$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json) Hash identifier: n8gcgveXNFDbsk/9TZo3Mt40iw7Lp58aw8JVkpbiy/k= Subject key identifier: 59:65:E0:C7:F6:D6:1A:FD:F6:41:4D:32:DE:35:1C:45:D4:F0:AC:73 Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 2A984D73583A9523712E4BAE18CFD7BCE46F1D19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft Manifest number: 03DB Signing time: Sun 01 Mar 2026 05:40:24 +0000 Manifest this update: Sun 01 Mar 2026 05:35:24 +0000 Manifest next update: Mon 02 Mar 2026 08:26:24 +0000 Files and hashes: 1: 4B1987D5160068092602529871C93EA320045A75.crl (hash: Gxk7/6pHw2luz4Gk9BPePGmnl5wdxs/QEVcDGhtALHw=) 2: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=) 3: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=) 4: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 08:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:98:4d:73:58:3a:95:23:71:2e:4b:ae:18:cf:d7:bc:e4:6f:1d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: Mar 1 05:35:24 2026 GMT Not After : Mar 2 08:26:24 2026 GMT Subject: CN=5965E0C7F6D61AFDF6414D32DE351C45D4F0AC73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:04:cd:4d:b4:f5:1d:bb:68:f8:1f:fc:c5:44: cc:74:0f:ec:71:b7:e8:e2:93:f3:7a:1b:85:88:b0: 0d:27:cb:5d:9d:e0:a0:fc:4e:ab:07:e8:ca:98:73: 39:1e:09:83:2d:f9:e3:9a:99:1f:79:46:32:63:43: 7e:b3:04:14:3a:12:31:16:95:65:fc:13:c1:a4:f1: 1d:53:1e:82:09:17:01:c8:3f:28:02:b0:f5:1c:08: de:38:18:91:95:19:ff:ec:1a:e5:0a:20:ad:fc:b5: 7b:e9:7d:24:0f:e3:a9:fd:17:88:89:6b:b8:d5:0e: d4:c5:63:06:fe:f0:d9:ac:cf:99:1c:64:8f:34:13: a9:92:96:cd:68:53:f1:23:22:4d:2d:61:4a:da:31: 0e:40:f9:9e:1a:95:f6:60:ea:9f:39:c6:16:aa:3c: d9:07:c7:cb:c4:97:30:c1:8d:11:c0:17:f2:97:ae: 5f:68:e2:95:4a:f6:91:34:e5:23:be:a2:69:a5:8b: d9:20:52:52:f4:19:b9:3d:55:74:aa:7b:67:fd:6c: d2:33:5f:97:92:a7:54:e1:25:9b:06:f1:d6:72:49: 83:c8:7e:18:46:15:a7:75:c7:32:0b:3a:5e:67:71: cf:5d:4d:73:3a:0f:e7:21:4e:2e:f5:dd:cd:3e:e5: 86:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:65:E0:C7:F6:D6:1A:FD:F6:41:4D:32:DE:35:1C:45:D4:F0:AC:73 X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b0:6d:e7:aa:d4:53:fb:23:ee:a7:7d:42:6b:ee:ec:e4:8a: 2c:a0:55:83:a1:e1:50:1e:3b:7e:72:cd:54:3c:0c:c4:4b:24: 91:c7:42:c0:45:d7:cc:f5:d5:1c:fa:2a:03:d3:0e:ec:ae:d2: ad:da:72:36:91:a9:00:4f:eb:05:aa:dc:1e:b5:83:b6:1f:84: 5b:64:6b:09:66:32:0c:e5:e0:5f:b5:30:69:1f:a2:39:56:28: 6d:5a:dd:e3:e0:47:05:f9:a3:18:32:04:3b:df:f3:ab:c8:12: 1f:a1:1a:42:23:af:31:26:1e:eb:eb:76:6a:f3:7f:09:73:8d: 92:50:2d:b5:19:f2:97:3d:37:90:91:de:72:73:ca:e3:0f:0f: 57:8e:66:75:95:dd:bb:3d:23:b9:62:1d:89:ce:e6:fa:62:c1: 5b:82:d2:5d:5b:e4:6a:30:9a:a6:28:79:fd:32:fb:19:e6:09: 2f:96:f1:a1:7d:8e:82:55:93:bf:aa:6a:a4:6a:3a:82:f2:71: c4:57:13:14:82:73:19:58:50:cc:63:a8:96:01:33:cd:70:db: a3:21:7f:76:27:a0:e1:0f:74:d8:d5:f9:a7:e5:83:b1:d3:0d: 73:20:7a:92:9d:50:b9:50:21:e3:f2:73:7d:22:c7:f2:44:f5: 2c:76:4e:67 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKphNc1g6lSNxLkuuGM/XvORvHRkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI2MDMwMTA1MzUyNFoX DTI2MDMwMjA4MjYyNFowMzExMC8GA1UEAxMoNTk2NUUwQzdGNkQ2MUFGREY2NDE0 RDMyREUzNTFDNDVENEYwQUM3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4EzU209R27aPgf/MVEzHQP7HG36OKT83obhYiwDSfLXZ3goPxOqwfoyphz OR4Jgy3545qZH3lGMmNDfrMEFDoSMRaVZfwTwaTxHVMeggkXAcg/KAKw9RwI3jgY kZUZ/+wa5Qogrfy1e+l9JA/jqf0XiIlruNUO1MVjBv7w2azPmRxkjzQTqZKWzWhT 8SMiTS1hStoxDkD5nhqV9mDqnznGFqo82QfHy8SXMMGNEcAX8peuX2jilUr2kTTl I76iaaWL2SBSUvQZuT1VdKp7Z/1s0jNfl5KnVOElmwbx1nJJg8h+GEYVp3XHMgs6 Xmdxz11NczoP5yFOLvXdzT7lhhsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRZZeDH 9tYa/fZBTTLeNRxF1PCsczAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAMbBt56rUU/sj7qd9Qmvu7OSKLKBVg6HhUB47fnLNVDwMxEsk kcdCwEXXzPXVHPoqA9MO7K7SrdpyNpGpAE/rBarcHrWDth+EW2RrCWYyDOXgX7Uw aR+iOVYobVrd4+BHBfmjGDIEO9/zq8gSH6EaQiOvMSYe6+t2avN/CXONklAttRny lz03kJHecnPK4w8PV45mdZXduz0juWIdic7m+mLBW4LSXVvkajCapih5/TL7GeYJ L5bxoX2OglWTv6pqpGo6gvJxxFcTFIJzGVhQzGOolgEzzXDboyF/dieg4Q902NX5 p+WDsdMNcyB6kp1QuVAh4/JzfSLH8kT1LHZOZw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:24:49 2026 by rpki-client