$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: 2OMcp3doNEMh1gMQPod84QN9mzg+9WHHrpkkrH3Y2dg= Subject key identifier: B7:B2:25:6E:B0:0C:81:B5:5F:A5:46:5E:8A:40:E1:30:0D:07:C6:E4 Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 4FA8AEB7615E46F7135158A93C9A2DE6457E98C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 035A Signing time: Thu 24 Sep 2026 11:41:32 +0000 Manifest this update: Thu 24 Sep 2026 11:36:32 +0000 Manifest next update: Fri 25 Sep 2026 13:50:32 +0000 Files and hashes: 1: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: KWhrBV/zjumpPUyS3bkIhwSt0IKmcrtP3SgZZsS+/20=) 2: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=) 3: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: 62a8D9/aj4LAz6+nks2t8LDn+Zu3bnc87iSoInxRcF0=) 4: 3130332e32352e3132342e302f32342d3234203d3e20313937353337.roa (hash: OcqsdLDtMbRRfAMVaO1K99xhO+aLsojGYCO5peADbbA=) 5: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=) 6: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 13:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a8:ae:b7:61:5e:46:f7:13:51:58:a9:3c:9a:2d:e6:45:7e:98:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Sep 24 11:36:32 2026 GMT Not After : Sep 25 13:50:32 2026 GMT Subject: CN=B7B2256EB00C81B55FA5465E8A40E1300D07C6E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f8:de:6a:85:6d:60:de:1f:af:7a:83:06:27: 51:55:f4:69:4b:de:61:27:7b:b6:0d:96:7e:f1:d0: 13:39:7e:31:18:6f:ec:2b:e3:ef:16:a8:6b:2a:e3: 59:8b:8b:f7:cc:e4:0a:84:d1:42:9e:4d:82:e7:4e: 22:bf:e6:d7:52:96:83:27:2c:c5:ef:d6:db:7f:6a: 90:5d:6b:20:bb:69:79:01:6f:b1:e9:22:08:20:88: 64:31:ec:49:43:6e:f3:44:7c:b1:1e:5c:22:6a:7c: 92:63:ef:ad:aa:f4:38:ba:c8:6c:20:af:39:9f:d9: 48:3a:e4:d3:40:6f:a5:20:d3:01:68:81:19:5d:b5: 2c:93:05:46:e1:3d:e7:cf:31:20:11:92:8b:de:bd: 0f:76:ce:42:41:7d:d5:47:8f:61:4f:c2:cf:80:ee: e4:13:c5:4f:ff:af:58:0e:cb:66:4b:b7:cc:27:bd: cc:95:f8:6c:63:15:9a:63:c8:5a:13:e4:02:a2:d3: c0:06:84:1d:21:af:bb:f1:97:e2:ad:a4:eb:9b:4b: f6:f4:1c:df:fa:47:32:ec:99:59:fd:bc:a3:6f:8a: d9:4a:ae:13:02:c2:c4:a5:19:3f:da:b2:5d:e9:56: 19:2a:0a:8d:09:3b:64:81:f5:f6:e3:dc:4f:fa:64: 70:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B2:25:6E:B0:0C:81:B5:5F:A5:46:5E:8A:40:E1:30:0D:07:C6:E4 X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3c:38:1b:3f:44:a3:fd:2a:15:19:f1:67:16:cd:55:42:4c: f6:33:86:7f:42:ec:70:d5:15:9a:e2:a1:56:df:b5:37:66:3d: fe:65:8e:4b:45:0d:c9:bc:e7:96:31:dd:b7:e1:9c:e7:07:41: 6a:c5:7c:df:6c:22:b5:19:10:3c:b0:1b:7d:90:f3:b4:75:8d: 4b:ba:c4:7a:43:77:62:54:8e:08:52:29:ca:10:5a:8b:b0:9d: c8:d8:b4:eb:6c:de:de:22:50:c0:dd:1f:0f:9b:1b:2a:12:77: d1:f2:8f:31:62:ff:b4:27:5b:63:a9:42:9f:a3:81:5e:b3:17: 46:be:07:5f:b8:25:98:cd:03:fa:c4:bb:a9:42:4b:f4:20:94: 7d:63:bc:07:9a:e7:6b:48:81:5f:4e:c5:d1:15:38:51:e7:d4: 20:d7:44:ac:ff:60:bd:d4:e4:9d:6d:c9:d9:ec:ff:27:1a:86: e8:34:a4:c6:b6:96:2d:5a:41:6f:06:a0:c9:62:da:af:de:42: ce:6d:ad:e4:23:91:69:cd:a4:3a:03:15:56:b0:02:98:40:62: 9b:96:30:fa:1d:b6:e3:7c:bd:3d:fd:6a:dc:25:11:8a:f9:77: 39:f1:4f:c5:f9:88:d9:17:48:36:cc:97:3c:5e:95:6b:50:2c: 40:3d:32:bb -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUT6iut2FeRvcTUVipPJot5kV+mMcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI2MDkyNDExMzYzMloX DTI2MDkyNTEzNTAzMlowMzExMC8GA1UEAxMoQjdCMjI1NkVCMDBDODFCNTVGQTU0 NjVFOEE0MEUxMzAwRDA3QzZFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI743mqFbWDeH696gwYnUVX0aUveYSd7tg2WfvHQEzl+MRhv7Cvj7xaoayrj WYuL98zkCoTRQp5NgudOIr/m11KWgycsxe/W239qkF1rILtpeQFvsekiCCCIZDHs SUNu80R8sR5cImp8kmPvrar0OLrIbCCvOZ/ZSDrk00BvpSDTAWiBGV21LJMFRuE9 588xIBGSi969D3bOQkF91UePYU/Cz4Du5BPFT/+vWA7LZku3zCe9zJX4bGMVmmPI WhPkAqLTwAaEHSGvu/GX4q2k65tL9vQc3/pHMuyZWf28o2+K2UquEwLCxKUZP9qy XelWGSoKjQk7ZIH19uPcT/pkcEsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBS3siVu sAyBtV+lRl6KQOEwDQfG5DAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAHzw4Gz9Eo/0qFRnxZxbNVUJM9jOGf0LscNUVmuKhVt+1N2Y9 /mWOS0UNybznljHdt+Gc5wdBasV832witRkQPLAbfZDztHWNS7rEekN3YlSOCFIp yhBai7CdyNi062ze3iJQwN0fD5sbKhJ30fKPMWL/tCdbY6lCn6OBXrMXRr4HX7gl mM0D+sS7qUJL9CCUfWO8B5rna0iBX07F0RU4UefUINdErP9gvdTknW3J2ez/JxqG 6DSkxraWLVpBbwagyWLar95Czm2t5CORac2kOgMVVrACmEBim5Yw+h2243y9Pf1q 3CURivl3OfFPxfmI2RdINsyXPF6Va1AsQD0yuw== -----END CERTIFICATE-----Generated at Thu Sep 24 17:51:27 2026 by rpki-client