$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json) Hash identifier: +RzO0oOtxC+lpzyKqFCed4taZQnBhtUg/qKIsex4w3E= Subject key identifier: 8E:5A:01:74:4C:92:72:2A:83:5B:65:E3:4B:D1:A0:81:B2:25:4C:F4 Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Certificate serial: 3A9E5A0B4929F4D11F64638CEB5F8891F7F902E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft Manifest number: 02AA Signing time: Thu 26 Mar 2026 05:02:50 +0000 Manifest this update: Thu 26 Mar 2026 04:57:50 +0000 Manifest next update: Fri 27 Mar 2026 06:13:50 +0000 Files and hashes: 1: 3130332e3232332e3138342e302f32332d3234203d3e20313335303237.roa (hash: g8Tw9Ss3ogaL2/E788moJ1DCuoJI7+nYIfSvQGup0po=) 2: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: adSZVsDiVn/zeMoTnyTP+oWNjkY1LkDfR7f6RMVO/Ck=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 06:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:9e:5a:0b:49:29:f4:d1:1f:64:63:8c:eb:5f:88:91:f7:f9:02:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Validity Not Before: Mar 26 04:57:50 2026 GMT Not After : Mar 27 06:13:50 2026 GMT Subject: CN=8E5A01744C92722A835B65E34BD1A081B2254CF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:df:7a:a2:9c:f5:99:1c:85:da:da:3f:19:ad: 7d:f5:47:b0:6b:43:09:a3:7d:d4:29:ed:cc:77:a9: fe:8f:b6:39:41:d8:40:2f:b4:08:3c:e6:f8:f4:33: c4:85:e8:48:2c:c6:fc:60:e8:93:e8:9f:a7:34:69: 7a:e1:1c:bd:5a:57:f5:22:e4:a2:94:56:a4:6b:43: 46:a1:a7:00:fb:b4:60:0f:3a:63:5c:1b:90:93:36: 85:a6:57:26:cb:36:ea:b8:70:02:15:1c:16:18:27: 2d:db:7b:cc:1d:e2:74:34:04:1f:d9:b8:6d:22:24: 72:4a:7f:30:d2:35:4d:19:e2:12:e4:97:f8:d2:17: ac:3a:ed:2b:27:88:d4:3a:52:82:a1:b8:35:42:16: 13:3f:20:b6:44:d4:4d:a0:4e:e2:26:36:fc:51:d8: 21:6c:18:fc:11:18:2c:37:9b:0b:55:c5:cf:d2:40: 8a:41:6b:ff:eb:de:e8:80:7b:df:94:85:db:04:af: b4:2f:cb:1b:2e:5c:a3:4d:83:a3:bd:ba:8b:70:63: fc:64:77:53:7b:8e:53:44:15:6a:b3:e3:a5:89:00: c4:82:67:d9:47:2b:e5:fc:41:2d:b2:8b:6b:83:bf: 5e:ef:68:6b:de:23:23:ad:01:8b:55:d6:ce:73:a8: 5d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5A:01:74:4C:92:72:2A:83:5B:65:E3:4B:D1:A0:81:B2:25:4C:F4 X509v3 Authority Key Identifier: keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:2f:d2:a2:47:85:61:62:8d:72:2f:bb:a0:1b:d7:6d:83:9d: 1c:58:1b:be:a6:5f:98:da:cb:1d:db:b4:2a:77:9a:12:69:ab: 53:8b:ed:31:ea:d3:51:ca:1a:97:3f:d7:8f:b1:45:ca:aa:8a: c7:7e:66:4b:2b:bc:49:88:8e:09:ea:94:7b:ae:f0:93:74:4b: 34:37:64:6e:e0:84:3a:e8:3d:2a:0d:1b:f0:0e:82:c5:a5:22: 60:a3:93:0e:c0:5d:e7:f8:ce:1b:04:5c:56:ac:78:f0:3c:c3: bc:91:e2:06:10:01:a4:60:3b:8a:f3:d0:19:dd:1d:a5:3e:9f: 5e:e7:ca:3a:c2:66:20:93:d5:8c:27:14:45:3f:10:02:a9:d1: 1d:ae:f6:74:db:e0:cf:9a:0c:09:c9:26:cc:91:4e:3e:58:a5: e4:5c:6e:62:67:ea:7d:a2:2c:3b:e1:3b:e7:0f:63:4a:6f:9d: f3:b8:f1:9c:5c:83:a8:42:a8:cf:7d:d2:87:ae:42:6f:a3:06: 07:bc:de:63:44:ec:d7:8e:c6:4a:93:9e:bd:3b:6b:9d:61:5a: fd:ce:c1:84:3a:02:35:8a:a6:58:00:58:52:c5:2e:64:a5:5c: f1:d6:63:35:43:78:f3:ec:4d:0c:c8:51:a9:a0:4c:03:38:42: 91:36:93:b2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOp5aC0kp9NEfZGOM61+Ikff5AuMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDhCRjcwMDAwMTEwLwYDVQQFEygzMzlGRkE5MzM1 N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwMB4XDTI2MDMyNjA0NTc1MFoX DTI2MDMyNzA2MTM1MFowMzExMC8GA1UEAxMoOEU1QTAxNzQ0QzkyNzIyQTgzNUI2 NUUzNEJEMUEwODFCMjI1NENGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPfeqKc9ZkchdraPxmtffVHsGtDCaN91CntzHep/o+2OUHYQC+0CDzm+PQz xIXoSCzG/GDok+ifpzRpeuEcvVpX9SLkopRWpGtDRqGnAPu0YA86Y1wbkJM2haZX Jss26rhwAhUcFhgnLdt7zB3idDQEH9m4bSIkckp/MNI1TRniEuSX+NIXrDrtKyeI 1DpSgqG4NUIWEz8gtkTUTaBO4iY2/FHYIWwY/BEYLDebC1XFz9JAikFr/+ve6IB7 35SF2wSvtC/LGy5co02Do726i3Bj/GR3U3uOU0QVarPjpYkAxIJn2Ucr5fxBLbKL a4O/Xu9oa94jI60Bi1XWznOoXakCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSOWgF0 TJJyKoNbZeNL0aCBsiVM9DAfBgNVHSMEGDAWgBQzn/qTNX+vJhQoKfq/Ilrq5Bc3 8DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJGNzAwMDAvMC8zMzlGRkE5 MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NNV82a3pWX3J5 WVVLQ242dnlKYTZ1UVhOX0EuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJG NzAwMDAvMC8zMzlGRkE5MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0Yw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAti/SokeFYWKNci+7oBvXbYOdHFgbvqZfmNrLHdu0KneaEmmr U4vtMerTUcoalz/Xj7FFyqqKx35mSyu8SYiOCeqUe67wk3RLNDdkbuCEOug9Kg0b 8A6CxaUiYKOTDsBd5/jOGwRcVqx48DzDvJHiBhABpGA7ivPQGd0dpT6fXufKOsJm IJPVjCcURT8QAqnRHa72dNvgz5oMCckmzJFOPlil5FxuYmfqfaIsO+E75w9jSm+d 87jxnFyDqEKoz33Sh65Cb6MGB7zeY0Ts147GSpOevTtrnWFa/c7BhDoCNYqmWABY UsUuZKVc8dZjNUN48+xNDMhRqaBMAzhCkTaTsg== -----END CERTIFICATE-----Generated at Thu Mar 26 13:20:04 2026 by rpki-client