$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json) Hash identifier: AdBwGUWzi9AvJVV0DZDxSMxw0fccrBgLC0PBdnsv5aI= Subject key identifier: 90:4D:9A:BE:4C:FA:37:D9:5F:F7:B7:CF:DA:F7:63:AD:3B:DF:A4:87 Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Certificate serial: 2EE34C4E683CEABD1D084DC96B361206B94D5801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft Manifest number: 018A Signing time: Sat 23 Aug 2025 12:05:02 +0000 Manifest this update: Sat 23 Aug 2025 12:00:02 +0000 Manifest next update: Sun 24 Aug 2025 15:58:02 +0000 Files and hashes: 1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: IJ76ZVLdK6aa6PLEw22KPuzFA5k2Bg6wjWrm+m991hs=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e3:4c:4e:68:3c:ea:bd:1d:08:4d:c9:6b:36:12:06:b9:4d:58:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Validity Not Before: Aug 23 12:00:02 2025 GMT Not After : Aug 24 15:58:02 2025 GMT Subject: CN=904D9ABE4CFA37D95FF7B7CFDAF763AD3BDFA487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:92:ee:a8:f3:5c:fe:f4:41:08:55:b5:2b:dd: cd:db:73:7a:34:29:bc:89:16:c4:a6:62:17:0e:d9: 3d:35:32:7c:cc:58:be:4a:7c:a9:09:e7:46:73:a2: d9:22:56:4d:c9:29:b4:79:81:6c:a0:bf:e3:26:38: 05:8e:c3:c5:76:00:67:8d:d8:4c:db:73:fd:ae:f9: fb:b0:04:19:23:80:77:09:9d:f2:d9:cd:fe:97:a2: 25:58:e3:15:35:85:6d:2f:39:d1:cd:06:72:15:42: 7a:6c:5c:01:7b:fc:a3:29:9b:22:4c:5a:d1:fb:6b: c8:9c:30:9a:1a:7d:25:62:69:2d:66:62:79:67:46: dd:18:e1:90:1c:20:91:21:13:83:b5:4f:22:aa:0d: 79:e6:98:b1:95:18:02:af:1a:8b:ab:78:ec:6c:47: 18:fa:71:81:1f:7c:53:86:af:a6:47:4d:0f:2e:4d: 3a:34:10:28:f8:0e:c2:b5:88:7b:3e:1e:65:26:41: 7c:c9:b6:60:d4:46:60:b6:6c:0b:33:a6:76:ea:59: 46:df:60:52:b2:6b:3c:db:d4:ad:ba:e1:bc:7d:a7: 09:b8:c4:b7:9d:d7:41:bc:86:11:21:61:88:b9:95: bc:65:9e:46:33:9a:48:1f:09:60:a2:7b:25:8c:eb: 15:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4D:9A:BE:4C:FA:37:D9:5F:F7:B7:CF:DA:F7:63:AD:3B:DF:A4:87 X509v3 Authority Key Identifier: keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:b0:d0:13:13:22:b7:e2:de:e3:49:de:50:0f:8a:e1:a4:73: 51:93:43:6f:2a:e5:e7:ea:7f:cd:ff:63:82:ad:d9:d4:17:d8: 2c:51:47:6c:65:46:ee:4f:08:59:02:83:47:57:15:af:40:23: 10:86:c5:5b:df:ed:ba:b8:f6:a0:b4:19:7d:1d:b1:06:38:b0: 6a:a3:e6:9f:d0:f4:ab:79:89:8d:58:49:3b:1c:52:9b:9a:c8: 29:84:bc:2d:04:0a:33:85:35:b1:57:24:27:8c:00:53:95:d4: 01:77:96:7c:4d:27:75:ab:3e:d3:bc:0b:09:f7:bd:2f:d7:2e: 3a:93:f6:61:54:84:f2:b2:9d:07:ab:2d:54:ae:12:05:c0:07: 15:87:f7:0b:e2:b4:cc:ab:86:39:5d:1b:bf:c8:4d:33:32:e3: fe:83:36:f0:78:4d:b4:48:53:51:4c:c2:96:ae:25:cf:79:e7: b5:dc:00:c3:cd:a0:3f:7d:5e:c6:42:2e:76:91:78:61:ce:02: 58:61:af:e0:72:6a:68:09:2f:22:b3:13:bf:32:99:9c:45:1a: 1f:12:c0:17:db:67:31:e8:3c:89:7d:9d:29:78:b9:2b:e2:c4: db:2f:87:e2:e3:65:9b:6c:fe:03:20:ef:ea:37:ee:45:c6:91: c3:51:1b:23 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULuNMTmg86r0dCE3JazYSBrlNWAEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDhCRjcwMDAwMTEwLwYDVQQFEygzMzlGRkE5MzM1 N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwMB4XDTI1MDgyMzEyMDAwMloX DTI1MDgyNDE1NTgwMlowMzExMC8GA1UEAxMoOTA0RDlBQkU0Q0ZBMzdEOTVGRjdC N0NGREFGNzYzQUQzQkRGQTQ4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO+S7qjzXP70QQhVtSvdzdtzejQpvIkWxKZiFw7ZPTUyfMxYvkp8qQnnRnOi 2SJWTckptHmBbKC/4yY4BY7DxXYAZ43YTNtz/a75+7AEGSOAdwmd8tnN/peiJVjj FTWFbS850c0GchVCemxcAXv8oymbIkxa0ftryJwwmhp9JWJpLWZieWdG3RjhkBwg kSETg7VPIqoNeeaYsZUYAq8ai6t47GxHGPpxgR98U4avpkdNDy5NOjQQKPgOwrWI ez4eZSZBfMm2YNRGYLZsCzOmdupZRt9gUrJrPNvUrbrhvH2nCbjEt53XQbyGESFh iLmVvGWeRjOaSB8JYKJ7JYzrFZkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSQTZq+ TPo32V/3t8/a92OtO9+khzAfBgNVHSMEGDAWgBQzn/qTNX+vJhQoKfq/Ilrq5Bc3 8DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJGNzAwMDAvMC8zMzlGRkE5 MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NNV82a3pWX3J5 WVVLQ242dnlKYTZ1UVhOX0EuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJG NzAwMDAvMC8zMzlGRkE5MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0Yw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAq7DQExMit+Le40neUA+K4aRzUZNDbyrl5+p/zf9jgq3Z1BfY LFFHbGVG7k8IWQKDR1cVr0AjEIbFW9/turj2oLQZfR2xBjiwaqPmn9D0q3mJjVhJ OxxSm5rIKYS8LQQKM4U1sVckJ4wAU5XUAXeWfE0ndas+07wLCfe9L9cuOpP2YVSE 8rKdB6stVK4SBcAHFYf3C+K0zKuGOV0bv8hNMzLj/oM28HhNtEhTUUzClq4lz3nn tdwAw82gP31exkIudpF4Yc4CWGGv4HJqaAkvIrMTvzKZnEUaHxLAF9tnMeg8iX2d KXi5K+LE2y+H4uNlm2z+AyDv6jfuRcaRw1EbIw== -----END CERTIFICATE-----Generated at Sun Aug 24 00:11:10 2025 by rpki-client