$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: d7JTjnazdQAIGiZNnbpAuMG9uPLeB4Md14gUHstKeLg= Subject key identifier: 91:AF:75:A2:92:FB:5B:A1:9C:77:B4:1D:29:26:32:E3:2A:F6:9D:D4 Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 36E328D64C50504AC7D6BA409CEBDB6FBEA7ED76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: A4 Signing time: Sat 26 Apr 2025 17:29:53 +0000 Manifest this update: Sat 26 Apr 2025 17:24:53 +0000 Manifest next update: Sun 27 Apr 2025 20:05:53 +0000 Files and hashes: 1: 3130332e32352e3132352e302f32342d3234203d3e20313530363534.roa (hash: TKkmbX2rZAc1MWXE3pRutjjB5Wb/b242gTsyLM3JxT4=) 2: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=) 3: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: Le2C7lD0iwyie54uDhQdeNsqooFQndgd4kaQ0qM7Fy0=) 4: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=) 5: 3130332e32352e3132342e302f32342d3234203d3e203136353039.roa (hash: 0ULEQRz2ldMvt+RFzaD6gYHgW85Kkj7F+ioCi2gyZr8=) 6: 3130332e32352e3132342e302f32342d3234203d3e203230343733.roa (hash: 8k5xMj72vdeb02tvhBSSTZSUb9XJjAZCB0tiP/qA9IU=) 7: 3130332e32352e3132342e302f32342d3234203d3e203134363138.roa (hash: N/UGLKyCF1nlWGfA4MlZFn9fe9dMDYLHEgBApUdM/AQ=) 8: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: 3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e3:28:d6:4c:50:50:4a:c7:d6:ba:40:9c:eb:db:6f:be:a7:ed:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Apr 26 17:24:53 2025 GMT Not After : Apr 27 20:05:53 2025 GMT Subject: CN=91AF75A292FB5BA19C77B41D292632E32AF69DD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:2e:f5:ce:e5:05:6a:6e:fe:08:7c:82:7c: 5e:34:b1:2c:c2:3a:3f:1a:97:43:e0:9e:11:8f:37: cd:53:61:b4:07:e4:97:24:1c:6d:e1:33:e8:49:9f: 3c:9f:53:02:a3:e8:e1:ae:2f:9a:cb:8b:98:70:72: ca:46:5d:6b:9b:77:17:04:4a:f5:8e:44:04:c3:67: 1d:dd:27:39:d3:eb:24:74:a4:77:f7:d3:09:3a:12: 78:9b:92:cc:b5:56:f8:bc:c2:d7:2f:7d:6f:4c:a2: f8:c4:77:0f:a1:23:5f:01:0d:6a:58:20:46:1b:1e: 84:f6:07:37:60:84:7d:7e:d5:6b:4a:da:c8:d0:ce: 43:44:e5:4e:5f:a2:fa:59:f3:68:ca:e3:b3:a4:ed: 83:1a:ea:a8:31:0c:fc:dd:14:f1:d2:ec:56:e7:e7: b2:40:44:4c:28:e6:3f:1e:29:68:a7:78:23:25:88: ac:62:5d:87:74:97:19:5d:78:3b:3c:d1:44:d5:e3: 35:53:e5:b6:cd:ec:24:5e:e6:43:ba:96:2f:41:a7: f9:39:1b:20:aa:1d:81:9e:d7:0a:1f:83:3c:da:93: 03:17:26:ec:c4:a5:06:c7:31:d5:fb:a1:75:2a:6f: 5a:d9:17:91:07:d9:7a:db:32:6e:12:2d:c0:7a:cc: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AF:75:A2:92:FB:5B:A1:9C:77:B4:1D:29:26:32:E3:2A:F6:9D:D4 X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:93:de:fa:e1:db:bf:5c:de:f9:e4:1c:f8:35:4e:be:34:82: 1b:dd:c5:84:8f:16:45:da:0b:92:28:e6:f3:fd:ab:ab:9b:4e: 28:ad:2a:dc:2d:55:92:6d:41:a5:14:eb:c6:54:9c:57:12:7e: 5c:de:d6:df:92:2c:84:db:9b:79:da:e1:8a:bf:b3:1b:ba:8b: 29:6d:9b:af:e9:2b:ae:5b:5b:19:19:29:7c:e2:6f:46:74:86: 72:ec:34:f0:0a:9f:a5:9b:ea:11:b4:f6:60:e6:56:e2:a3:5a: 9f:74:cf:12:16:18:3c:86:7e:50:74:12:d8:d3:10:86:42:1e: 9e:a3:3c:82:3b:e6:5f:cc:fb:62:1d:3b:88:fa:7d:f8:a9:16: 29:42:69:4c:ea:9f:f8:8c:f3:17:22:96:cd:18:d6:a5:c4:1b: 46:14:0c:4a:ce:34:1c:ce:b0:32:26:a2:69:4c:2e:22:de:18: fa:56:71:e7:cb:25:54:e9:43:8c:2d:1e:4e:9f:7e:5f:d0:95: 52:b3:7a:f5:db:9c:6b:1a:1d:c9:28:3d:77:6b:96:12:0a:72: 53:0d:2d:cd:99:5a:d8:c7:ac:8b:9a:da:b0:6c:e4:ab:f6:c0: 71:69:53:b0:dc:f7:fd:d0:95:8f:d0:37:f0:06:7f:aa:cf:64: 59:d9:95:fb -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNuMo1kxQUErH1rpAnOvbb76n7XYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MDQyNjE3MjQ1M1oX DTI1MDQyNzIwMDU1M1owMzExMC8GA1UEAxMoOTFBRjc1QTI5MkZCNUJBMTlDNzdC NDFEMjkyNjMyRTMyQUY2OURENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMokLvXO5QVqbv4IfIJ8XjSxLMI6PxqXQ+CeEY83zVNhtAfklyQcbeEz6Emf PJ9TAqPo4a4vmsuLmHByykZda5t3FwRK9Y5EBMNnHd0nOdPrJHSkd/fTCToSeJuS zLVW+LzC1y99b0yi+MR3D6EjXwENalggRhsehPYHN2CEfX7Va0rayNDOQ0TlTl+i +lnzaMrjs6TtgxrqqDEM/N0U8dLsVufnskBETCjmPx4paKd4IyWIrGJdh3SXGV14 OzzRRNXjNVPlts3sJF7mQ7qWL0Gn+TkbIKodgZ7XCh+DPNqTAxcm7MSlBscx1fuh dSpvWtkXkQfZetsybhItwHrMJsUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSRr3Wi kvtboZx3tB0pJjLjKvad1DAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAM5Pe+uHbv1ze+eQc+DVOvjSCG93FhI8WRdoLkijm8/2rq5tO KK0q3C1Vkm1BpRTrxlScVxJ+XN7W35IshNubedrhir+zG7qLKW2br+krrltbGRkp fOJvRnSGcuw08AqfpZvqEbT2YOZW4qNan3TPEhYYPIZ+UHQS2NMQhkIenqM8gjvm X8z7Yh07iPp9+KkWKUJpTOqf+IzzFyKWzRjWpcQbRhQMSs40HM6wMiaiaUwuIt4Y +lZx58slVOlDjC0eTp9+X9CVUrN69ducaxodySg9d2uWEgpyUw0tzZla2Mesi5ra sGzkq/bAcWlTsNz3/dCVj9A38AZ/qs9kWdmV+w== -----END CERTIFICATE-----Generated at Sat Apr 26 19:08:57 2025 by rpki-client