$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json) Hash identifier: WUv/R/2wfod6jhoN+mPGiGdFjDcVsPbaBQ0Ia87vSj4= Subject key identifier: 12:36:27:70:41:36:47:53:1C:EB:2F:5F:68:1F:F4:02:38:CE:24:DE Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 71754FEE5EB6C9B4E73997981D4BA633D25F089E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft Manifest number: 04F4 Signing time: Tue 22 Sep 2026 17:40:34 +0000 Manifest this update: Tue 22 Sep 2026 17:35:34 +0000 Manifest next update: Wed 23 Sep 2026 18:59:34 +0000 Files and hashes: 1: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: Pl9O4/hrvE6XGRQRdZrkpmgI5or6MNwU7UHHLgiYTIk=) 2: 4B1987D5160068092602529871C93EA320045A75.crl (hash: +T009Qc+vTVkR6TN+0BFu+DXKImjHV/Nf9iScqbWVlI=) 3: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=) 4: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 18:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:75:4f:ee:5e:b6:c9:b4:e7:39:97:98:1d:4b:a6:33:d2:5f:08:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: Sep 22 17:35:34 2026 GMT Not After : Sep 23 18:59:34 2026 GMT Subject: CN=12362770413647531CEB2F5F681FF40238CE24DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:ae:bb:94:d9:f3:77:18:b4:68:d7:54:6b: b4:a2:c6:42:f9:fe:9d:30:b3:69:88:4d:8e:41:d3: 3d:58:8e:65:90:64:74:c2:04:30:1e:b9:21:7e:a4: 78:0f:ff:60:78:8d:05:27:95:4a:8e:4a:0f:7a:4b: 4c:b1:d2:a6:6b:56:48:1a:39:61:3a:43:18:81:66: 82:7f:c7:af:c1:ca:48:70:20:82:30:54:47:cf:0d: 65:c2:19:e7:7a:df:91:9d:04:4d:c7:b4:27:d6:b1: c5:72:e5:2c:62:b9:cc:23:b4:bf:f9:e7:89:36:ba: 1b:2b:76:a4:ea:02:2d:dc:ac:72:8d:5f:88:62:2e: 28:de:a7:3d:cc:60:8b:29:04:79:38:96:98:09:f7: 90:ba:52:c8:32:35:b3:15:65:e1:58:bf:a2:42:0e: 46:31:91:6d:9d:3b:1e:68:29:cb:ef:64:83:e9:5a: 0d:70:19:1c:a7:25:67:0e:5b:da:07:d5:d6:ce:31: 48:90:0d:95:3e:4f:60:d9:b1:6a:cb:2f:36:52:f9: 23:ea:12:41:d0:f2:fe:5f:ab:26:18:c0:86:bc:6a: 9b:11:ce:87:70:f2:60:48:7d:8c:ab:ee:e3:34:35: 03:ed:e9:d0:b3:a8:23:3f:c6:fc:3e:59:55:a0:0a: 2f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:36:27:70:41:36:47:53:1C:EB:2F:5F:68:1F:F4:02:38:CE:24:DE X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a4:f3:ba:fb:7d:ff:98:40:f1:1c:14:4d:46:be:11:12:3e: 11:a6:1a:1a:d6:2e:71:d2:1b:48:88:5b:8e:bf:89:63:b1:ae: 4d:59:6d:dd:1c:59:ed:c6:27:1c:6b:01:0b:a2:47:11:97:01: 1d:89:13:80:2b:77:ca:0b:c2:36:70:4a:ed:73:0f:08:90:dd: 6b:4a:d6:05:24:e6:e4:95:a0:e9:1f:60:da:65:49:4a:5c:5f: 68:9c:b0:5f:6d:54:91:5a:6f:d3:6c:fb:b7:7b:40:8f:50:9a: ce:2d:f4:5d:df:d9:a5:a0:73:27:00:3d:4d:46:06:1c:d9:25: 18:79:a0:a8:ab:b4:1a:8d:07:c4:fa:14:53:c3:c0:37:4b:be: 83:fe:e0:00:ce:8b:24:1a:f9:9b:fe:b7:7c:d7:cc:c8:80:1a: 12:a0:67:b9:50:24:39:7e:8f:7d:1a:99:e1:4b:78:d2:49:85: 52:09:14:52:65:16:cc:cc:77:fa:2b:7a:c6:d4:30:bd:44:56: 75:02:0e:ad:c3:16:e9:1f:7b:58:0f:b4:21:42:e5:1d:42:41: 07:1d:02:1c:2a:ce:5d:45:f1:8b:de:37:b8:6e:e4:56:f2:c8: 3d:0c:d9:35:32:b0:1d:28:b1:02:11:c5:2a:15:f2:42:e8:cb: 9c:eb:79:da -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcXVP7l62ybTnOZeYHUumM9JfCJ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI2MDkyMjE3MzUzNFoX DTI2MDkyMzE4NTkzNFowMzExMC8GA1UEAxMoMTIzNjI3NzA0MTM2NDc1MzFDRUIy RjVGNjgxRkY0MDIzOENFMjRERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJrQrruU2fN3GLRo11RrtKLGQvn+nTCzaYhNjkHTPViOZZBkdMIEMB65IX6k eA//YHiNBSeVSo5KD3pLTLHSpmtWSBo5YTpDGIFmgn/Hr8HKSHAggjBUR88NZcIZ 53rfkZ0ETce0J9axxXLlLGK5zCO0v/nniTa6Gyt2pOoCLdysco1fiGIuKN6nPcxg iykEeTiWmAn3kLpSyDI1sxVl4Vi/okIORjGRbZ07Hmgpy+9kg+laDXAZHKclZw5b 2gfV1s4xSJANlT5PYNmxassvNlL5I+oSQdDy/l+rJhjAhrxqmxHOh3DyYEh9jKvu 4zQ1A+3p0LOoIz/G/D5ZVaAKLzkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQSNidw QTZHUxzrL19oH/QCOM4k3jAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAIKTzuvt9/5hA8RwUTUa+ERI+EaYaGtYucdIbSIhbjr+JY7Gu TVlt3RxZ7cYnHGsBC6JHEZcBHYkTgCt3ygvCNnBK7XMPCJDda0rWBSTm5JWg6R9g 2mVJSlxfaJywX21UkVpv02z7t3tAj1Cazi30Xd/ZpaBzJwA9TUYGHNklGHmgqKu0 Go0HxPoUU8PAN0u+g/7gAM6LJBr5m/63fNfMyIAaEqBnuVAkOX6PfRqZ4Ut40kmF UgkUUmUWzMx3+it6xtQwvURWdQIOrcMW6R97WA+0IULlHUJBBx0CHCrOXUXxi943 uG7kVvLIPQzZNTKwHSixAhHFKhXyQujLnOt52g== -----END CERTIFICATE-----Generated at Wed Sep 23 11:36:41 2026 by rpki-client