
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier: G8PkcKd0Wsqz6mmDPjwej3SA6Biuoef6MvNkVovXYZ4=
Subject key identifier: 35:B1:F1:D8:E5:47:59:0D:40:D1:67:71:9E:1B:11:D8:C4:CB:7F:7F
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial: 7991686E2562308FE49509A90E6A83EAEDC59945
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number: 0945
Signing time: Fri 12 Jun 2026 12:21:54 +0000
Manifest this update: Fri 12 Jun 2026 12:16:54 +0000
Manifest next update: Sat 13 Jun 2026 15:39:54 +0000
Files and hashes: 1: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: 6bUioHOiplX0nplUReMAUW/pmAQYfQERH31QOiWI09E=)
2: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: 3ggSTM9Di1FgXo3Ut6sBwZJGn9C5XLQtwoGmuGHyLTs=)
3: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: 7oXfpj3C/mgJ9C72voMZZOZTwU/VWJrw70I4Vj4hZRU=)
4: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: SlyeO73BsaZhNaBtds/ns68oiIGA+OXgFydVUq6b7Yc=)
5: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: wD2X/rnLvjYX7xyPB9Jt+GcW/s8Zi1WkDFOO2rKFbBY=)
6: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: Y4k57xRWRy9X0jeYDXKld09T8mLHah2yzMR8vWq3R2M=)
7: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: nQW/gChgRCJZOUmKfXuBxzd9ebuiuqT7zJMBaxZsIrM=)
8: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: BuEBPTJ2vfTWlZKFjMl32JrJQqRwp1mqSuqe+EmcFIA=)
9: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: uKziAmnKEFzqB9nfk5eW2+yVcFJdYkRgt8r/NipgvDk=)
10: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: LhndQpHU8gCA0PMINj71pOUNVT+HGVT3B7GGT2d1xwg=)
11: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: wx7mDDVDVvssyRRRK7qXWbAqlJxXiOpWt5/RcILxYjM=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 15:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:91:68:6e:25:62:30:8f:e4:95:09:a9:0e:6a:83:ea:ed:c5:99:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Validity
Not Before: Jun 12 12:16:54 2026 GMT
Not After : Jun 13 15:39:54 2026 GMT
Subject: CN=35B1F1D8E547590D40D167719E1B11D8C4CB7F7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:01:8d:2e:13:31:e0:10:1f:0a:77:05:77:
a6:3b:2e:71:ab:cf:6d:dc:ca:da:11:91:71:04:38:
3b:6d:59:a3:7e:fe:c7:d1:3a:e1:78:71:2b:86:6a:
4f:e5:c7:71:17:38:c5:ef:b1:6e:fe:e0:d9:7b:f0:
9c:4b:8a:7c:f5:1e:86:88:7f:78:1b:df:33:13:4a:
13:6e:64:1d:90:81:ed:1d:a6:fa:b6:db:d2:cc:0b:
8c:e3:d8:db:36:0f:ec:da:ac:02:6c:78:46:a1:90:
bf:f7:ab:8d:b0:a0:b3:b4:6d:3b:67:a7:97:7b:5a:
a6:26:f4:60:ff:3c:6e:63:49:db:a8:7d:bb:de:7f:
67:d5:df:5e:ef:f2:93:1c:8a:49:77:8d:b9:2b:34:
1e:10:1f:37:19:47:0e:fe:b0:3c:a9:f6:37:15:42:
48:3a:a1:22:09:42:91:54:41:aa:ae:a3:89:a4:00:
a6:15:4c:06:d3:ba:82:87:30:85:6b:2f:ec:01:d9:
4f:79:8e:81:28:b8:1c:69:5f:d4:f1:3e:b0:02:bf:
ee:c5:68:5c:aa:b3:6c:f2:78:f6:12:47:98:c9:62:
f3:00:8d:5f:e4:b9:d5:5e:ec:89:7a:82:bf:b4:6d:
9b:35:04:ce:18:b5:58:f5:1a:60:f1:55:cc:10:b7:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B1:F1:D8:E5:47:59:0D:40:D1:67:71:9E:1B:11:D8:C4:CB:7F:7F
X509v3 Authority Key Identifier:
keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:83:fc:cd:84:88:9b:6e:b8:9c:07:39:66:62:04:ca:25:d0:
75:28:75:5b:48:90:25:21:66:60:53:6b:e0:ed:f4:af:3d:10:
7a:69:ad:06:37:5c:a7:1b:75:ef:16:00:23:ae:e2:5c:c9:3c:
4e:93:48:a5:86:cc:bc:e1:d0:d4:ea:e4:82:97:85:e3:59:e9:
91:68:a9:76:68:5c:b5:07:4a:b9:56:69:b9:b9:5e:ec:97:f1:
23:10:b8:2e:cc:18:fd:57:b4:87:09:ea:b2:9f:d7:3d:ef:5f:
fd:62:f9:32:a3:35:35:7f:83:c7:13:20:f0:22:49:f9:31:6f:
01:d1:a8:52:98:4b:80:4e:76:74:a9:21:b9:8c:85:b6:d0:1b:
f5:03:c0:8b:2f:23:91:8c:e6:7f:87:70:cd:a3:7d:ba:8c:f6:
6a:39:a9:73:5d:5f:e9:d9:a4:18:2e:90:c9:70:5b:80:79:c7:
d3:2c:c7:6f:ec:24:37:03:88:37:e8:58:85:37:d9:e0:1e:c3:
a8:4b:13:fa:1a:f2:eb:00:60:94:d7:89:46:65:0b:62:5a:19:
ab:aa:55:c3:8e:d5:c8:5a:88:42:a0:d2:63:5c:b0:64:4c:75:
1e:7f:c8:cf:93:01:84:e9:02:09:7b:2c:ba:fb:88:ea:8e:de:
cc:5c:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:38 2026 by rpki-client