$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: f4DuuLiSv0Tv1kXkwsYLRi0AL7zl7kOdyMvJlbAvLEI= Subject key identifier: 8D:8E:62:A9:F7:AD:28:86:3C:5C:DC:F9:A1:E4:A2:8F:88:E3:8F:FE Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 5FCCC83DAD169AE5C69175A16305E142DA9C73E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: B1 Signing time: Tue 06 May 2025 14:14:53 +0000 Manifest this update: Tue 06 May 2025 14:09:53 +0000 Manifest next update: Wed 07 May 2025 15:38:53 +0000 Files and hashes: 1: 3130332e32352e3132342e302f32342d3234203d3e203134363138.roa (hash: N/UGLKyCF1nlWGfA4MlZFn9fe9dMDYLHEgBApUdM/AQ=) 2: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: Ht7so/jwc85e04BPKQ9dpkcoPbpKu9G3wsBHNBllfQY=) 3: 3130332e32352e3132342e302f32342d3234203d3e203136353039.roa (hash: 0ULEQRz2ldMvt+RFzaD6gYHgW85Kkj7F+ioCi2gyZr8=) 4: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=) 5: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: 3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=) 6: 3130332e32352e3132352e302f32342d3234203d3e20313530363534.roa (hash: TKkmbX2rZAc1MWXE3pRutjjB5Wb/b242gTsyLM3JxT4=) 7: 3130332e32352e3132342e302f32342d3234203d3e203230343733.roa (hash: 8k5xMj72vdeb02tvhBSSTZSUb9XJjAZCB0tiP/qA9IU=) 8: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 15:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:cc:c8:3d:ad:16:9a:e5:c6:91:75:a1:63:05:e1:42:da:9c:73:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: May 6 14:09:53 2025 GMT Not After : May 7 15:38:53 2025 GMT Subject: CN=8D8E62A9F7AD28863C5CDCF9A1E4A28F88E38FFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d2:d3:34:b7:7b:25:6d:54:3d:f1:6c:41:6c: ae:dd:9c:a2:2a:8c:c7:bd:24:94:b5:d6:df:aa:88: 7d:49:21:02:8b:95:16:88:84:07:65:11:35:a1:8f: 6a:6b:51:da:88:d9:d7:b5:8d:a7:f9:1d:e4:07:21: 11:05:c6:3f:72:df:2d:2f:5b:e6:32:8d:d5:98:8c: ed:b9:92:cf:03:41:ad:3d:7f:15:7d:c0:b9:1c:bc: 51:d2:da:40:bf:19:16:69:15:4f:bb:a1:45:c7:52: 5c:48:4e:8c:02:e8:37:a5:83:94:b2:f6:66:95:37: 71:c7:92:c5:4d:cf:b9:44:ad:40:c2:96:37:72:14: 6d:ee:7f:c1:12:c2:0e:dc:e1:46:d1:e2:e9:d6:e2: a1:e7:d0:ea:00:cb:9e:69:15:36:44:6f:d6:2a:f3: 2a:48:47:d3:b9:69:83:77:68:1e:6c:a2:49:fc:90: 50:ea:8c:df:13:c9:60:c2:97:fc:fc:9c:74:d4:6f: d1:21:aa:e3:91:f0:58:09:a5:c4:fd:1b:b1:36:c0: 51:fd:28:b5:b3:30:fc:40:f5:b3:3e:4f:71:2b:2b: 72:ef:af:fb:b9:74:39:db:b1:fe:89:0f:90:63:72: 79:ba:ae:77:92:e6:8f:21:95:8d:af:2a:5f:4b:32: 40:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8E:62:A9:F7:AD:28:86:3C:5C:DC:F9:A1:E4:A2:8F:88:E3:8F:FE X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5d:52:d2:0b:08:a0:89:f5:27:31:9d:e0:06:9a:c7:f0:8c: 4b:fc:c3:40:6c:16:c0:0f:6b:f8:e6:67:c5:84:fb:ff:a2:48: a8:e7:f5:c1:25:03:3a:32:f7:26:1d:dc:cc:26:e9:b1:89:26: c8:cf:ce:60:d6:8f:38:09:f8:04:c9:3b:ee:bb:a4:de:24:93: 08:a8:e6:c0:68:7c:4c:9c:c2:06:d6:4e:4e:dc:23:c8:1f:dd: 05:d1:68:a5:29:9e:77:83:be:db:a9:28:78:e5:08:da:a4:83: 55:a8:61:5d:ed:6d:a1:de:bb:3b:b1:15:70:3e:73:b2:a8:bf: a7:20:ab:3f:2d:ed:a8:5f:0f:16:39:1f:12:d0:c8:3d:ff:79: 7a:f0:60:b8:4f:10:b7:bd:3f:dc:2d:8a:47:7c:1c:cf:70:f8: 2e:5c:82:ea:b4:fa:c7:bc:54:69:ac:79:6d:72:f8:e6:2f:87: 36:64:ea:11:d4:0d:1d:32:cc:2c:09:5a:d6:06:31:f9:1c:ec: 70:d3:26:9b:4a:1e:a8:4a:ca:14:1f:94:14:51:1d:a7:0d:91: 9d:0e:1e:35:1e:11:50:e9:24:05:87:86:04:c7:34:69:80:cc: 24:3f:ab:9c:6c:dc:15:db:77:b6:98:7c:2b:fc:aa:59:03:be: ec:3a:28:02 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUX8zIPa0WmuXGkXWhYwXhQtqcc+IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MDUwNjE0MDk1M1oX DTI1MDUwNzE1Mzg1M1owMzExMC8GA1UEAxMoOEQ4RTYyQTlGN0FEMjg4NjNDNUNE Q0Y5QTFFNEEyOEY4OEUzOEZGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXS0zS3eyVtVD3xbEFsrt2coiqMx70klLXW36qIfUkhAouVFoiEB2URNaGP amtR2ojZ17WNp/kd5AchEQXGP3LfLS9b5jKN1ZiM7bmSzwNBrT1/FX3AuRy8UdLa QL8ZFmkVT7uhRcdSXEhOjALoN6WDlLL2ZpU3cceSxU3PuUStQMKWN3IUbe5/wRLC DtzhRtHi6dbioefQ6gDLnmkVNkRv1irzKkhH07lpg3doHmyiSfyQUOqM3xPJYMKX /PycdNRv0SGq45HwWAmlxP0bsTbAUf0otbMw/ED1sz5PcSsrcu+v+7l0Odux/okP kGNyebqud5LmjyGVja8qX0syQGcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSNjmKp 960ohjxc3Pmh5KKPiOOP/jAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAF11S0gsIoIn1JzGd4Aaax/CMS/zDQGwWwA9r+OZnxYT7/6JI qOf1wSUDOjL3Jh3czCbpsYkmyM/OYNaPOAn4BMk77ruk3iSTCKjmwGh8TJzCBtZO TtwjyB/dBdFopSmed4O+26koeOUI2qSDVahhXe1tod67O7EVcD5zsqi/pyCrPy3t qF8PFjkfEtDIPf95evBguE8Qt70/3C2KR3wcz3D4LlyC6rT6x7xUaax5bXL45i+H NmTqEdQNHTLMLAla1gYx+RzscNMmm0oeqErKFB+UFFEdpw2RnQ4eNR4RUOkkBYeG BMc0aYDMJD+rnGzcFdt3tph8K/yqWQO+7DooAg== -----END CERTIFICATE-----Generated at Wed May 7 04:19:26 2025 by rpki-client