
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier: +igPVnno1wL3xlFS6I9pcy7th29cj91WtuoFdhmXsGE=
Subject key identifier: F7:A1:E3:B1:AF:B0:C8:14:1C:F3:8A:33:C8:CE:99:D8:6D:4D:9F:26
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial: 72DE9C1C94AF74ED381B591A795385BB39AADCA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number: 0982
Signing time: Tue 28 Jul 2026 10:25:11 +0000
Manifest this update: Tue 28 Jul 2026 10:20:11 +0000
Manifest next update: Wed 29 Jul 2026 12:50:11 +0000
Files and hashes: 1: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: BuEBPTJ2vfTWlZKFjMl32JrJQqRwp1mqSuqe+EmcFIA=)
2: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: wD2X/rnLvjYX7xyPB9Jt+GcW/s8Zi1WkDFOO2rKFbBY=)
3: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: 1hh1be0/Wtafuw1yeY8PyuRB6VZnPwxATiwNtxfwFbc=)
4: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: Y4k57xRWRy9X0jeYDXKld09T8mLHah2yzMR8vWq3R2M=)
5: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: 7oXfpj3C/mgJ9C72voMZZOZTwU/VWJrw70I4Vj4hZRU=)
6: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: wx7mDDVDVvssyRRRK7qXWbAqlJxXiOpWt5/RcILxYjM=)
7: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: uKziAmnKEFzqB9nfk5eW2+yVcFJdYkRgt8r/NipgvDk=)
8: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: 6bUioHOiplX0nplUReMAUW/pmAQYfQERH31QOiWI09E=)
9: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: 3ggSTM9Di1FgXo3Ut6sBwZJGn9C5XLQtwoGmuGHyLTs=)
10: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: nQW/gChgRCJZOUmKfXuBxzd9ebuiuqT7zJMBaxZsIrM=)
11: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: SlyeO73BsaZhNaBtds/ns68oiIGA+OXgFydVUq6b7Yc=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 12:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:de:9c:1c:94:af:74:ed:38:1b:59:1a:79:53:85:bb:39:aa:dc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Validity
Not Before: Jul 28 10:20:11 2026 GMT
Not After : Jul 29 12:50:11 2026 GMT
Subject: CN=F7A1E3B1AFB0C8141CF38A33C8CE99D86D4D9F26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:de:80:e3:23:b2:44:14:f8:6b:98:1a:bb:
bf:3a:fa:6e:3b:bc:7d:10:6d:37:ab:f7:47:e6:e4:
ed:fd:ed:cc:93:c7:eb:1f:95:c4:32:c3:3a:0c:8c:
ab:97:4d:5a:b0:fe:ec:e6:51:55:3f:5b:bc:2d:8f:
5d:8f:4f:32:30:a3:24:5f:2b:60:92:9e:c1:17:a0:
4e:16:6c:6d:5c:dd:fb:77:9b:d2:7c:be:1a:97:3f:
93:26:0d:c2:92:50:11:26:ac:ea:55:5d:bc:b4:89:
1d:25:58:c9:c6:2b:e3:26:0c:4d:c5:bb:2b:3b:59:
25:73:ab:a1:12:2e:52:b2:8b:0f:2c:cb:74:ce:5c:
c7:31:da:0f:e4:e4:f3:31:d8:0e:79:45:54:b8:ba:
c8:bd:7d:d4:93:50:bc:60:4f:68:3d:be:cf:9b:ee:
04:90:3d:17:f2:90:fc:a8:33:05:61:90:3f:ee:65:
79:f8:56:6a:72:be:d0:d0:02:2f:cb:89:fe:57:94:
0c:e6:90:53:00:05:c5:69:3f:24:59:3b:5b:5c:c0:
60:9d:8c:c5:93:65:70:1d:29:a0:37:85:5f:f3:00:
26:69:40:6d:0b:b0:5b:87:68:c0:88:bf:80:4f:d3:
c7:a0:94:58:30:6c:cd:cf:e4:f9:8f:d9:59:02:17:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A1:E3:B1:AF:B0:C8:14:1C:F3:8A:33:C8:CE:99:D8:6D:4D:9F:26
X509v3 Authority Key Identifier:
keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f7:f7:b9:82:7b:c8:05:da:b6:86:8b:46:64:4a:fb:93:aa:
8b:e0:c2:43:f5:cb:c9:36:0f:73:6a:f1:5e:ec:64:85:92:9c:
7c:a7:93:0b:4b:53:62:58:c7:b8:45:ef:23:c9:ba:0f:08:9d:
17:40:11:ed:09:f8:13:f9:03:cb:84:1a:35:f8:10:ae:16:9b:
f3:79:0f:73:e4:b2:ea:a1:37:bb:05:30:0c:76:d1:5b:65:0e:
71:af:6a:e1:73:1d:d7:50:e1:5e:6a:4a:c3:3e:f1:40:8b:71:
06:63:5b:dc:30:dd:8a:1e:a4:a3:15:10:07:92:e1:7d:8e:63:
a3:cc:85:0e:46:73:82:5b:12:ec:28:ce:9e:16:79:02:b1:c7:
15:8d:1c:19:a4:d6:2d:ad:2e:0b:78:0f:a5:ae:44:cc:b6:f9:
6a:68:8b:cb:ac:2b:63:50:3d:f0:5b:44:22:e8:86:10:4c:03:
bf:a8:80:d4:53:59:0b:8f:31:ba:60:b4:70:af:75:e0:16:b6:
82:d2:77:3e:8d:9a:4a:b4:34:5f:5c:0b:49:2d:dd:b8:57:25:
ea:25:30:8e:cb:f4:ff:ca:62:10:de:7f:50:71:cf:57:9e:2a:
d6:d6:76:17:69:15:6c:de:d4:64:cb:8d:02:20:6e:fa:23:d9:
cf:49:e6:cf
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUct6cHJSvdO04G1kaeVOFuzmq3KMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2
MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI2MDcyODEwMjAxMVoX
DTI2MDcyOTEyNTAxMVowMzExMC8GA1UEAxMoRjdBMUUzQjFBRkIwQzgxNDFDRjM4
QTMzQzhDRTk5RDg2RDREOUYyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALRV3oDjI7JEFPhrmBq7vzr6bju8fRBtN6v3R+bk7f3tzJPH6x+VxDLDOgyM
q5dNWrD+7OZRVT9bvC2PXY9PMjCjJF8rYJKewRegThZsbVzd+3eb0ny+Gpc/kyYN
wpJQESas6lVdvLSJHSVYycYr4yYMTcW7KztZJXOroRIuUrKLDyzLdM5cxzHaD+Tk
8zHYDnlFVLi6yL191JNQvGBPaD2+z5vuBJA9F/KQ/KgzBWGQP+5lefhWanK+0NAC
L8uJ/leUDOaQUwAFxWk/JFk7W1zAYJ2MxZNlcB0poDeFX/MAJmlAbQuwW4dowIi/
gE/Tx6CUWDBszc/k+Y/ZWQIXuZcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBT3oeOx
r7DIFBzzijPIzpnYbU2fJjAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE
NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU
aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5
ODAwMDAvMC85ODlEMzJENUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEy
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAtPf3uYJ7yAXatoaLRmRK+5Oqi+DCQ/XLyTYPc2rxXuxkhZKc
fKeTC0tTYljHuEXvI8m6DwidF0AR7Qn4E/kDy4QaNfgQrhab83kPc+Sy6qE3uwUw
DHbRW2UOca9q4XMd11DhXmpKwz7xQItxBmNb3DDdih6koxUQB5LhfY5jo8yFDkZz
glsS7CjOnhZ5ArHHFY0cGaTWLa0uC3gPpa5EzLb5amiLy6wrY1A98FtEIuiGEEwD
v6iA1FNZC48xumC0cK914Ba2gtJ3Po2aSrQ0X1wLSS3duFcl6iUwjsv0/8piEN5/
UHHPV54q1tZ2F2kVbN7UZMuNAiBu+iPZz0nmzw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:21 2026 by rpki-client