$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: Rfu8ctKQWzqPHOnVbIG6M5UFUjwBr3hGQomLvdg/zM0= Subject key identifier: FC:E5:40:B3:24:8F:4D:E7:2A:C3:BE:22:D9:86:E9:9D:DC:E4:E2:F5 Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 230046FA120FB90CA1108A4B0DE4490E4F2C0A04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 02A5 Signing time: Tue 12 May 2026 16:30:06 +0000 Manifest this update: Tue 12 May 2026 16:25:06 +0000 Manifest next update: Wed 13 May 2026 19:28:06 +0000 Files and hashes: 1: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=) 2: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: gHPvVkaIALzZF2oJRPVzm6SNmgowXmzy6pEb1K6p9R8=) 3: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=) 4: 3130332e32352e3132342e302f32342d3234203d3e2039343537.roa (hash: B+ADVjoTHnyVRxwPayXW8Wr41jua47v7vFKOzXKix6M=) 5: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=) 6: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:00:46:fa:12:0f:b9:0c:a1:10:8a:4b:0d:e4:49:0e:4f:2c:0a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: May 12 16:25:06 2026 GMT Not After : May 13 19:28:06 2026 GMT Subject: CN=FCE540B3248F4DE72AC3BE22D986E99DDCE4E2F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:43:94:34:11:70:f9:63:67:4b:54:3a:71: 7f:3d:b8:47:da:cc:e1:af:49:8d:12:49:0d:7e:0c: c8:c8:fe:fb:58:af:bd:85:05:dd:47:96:eb:c2:e9: 4e:ad:7f:41:bb:e5:d5:f0:ca:ff:e1:bf:05:8b:49: d6:c0:e9:30:74:82:e1:63:e3:45:3c:72:4a:0e:8a: 83:ab:bb:15:ba:d8:fe:15:47:8d:b6:7d:c0:f6:a6: b5:71:ba:0f:3a:fa:e4:c5:37:9f:12:59:0a:e7:25: a6:2b:d4:7c:26:89:fe:45:b5:5f:7d:6c:69:20:21: 15:46:71:71:46:19:7a:88:4f:ec:33:c7:d3:33:99: 3f:b1:f4:1a:ce:69:73:3e:cf:b2:3d:c9:78:4d:5b: 6e:9d:24:b7:d5:c6:13:91:a7:ac:a8:cf:61:31:ce: 85:8b:db:ea:d2:4a:41:5b:a0:96:d8:c1:5e:08:85: 58:b0:04:05:24:9f:c0:e0:42:75:75:8c:37:7a:ab: 53:d7:39:f2:72:d5:76:d2:97:24:83:7c:fe:4b:3d: 45:7a:bb:74:37:1f:a5:6f:d3:a7:b2:21:21:00:59: 21:cb:3c:52:13:b3:ad:c9:10:3f:05:77:29:76:d8: c4:42:f1:18:19:7d:46:5d:dd:26:1f:b1:34:f6:38: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E5:40:B3:24:8F:4D:E7:2A:C3:BE:22:D9:86:E9:9D:DC:E4:E2:F5 X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b9:90:b6:67:55:11:6f:20:06:32:0f:4f:20:77:f7:be:45: 1b:06:05:c8:d5:ba:b5:8a:d5:c3:27:5b:aa:9c:f6:ff:fa:8e: 3e:93:9b:60:b5:a1:99:24:52:1a:b8:a5:03:f2:13:70:8d:39: da:50:66:be:0f:0a:03:20:2f:78:65:0b:ab:eb:86:6f:22:89: b6:8e:44:f5:f9:df:db:50:ec:07:fe:c0:ba:d0:54:b3:f5:8e: f5:1c:30:c9:a8:f5:bf:50:2c:28:37:cc:25:79:45:a7:3f:22: 04:3d:ae:84:62:7e:f7:96:d2:aa:d2:fb:14:47:2d:b8:a3:f8: 27:fb:8b:c6:76:2f:ce:88:ad:25:87:95:33:9b:c0:54:a6:ae: 9d:33:ce:2b:65:71:bc:9c:00:d4:de:2c:84:46:8f:06:80:14: 1e:fb:fb:2b:e1:93:f9:b5:7b:44:b3:35:57:d4:d8:a5:40:4b: ad:b4:8c:16:66:76:f7:ff:ad:a7:15:bb:b8:65:24:ae:fb:de: 18:b3:40:46:a1:14:6c:36:4f:b5:2c:ef:ee:d9:8f:93:be:92: 38:1e:f0:9c:5e:c6:7e:d5:64:56:a2:2c:5f:3c:a5:0d:2a:d2: 22:59:0b:87:06:02:14:dc:d9:d0:a2:d1:f0:cc:20:b4:4c:c1: 76:93:f3:36 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIwBG+hIPuQyhEIpLDeRJDk8sCgQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI2MDUxMjE2MjUwNloX DTI2MDUxMzE5MjgwNlowMzExMC8GA1UEAxMoRkNFNTQwQjMyNDhGNERFNzJBQzNC RTIyRDk4NkU5OUREQ0U0RTJGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0BQ5Q0EXD5Y2dLVDpxfz24R9rM4a9JjRJJDX4MyMj++1ivvYUF3UeW68Lp Tq1/Qbvl1fDK/+G/BYtJ1sDpMHSC4WPjRTxySg6Kg6u7FbrY/hVHjbZ9wPamtXG6 Dzr65MU3nxJZCuclpivUfCaJ/kW1X31saSAhFUZxcUYZeohP7DPH0zOZP7H0Gs5p cz7Psj3JeE1bbp0kt9XGE5GnrKjPYTHOhYvb6tJKQVugltjBXgiFWLAEBSSfwOBC dXWMN3qrU9c58nLVdtKXJIN8/ks9RXq7dDcfpW/Tp7IhIQBZIcs8UhOzrckQPwV3 KXbYxELxGBl9Rl3dJh+xNPY4agECAwEAAaOCAhswggIXMB0GA1UdDgQWBBT85UCz JI9N5yrDviLZhumd3OTi9TAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAnbmQtmdVEW8gBjIPTyB3975FGwYFyNW6tYrVwydbqpz2//qO PpObYLWhmSRSGrilA/ITcI052lBmvg8KAyAveGULq+uGbyKJto5E9fnf21DsB/7A utBUs/WO9Rwwyaj1v1AsKDfMJXlFpz8iBD2uhGJ+95bSqtL7FEctuKP4J/uLxnYv zoitJYeVM5vAVKaunTPOK2VxvJwA1N4shEaPBoAUHvv7K+GT+bV7RLM1V9TYpUBL rbSMFmZ29/+tpxW7uGUkrvveGLNARqEUbDZPtSzv7tmPk76SOB7wnF7GftVkVqIs XzylDSrSIlkLhwYCFNzZ0KLR8MwgtEzBdpPzNg== -----END CERTIFICATE-----Generated at Wed May 13 02:42:17 2026 by rpki-client