$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: nnVF54h/JWfMZYwn6V355CojJKs+AIlyRrPOmNkKbpk= Subject key identifier: CD:3D:A5:FE:E3:D6:15:B8:42:97:EE:E3:BC:14:37:22:E3:B6:64:FD Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 49D356CB0F6DAE92FB8BCA5455141ECA0FB3F3F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 0268 Signing time: Sat 28 Mar 2026 00:52:52 +0000 Manifest this update: Sat 28 Mar 2026 00:47:52 +0000 Manifest next update: Sun 29 Mar 2026 01:00:52 +0000 Files and hashes: 1: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: gft1BurDgemzZXHgwT70z7AFLI00WqpfFscSfEJBPlY=) 2: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=) 3: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=) 4: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=) 5: 3130332e32352e3132342e302f32342d3234203d3e2039343537.roa (hash: B+ADVjoTHnyVRxwPayXW8Wr41jua47v7vFKOzXKix6M=) 6: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d3:56:cb:0f:6d:ae:92:fb:8b:ca:54:55:14:1e:ca:0f:b3:f3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Mar 28 00:47:52 2026 GMT Not After : Mar 29 01:00:52 2026 GMT Subject: CN=CD3DA5FEE3D615B84297EEE3BC143722E3B664FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:80:bb:73:a8:78:ac:0a:a7:e1:ac:84:07:4c: 5e:e2:83:c2:6a:17:00:b0:a4:8d:d6:a9:1d:09:23: 1a:b0:6e:1d:f6:43:03:c6:9b:e0:40:69:74:bc:4b: a6:64:62:5e:7a:1f:73:bd:e7:da:06:9b:c2:fc:fd: 63:9d:b6:59:8d:00:af:f2:ff:c3:7f:2b:94:a3:14: 84:1d:74:e2:17:f0:27:aa:de:09:98:41:3d:36:4b: b1:01:b7:91:5b:f8:dd:f7:0c:91:98:9d:9d:9e:f7: 28:c9:fe:42:ff:b5:4d:37:f0:a3:67:3f:fc:40:6f: c0:0a:b8:ae:08:69:ae:04:75:80:91:e4:19:69:eb: c1:19:dd:c3:10:97:e0:bc:a2:27:35:64:a2:be:eb: 7d:ba:4d:f9:82:ce:30:6d:42:0e:dc:0d:d8:6c:41: 33:35:c2:61:78:a7:c2:9f:ed:23:27:ff:33:10:2d: 39:72:3d:9c:ba:c3:9c:4e:8d:49:08:c4:e7:fc:1b: 58:48:b1:91:ed:c3:1e:f1:5f:98:25:3a:c2:f8:a5: c8:d2:29:21:99:86:01:1a:94:e9:5c:b3:ef:67:9e: 4f:99:eb:5c:64:b6:d6:20:d1:8c:70:35:01:83:c6: 5d:d0:db:25:10:4f:18:ef:7c:33:79:6d:e8:d0:d6: 96:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3D:A5:FE:E3:D6:15:B8:42:97:EE:E3:BC:14:37:22:E3:B6:64:FD X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:62:cf:92:c7:a4:41:e8:69:22:17:3e:79:a8:77:db:c2:09: 68:04:54:d0:e5:27:95:58:45:33:77:8b:2f:50:d8:3d:91:cd: 61:ef:39:c3:b6:01:d1:ca:cd:e4:ff:b8:2c:3c:a6:24:b9:c2: 7a:2e:c5:1f:7b:79:1c:96:9d:31:ab:13:74:40:e7:d5:ce:72: 28:46:1b:33:0f:b5:b4:0d:4c:7b:1f:22:26:08:3d:a4:29:c2: ef:4e:09:8b:53:42:46:e8:26:78:01:8b:eb:06:be:a2:ae:3c: 18:48:46:44:69:59:37:30:46:1c:c8:f5:00:6b:f0:af:01:ff: 30:46:e9:2d:b7:9f:74:bc:dc:68:bd:fc:01:e9:21:c2:2e:68: e3:37:96:77:94:d0:15:de:76:28:b4:83:84:fd:0a:1d:59:73: 90:42:e6:f3:5d:00:86:17:85:fe:cd:b5:1e:10:b5:e3:a3:7b: 8f:7c:d8:70:2e:1b:43:ef:73:a1:65:e8:b9:16:58:eb:5a:e5: 5c:1a:41:aa:7b:6a:a3:fd:e1:39:4c:49:00:f4:eb:ed:00:3a: 7d:cc:89:75:3c:41:15:c5:c0:33:c6:13:6f:82:39:fd:d4:8c: b5:2a:e8:38:f9:c5:e2:54:02:0f:9f:e1:ed:65:4c:c9:d9:e9: 74:d0:c7:72 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSdNWyw9trpL7i8pUVRQeyg+z8/gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI2MDMyODAwNDc1MloX DTI2MDMyOTAxMDA1MlowMzExMC8GA1UEAxMoQ0QzREE1RkVFM0Q2MTVCODQyOTdF RUUzQkMxNDM3MjJFM0I2NjRGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKeAu3OoeKwKp+GshAdMXuKDwmoXALCkjdapHQkjGrBuHfZDA8ab4EBpdLxL pmRiXnofc73n2gabwvz9Y522WY0Ar/L/w38rlKMUhB104hfwJ6reCZhBPTZLsQG3 kVv43fcMkZidnZ73KMn+Qv+1TTfwo2c//EBvwAq4rghprgR1gJHkGWnrwRndwxCX 4LyiJzVkor7rfbpN+YLOMG1CDtwN2GxBMzXCYXinwp/tIyf/MxAtOXI9nLrDnE6N SQjE5/wbWEixke3DHvFfmCU6wvilyNIpIZmGARqU6Vyz72eeT5nrXGS21iDRjHA1 AYPGXdDbJRBPGO98M3lt6NDWlr8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBTNPaX+ 49YVuEKX7uO8FDci47Zk/TAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAfGLPksekQehpIhc+eah328IJaARU0OUnlVhFM3eLL1DYPZHN Ye85w7YB0crN5P+4LDymJLnCei7FH3t5HJadMasTdEDn1c5yKEYbMw+1tA1Mex8i Jgg9pCnC704Ji1NCRugmeAGL6wa+oq48GEhGRGlZNzBGHMj1AGvwrwH/MEbpLbef dLzcaL38Aekhwi5o4zeWd5TQFd52KLSDhP0KHVlzkELm810AhheF/s21HhC146N7 j3zYcC4bQ+9zoWXouRZY61rlXBpBqntqo/3hOUxJAPTr7QA6fcyJdTxBFcXAM8YT b4I5/dSMtSroOPnF4lQCD5/h7WVMydnpdNDHcg== -----END CERTIFICATE-----Generated at Sat Mar 28 08:39:53 2026 by rpki-client