$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: MiGfF1Ye7YWNM1/sPPG7Z8+JtUmQenQVzWJsWuxAQdw= Subject key identifier: 5B:BA:8C:85:B4:8B:72:02:6B:7F:26:35:F1:75:D2:2D:B4:C9:2A:9A Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 0F4C31CBB9FC758346ACA6429FEB388FA0E1D9AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 0356 Signing time: Mon 21 Sep 2026 12:06:32 +0000 Manifest this update: Mon 21 Sep 2026 12:01:32 +0000 Manifest next update: Tue 22 Sep 2026 13:22:32 +0000 Files and hashes: 1: 3130332e32352e3132342e302f32342d3234203d3e20313937353337.roa (hash: OcqsdLDtMbRRfAMVaO1K99xhO+aLsojGYCO5peADbbA=) 2: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=) 3: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=) 4: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: KWhrBV/zjumpPUyS3bkIhwSt0IKmcrtP3SgZZsS+/20=) 5: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: /tD91rPzgzKVRKxFDGC4eu2lD1NaA4WrIN1jJcOl5/Q=) 6: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:4c:31:cb:b9:fc:75:83:46:ac:a6:42:9f:eb:38:8f:a0:e1:d9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Sep 21 12:01:32 2026 GMT Not After : Sep 22 13:22:32 2026 GMT Subject: CN=5BBA8C85B48B72026B7F2635F175D22DB4C92A9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:7e:cf:94:1a:b9:02:75:e5:96:1d:2c:69: f5:44:fb:b0:bd:90:1a:a3:ca:bd:08:cc:5f:ff:5c: ce:04:8c:c2:7a:e7:5e:ca:1c:be:53:89:a1:d5:fa: 10:33:07:b7:d9:2e:66:4e:16:e9:fd:f8:21:38:cd: d0:d1:1b:98:26:14:a3:e1:36:6a:59:92:5d:c3:32: 2c:3e:15:63:64:6b:f3:47:ad:d3:5b:b2:11:f6:ef: 77:6b:ac:ad:d4:6b:9f:31:97:65:c2:84:79:6c:8d: ce:75:79:8b:40:f4:bf:90:38:11:53:e1:4a:d2:0d: 90:46:79:c3:ef:db:b6:38:e5:14:d8:51:00:ca:7f: 12:b7:1c:34:18:21:8f:cd:f8:1e:37:91:99:24:b6: e2:cd:2c:ce:6b:48:de:52:4d:45:a0:23:c6:35:1c: 7f:1d:6d:10:74:b0:06:05:13:f1:c1:b6:c6:e4:20: a2:45:b7:2c:88:b5:15:19:b0:a6:f7:ec:a7:a8:7f: 12:a8:5d:5e:1a:3f:5d:86:b6:f4:94:a7:71:c5:67: c3:22:66:de:87:76:06:d8:55:23:60:f7:99:50:c9: 80:e5:f7:ec:a7:99:46:d2:dd:74:a4:8f:ca:a4:6e: 58:db:66:ad:79:ec:cb:9c:49:64:8b:91:2e:49:d6: 33:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BA:8C:85:B4:8B:72:02:6B:7F:26:35:F1:75:D2:2D:B4:C9:2A:9A X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:87:2a:29:e9:35:77:6b:9d:80:55:db:e8:60:cf:12:a7:b2: 1e:0e:30:0a:f7:35:1f:ab:98:9d:c6:00:f3:08:b5:8b:78:b4: 67:a4:2b:a0:12:d1:54:d4:5d:14:a0:1e:17:32:ac:9f:d5:18: 31:59:50:51:3c:67:70:df:72:de:5b:29:fe:49:c6:3c:22:f6: 55:67:c3:68:1d:2a:20:44:06:c7:2c:59:a2:d5:ce:95:c6:73: 1a:0d:5a:a9:fc:9e:cf:a8:29:35:cb:63:0b:97:9c:4d:24:39: e5:f6:2f:08:18:c2:15:c7:52:9e:03:9e:73:ce:d5:6b:82:db: 6d:79:25:8d:32:5e:2e:2a:a3:0c:91:f4:e0:ce:26:80:34:a4: db:e9:bc:44:a1:20:3e:13:f6:9a:2c:e3:f1:da:bb:bf:ee:6d: c6:c8:23:3f:9c:e3:e3:5e:ff:cb:90:f0:1d:75:e0:64:99:e8: 37:e8:41:14:b5:c5:4b:10:6d:6c:ee:cc:57:b1:1a:cf:30:14: a7:71:7c:51:d5:db:4d:e1:04:37:af:c1:67:6c:b3:df:9e:40: 8c:33:7f:49:1a:97:7a:b1:0e:a0:89:f5:2c:e4:76:11:a6:68: 75:3f:8b:63:cf:5b:38:96:3b:04:95:b8:95:9a:4e:4c:3c:4e: a2:62:53:fb -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUD0wxy7n8dYNGrKZCn+s4j6Dh2a0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI2MDkyMTEyMDEzMloX DTI2MDkyMjEzMjIzMlowMzExMC8GA1UEAxMoNUJCQThDODVCNDhCNzIwMjZCN0Yy NjM1RjE3NUQyMkRCNEM5MkE5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUIfs+UGrkCdeWWHSxp9UT7sL2QGqPKvQjMX/9czgSMwnrnXsocvlOJodX6 EDMHt9kuZk4W6f34ITjN0NEbmCYUo+E2almSXcMyLD4VY2Rr80et01uyEfbvd2us rdRrnzGXZcKEeWyNznV5i0D0v5A4EVPhStINkEZ5w+/btjjlFNhRAMp/ErccNBgh j834HjeRmSS24s0szmtI3lJNRaAjxjUcfx1tEHSwBgUT8cG2xuQgokW3LIi1FRmw pvfsp6h/EqhdXho/XYa29JSnccVnwyJm3od2BthVI2D3mVDJgOX37KeZRtLddKSP yqRuWNtmrXnsy5xJZIuRLknWM88CAwEAAaOCAhswggIXMB0GA1UdDgQWBBRbuoyF tItyAmt/JjXxddIttMkqmjAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAIIcqKek1d2udgFXb6GDPEqeyHg4wCvc1H6uYncYA8wi1i3i0 Z6QroBLRVNRdFKAeFzKsn9UYMVlQUTxncN9y3lsp/knGPCL2VWfDaB0qIEQGxyxZ otXOlcZzGg1aqfyez6gpNctjC5ecTSQ55fYvCBjCFcdSngOec87Va4LbbXkljTJe LiqjDJH04M4mgDSk2+m8RKEgPhP2mizj8dq7v+5txsgjP5zj417/y5DwHXXgZJno N+hBFLXFSxBtbO7MV7EazzAUp3F8UdXbTeEEN6/BZ2yz355AjDN/SRqXerEOoIn1 LOR2EaZodT+LY89bOJY7BJW4lZpOTDxOomJT+w== -----END CERTIFICATE-----Generated at Mon Sep 21 23:19:06 2026 by rpki-client