$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: JWYJ158CbZlYLAKGXpMeDESGS98Z0L2uQueMahKT6wE= Subject key identifier: AD:FA:71:B6:B9:AE:41:C8:CA:D4:53:37:27:A5:4E:48:2F:E9:42:8F Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 2D4E7792844056625555102E2BF95A9C8780F9C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 0283 Signing time: Fri 17 Apr 2026 07:58:35 +0000 Manifest this update: Fri 17 Apr 2026 07:53:35 +0000 Manifest next update: Sat 18 Apr 2026 11:31:35 +0000 Files and hashes: 1: 3130332e32352e3132342e302f32342d3234203d3e2039343537.roa (hash: B+ADVjoTHnyVRxwPayXW8Wr41jua47v7vFKOzXKix6M=) 2: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=) 3: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=) 4: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=) 5: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=) 6: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: KK09cmBiznK5T+mn1s2FhTHnrenyqXBmT7DuKfbDaqc=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 11:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:4e:77:92:84:40:56:62:55:55:10:2e:2b:f9:5a:9c:87:80:f9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Apr 17 07:53:35 2026 GMT Not After : Apr 18 11:31:35 2026 GMT Subject: CN=ADFA71B6B9AE41C8CAD4533727A54E482FE9428F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:48:ba:93:93:ff:07:da:35:0f:27:f5:42:32: 58:b4:86:b7:4c:86:0c:84:4e:ae:a3:28:76:99:df: 80:c4:3c:27:00:09:2a:3f:ad:93:6b:d0:c8:ee:1c: 95:41:93:ca:c0:35:10:49:c6:56:34:e8:dd:ac:f4: 05:b0:13:da:43:21:d2:2e:a6:96:a0:dd:e5:c0:8f: 93:da:53:ef:2e:fc:ae:09:d9:b7:4d:79:a9:29:55: b1:77:ba:f4:aa:a7:22:b0:2e:5c:74:ac:56:c0:5a: 13:57:1c:66:50:e5:9f:b3:b1:73:9b:c3:bb:a0:7e: ed:67:09:76:ae:b0:31:1b:c5:98:93:4e:27:66:72: 62:50:42:00:73:f3:cd:eb:9e:a7:22:fe:9b:cd:e4: b0:7e:fd:80:35:05:9e:5f:1a:e0:ee:19:04:07:b9: 2d:da:9a:ba:e2:fc:58:f1:7b:19:f2:a7:3e:d2:21: a0:40:6b:8b:6c:c6:32:b5:a2:81:dd:67:8e:cb:90: f7:94:2c:18:48:0b:b1:af:b1:c1:1c:3d:f0:63:18: 7a:e5:02:77:fc:5d:96:2d:27:42:2e:39:09:07:f8: cf:6e:cf:f4:76:07:53:9a:56:95:88:ca:f5:1f:64: 99:be:b9:68:df:e5:bb:8e:5e:a7:4a:85:c2:38:43: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FA:71:B6:B9:AE:41:C8:CA:D4:53:37:27:A5:4E:48:2F:E9:42:8F X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f0:cf:21:96:07:5d:87:46:f1:84:1e:c0:9b:9f:06:48:6e: 90:88:1b:5a:6d:8e:2f:02:8f:4c:1b:75:68:71:b9:de:2f:45: b2:22:05:58:32:69:e3:f0:53:e8:07:d9:80:c3:5d:e3:be:6e: 8b:40:95:8c:8e:61:0d:7b:91:83:f7:5f:9f:3f:05:1c:b6:cd: c0:98:42:8a:e6:52:96:39:a2:6e:0b:77:09:0e:4f:8c:35:68: e5:e9:cc:12:9c:a9:d5:f4:4f:95:b3:15:91:0c:bd:d0:16:12: 04:c8:6f:f7:5e:f7:62:96:57:bc:94:26:e4:50:89:80:7a:8e: a1:e3:db:ce:c4:9e:51:dd:d4:79:8c:e2:7f:7c:3c:cf:66:46: ba:45:52:e1:f3:32:0f:da:fc:b2:3e:c0:bb:6e:a0:77:0f:75: 49:0f:41:d8:49:94:d9:e7:59:9b:51:d3:f5:96:84:39:1b:5c: 87:d8:e7:58:42:de:75:50:c4:94:f6:a5:12:3f:3a:4e:f8:69: c2:20:38:00:f5:1c:8a:31:24:30:d5:a5:8d:9e:93:de:1a:6f: 58:8d:8f:12:58:b1:23:ce:43:dc:0a:0f:eb:94:42:0a:09:7e: db:89:66:de:db:e4:e3:c7:aa:ab:f2:ce:1d:03:69:1a:ad:0b: 8e:55:0b:fe -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULU53koRAVmJVVRAuK/lanIeA+cYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI2MDQxNzA3NTMzNVoX DTI2MDQxODExMzEzNVowMzExMC8GA1UEAxMoQURGQTcxQjZCOUFFNDFDOENBRDQ1 MzM3MjdBNTRFNDgyRkU5NDI4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI1IupOT/wfaNQ8n9UIyWLSGt0yGDIROrqModpnfgMQ8JwAJKj+tk2vQyO4c lUGTysA1EEnGVjTo3az0BbAT2kMh0i6mlqDd5cCPk9pT7y78rgnZt015qSlVsXe6 9KqnIrAuXHSsVsBaE1ccZlDln7Oxc5vDu6B+7WcJdq6wMRvFmJNOJ2ZyYlBCAHPz zeuepyL+m83ksH79gDUFnl8a4O4ZBAe5LdqauuL8WPF7GfKnPtIhoEBri2zGMrWi gd1njsuQ95QsGEgLsa+xwRw98GMYeuUCd/xdli0nQi45CQf4z27P9HYHU5pWlYjK 9R9kmb65aN/lu45ep0qFwjhDnLcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSt+nG2 ua5ByMrUUzcnpU5IL+lCjzAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAUvDPIZYHXYdG8YQewJufBkhukIgbWm2OLwKPTBt1aHG53i9F siIFWDJp4/BT6AfZgMNd475ui0CVjI5hDXuRg/dfnz8FHLbNwJhCiuZSljmibgt3 CQ5PjDVo5enMEpyp1fRPlbMVkQy90BYSBMhv9173YpZXvJQm5FCJgHqOoePbzsSe Ud3UeYzif3w8z2ZGukVS4fMyD9r8sj7Au26gdw91SQ9B2EmU2edZm1HT9ZaEORtc h9jnWELedVDElPalEj86TvhpwiA4APUcijEkMNWljZ6T3hpvWI2PElixI85D3AoP 65RCCgl+24lm3tvk48eqq/LOHQNpGq0LjlUL/g== -----END CERTIFICATE-----Generated at Fri Apr 17 15:46:45 2026 by rpki-client