$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: barFRcOz2v5PmSu6iAYnNcvy+fJ1S4cmaHcv5KNK4mk= Subject key identifier: A9:AC:F9:8E:1A:E3:59:A2:20:8A:F1:A3:5D:DC:10:45:63:CA:BA:28 Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 50F307FF99896F242C05BDF23620E0032C87FC7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: E5 Signing time: Sat 14 Jun 2025 21:25:38 +0000 Manifest this update: Sat 14 Jun 2025 21:20:38 +0000 Manifest next update: Sun 15 Jun 2025 22:42:38 +0000 Files and hashes: 1: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: 3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=) 2: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: umKL8rbe+aUZddhjdmmYyIxF39M9EYoxyIaUQ42VEHc=) 3: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=) 4: 3130332e32352e3132342e302f32342d3234203d3e203230343733.roa (hash: 8k5xMj72vdeb02tvhBSSTZSUb9XJjAZCB0tiP/qA9IU=) 5: 3130332e32352e3132342e302f32342d3234203d3e203136353039.roa (hash: 0ULEQRz2ldMvt+RFzaD6gYHgW85Kkj7F+ioCi2gyZr8=) 6: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=) 7: 3130332e32352e3132342e302f32342d3234203d3e203134363138.roa (hash: N/UGLKyCF1nlWGfA4MlZFn9fe9dMDYLHEgBApUdM/AQ=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 22:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f3:07:ff:99:89:6f:24:2c:05:bd:f2:36:20:e0:03:2c:87:fc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Jun 14 21:20:38 2025 GMT Not After : Jun 15 22:42:38 2025 GMT Subject: CN=A9ACF98E1AE359A2208AF1A35DDC104563CABA28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:45:b3:20:5c:d7:fd:b1:5c:80:89:47:ae:14: da:36:78:50:5b:38:d0:34:5f:95:8a:89:38:03:fd: 0f:ef:17:05:d5:07:09:e4:a9:3b:24:66:65:5a:0c: e0:79:8b:b7:ed:d4:1e:ae:5a:e5:62:56:57:12:83: 2d:00:58:10:bf:8b:a3:79:6e:37:af:ef:10:45:72: e1:4d:d3:a8:86:df:93:be:09:c4:9e:68:0c:ef:a3: 1e:ba:32:48:fb:9b:37:7c:d6:90:81:77:21:2e:f9: 54:18:4c:ab:93:15:d1:d8:2c:44:71:91:bd:53:eb: 39:a5:91:7d:1e:11:75:8a:dd:8d:c4:a6:13:a4:cf: 4e:6c:43:68:c1:21:a1:f1:0f:27:9d:d2:98:0e:d5: 40:91:13:cf:83:15:4b:9e:94:c4:3b:54:f1:b8:7e: c7:97:cf:75:f6:37:01:90:1a:38:d5:a7:b9:e0:05: 78:cf:6f:de:1c:9a:f7:30:ea:4e:d1:5e:23:64:36: 60:a6:6f:82:25:ac:bc:d7:8b:e9:4f:93:34:1c:49: 2c:71:54:67:a9:fd:96:6d:5a:da:20:e8:89:2f:8d: 80:94:c2:ca:27:9c:04:ac:2b:11:dd:e5:a5:9e:d0: 0a:ed:99:ed:b5:26:54:06:c9:d9:fa:bd:43:1f:7a: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AC:F9:8E:1A:E3:59:A2:20:8A:F1:A3:5D:DC:10:45:63:CA:BA:28 X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:40:a0:de:c7:d1:73:7a:11:54:7d:32:29:bc:88:c7:ce:5c: 77:cd:a8:f5:5d:e7:33:d0:96:ea:ed:6c:53:05:88:e4:35:0d: e8:c7:56:e4:0c:d3:f0:3f:cf:37:45:47:3c:b8:ec:58:a4:d6: 19:fc:ee:00:09:77:41:d6:a9:a8:b2:61:40:eb:8b:c2:78:e2: fe:cf:81:6b:a3:e2:e8:17:9c:ea:b6:9e:76:c2:62:bc:de:fb: 45:16:e4:af:e8:5d:9f:c1:ad:a5:c3:82:dd:e3:00:28:d2:c2: 0b:2b:02:8d:64:63:16:df:8f:42:63:7d:ce:3f:43:f6:ca:c2: 57:45:46:71:bd:f1:b2:39:a6:b6:9a:b6:d8:b1:d7:96:86:66: bb:53:95:3d:dd:f7:6c:0c:43:04:4e:b1:a1:42:02:b6:d8:b5: 4f:a2:94:ab:5d:31:33:fb:9d:4d:24:bc:f0:8d:0d:e8:f0:19: 3f:cc:06:70:ff:69:04:79:67:7f:b4:35:64:9d:a1:d3:e8:fd: 55:5c:c6:03:dd:22:71:5f:b0:d5:63:d3:ac:aa:f0:94:28:2d: 92:52:5c:dd:6c:50:c2:4d:f3:e8:24:f8:5f:10:fd:c6:7c:9c: 89:9b:de:6f:a5:ad:0d:5d:61:70:3a:d0:1d:8d:92:06:fa:d9: 47:b6:47:9b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUPMH/5mJbyQsBb3yNiDgAyyH/HswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MDYxNDIxMjAzOFoX DTI1MDYxNTIyNDIzOFowMzExMC8GA1UEAxMoQTlBQ0Y5OEUxQUUzNTlBMjIwOEFG MUEzNUREQzEwNDU2M0NBQkEyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFFsyBc1/2xXICJR64U2jZ4UFs40DRflYqJOAP9D+8XBdUHCeSpOyRmZVoM 4HmLt+3UHq5a5WJWVxKDLQBYEL+Lo3luN6/vEEVy4U3TqIbfk74JxJ5oDO+jHroy SPubN3zWkIF3IS75VBhMq5MV0dgsRHGRvVPrOaWRfR4RdYrdjcSmE6TPTmxDaMEh ofEPJ53SmA7VQJETz4MVS56UxDtU8bh+x5fPdfY3AZAaONWnueAFeM9v3hya9zDq TtFeI2Q2YKZvgiWsvNeL6U+TNBxJLHFUZ6n9lm1a2iDoiS+NgJTCyiecBKwrEd3l pZ7QCu2Z7bUmVAbJ2fq9Qx96RlUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSprPmO GuNZoiCK8aNd3BBFY8q6KDAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAkUCg3sfRc3oRVH0yKbyIx85cd82o9V3nM9CW6u1sUwWI5DUN 6MdW5AzT8D/PN0VHPLjsWKTWGfzuAAl3QdapqLJhQOuLwnji/s+Ba6Pi6Bec6rae dsJivN77RRbkr+hdn8GtpcOC3eMAKNLCCysCjWRjFt+PQmN9zj9D9srCV0VGcb3x sjmmtpq22LHXloZmu1OVPd33bAxDBE6xoUICtti1T6KUq10xM/udTSS88I0N6PAZ P8wGcP9pBHlnf7Q1ZJ2h0+j9VVzGA90icV+w1WPTrKrwlCgtklJc3WxQwk3z6CT4 XxD9xnyciZveb6WtDV1hcDrQHY2SBvrZR7ZHmw== -----END CERTIFICATE-----Generated at Sun Jun 15 05:07:28 2025 by rpki-client