$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json) Hash identifier: J3C55WrN9A9+srs/XpsEfDtB+6uDXyyHEGkoWr0wXaQ= Subject key identifier: 58:72:FE:C5:38:E9:22:FF:A1:C7:0D:D4:F2:DF:36:1C:36:E6:B1:81 Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 40F0EAEA063CEFF7B4598609DEE8089CCF63D62A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft Manifest number: 03FC Signing time: Thu 26 Mar 2026 06:01:13 +0000 Manifest this update: Thu 26 Mar 2026 05:56:13 +0000 Manifest next update: Fri 27 Mar 2026 07:28:13 +0000 Files and hashes: 1: 4B1987D5160068092602529871C93EA320045A75.crl (hash: bnT5273HrTUnVVNy4RtnmvxwvuRqQEe3yuciBt1Cjr4=) 2: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=) 3: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=) 4: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 07:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f0:ea:ea:06:3c:ef:f7:b4:59:86:09:de:e8:08:9c:cf:63:d6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: Mar 26 05:56:13 2026 GMT Not After : Mar 27 07:28:13 2026 GMT Subject: CN=5872FEC538E922FFA1C70DD4F2DF361C36E6B181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9d:d7:55:8c:fe:8a:97:29:6b:51:f3:04:12: dd:07:21:98:42:ac:9f:27:07:e0:09:61:9f:90:3e: 61:13:9d:95:1e:94:b4:f1:34:5e:d1:e0:66:16:b3: 03:7c:d6:07:d5:ba:7f:a1:bd:36:c4:b3:03:29:d2: 6e:53:70:13:c0:87:83:3c:ea:a2:6f:20:5b:de:6a: 5c:e1:c0:c5:37:65:f5:07:10:7b:e4:f7:6f:79:19: 9c:ac:d8:b4:06:a0:b2:84:35:99:71:85:89:2a:fe: 92:7c:b1:88:0e:f1:85:ac:22:ce:47:31:b1:17:65: 9e:45:82:a9:6d:61:ec:b0:e5:c4:22:39:30:d4:4c: 95:3a:80:05:3a:49:87:f0:a6:de:ea:30:ca:b6:5a: ea:ef:af:68:46:a0:f4:24:fc:bb:09:a3:be:0f:5e: 6f:97:9f:7c:3e:44:04:ab:fb:e8:22:cb:5f:24:37: 87:99:cb:2f:19:89:07:fd:4f:b4:b9:02:c3:34:d0: 2e:e2:9a:f5:3b:bf:c7:db:a4:13:a1:4a:2a:46:2a: 38:e0:81:db:d7:3f:b6:93:21:dc:a1:d0:b8:bb:a5: ad:6b:b6:eb:26:45:c1:00:e2:97:74:bf:94:fa:fd: c5:c5:5a:80:9c:40:ee:ea:57:b1:d1:30:ac:b4:85: b9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:72:FE:C5:38:E9:22:FF:A1:C7:0D:D4:F2:DF:36:1C:36:E6:B1:81 X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d7:de:ef:a3:24:8b:57:6a:8f:c0:34:eb:60:3f:4d:7b:fd: f9:70:4c:28:f7:c9:8a:c9:e0:3e:7a:1d:01:7f:c9:fb:39:2b: f3:82:fc:b6:83:67:62:81:84:f9:11:e2:3e:53:4c:6c:f4:8a: ed:57:9c:ca:f7:31:1a:a2:d7:f7:d9:3c:ab:80:3d:c4:98:1d: c7:d9:6f:01:8a:04:bb:27:dc:5b:2c:4f:04:38:59:d5:8d:61: e4:93:f3:0f:11:4c:f0:e6:45:de:e1:de:ca:4f:c2:9f:ee:a6: 77:f8:5e:74:6b:92:8a:81:45:bd:4e:6d:58:e4:a1:ae:42:0f: 1c:ee:b2:2d:30:9b:e9:a6:cb:8c:7e:be:03:d1:01:53:67:e5: e2:d0:d2:45:c6:4a:4b:9d:f1:9d:82:74:44:66:64:34:59:06: 80:08:64:62:c8:01:f6:53:61:06:1a:3b:cb:8a:14:e2:bb:27: 71:d0:5d:b1:3d:6e:b6:a6:46:c5:a8:3b:f4:d8:2e:e9:6f:43: de:6d:0f:d2:6f:0b:da:fc:31:4d:34:4d:fd:f9:0d:0e:ca:4a: a5:4d:af:97:02:b7:67:0e:55:10:5f:b2:c0:39:bb:08:2f:0b: 87:cf:8f:0d:90:2c:5d:31:1a:41:6d:df:66:b5:f6:0d:ef:ff: bc:ab:0d:ad -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQPDq6gY87/e0WYYJ3ugInM9j1iowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI2MDMyNjA1NTYxM1oX DTI2MDMyNzA3MjgxM1owMzExMC8GA1UEAxMoNTg3MkZFQzUzOEU5MjJGRkExQzcw REQ0RjJERjM2MUMzNkU2QjE4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMyd11WM/oqXKWtR8wQS3QchmEKsnycH4Alhn5A+YROdlR6UtPE0XtHgZhaz A3zWB9W6f6G9NsSzAynSblNwE8CHgzzqom8gW95qXOHAxTdl9QcQe+T3b3kZnKzY tAagsoQ1mXGFiSr+knyxiA7xhawizkcxsRdlnkWCqW1h7LDlxCI5MNRMlTqABTpJ h/Cm3uowyrZa6u+vaEag9CT8uwmjvg9eb5effD5EBKv76CLLXyQ3h5nLLxmJB/1P tLkCwzTQLuKa9Tu/x9ukE6FKKkYqOOCB29c/tpMh3KHQuLulrWu26yZFwQDil3S/ lPr9xcVagJxA7upXsdEwrLSFuZUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRYcv7F OOki/6HHDdTy3zYcNuaxgTAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEARtfe76Mki1dqj8A062A/TXv9+XBMKPfJisngPnodAX/J+zkr 84L8toNnYoGE+RHiPlNMbPSK7VecyvcxGqLX99k8q4A9xJgdx9lvAYoEuyfcWyxP BDhZ1Y1h5JPzDxFM8OZF3uHeyk/Cn+6md/hedGuSioFFvU5tWOShrkIPHO6yLTCb 6abLjH6+A9EBU2fl4tDSRcZKS53xnYJ0RGZkNFkGgAhkYsgB9lNhBho7y4oU4rsn cdBdsT1utqZGxag79Ngu6W9D3m0P0m8L2vwxTTRN/fkNDspKpU2vlwK3Zw5VEF+y wDm7CC8Lh8+PDZAsXTEaQW3fZrX2De//vKsNrQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:14 2026 by rpki-client