$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json) Hash identifier: xEU1Q25zWVaMMpU/w7ZD3Km9T5z4o3S3GOm7NWPEucI= Subject key identifier: 82:AE:88:1F:7D:C0:74:1A:30:AE:51:7C:F7:BA:25:03:1A:BA:82:9F Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Certificate serial: 31F89C4D40F002189856BE7B54C2A5FE19C56F0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft Manifest number: 08B3 Signing time: Sun 01 Mar 2026 21:43:43 +0000 Manifest this update: Sun 01 Mar 2026 21:38:43 +0000 Manifest next update: Tue 03 Mar 2026 00:04:43 +0000 Files and hashes: 1: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=) 2: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=) 3: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: uJSG2ezA0AqqLOTzxx4nYD5OSC6yJbexdc0abk33svY=) 4: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=) 5: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=) 6: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=) 7: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=) 8: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=) 9: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=) 10: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=) 11: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 00:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f8:9c:4d:40:f0:02:18:98:56:be:7b:54:c2:a5:fe:19:c5:6f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Validity Not Before: Mar 1 21:38:43 2026 GMT Not After : Mar 3 00:04:43 2026 GMT Subject: CN=82AE881F7DC0741A30AE517CF7BA25031ABA829F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a6:7c:60:c6:08:24:5e:36:1d:29:69:8a:16: 1e:c1:d5:5b:a6:be:0e:38:da:74:65:ba:37:0c:4f: da:ea:f4:6f:7a:e0:8f:6f:66:d1:7c:b2:7e:0f:5e: 64:df:fb:1d:4d:b4:09:a5:7a:72:36:29:9f:d8:88: 6e:d1:8b:47:f0:9a:1e:95:72:23:bb:4a:06:67:51: 38:7b:b4:63:95:5d:26:ee:e5:9e:3f:c6:f6:bb:e0: d3:a5:88:6b:2d:c2:34:44:0e:66:f1:bd:e3:8d:32: 10:c3:a6:fd:af:22:ee:f6:2b:7a:ec:a6:db:e7:d5: 4e:dd:2d:44:db:c3:26:e0:de:83:f6:ee:1b:5b:57: 97:d0:ba:08:b1:1a:de:be:32:70:9d:ce:62:b2:8d: eb:14:ab:ef:8e:3b:f1:f0:9f:2a:34:3e:db:99:80: 40:2c:6a:a6:16:85:ee:2d:78:fd:b7:7b:17:38:71: da:54:b2:f1:8d:ef:7d:22:f6:cc:d9:68:4b:04:29: 36:cd:4b:1a:35:1b:e9:90:e7:cd:03:19:84:a6:a1: 51:ba:1e:75:af:fa:05:67:43:f1:b6:47:a1:5d:e4: f2:27:c0:17:b2:56:0f:25:12:61:e1:cb:10:ab:7a: dc:22:1e:93:40:d7:c3:58:18:ef:3a:3a:4a:06:e4: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AE:88:1F:7D:C0:74:1A:30:AE:51:7C:F7:BA:25:03:1A:BA:82:9F X509v3 Authority Key Identifier: keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d8:16:54:8e:24:e7:0f:0d:73:ba:52:f8:ad:cf:36:1c:7f: df:b7:af:e5:34:b7:7e:6e:04:36:bc:57:71:90:bf:92:81:ee: c2:4d:71:8a:e7:30:8b:3b:68:73:21:41:fc:ed:75:37:f8:9b: f1:15:27:5a:1f:68:bd:d6:68:81:59:45:f4:dd:c0:d4:43:68: 85:12:b5:d5:7a:29:d0:b4:fe:d3:5e:78:ad:44:26:87:56:25: a8:89:ff:b8:6e:69:ab:47:7a:9a:f9:9e:d6:9e:70:70:3a:ea: 73:34:f8:54:20:10:93:f3:a5:3a:2e:2d:23:14:e3:94:39:01: 80:94:ad:2b:04:67:04:28:7f:2a:a0:84:a3:d5:4c:16:e3:d0: f2:a1:48:8d:4d:32:56:fd:3e:15:61:94:6c:ff:3c:0a:39:5f: f3:ba:09:5e:af:bf:69:01:0d:07:08:d1:49:3d:1a:93:5c:72: 32:6b:e9:fe:93:ab:bc:e1:e4:51:c3:b4:fa:d7:0f:e5:33:42: 09:9a:f8:4e:6c:e7:1d:aa:e6:f9:29:82:f3:d7:d2:42:82:03: b0:6d:50:25:af:32:a5:17:b2:57:9e:d5:7d:94:6c:d7:da:fc: 70:72:ea:59:9a:f7:c0:52:c6:72:d2:34:b6:79:c8:e2:ce:62: 33:2f:6d:51 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMficTUDwAhiYVr57VMKl/hnFbwswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2 MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI2MDMwMTIxMzg0M1oX DTI2MDMwMzAwMDQ0M1owMzExMC8GA1UEAxMoODJBRTg4MUY3REMwNzQxQTMwQUU1 MTdDRjdCQTI1MDMxQUJBODI5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGmfGDGCCReNh0paYoWHsHVW6a+DjjadGW6NwxP2ur0b3rgj29m0Xyyfg9e ZN/7HU20CaV6cjYpn9iIbtGLR/CaHpVyI7tKBmdROHu0Y5VdJu7lnj/G9rvg06WI ay3CNEQOZvG9440yEMOm/a8i7vYreuym2+fVTt0tRNvDJuDeg/buG1tXl9C6CLEa 3r4ycJ3OYrKN6xSr74478fCfKjQ+25mAQCxqphaF7i14/bd7Fzhx2lSy8Y3vfSL2 zNloSwQpNs1LGjUb6ZDnzQMZhKahUboeda/6BWdD8bZHoV3k8ifAF7JWDyUSYeHL EKt63CIek0DXw1gY7zo6SgbkWUUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSCrogf fcB0GjCuUXz3uiUDGrqCnzAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5 ODAwMDAvMC85ODlEMzJENUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAN9gWVI4k5w8Nc7pS+K3PNhx/37ev5TS3fm4ENrxXcZC/koHu wk1xiucwiztocyFB/O11N/ib8RUnWh9ovdZogVlF9N3A1ENohRK11Xop0LT+0154 rUQmh1YlqIn/uG5pq0d6mvme1p5wcDrqczT4VCAQk/OlOi4tIxTjlDkBgJStKwRn BCh/KqCEo9VMFuPQ8qFIjU0yVv0+FWGUbP88Cjlf87oJXq+/aQENBwjRST0ak1xy Mmvp/pOrvOHkUcO0+tcP5TNCCZr4TmznHarm+SmC89fSQoIDsG1QJa8ypReyV57V fZRs19r8cHLqWZr3wFLGctI0tnnI4s5iMy9tUQ== -----END CERTIFICATE-----Generated at Mon Mar 2 06:22:43 2026 by rpki-client