$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json) Hash identifier: GuyQ8gFmVbsBQ/+5sy2cPEXxxH/NQulBKq4vq7ETpgo= Subject key identifier: AE:B5:92:20:A7:1B:B0:20:D1:B4:F4:D7:64:85:B0:6F:35:9D:20:6D Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Certificate serial: 280079C190A22A70FCBA2452E377CA7D11AC98A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft Manifest number: 0816 Signing time: Tue 04 Nov 2025 02:03:30 +0000 Manifest this update: Tue 04 Nov 2025 01:58:30 +0000 Manifest next update: Wed 05 Nov 2025 03:08:30 +0000 Files and hashes: 1: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=) 2: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=) 3: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=) 4: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=) 5: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=) 6: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=) 7: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: O74geCbZXZwUgL0X4sE9tw04ZvBOvxHEtC31OoWno1g=) 8: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=) 9: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=) 10: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=) 11: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 03:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:00:79:c1:90:a2:2a:70:fc:ba:24:52:e3:77:ca:7d:11:ac:98:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Validity Not Before: Nov 4 01:58:30 2025 GMT Not After : Nov 5 03:08:30 2025 GMT Subject: CN=AEB59220A71BB020D1B4F4D76485B06F359D206D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:f1:71:4b:de:9b:dc:6f:d3:79:42:2d:20: 27:d7:88:77:60:fd:b4:8e:9a:4e:60:ef:f0:45:33: 2b:0f:19:80:35:5f:63:07:2d:b2:97:b2:60:e3:2b: 24:09:10:d0:7a:aa:20:9d:a6:43:5f:eb:88:62:7d: 73:06:df:a9:76:10:18:bf:b1:4b:d6:d1:09:bc:e4: a5:b4:7e:f8:ed:5a:14:8c:05:82:21:c3:40:d4:f5: a5:ef:0e:3a:9a:1b:3c:8d:bb:4d:e7:cc:90:9f:79: 77:7c:ce:75:c1:ad:45:8d:af:f6:fb:12:43:79:7f: 9b:51:29:57:cb:c1:9e:54:16:16:c6:ac:a7:9a:ea: 76:e4:1b:63:ec:14:b5:19:8c:1d:f8:46:e3:02:d5: 22:07:ea:f9:4b:ad:ed:22:cc:85:38:d2:2d:c8:5a: 5c:bd:82:cb:96:cd:24:d6:7a:1e:56:ae:3d:82:63: 42:87:4d:c0:07:f6:72:26:99:de:cf:ff:b0:2e:8d: ef:f4:20:9c:37:56:5e:1b:9e:74:b6:01:52:e0:80: 9d:78:4c:ad:c7:4d:55:7e:d8:c1:69:7e:95:bc:1d: f6:e9:03:8a:de:4e:30:65:c0:84:cb:76:93:c8:ce: 1f:c5:54:f0:f3:a1:13:6f:3e:70:08:44:38:85:05: 83:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B5:92:20:A7:1B:B0:20:D1:B4:F4:D7:64:85:B0:6F:35:9D:20:6D X509v3 Authority Key Identifier: keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a6:65:18:7c:87:f9:d2:94:9d:39:1e:64:ce:77:c4:c7:d3: 6d:42:53:0b:c7:82:7a:7c:12:32:99:d9:96:d5:ba:82:84:05: 32:1d:82:50:66:a8:6f:c0:c2:e8:6c:bf:ea:ba:83:1e:9f:31: 11:2a:55:08:17:98:b9:3b:ef:cb:05:a6:63:8f:0a:76:5b:67: de:40:c0:06:e6:f5:92:1c:4c:4d:b4:7f:8e:61:f5:55:6b:48: a5:6e:90:94:0f:02:11:01:f6:fe:de:11:07:b1:d9:68:58:16: ea:9b:c3:56:e5:90:57:60:08:87:6b:42:30:47:7d:69:75:af: 17:3d:db:82:b2:b4:33:96:89:89:b6:b9:2b:51:82:c4:02:1d: a0:a6:50:b1:91:72:93:e6:ec:27:ca:04:8a:0f:05:e4:50:78: d8:34:e5:92:81:4a:93:80:91:cc:9c:93:7c:33:b6:48:d7:a1: 2a:97:0b:ba:50:20:f5:96:87:3f:57:c8:e9:5b:a3:d1:07:da: ca:20:d9:5a:e4:2a:74:de:93:6a:30:1b:12:49:47:b8:9b:ca: 00:11:43:b8:e6:b6:e1:05:05:b7:23:59:85:d7:e1:9f:9a:0b: 13:f1:b9:12:2b:33:82:0c:12:ef:12:a2:53:af:bc:f6:52:43: f3:f8:e2:8e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKAB5wZCiKnD8uiRS43fKfRGsmKcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2 MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI1MTEwNDAxNTgzMFoX DTI1MTEwNTAzMDgzMFowMzExMC8GA1UEAxMoQUVCNTkyMjBBNzFCQjAyMEQxQjRG NEQ3NjQ4NUIwNkYzNTlEMjA2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKC18XFL3pvcb9N5Qi0gJ9eId2D9tI6aTmDv8EUzKw8ZgDVfYwctspeyYOMr JAkQ0HqqIJ2mQ1/riGJ9cwbfqXYQGL+xS9bRCbzkpbR++O1aFIwFgiHDQNT1pe8O OpobPI27TefMkJ95d3zOdcGtRY2v9vsSQ3l/m1EpV8vBnlQWFsasp5rqduQbY+wU tRmMHfhG4wLVIgfq+Uut7SLMhTjSLchaXL2Cy5bNJNZ6HlauPYJjQodNwAf2ciaZ 3s//sC6N7/QgnDdWXhuedLYBUuCAnXhMrcdNVX7YwWl+lbwd9ukDit5OMGXAhMt2 k8jOH8VU8POhE28+cAhEOIUFg90CAwEAAaOCAhswggIXMB0GA1UdDgQWBBSutZIg pxuwING09NdkhbBvNZ0gbTAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5 ODAwMDAvMC85ODlEMzJENUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAlKZlGHyH+dKUnTkeZM53xMfTbUJTC8eCenwSMpnZltW6goQF Mh2CUGaob8DC6Gy/6rqDHp8xESpVCBeYuTvvywWmY48Kdltn3kDABub1khxMTbR/ jmH1VWtIpW6QlA8CEQH2/t4RB7HZaFgW6pvDVuWQV2AIh2tCMEd9aXWvFz3bgrK0 M5aJiba5K1GCxAIdoKZQsZFyk+bsJ8oEig8F5FB42DTlkoFKk4CRzJyTfDO2SNeh KpcLulAg9ZaHP1fI6Vuj0QfayiDZWuQqdN6TajAbEklHuJvKABFDuOa24QUFtyNZ hdfhn5oLE/G5EiszggwS7xKiU6+89lJD8/jijg== -----END CERTIFICATE-----Generated at Tue Nov 4 12:37:05 2025 by rpki-client