
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier: QNDp2WAXlyygMF0yXOFVzpAoSex5sYwvjlzN+gS4PPQ=
Subject key identifier: 89:10:F0:23:81:98:5F:F8:EC:A3:30:DF:B5:5E:DD:37:D5:F6:04:F1
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial: 2657C7F6811A9DD71A0749D807417722EADBFF4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number: 0909
Signing time: Sat 02 May 2026 23:15:22 +0000
Manifest this update: Sat 02 May 2026 23:10:22 +0000
Manifest next update: Mon 04 May 2026 02:28:22 +0000
Files and hashes: 1: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=)
2: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=)
3: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=)
4: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=)
5: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: DXcyx90KfiyJXiouzIGUkVVJltTIarv1JVwz9xPQXjk=)
6: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=)
7: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=)
8: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=)
9: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=)
10: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=)
11: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 02:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:57:c7:f6:81:1a:9d:d7:1a:07:49:d8:07:41:77:22:ea:db:ff:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Validity
Not Before: May 2 23:10:22 2026 GMT
Not After : May 4 02:28:22 2026 GMT
Subject: CN=8910F02381985FF8ECA330DFB55EDD37D5F604F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:be:ee:0a:58:5c:b2:2e:5e:ca:9b:27:82:
cf:59:13:f2:cb:e9:ed:cd:6f:55:07:f9:63:2b:b6:
3c:65:70:44:ac:b3:a8:b0:9e:09:cb:7f:45:f9:59:
f4:1d:dd:cd:67:c8:c5:2e:04:d1:46:bf:d4:9e:7d:
54:44:4e:8a:14:4e:62:fc:f5:33:0b:94:c9:75:23:
af:af:8b:ff:cf:63:7c:61:55:b0:5b:fa:45:fe:a3:
d5:ee:35:17:ba:6d:8c:7d:32:69:67:e7:7f:ab:8d:
da:88:51:20:03:a7:99:f8:1f:68:35:67:08:29:10:
26:4c:89:5e:2c:c9:e9:9f:df:e0:7b:27:85:02:5d:
ba:b6:93:d7:8b:72:28:f5:5d:7c:f1:be:03:14:1e:
40:12:05:ba:75:66:c4:21:7d:fd:60:d6:a5:45:f1:
b5:22:b2:b4:0c:36:ed:b8:e0:22:40:96:e6:39:d6:
97:35:16:bd:e8:bb:30:46:e7:9e:a0:9b:67:0e:27:
0e:3b:b9:ea:f2:0c:0a:e9:da:6e:af:75:25:6d:d2:
f8:5d:d2:78:35:ab:4c:52:ee:23:14:70:4f:d5:de:
5e:e7:c3:5f:c4:db:48:98:4c:a8:f0:91:a6:b1:46:
12:f1:5d:18:0d:cd:19:a7:ad:64:c9:94:0e:e0:53:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:10:F0:23:81:98:5F:F8:EC:A3:30:DF:B5:5E:DD:37:D5:F6:04:F1
X509v3 Authority Key Identifier:
keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:92:62:34:b1:4c:1c:f1:df:85:1f:5e:e3:73:2f:92:47:cb:
75:64:09:f9:8d:e8:ba:29:60:f2:db:d8:e0:0d:04:d8:db:73:
ad:f8:0c:00:97:ad:c4:53:44:98:14:16:34:13:9e:6b:81:59:
aa:38:0b:9c:72:a2:d5:18:f5:28:40:77:a9:d4:33:e7:57:e0:
55:71:79:62:86:33:c6:55:30:39:8a:d2:ff:dd:8b:1f:ef:60:
e1:3f:77:42:38:1d:f0:c7:50:b0:de:ac:a2:77:4f:3c:8a:9e:
48:70:e9:ca:de:a5:e5:73:b9:1d:e5:9e:a3:3d:83:c8:c6:7d:
6f:58:fa:58:35:d2:70:08:c0:58:f2:bb:10:e0:ca:13:08:f2:
69:20:6f:9f:4b:e8:ea:ae:af:af:00:7d:d1:db:d5:61:4a:17:
d5:0a:c1:59:3c:2a:ad:71:c7:2d:14:56:b0:ca:06:58:d5:57:
96:b8:c3:ee:3b:a5:38:e0:c3:1f:9e:74:2e:5c:06:f0:4f:66:
eb:37:ff:d8:db:4b:31:34:cb:c9:4b:37:6b:7e:e4:d5:7e:79:
04:a4:f2:80:49:99:1a:7d:d0:22:a9:cf:80:5b:5b:86:61:c1:
58:9f:c4:46:f0:4e:c4:a1:80:0e:62:cf:ff:a4:83:de:30:4b:
7d:aa:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:50:51 2026 by rpki-client