$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: V1lAolbCoHv2UgUjOI4CxjdmV2a1m3hSCLU3Hd4tu6M= Subject key identifier: 6C:A3:ED:3E:2B:8C:E8:CE:DF:79:87:B6:C5:39:D4:82:B5:8F:15:96 Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 7A74209391263BDB4C7C761562598F40AADB8144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 01A3 Signing time: Tue 04 Nov 2025 02:29:32 +0000 Manifest this update: Tue 04 Nov 2025 02:24:32 +0000 Manifest next update: Wed 05 Nov 2025 05:53:32 +0000 Files and hashes: 1: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=) 2: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: 3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=) 3: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: gRgOtqiGErrVIh/pJYn90PllWpD0b3Ff4tqtoLJ6kVU=) 4: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=) 5: 3130332e32352e3132342e302f32342d3234203d3e20323134303235.roa (hash: A7+uqKWRKehgMh2v+Hl0ZrUAOPvByGRYLcbE3daaXQo=) 6: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 05:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:74:20:93:91:26:3b:db:4c:7c:76:15:62:59:8f:40:aa:db:81:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Nov 4 02:24:32 2025 GMT Not After : Nov 5 05:53:32 2025 GMT Subject: CN=6CA3ED3E2B8CE8CEDF7987B6C539D482B58F1596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:55:76:22:9b:b4:32:dd:8d:9b:40:75:79:1f: 95:6c:4e:f9:19:ce:15:c9:2d:a1:5f:fc:fe:3f:b5: 58:f6:98:57:cb:7f:21:7d:c4:18:84:43:8e:e2:17: f9:73:c4:df:dc:9b:56:45:ac:07:8e:a0:aa:c2:b3: bd:e3:f2:c2:3d:c7:26:b1:2a:cf:5e:9e:ab:da:30: 39:0e:ed:5e:c7:06:19:63:44:f2:fe:64:53:5b:de: 86:6f:a8:00:63:b1:93:05:dc:fb:59:80:60:b6:57: bf:b5:d6:84:a7:c1:25:23:07:0c:ba:90:f0:5e:13: ce:16:4c:a1:ff:8d:da:1e:92:55:40:64:63:23:c2: 5a:51:0c:0d:ab:7f:df:b6:3f:75:76:c4:7a:53:5f: 78:5e:fe:cd:fa:fc:d8:de:b2:0a:ea:a1:8a:50:58: 14:cd:a9:b2:47:19:4e:91:00:b4:dd:b1:33:a5:f1: 73:93:e8:f1:8c:6b:8d:b9:8a:ff:3d:b4:aa:62:e6: ce:77:01:ab:8b:6e:b1:b7:4a:fd:00:d1:41:fa:db: b3:10:08:30:a5:30:d9:45:c8:05:26:53:5f:5d:bd: 3f:8d:1b:02:99:28:31:d2:98:6f:b8:47:cb:e9:57: 0b:1d:ae:a7:d5:64:2b:5d:c2:40:45:78:51:e8:e7: 17:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A3:ED:3E:2B:8C:E8:CE:DF:79:87:B6:C5:39:D4:82:B5:8F:15:96 X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:51:da:3a:f3:db:06:02:84:69:1f:23:a7:cf:0e:57:f0:ca: d8:9b:a5:47:e1:fe:60:4b:9d:92:01:c7:38:25:54:d1:57:f1: e9:2a:e5:ad:93:15:6f:c7:17:d1:22:1b:dc:cf:ff:8f:cf:1e: 0c:38:39:0a:6d:38:7d:74:33:61:6c:ee:4f:9d:53:60:a9:d9: 6b:15:28:77:28:46:21:f6:42:05:d2:db:1c:f2:56:1f:29:d4: 70:d7:76:d9:cd:c4:3f:74:e3:ac:01:92:94:d7:b9:2b:b3:7c: 1e:cb:cd:17:7a:b8:8c:1d:2b:15:72:fa:33:33:ae:b1:82:c8: c8:35:98:b4:98:7f:90:9b:17:e9:9b:5a:0a:b3:a1:49:0c:7d: 2e:d1:7d:9c:ec:32:0a:b9:46:95:50:5a:16:49:e1:39:d3:5d: 2a:8c:d6:54:82:0c:59:30:49:a4:ca:71:72:aa:7e:71:6e:e8: a5:3b:7f:ed:8c:ec:39:22:5c:4c:52:50:24:a6:f3:a5:5d:5e: 8f:e9:10:d4:fa:3c:1f:27:7c:f5:5d:26:4a:00:c7:c3:4a:bb: d5:f2:4a:3a:53:2e:5d:0f:fc:94:dd:e0:22:24:27:67:52:b0: 83:84:2b:2e:5b:f1:de:1c:04:db:3c:f0:0e:d6:df:1a:ad:e6: cc:cf:3d:3e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUenQgk5EmO9tMfHYVYlmPQKrbgUQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MTEwNDAyMjQzMloX DTI1MTEwNTA1NTMzMlowMzExMC8GA1UEAxMoNkNBM0VEM0UyQjhDRThDRURGNzk4 N0I2QzUzOUQ0ODJCNThGMTU5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJVdiKbtDLdjZtAdXkflWxO+RnOFcktoV/8/j+1WPaYV8t/IX3EGIRDjuIX +XPE39ybVkWsB46gqsKzvePywj3HJrEqz16eq9owOQ7tXscGGWNE8v5kU1vehm+o AGOxkwXc+1mAYLZXv7XWhKfBJSMHDLqQ8F4TzhZMof+N2h6SVUBkYyPCWlEMDat/ 37Y/dXbEelNfeF7+zfr82N6yCuqhilBYFM2pskcZTpEAtN2xM6Xxc5Po8YxrjbmK /z20qmLmzncBq4tusbdK/QDRQfrbsxAIMKUw2UXIBSZTX129P40bApkoMdKYb7hH y+lXCx2up9VkK13CQEV4UejnFwUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRso+0+ K4zozt95h7bFOdSCtY8VljAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEABFHaOvPbBgKEaR8jp88OV/DK2JulR+H+YEudkgHHOCVU0Vfx 6SrlrZMVb8cX0SIb3M//j88eDDg5Cm04fXQzYWzuT51TYKnZaxUodyhGIfZCBdLb HPJWHynUcNd22c3EP3TjrAGSlNe5K7N8HsvNF3q4jB0rFXL6MzOusYLIyDWYtJh/ kJsX6ZtaCrOhSQx9LtF9nOwyCrlGlVBaFknhOdNdKozWVIIMWTBJpMpxcqp+cW7o pTt/7YzsOSJcTFJQJKbzpV1ej+kQ1Po8Hyd89V0mSgDHw0q71fJKOlMuXQ/8lN3g IiQnZ1Kwg4QrLlvx3hwE2zzwDtbfGq3mzM89Pg== -----END CERTIFICATE-----Generated at Tue Nov 4 08:17:48 2025 by rpki-client