$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json) Hash identifier: Lvfh8qiq7pnI7NomEac/92UaM6yPb5mGN6zs7XCMQAM= Subject key identifier: 01:33:32:BC:B6:45:EC:C4:D8:92:B0:22:52:85:EE:C7:44:31:E5:2F Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 6FE611F8F74FA5F2DB678DCEE7060582C2582386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft Manifest number: 043D Signing time: Tue 12 May 2026 15:57:59 +0000 Manifest this update: Tue 12 May 2026 15:52:59 +0000 Manifest next update: Wed 13 May 2026 18:10:59 +0000 Files and hashes: 1: 4B1987D5160068092602529871C93EA320045A75.crl (hash: H6ZfQXyIYxLer4IYW5PRw3RqK+DbEjLOmY7C7o5vlr4=) 2: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=) 3: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=) 4: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e6:11:f8:f7:4f:a5:f2:db:67:8d:ce:e7:06:05:82:c2:58:23:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: May 12 15:52:59 2026 GMT Not After : May 13 18:10:59 2026 GMT Subject: CN=013332BCB645ECC4D892B0225285EEC74431E52F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8c:bd:f2:d1:2f:76:a1:eb:5d:a2:88:83:f4: 46:cd:84:9e:e1:ea:62:b4:5a:7f:a5:0d:08:75:4a: 9d:6c:54:f0:a0:13:9d:a3:03:6d:32:f3:59:db:74: d7:49:7b:d5:76:91:ed:9c:d3:51:28:cf:14:fe:9e: 2e:49:b3:55:52:be:c0:8f:22:a4:4b:b5:56:96:12: fc:85:aa:f4:3f:06:86:35:f4:de:b3:69:e2:c5:27: 8b:c1:cb:65:a4:36:ec:53:34:37:8b:eb:8e:d3:22: db:07:5e:1f:1a:21:6d:17:20:6e:90:58:48:09:79: 19:0c:8e:81:28:36:a2:27:dc:d2:e0:24:fd:e4:16: ed:10:93:a9:a2:4d:03:5a:75:40:50:59:76:7b:0b: b2:35:57:e4:6e:17:34:7e:66:de:4a:ff:b3:4d:7c: 27:43:38:87:8a:97:6e:bb:3c:a6:b7:cf:17:c4:a5: 64:da:2f:3b:44:6b:a1:e1:1f:0c:77:29:8c:60:10: 95:16:cd:d7:46:9f:bd:1a:ce:bc:2b:4e:fb:a3:e9: c6:76:42:4b:b3:a6:0e:91:94:f2:16:a3:08:72:e5: 4a:d6:43:8a:15:0a:83:68:21:50:8d:18:06:3d:ed: b9:04:ef:8f:ba:99:66:f0:78:0d:4b:ce:e7:48:6e: 48:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:33:32:BC:B6:45:EC:C4:D8:92:B0:22:52:85:EE:C7:44:31:E5:2F X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2e:2e:21:e2:04:06:8a:b1:5b:02:c5:1b:d9:79:42:ff:1b: e5:da:0e:c3:77:9c:64:77:69:bc:f4:4c:3a:bf:55:d1:9d:a9: 0d:a2:71:95:ee:76:22:c6:39:bb:ff:63:7a:57:08:f0:d3:de: 6e:55:82:42:14:87:d6:34:b5:07:d7:52:14:18:30:fc:77:9d: 34:8d:4b:83:2c:dc:5f:22:3d:05:ac:63:98:91:2d:c7:ed:67: c0:be:7f:07:19:85:26:7b:bb:40:f5:96:cd:4f:31:3c:9e:76: 85:71:a6:1c:9c:70:7a:50:58:02:b9:13:12:b6:4d:37:0e:b3: c6:ad:39:ee:45:16:ac:bb:7f:43:f9:2a:95:b1:9e:ec:7a:41: e5:93:fd:9b:ee:57:4c:9b:42:ef:95:2a:5a:18:ac:29:fb:dc: fe:bb:69:56:47:a3:f6:6c:3c:89:80:03:bb:47:71:36:b1:dd: e6:0e:00:26:45:e3:f0:33:24:d3:a6:26:d6:04:58:9f:b4:ee: 06:b4:fc:f8:03:8e:18:7d:1d:b6:45:f1:9f:e6:60:95:69:cf: e2:19:fa:cd:a9:60:52:11:85:36:8f:48:4b:25:79:27:c1:fd: be:ea:86:7f:97:6f:4b:c5:6d:18:a9:ca:87:e2:31:29:0a:ef: a0:f2:82:0d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUb+YR+PdPpfLbZ43O5wYFgsJYI4YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI2MDUxMjE1NTI1OVoX DTI2MDUxMzE4MTA1OVowMzExMC8GA1UEAxMoMDEzMzMyQkNCNjQ1RUNDNEQ4OTJC MDIyNTI4NUVFQzc0NDMxRTUyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANiMvfLRL3ah612iiIP0Rs2EnuHqYrRaf6UNCHVKnWxU8KATnaMDbTLzWdt0 10l71XaR7ZzTUSjPFP6eLkmzVVK+wI8ipEu1VpYS/IWq9D8GhjX03rNp4sUni8HL ZaQ27FM0N4vrjtMi2wdeHxohbRcgbpBYSAl5GQyOgSg2oifc0uAk/eQW7RCTqaJN A1p1QFBZdnsLsjVX5G4XNH5m3kr/s018J0M4h4qXbrs8prfPF8SlZNovO0RroeEf DHcpjGAQlRbN10afvRrOvCtO+6PpxnZCS7OmDpGU8hajCHLlStZDihUKg2ghUI0Y Bj3tuQTvj7qZZvB4DUvO50huSC8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBQBMzK8 tkXsxNiSsCJShe7HRDHlLzAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAjS4uIeIEBoqxWwLFG9l5Qv8b5doOw3ecZHdpvPRMOr9V0Z2p DaJxle52IsY5u/9jelcI8NPeblWCQhSH1jS1B9dSFBgw/HedNI1LgyzcXyI9Baxj mJEtx+1nwL5/BxmFJnu7QPWWzU8xPJ52hXGmHJxwelBYArkTErZNNw6zxq057kUW rLt/Q/kqlbGe7HpB5ZP9m+5XTJtC75UqWhisKfvc/rtpVkej9mw8iYADu0dxNrHd 5g4AJkXj8DMk06Ym1gRYn7TuBrT8+AOOGH0dtkXxn+ZglWnP4hn6zalgUhGFNo9I SyV5J8H9vuqGf5dvS8VtGKnKh+IxKQrvoPKCDQ== -----END CERTIFICATE-----Generated at Wed May 13 09:08:20 2026 by rpki-client