$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json) Hash identifier: vfv4fG+cnYbE8sXnI+BsH4fRyYY5MBhtCCL0YLZ4lAU= Subject key identifier: 38:DA:DF:DD:9F:B6:75:35:AC:B8:B1:EC:8A:13:2E:B3:1E:27:61:B4 Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Certificate serial: 5D210F107F087CFB3A83885E66E604CD84C2DEFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft Manifest number: 098D Signing time: Wed 05 Aug 2026 21:03:21 +0000 Manifest this update: Wed 05 Aug 2026 20:58:21 +0000 Manifest next update: Fri 07 Aug 2026 00:25:21 +0000 Files and hashes: 1: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: Y4k57xRWRy9X0jeYDXKld09T8mLHah2yzMR8vWq3R2M=) 2: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: wx7mDDVDVvssyRRRK7qXWbAqlJxXiOpWt5/RcILxYjM=) 3: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: SlyeO73BsaZhNaBtds/ns68oiIGA+OXgFydVUq6b7Yc=) 4: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: BuEBPTJ2vfTWlZKFjMl32JrJQqRwp1mqSuqe+EmcFIA=) 5: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: 7oXfpj3C/mgJ9C72voMZZOZTwU/VWJrw70I4Vj4hZRU=) 6: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: 3ggSTM9Di1FgXo3Ut6sBwZJGn9C5XLQtwoGmuGHyLTs=) 7: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: uKziAmnKEFzqB9nfk5eW2+yVcFJdYkRgt8r/NipgvDk=) 8: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: 6bUioHOiplX0nplUReMAUW/pmAQYfQERH31QOiWI09E=) 9: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: nQW/gChgRCJZOUmKfXuBxzd9ebuiuqT7zJMBaxZsIrM=) 10: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: /ohEJDwJeKAUUMEPMIPdToJ/x8Mje+HpKKqlU/0TA7w=) 11: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: wD2X/rnLvjYX7xyPB9Jt+GcW/s8Zi1WkDFOO2rKFbBY=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Aug 2026 00:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:21:0f:10:7f:08:7c:fb:3a:83:88:5e:66:e6:04:cd:84:c2:de:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Validity Not Before: Aug 5 20:58:21 2026 GMT Not After : Aug 7 00:25:21 2026 GMT Subject: CN=38DADFDD9FB67535ACB8B1EC8A132EB31E2761B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:11:a2:88:3f:3c:95:89:57:17:8a:f0:16: 07:88:8e:cb:3e:58:1f:ae:b4:de:c5:77:cb:28:a0: 03:7d:65:fe:24:82:7f:34:ee:b3:0a:2c:72:b4:b6: 6c:c0:09:a2:8d:bb:12:2a:91:2c:07:15:23:cf:e2: a6:91:98:9e:9d:05:06:f6:4b:5d:d8:e0:60:e2:99: 8f:cc:59:71:ef:57:9e:62:94:ff:d7:a7:89:96:72: 88:da:af:dc:ac:a8:9c:db:a5:d3:06:bf:25:7c:25: 6e:61:ce:0f:19:26:a6:b1:5f:af:f1:f3:6f:33:55: 0a:b2:4f:5a:0f:9d:3e:15:4e:9d:5e:d7:f8:5f:6d: 56:71:be:52:38:d5:28:4f:c6:13:40:3d:32:c1:e9: 70:8f:d3:19:10:0a:e7:85:d7:fd:55:34:58:d2:7d: f1:d6:02:57:79:e4:90:4c:f7:23:80:61:dc:76:98: 53:42:87:ef:3a:ad:79:b3:1e:53:a4:70:40:30:7b: 27:51:84:83:0b:7f:c2:36:ec:fa:21:57:33:1f:ce: 23:3e:ef:cd:c3:ed:3c:8a:b6:6b:ae:13:aa:c7:d5: 41:e3:8f:42:10:58:af:cb:dc:b0:73:c3:47:3f:ae: cb:8b:ad:8a:41:b5:84:e6:82:84:d5:29:f2:15:d4: cd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DA:DF:DD:9F:B6:75:35:AC:B8:B1:EC:8A:13:2E:B3:1E:27:61:B4 X509v3 Authority Key Identifier: keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:6f:4f:68:b0:53:30:d7:2f:c6:3b:ab:76:fd:2f:4e:16:1a: 9f:22:a1:aa:c6:c2:b6:28:c0:87:fe:f8:d8:f8:17:b7:8a:cf: 37:4b:d1:6a:8c:9f:fb:ec:22:92:7e:5f:03:c6:40:ee:07:21: 86:d0:03:1c:9e:2f:c5:74:8e:4e:02:81:ac:40:8b:31:58:c7: 32:aa:80:10:36:a1:4a:31:e5:bd:f7:63:0f:e2:4a:e4:11:d3: 33:0b:66:78:82:82:36:6f:de:f9:63:bf:ba:06:24:f5:8e:b5: 64:c4:16:68:8a:44:5e:d7:66:15:2c:08:8e:d5:b8:ab:6f:ea: 62:24:f3:d2:d1:4c:15:12:f1:96:b3:05:57:9a:01:f3:3b:91: 7f:4a:e0:3e:19:38:a2:bc:c8:68:74:18:19:42:d0:1b:19:07: 3e:4f:a2:18:67:76:de:af:c4:64:bf:d3:ae:a9:b6:98:bc:44: 98:4f:a4:d3:17:e7:73:81:73:e4:e5:3f:9b:f5:38:a9:fe:bb: 59:d0:88:a3:d8:3b:1d:cf:9e:fe:51:f9:e7:79:2a:a9:27:19: fb:ed:62:79:ba:bb:12:94:fa:77:c7:ae:b2:7d:1e:fe:c5:e0: 90:08:fa:fb:f7:92:d0:63:dd:8d:ff:5f:93:a0:8d:9b:2a:82: b7:67:e1:b8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXSEPEH8IfPs6g4heZuYEzYTC3vswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2 MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI2MDgwNTIwNTgyMVoX DTI2MDgwNzAwMjUyMVowMzExMC8GA1UEAxMoMzhEQURGREQ5RkI2NzUzNUFDQjhC MUVDOEExMzJFQjMxRTI3NjFCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALt1EaKIPzyViVcXivAWB4iOyz5YH6603sV3yyigA31l/iSCfzTuswoscrS2 bMAJoo27EiqRLAcVI8/ippGYnp0FBvZLXdjgYOKZj8xZce9XnmKU/9eniZZyiNqv 3KyonNul0wa/JXwlbmHODxkmprFfr/HzbzNVCrJPWg+dPhVOnV7X+F9tVnG+UjjV KE/GE0A9MsHpcI/TGRAK54XX/VU0WNJ98dYCV3nkkEz3I4Bh3HaYU0KH7zqtebMe U6RwQDB7J1GEgwt/wjbs+iFXMx/OIz7vzcPtPIq2a64TqsfVQeOPQhBYr8vcsHPD Rz+uy4utikG1hOaChNUp8hXUzWUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQ42t/d n7Z1Nay4seyKEy6zHidhtDAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5 ODAwMDAvMC85ODlEMzJENUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAzG9PaLBTMNcvxjurdv0vThYanyKhqsbCtijAh/742PgXt4rP N0vRaoyf++wikn5fA8ZA7gchhtADHJ4vxXSOTgKBrECLMVjHMqqAEDahSjHlvfdj D+JK5BHTMwtmeIKCNm/e+WO/ugYk9Y61ZMQWaIpEXtdmFSwIjtW4q2/qYiTz0tFM FRLxlrMFV5oB8zuRf0rgPhk4orzIaHQYGULQGxkHPk+iGGd23q/EZL/Trqm2mLxE mE+k0xfnc4Fz5OU/m/U4qf67WdCIo9g7Hc+e/lH553kqqScZ++1iebq7EpT6d8eu sn0e/sXgkAj6+/eS0GPdjf9fk6CNmyqCt2fhuA== -----END CERTIFICATE-----Generated at Thu Aug 6 17:31:53 2026 by rpki-client