$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json) Hash identifier: HAKAU6GtkACuAQmJiberdTeo475mn5V4hxFX0JpswOE= Subject key identifier: 65:5C:59:FD:58:5F:EC:45:7C:54:EB:7B:BA:04:C0:B7:7D:F5:04:18 Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Certificate serial: 36C27D972B2A7AC72D3FA2D10F5D570715AF1DE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft Manifest number: 01D7 Signing time: Mon 20 Oct 2025 02:24:07 +0000 Manifest this update: Mon 20 Oct 2025 02:19:07 +0000 Manifest next update: Tue 21 Oct 2025 06:01:07 +0000 Files and hashes: 1: 3130332e3232332e3138342e302f32332d3234203d3e2039333034.roa (hash: HwU7tbEQ6vnFTdeo613VOopEUDCOQYuG2KP+TRqPIxM=) 2: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: D6vOXz1CCvV/55rUtBUMXaHl3aAg30R1q5COjo0NhcU=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 06:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c2:7d:97:2b:2a:7a:c7:2d:3f:a2:d1:0f:5d:57:07:15:af:1d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Validity Not Before: Oct 20 02:19:07 2025 GMT Not After : Oct 21 06:01:07 2025 GMT Subject: CN=655C59FD585FEC457C54EB7BBA04C0B77DF50418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:97:12:b5:34:af:f9:db:cb:a4:ad:8d:52: 8a:9e:ac:36:dd:19:36:51:22:3b:e3:8b:ea:c5:51: 8b:60:bc:83:43:60:f9:70:22:bd:df:13:8c:dd:52: 9e:17:6d:c9:89:05:63:c5:98:35:9f:9b:35:6f:35: 17:b8:5c:e5:4e:72:40:ef:d1:67:5e:7e:01:d2:1b: ee:d2:b8:db:c5:d1:df:30:f4:f9:fb:70:8c:b2:1e: 93:02:df:95:cb:e8:1b:17:bc:ab:c1:7e:4a:d9:e2: 7f:d8:cf:8a:78:c5:ed:63:e7:8b:c5:17:b5:7d:9f: 0a:e9:3e:b8:d2:bd:ad:ae:12:df:e3:51:7e:b8:4b: 54:49:6e:e5:c3:ee:f6:c4:e7:61:ee:c8:1c:f9:7e: bd:96:aa:cc:19:91:99:b8:ec:43:f0:7c:b5:60:50: df:ee:0b:cd:9f:1e:77:e7:52:7f:3a:fc:22:d7:08: 7c:4c:82:20:24:12:31:d0:a5:bc:53:c9:e2:fe:7e: 47:ad:30:95:6d:2a:47:a6:6e:a6:00:18:fd:4e:6e: 0b:b6:60:e4:cc:72:0e:9d:c9:03:61:87:24:a2:5e: 5c:c6:2d:93:55:93:13:f6:28:6b:db:04:11:12:f7: 06:c7:31:8c:0d:01:3d:19:a3:c0:7f:d3:94:9c:fa: f1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5C:59:FD:58:5F:EC:45:7C:54:EB:7B:BA:04:C0:B7:7D:F5:04:18 X509v3 Authority Key Identifier: keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:84:ae:c6:82:7c:3d:31:a8:92:b4:87:22:d2:18:dd:50:91: 32:bb:f6:7f:8a:5b:3c:fe:68:f3:96:15:a0:45:fe:65:84:97: 1e:d1:32:e5:e0:0b:0b:ce:10:1d:17:06:18:3c:2d:b1:c3:fb: ec:b8:4b:52:1e:de:e8:e0:fa:9a:34:de:29:95:ad:ec:c9:22: fa:46:60:03:90:9f:52:51:be:ae:d1:82:03:a9:68:c2:db:2d: ce:21:46:29:7a:e1:e3:d9:b9:58:e8:81:72:29:76:69:d5:c5: fe:ee:0b:13:9a:29:cb:b5:f6:41:1c:e3:7d:bd:eb:b1:e6:ff: bf:da:4a:bd:42:33:b5:62:c0:23:5b:e5:27:e5:9b:4f:22:6a: 4c:6e:89:75:a0:a1:69:00:fa:3d:84:27:f6:d2:d3:bf:43:2b: 51:95:df:10:5c:6b:bb:30:5e:82:f5:6c:a9:ca:ad:88:df:b2: 60:fc:e5:67:d5:10:46:97:51:15:66:8e:08:5e:12:bf:b8:59: eb:e1:7d:4c:63:2a:5f:27:4d:dc:f7:45:7e:35:0e:db:7e:1b: db:c7:bd:3a:7b:de:51:91:76:c6:eb:e7:33:81:69:65:48:17: 29:c5:b9:c3:74:90:6a:67:bf:17:fb:21:1a:4e:c7:46:a4:73: d6:22:2e:34 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNsJ9lysqesctP6LRD11XBxWvHeAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDhCRjcwMDAwMTEwLwYDVQQFEygzMzlGRkE5MzM1 N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwMB4XDTI1MTAyMDAyMTkwN1oX DTI1MTAyMTA2MDEwN1owMzExMC8GA1UEAxMoNjU1QzU5RkQ1ODVGRUM0NTdDNTRF QjdCQkEwNEMwQjc3REY1MDQxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPZlxK1NK/528ukrY1Sip6sNt0ZNlEiO+OL6sVRi2C8g0Ng+XAivd8TjN1S nhdtyYkFY8WYNZ+bNW81F7hc5U5yQO/RZ15+AdIb7tK428XR3zD0+ftwjLIekwLf lcvoGxe8q8F+Stnif9jPinjF7WPni8UXtX2fCuk+uNK9ra4S3+NRfrhLVElu5cPu 9sTnYe7IHPl+vZaqzBmRmbjsQ/B8tWBQ3+4LzZ8ed+dSfzr8ItcIfEyCICQSMdCl vFPJ4v5+R60wlW0qR6ZupgAY/U5uC7Zg5MxyDp3JA2GHJKJeXMYtk1WTE/Yoa9sE ERL3BscxjA0BPRmjwH/TlJz68Z8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBRlXFn9 WF/sRXxU63u6BMC3ffUEGDAfBgNVHSMEGDAWgBQzn/qTNX+vJhQoKfq/Ilrq5Bc3 8DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJGNzAwMDAvMC8zMzlGRkE5 MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NNV82a3pWX3J5 WVVLQ242dnlKYTZ1UVhOX0EuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJG NzAwMDAvMC8zMzlGRkE5MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0Yw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAV4SuxoJ8PTGokrSHItIY3VCRMrv2f4pbPP5o85YVoEX+ZYSX HtEy5eALC84QHRcGGDwtscP77LhLUh7e6OD6mjTeKZWt7Mki+kZgA5CfUlG+rtGC A6lowtstziFGKXrh49m5WOiBcil2adXF/u4LE5opy7X2QRzjfb3rseb/v9pKvUIz tWLAI1vlJ+WbTyJqTG6JdaChaQD6PYQn9tLTv0MrUZXfEFxruzBegvVsqcqtiN+y YPzlZ9UQRpdRFWaOCF4Sv7hZ6+F9TGMqXydN3PdFfjUO234b28e9OnveUZF2xuvn M4FpZUgXKcW5w3SQame/F/shGk7HRqRz1iIuNA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:58:25 2025 by rpki-client