a:9f:2b:f6:c9:e1:52:47:
99:87:97:83:08:8e:69:98:28:d8:2c:9f:cb:21:c1:3e:0c:dc:
8c:bc:9a:fc:85:3a:ed:95:4c:bd:12:52:0b:86:76:db:92:17:
30:dd:f2:4b:40:05:1c:a4:36:8d:12:72:32:1d:e1:86:96:18:
1c:7a:85:8b:d5:29:26:2e:6c:b6:81:0e:88:f4:4e:4c:19:bb:
ea:a2:86:6e:bb:ba:a2:7f:1e:c3:0d:ce:1c:69:6f:cc:b4:b9:
61:2b:f8:40:3c:d4:1c:04:38:79:b9:d1:18:b0:f0:06:5b:4f:
00:f7:bb:9b:16:f5:7e:cb:02:5d:1e:fc:aa:41:c2:7d:f9:b9:
e2:cc:02:cd:7d:a4:b8:81:75:1f:c4:05:17:d9:ee:93:cb:45:
87:c9:42:d8:b5:97:a3:43:f5:a2:fe:cc:a0:4b:2a:f6:2e:08:
d9:a5:42:9f:c0:00:05:5e:1b:7a:6e:8f:f6:9c:a8:bd:3c:1a:
27:0b:66:6a:5b:cb:9b:06:e4:11:94:27:67:6e:8b:cf:7c:5b:
bb:ff:60:1e:3b:63:8c:d4:14:3f:05:5a:77:20:09:78:39:2a:
e7:b6:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 08:29:48 2026 by rpki-client