$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json) Hash identifier: Con4HI8WlaRrnKY39ML/fmCME9aN9UbPpj8XSqSzQCA= Subject key identifier: 21:07:8A:93:4E:8A:CB:18:94:72:89:86:65:8D:9A:ED:E1:DB:84:F8 Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Certificate serial: 2FD1719E158C98E9C9EC6FEC8B58C01BF9CEB4B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft Manifest number: 0289 Signing time: Sun 01 Mar 2026 09:32:42 +0000 Manifest this update: Sun 01 Mar 2026 09:27:42 +0000 Manifest next update: Mon 02 Mar 2026 10:03:42 +0000 Files and hashes: 1: 3130332e3232332e3138342e302f32332d3234203d3e20313335303237.roa (hash: g8Tw9Ss3ogaL2/E788moJ1DCuoJI7+nYIfSvQGup0po=) 2: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: kDrMdqI+bfrJoCZdqbd8PzYA1yE8e1dXgVnIKTMH4d4=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 10:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d1:71:9e:15:8c:98:e9:c9:ec:6f:ec:8b:58:c0:1b:f9:ce:b4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Validity Not Before: Mar 1 09:27:42 2026 GMT Not After : Mar 2 10:03:42 2026 GMT Subject: CN=21078A934E8ACB1894728986658D9AEDE1DB84F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:e6:e6:3c:5f:0a:23:d3:a3:91:71:65:00: 30:19:64:17:f4:19:0c:32:ae:ad:50:db:c3:3d:ed: c8:07:10:f3:d4:e0:46:44:bd:94:83:45:16:c9:6e: f7:51:4d:f9:17:d2:3c:a6:e4:9d:02:2c:56:1d:80: f4:cd:6e:46:2c:8b:e9:97:cb:3f:a0:eb:df:64:89: 59:44:d4:c8:f4:51:df:8f:16:aa:c1:bc:bf:11:83: 00:2a:7c:3b:3f:f9:5e:1c:9a:6c:9c:ac:f1:80:ba: da:f6:8c:3a:0f:d6:43:01:8b:20:a3:02:00:e7:ae: 5a:23:ee:3b:54:50:c1:ab:8c:9a:9d:7f:b2:de:30: c8:2c:cf:5d:37:86:84:94:aa:6a:1c:37:3b:1b:64: 91:53:9d:22:b8:6b:e6:83:e1:a2:c3:ee:3c:5f:ac: a3:af:bd:35:5f:a5:f4:31:f6:87:6a:be:db:01:95: 5d:c4:75:11:60:34:37:fd:5b:29:11:31:70:fd:c7: 4e:f0:0c:02:39:95:fe:1c:10:6d:5a:b3:9f:4f:84: 0f:f1:e6:29:d1:a2:d1:17:20:7a:c3:f1:49:09:70: 50:d1:ea:03:1c:88:e5:a1:de:5d:69:82:20:d2:7f: 88:bf:bf:49:45:d5:66:c5:78:c7:75:64:a4:b7:b9: 85:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:07:8A:93:4E:8A:CB:18:94:72:89:86:65:8D:9A:ED:E1:DB:84:F8 X509v3 Authority Key Identifier: keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fb:25:1b:db:ee:02:8b:52:a3:db:14:de:b6:0c:3d:89:de: 75:37:39:40:89:57:da:60:2b:c6:75:6c:65:a9:f8:11:01:1c: 8e:de:bc:0d:1c:99:4d:8a:fa:2f:2a:0e:56:b4:58:95:80:a6: e3:22:6c:2e:64:f5:e1:f0:11:89:8d:9c:11:9f:08:d5:ed:85: 97:6b:ea:1f:01:73:fc:d7:ca:01:3a:bf:66:e4:d5:35:60:e5: e8:01:c6:8e:26:0a:c8:25:60:02:67:fd:05:a1:90:3c:e7:89: 67:50:4a:01:aa:fc:91:b7:46:2b:fc:b0:64:53:23:cf:0b:8f: b0:b7:84:03:3c:b2:1b:c2:31:1f:42:9d:de:45:d5:73:10:80: 04:16:40:a0:10:2e:e4:01:e6:89:2d:dc:5c:1e:f3:b8:6a:7c: 38:b1:d9:80:75:cf:b8:79:34:8e:21:83:c5:ad:6d:c8:e6:ae: 1d:79:6e:94:c7:40:62:78:fd:b4:9b:01:9a:39:15:a7:03:55: 43:fb:19:ae:a8:57:7d:78:62:d3:ba:c4:da:d2:1b:3f:6f:91: b6:33:4d:73:66:5b:1b:12:67:d3:b3:9e:ba:f8:f1:52:10:e0: 6f:8a:2e:43:6d:0a:c5:20:23:25:61:20:6b:66:60:d6:5e:8c: 97:a3:63:ef -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUL9FxnhWMmOnJ7G/si1jAG/nOtLUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDhCRjcwMDAwMTEwLwYDVQQFEygzMzlGRkE5MzM1 N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwMB4XDTI2MDMwMTA5Mjc0MloX DTI2MDMwMjEwMDM0MlowMzExMC8GA1UEAxMoMjEwNzhBOTM0RThBQ0IxODk0NzI4 OTg2NjU4RDlBRURFMURCODRGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdy5uY8Xwoj06ORcWUAMBlkF/QZDDKurVDbwz3tyAcQ89TgRkS9lINFFslu 91FN+RfSPKbknQIsVh2A9M1uRiyL6ZfLP6Dr32SJWUTUyPRR348WqsG8vxGDACp8 Oz/5XhyabJys8YC62vaMOg/WQwGLIKMCAOeuWiPuO1RQwauMmp1/st4wyCzPXTeG hJSqahw3OxtkkVOdIrhr5oPhosPuPF+so6+9NV+l9DH2h2q+2wGVXcR1EWA0N/1b KRExcP3HTvAMAjmV/hwQbVqzn0+ED/HmKdGi0RcgesPxSQlwUNHqAxyI5aHeXWmC INJ/iL+/SUXVZsV4x3VkpLe5hd0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBQhB4qT TorLGJRyiYZljZrt4duE+DAfBgNVHSMEGDAWgBQzn/qTNX+vJhQoKfq/Ilrq5Bc3 8DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJGNzAwMDAvMC8zMzlGRkE5 MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NNV82a3pWX3J5 WVVLQ242dnlKYTZ1UVhOX0EuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJG NzAwMDAvMC8zMzlGRkE5MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0Yw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAW/slG9vuAotSo9sU3rYMPYnedTc5QIlX2mArxnVsZan4EQEc jt68DRyZTYr6LyoOVrRYlYCm4yJsLmT14fARiY2cEZ8I1e2Fl2vqHwFz/NfKATq/ ZuTVNWDl6AHGjiYKyCVgAmf9BaGQPOeJZ1BKAar8kbdGK/ywZFMjzwuPsLeEAzyy G8IxH0Kd3kXVcxCABBZAoBAu5AHmiS3cXB7zuGp8OLHZgHXPuHk0jiGDxa1tyOau HXlulMdAYnj9tJsBmjkVpwNVQ/sZrqhXfXhi07rE2tIbP2+RtjNNc2ZbGxJn07Oe uvjxUhDgb4ouQ20KxSAjJWEga2Zg1l6Ml6Nj7w== -----END CERTIFICATE-----Generated at Sun Mar 1 20:57:52 2026 by rpki-client