$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json) Hash identifier: Uu9zVvM92Wol1bgZKwwrIBmFsj9J/AzrWZhrVN1f4k8= Subject key identifier: FF:78:D8:A2:F8:A7:2E:DF:9F:2D:F0:C7:B5:E3:26:08:C1:22:F3:6C Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Certificate serial: 6D46D37A8EFF477738380495F0AC77C8231797F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft Manifest number: 0710 Signing time: Fri 25 Apr 2025 17:38:29 +0000 Manifest this update: Fri 25 Apr 2025 17:33:29 +0000 Manifest next update: Sat 26 Apr 2025 19:03:29 +0000 Files and hashes: 1: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: ra2oXF5k8+tIywbWRe6EonXAECEWS9k6N5ioSDUneQc=) 2: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WLPwi3bQ5nn7bReBlArqTrU/FNBEK2cEiBr4W3SK8to=) 3: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: EILeVm2wqjdcdAxUUWHvxGy4DxMGxeBIJfbsJHdbTE4=) 4: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: IhaBjAH5AzMgzvRaQixC+njTbKcwrp3/F2CTwVuq0Jw=) 5: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: hMoqRvtcHp5MAB1nMbAqi7DRxy2c4cpG5EiQHRdMR9U=) 6: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: ZqgJMkEE+Gc01jyYKV6RIqm2fEEb3IP+zRkqR7gBnHs=) 7: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: 9b7VFtbzcnnUx2J6rArFgrGPOOdWZcbJYsCzShwO+BA=) 8: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: hw7ZG+W2FJRDOP/YJmI89LenLugszceN0n5PpL3aqpM=) 9: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: GXLgyQ7nu0rvfFM1r9PFPKlf+Di6lPWHOcSBNwp3/sw=) 10: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: EpUsVOQyAsYw0HesoFdtkY5jTfWDz5cp/Z7rGqdyJlY=) 11: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: M4i7p9No5fZoZbpjSFGgtG6zWQFJTESIcWrPguWH25k=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 19:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:46:d3:7a:8e:ff:47:77:38:38:04:95:f0:ac:77:c8:23:17:97:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Validity Not Before: Apr 25 17:33:29 2025 GMT Not After : Apr 26 19:03:29 2025 GMT Subject: CN=FF78D8A2F8A72EDF9F2DF0C7B5E32608C122F36C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dd:b6:84:f5:3a:50:93:d5:f3:75:f9:bb:b0: 56:8b:14:bb:d3:91:f1:1b:3f:8d:cf:c5:2b:8f:79: a9:f1:4b:a6:a2:1f:5d:c7:42:4c:b6:9a:d9:42:9b: 05:8b:28:60:96:2e:3b:a1:b9:aa:09:4d:d7:b9:dc: 77:8b:8f:c8:24:4b:62:73:1c:d4:5d:0b:bc:b0:f1: cd:14:24:08:d9:94:9d:88:2f:df:3c:d9:56:f7:d4: 8c:27:2f:90:a0:67:d6:f5:dc:ae:76:ec:9c:a7:16: aa:6b:9e:f3:cc:21:33:ff:87:7d:c3:cb:b6:e8:f9: 51:2b:c8:ac:fa:05:59:20:f9:f5:03:d8:60:f7:fb: 67:7c:97:01:57:73:c0:0b:17:5f:fc:ac:f2:e7:62: 3f:5d:f0:d8:58:6b:0f:ee:96:0d:68:f8:d7:8a:03: cc:ac:1f:57:6f:ab:50:53:19:6b:29:04:64:88:88: 2f:f1:70:29:ae:ca:18:f5:e0:d6:8e:b7:14:1c:51: 25:93:23:53:7f:b2:2d:37:2a:39:b4:3e:80:12:19: 50:90:bc:af:d1:c5:5e:ec:e3:c1:c1:0b:41:e0:ca: 54:c1:78:b6:7e:0c:47:d4:2e:23:8f:e7:49:2d:41: f8:d6:b4:3d:03:45:27:fe:3c:e7:81:1f:8d:59:9b: 08:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:78:D8:A2:F8:A7:2E:DF:9F:2D:F0:C7:B5:E3:26:08:C1:22:F3:6C X509v3 Authority Key Identifier: keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:66:63:9e:02:93:5c:29:99:33:7b:3e:bd:da:6f:a8:05:80: 7c:9b:de:cf:ac:16:e8:09:02:34:79:51:5f:cc:53:76:99:ac: 3e:7b:28:1f:cc:bc:34:67:55:5c:a3:1e:16:7a:b7:68:49:c5: 71:85:07:5f:fc:4c:dc:85:ee:c7:a9:af:79:e7:d6:69:3b:91: b4:f6:29:9b:f6:55:30:a1:4b:fe:53:14:71:a1:34:8e:83:a4: cc:12:d7:3a:bd:9b:f8:72:2f:8d:71:07:32:6d:66:76:01:e1: 7d:2b:e5:f3:cc:97:79:89:7d:99:ce:7f:3d:68:95:78:26:ac: 76:a8:66:f0:87:14:e3:c4:a9:9e:ca:c3:35:d9:32:b3:a4:77: 01:82:2d:b2:9c:38:e4:42:85:d8:b5:fe:84:55:c4:1f:ce:4b: 61:e1:51:21:3b:e6:6f:e0:54:ca:bf:47:5f:ce:b0:a4:0a:dc: 3c:71:4d:a3:c1:06:f0:3c:04:a4:c5:32:21:ca:f3:b4:ed:2c: 79:d2:95:6c:c0:06:78:3c:b1:b7:b0:15:58:2c:ba:bb:31:fa: 55:5c:7c:c9:ad:26:69:c8:dc:3d:e7:a3:f4:b0:fb:e8:6a:82: 00:53:8d:e2:36:b8:34:87:5f:d9:29:a6:7a:d7:2b:17:72:6b: e2:7b:b9:f6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbUbTeo7/R3c4OASV8Kx3yCMXl/MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2 MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI1MDQyNTE3MzMyOVoX DTI1MDQyNjE5MDMyOVowMzExMC8GA1UEAxMoRkY3OEQ4QTJGOEE3MkVERjlGMkRG MEM3QjVFMzI2MDhDMTIyRjM2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANDdtoT1OlCT1fN1+buwVosUu9OR8Rs/jc/FK495qfFLpqIfXcdCTLaa2UKb BYsoYJYuO6G5qglN17ncd4uPyCRLYnMc1F0LvLDxzRQkCNmUnYgv3zzZVvfUjCcv kKBn1vXcrnbsnKcWqmue88whM/+HfcPLtuj5USvIrPoFWSD59QPYYPf7Z3yXAVdz wAsXX/ys8udiP13w2FhrD+6WDWj414oDzKwfV2+rUFMZaykEZIiIL/FwKa7KGPXg 1o63FBxRJZMjU3+yLTcqObQ+gBIZUJC8r9HFXuzjwcELQeDKVMF4tn4MR9QuI4/n SS1B+Na0PQNFJ/4854EfjVmbCOECAwEAAaOCAhswggIXMB0GA1UdDgQWBBT/eNii +Kcu358t8Me14yYIwSLzbDAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5 ODAwMDAvMC85ODlEMzJENUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAXWZjngKTXCmZM3s+vdpvqAWAfJvez6wW6AkCNHlRX8xTdpms PnsoH8y8NGdVXKMeFnq3aEnFcYUHX/xM3IXux6mveefWaTuRtPYpm/ZVMKFL/lMU caE0joOkzBLXOr2b+HIvjXEHMm1mdgHhfSvl88yXeYl9mc5/PWiVeCasdqhm8IcU 48SpnsrDNdkys6R3AYItspw45EKF2LX+hFXEH85LYeFRITvmb+BUyr9HX86wpArc PHFNo8EG8DwEpMUyIcrztO0sedKVbMAGeDyxt7AVWCy6uzH6VVx8ya0macjcPeej 9LD76GqCAFON4ja4NIdf2SmmetcrF3Jr4nu59g== -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:56 2025 by rpki-client