$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json) Hash identifier: OAf3qHJcOxTmEbt6d/TZEPWifvcFYMTY0u3AuzdTe2M= Subject key identifier: 00:24:4C:B0:8F:4C:05:26:1E:E6:48:4A:7D:C2:28:2F:88:45:FC:EA Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 780A1C6BD9767EEB6B9E4DEAADB6D1C472EFD532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft Manifest number: 04A3 Signing time: Thu 23 Jul 2026 08:39:01 +0000 Manifest this update: Thu 23 Jul 2026 08:34:01 +0000 Manifest next update: Fri 24 Jul 2026 09:52:01 +0000 Files and hashes: 1: 4B1987D5160068092602529871C93EA320045A75.crl (hash: c5NkQ2OHmp+tprJkhq9Y8yLatV6tR2dRjJ1GJMqNuWI=) 2: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=) 3: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=) 4: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:0a:1c:6b:d9:76:7e:eb:6b:9e:4d:ea:ad:b6:d1:c4:72:ef:d5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: Jul 23 08:34:01 2026 GMT Not After : Jul 24 09:52:01 2026 GMT Subject: CN=00244CB08F4C05261EE6484A7DC2282F8845FCEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f6:a1:55:a0:ec:5f:b6:f7:4c:8d:44:a0:2a: b5:55:9a:94:56:f0:a3:de:65:38:68:09:f6:be:4d: 37:4b:a1:62:18:e4:99:7e:cf:c4:00:d5:3e:19:4e: d5:78:1d:40:23:69:93:ed:06:0b:bf:5d:15:26:9a: f1:65:60:96:e8:07:07:ea:3b:e8:cd:aa:a0:19:14: 78:a3:54:de:4d:4b:b4:b3:45:8e:86:db:32:49:61: 59:1f:fa:d1:fd:92:10:1d:a3:dc:ea:df:01:fd:19: 39:29:40:38:6d:0e:ee:63:ef:55:a3:af:20:d6:f6: 71:0d:8f:d9:da:db:77:a1:d5:ba:8c:3f:1c:ac:da: 96:a3:d9:dc:3b:58:8e:bb:90:89:80:90:3a:c6:dd: 08:99:88:73:10:44:1f:73:f0:cd:7a:a4:f0:ca:5c: eb:65:92:ac:46:8e:d0:8a:0a:c9:25:3d:31:a0:72: 43:f8:a4:02:d4:09:ff:50:12:ba:77:b3:5b:ba:a3: 0c:7c:31:70:f8:f3:a5:6c:26:4f:eb:db:fa:a5:43: 9d:08:bc:66:d9:2d:27:9c:70:48:d2:b5:d8:69:b0: 28:09:cd:c8:ab:81:4c:32:d2:e1:8e:d0:90:30:4a: 9e:e3:ff:87:61:17:43:a0:ac:97:5b:6f:ec:0b:dc: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:24:4C:B0:8F:4C:05:26:1E:E6:48:4A:7D:C2:28:2F:88:45:FC:EA X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:69:dd:21:a3:be:ef:38:33:28:8c:21:c1:25:17:50:85:4e: bd:d1:56:57:5c:3c:a1:0d:d3:ce:fd:63:1a:5c:cb:9d:d1:2b: 66:ea:8d:c2:be:89:ad:d9:6a:23:14:c3:b6:db:54:8e:1c:3d: de:8c:72:06:06:c7:02:82:0e:e1:8e:bd:54:6b:57:c5:c5:73: 9a:45:d0:2f:11:7b:36:71:6c:27:39:8e:87:39:a6:6e:73:87: b7:cf:a0:38:78:2f:96:8d:0d:fb:bb:17:68:9a:b1:1a:9a:0b: 32:58:a6:13:ef:0d:9b:39:4c:53:e3:3e:ab:3c:cc:1b:e8:06: 14:72:6c:17:fb:16:7f:15:a6:08:04:bd:46:eb:41:af:55:6e: 30:3d:da:9e:dc:b0:e2:64:d4:4e:9c:49:89:13:bc:56:dd:2e: 65:7d:ae:c9:c3:a6:1e:a6:35:b0:c1:5c:05:69:a4:a3:6f:dd: 3d:a6:23:41:f2:ab:2f:40:22:56:62:62:2c:d6:fc:14:cd:59: 18:37:35:e2:47:49:36:a0:da:61:3a:e6:5b:d9:49:41:78:40: 65:49:ed:62:5d:13:b5:e6:a4:44:7d:33:da:d7:b7:72:d6:c4: 22:45:0c:59:cd:c1:35:06:00:ff:1a:86:38:e3:f0:6c:01:2e: 6b:61:bc:70 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUeAoca9l2futrnk3qrbbRxHLv1TIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI2MDcyMzA4MzQwMVoX DTI2MDcyNDA5NTIwMVowMzExMC8GA1UEAxMoMDAyNDRDQjA4RjRDMDUyNjFFRTY0 ODRBN0RDMjI4MkY4ODQ1RkNFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPL2oVWg7F+290yNRKAqtVWalFbwo95lOGgJ9r5NN0uhYhjkmX7PxADVPhlO 1XgdQCNpk+0GC79dFSaa8WVglugHB+o76M2qoBkUeKNU3k1LtLNFjobbMklhWR/6 0f2SEB2j3OrfAf0ZOSlAOG0O7mPvVaOvINb2cQ2P2drbd6HVuow/HKzalqPZ3DtY jruQiYCQOsbdCJmIcxBEH3PwzXqk8Mpc62WSrEaO0IoKySU9MaByQ/ikAtQJ/1AS unezW7qjDHwxcPjzpWwmT+vb+qVDnQi8ZtktJ5xwSNK12GmwKAnNyKuBTDLS4Y7Q kDBKnuP/h2EXQ6Csl1tv7AvcIQkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQAJEyw j0wFJh7mSEp9wigviEX86jAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAm2ndIaO+7zgzKIwhwSUXUIVOvdFWV1w8oQ3Tzv1jGlzLndEr ZuqNwr6JrdlqIxTDtttUjhw93oxyBgbHAoIO4Y69VGtXxcVzmkXQLxF7NnFsJzmO hzmmbnOHt8+gOHgvlo0N+7sXaJqxGpoLMlimE+8NmzlMU+M+qzzMG+gGFHJsF/sW fxWmCAS9RutBr1VuMD3antyw4mTUTpxJiRO8Vt0uZX2uycOmHqY1sMFcBWmko2/d PaYjQfKrL0AiVmJiLNb8FM1ZGDc14kdJNqDaYTrmW9lJQXhAZUntYl0TteakRH0z 2te3ctbEIkUMWc3BNQYA/xqGOOPwbAEua2G8cA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:26:51 2026 by rpki-client