$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json) Hash identifier: uL5K0NkL0Uj82Hj+tUD7LjjNYqLZ37wF9aImO4e8wcc= Subject key identifier: 0B:15:31:8C:F1:75:02:C4:6E:18:85:27:C5:76:2B:F7:D1:7E:F8:D6 Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Certificate serial: 65359982419EA88EDA5A6BC4AF55F1EF53B84050 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft Manifest number: 07CB Signing time: Tue 09 Sep 2025 13:02:38 +0000 Manifest this update: Tue 09 Sep 2025 12:57:38 +0000 Manifest next update: Wed 10 Sep 2025 15:19:38 +0000 Files and hashes: 1: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=) 2: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=) 3: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=) 4: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=) 5: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=) 6: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=) 7: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=) 8: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=) 9: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: CeJy8ok/d1/EpIk/mMZXjiWnUdViru39EUSkbXE89+o=) 10: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=) 11: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 15:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:35:99:82:41:9e:a8:8e:da:5a:6b:c4:af:55:f1:ef:53:b8:40:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Validity Not Before: Sep 9 12:57:38 2025 GMT Not After : Sep 10 15:19:38 2025 GMT Subject: CN=0B15318CF17502C46E188527C5762BF7D17EF8D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:3c:c1:95:10:b4:3d:5e:9d:84:1b:9c:2e: cb:ff:d6:08:88:f3:a8:31:e4:ce:05:06:00:fc:ea: a8:3e:8e:88:07:5f:d7:a1:d4:29:fd:97:25:81:f3: 9c:3d:f7:33:5b:e4:95:56:d2:26:3a:03:1f:57:07: 43:83:93:50:12:8a:fe:a5:56:f5:28:06:4a:38:ba: 30:0d:a6:43:99:8e:90:3e:54:f7:2b:10:bb:5e:19: 8d:77:46:ff:70:5a:4d:a5:6e:da:56:04:f1:3f:36: be:63:6e:19:85:bc:55:2d:1b:8b:db:b4:54:4c:fe: 0b:a9:3f:55:c7:da:91:d5:dc:8e:37:96:80:f8:34: c1:e5:38:20:d0:bc:2e:41:13:97:8e:b1:20:14:67: 65:28:ae:00:6b:33:98:2e:15:ce:12:7e:0f:26:2c: 39:0c:33:f4:98:50:0f:be:4c:06:97:45:c6:33:37: 68:3f:0c:4f:7f:2d:78:8c:d3:df:f5:e7:a6:3c:f6: e5:fe:a6:e3:3b:18:4b:09:22:90:79:fd:fc:2c:6f: a1:94:f5:bf:c8:36:4c:26:cf:80:5a:af:d4:88:1c: 36:e3:26:22:d6:af:7a:ca:57:08:ab:2f:1e:11:a0: 04:8c:6d:40:6d:b4:45:30:47:c1:95:a8:93:a4:8e: 9b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:15:31:8C:F1:75:02:C4:6E:18:85:27:C5:76:2B:F7:D1:7E:F8:D6 X509v3 Authority Key Identifier: keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1e:e7:29:8d:30:af:b8:96:49:05:8a:dc:7a:0c:05:d1:42: 28:bb:ed:5e:cb:5c:46:8f:fb:e0:cf:98:7b:4d:c9:9e:07:18: 36:61:1c:d4:ed:45:e1:a2:85:14:c7:10:65:5e:c0:1d:e1:78: 35:af:8d:23:ed:83:2b:90:42:88:97:cd:3f:ac:4e:08:b0:f9: 3f:bd:47:cd:53:62:55:42:ee:45:7e:f3:15:c0:ab:9f:06:1e: d5:5d:f5:0e:e0:8d:89:1a:08:0d:a4:e5:62:71:c1:3d:73:2e: dc:aa:48:2b:ba:74:44:3c:d2:fc:eb:29:7f:ab:f9:2d:81:84: 89:62:4b:e3:10:4d:4c:c6:87:b2:b0:d0:ac:37:86:8a:8e:06: 3a:79:e0:4e:99:34:47:99:6c:b6:14:73:4f:4e:12:49:f2:57: f7:e3:45:c0:79:5b:43:4f:7f:65:b9:fe:7f:b8:94:72:9f:c4: d1:45:32:2b:20:fd:f9:b3:1e:a3:18:63:72:ce:47:78:a1:44: 1b:b8:98:74:49:fe:ac:46:c5:1b:9b:03:f5:a1:06:90:df:4d: 08:c1:39:de:55:da:0a:45:8d:1d:3a:53:54:35:7e:26:78:24: 2f:7c:40:09:bb:53:32:7f:ac:9b:1c:33:62:3a:3e:0a:0c:59: b4:13:f6:a0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZTWZgkGeqI7aWmvEr1Xx71O4QFAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2 MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI1MDkwOTEyNTczOFoX DTI1MDkxMDE1MTkzOFowMzExMC8GA1UEAxMoMEIxNTMxOENGMTc1MDJDNDZFMTg4 NTI3QzU3NjJCRjdEMTdFRjhENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcjPMGVELQ9Xp2EG5wuy//WCIjzqDHkzgUGAPzqqD6OiAdf16HUKf2XJYHz nD33M1vklVbSJjoDH1cHQ4OTUBKK/qVW9SgGSji6MA2mQ5mOkD5U9ysQu14ZjXdG /3BaTaVu2lYE8T82vmNuGYW8VS0bi9u0VEz+C6k/VcfakdXcjjeWgPg0weU4INC8 LkETl46xIBRnZSiuAGszmC4VzhJ+DyYsOQwz9JhQD75MBpdFxjM3aD8MT38teIzT 3/Xnpjz25f6m4zsYSwkikHn9/CxvoZT1v8g2TCbPgFqv1IgcNuMmItavespXCKsv HhGgBIxtQG20RTBHwZWok6SOmy8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBQLFTGM 8XUCxG4YhSfFdiv30X741jAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5 ODAwMDAvMC85ODlEMzJENUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAhh7nKY0wr7iWSQWK3HoMBdFCKLvtXstcRo/74M+Ye03JngcY NmEc1O1F4aKFFMcQZV7AHeF4Na+NI+2DK5BCiJfNP6xOCLD5P71HzVNiVULuRX7z FcCrnwYe1V31DuCNiRoIDaTlYnHBPXMu3KpIK7p0RDzS/Ospf6v5LYGEiWJL4xBN TMaHsrDQrDeGio4GOnngTpk0R5lsthRzT04SSfJX9+NFwHlbQ09/Zbn+f7iUcp/E 0UUyKyD9+bMeoxhjcs5HeKFEG7iYdEn+rEbFG5sD9aEGkN9NCME53lXaCkWNHTpT VDV+JngkL3xACbtTMn+smxwzYjo+CgxZtBP2oA== -----END CERTIFICATE-----Generated at Wed Sep 10 07:07:10 2025 by rpki-client