$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json) Hash identifier: 56SSEU01iwmAJW5jq3A7Ob48gpO3o0+gJANCXXvCDe4= Subject key identifier: 23:EE:FB:36:87:FB:9C:B7:1C:DC:49:09:56:43:CD:31:C4:64:FD:B5 Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Certificate serial: 3AFF7C8B4E0753CAD46AAA8681F42AD2010CBC30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft Manifest number: 08D3 Signing time: Wed 25 Mar 2026 16:37:16 +0000 Manifest this update: Wed 25 Mar 2026 16:32:16 +0000 Manifest next update: Thu 26 Mar 2026 19:14:16 +0000 Files and hashes: 1: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=) 2: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=) 3: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=) 4: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: HTDlPgKcgjjPq1RKXTABAwJ8lV0AWwlFTSqfhQKzGww=) 5: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=) 6: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=) 7: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=) 8: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=) 9: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=) 10: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=) 11: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 19:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ff:7c:8b:4e:07:53:ca:d4:6a:aa:86:81:f4:2a:d2:01:0c:bc:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Validity Not Before: Mar 25 16:32:16 2026 GMT Not After : Mar 26 19:14:16 2026 GMT Subject: CN=23EEFB3687FB9CB71CDC49095643CD31C464FDB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:f8:56:4b:99:f4:52:e0:1f:79:80:01:ee: db:1c:a8:5b:8d:16:26:40:5f:db:c6:05:4f:8d:09: 3d:c5:e3:44:3f:07:e4:42:90:7d:f0:db:07:69:95: cd:98:7b:18:25:95:85:23:9b:d0:1b:ce:a4:6b:a5: 11:d0:ad:93:6b:c3:81:dc:f2:55:0a:c5:9a:05:0d: db:41:d9:d7:20:8f:5a:64:cc:09:a8:c2:03:68:e3: dd:8d:b4:64:98:77:5c:a5:04:70:92:4e:f7:62:07: 41:7e:f5:90:4f:5c:46:12:48:96:e0:59:2e:ed:f1: 95:6e:60:1d:14:c8:8a:6d:68:80:b8:ae:8a:6a:96: d9:79:24:9a:1c:69:c2:9e:56:82:81:42:77:f3:14: 06:30:34:a3:66:90:04:30:cc:f6:9a:8d:27:e8:94: 52:56:22:68:01:67:1a:d3:f0:7e:a9:76:c7:ac:df: b1:58:80:2c:2e:ac:88:4a:5f:65:0f:cb:f4:d9:6c: c0:b7:c3:57:7b:4e:b4:50:9b:15:8c:89:ff:92:59: 62:9a:d2:9b:20:69:2c:96:ef:98:c4:10:10:15:3b: d7:b4:81:a3:3c:89:07:5c:eb:90:35:18:2f:86:d8: 45:55:8e:91:7b:e7:1e:ff:14:54:02:bf:b9:92:de: c3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EE:FB:36:87:FB:9C:B7:1C:DC:49:09:56:43:CD:31:C4:64:FD:B5 X509v3 Authority Key Identifier: keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:48:ab:be:b9:e0:42:d4:90:df:ad:2d:b1:48:1b:4a:96:b5: 9e:5a:af:b5:b5:30:b6:88:94:6c:37:5f:38:95:a7:e1:e5:42: 11:cf:ba:2d:15:27:94:ec:b6:df:b9:3a:15:b6:cc:39:45:1a: 7b:14:d2:99:ef:f1:ac:a4:38:ac:f5:b0:64:d4:90:6b:d4:97: d6:45:ce:78:3b:45:46:53:72:16:2d:b0:f0:6c:b2:b4:8b:da: a0:e5:f2:cd:93:5f:58:cc:c1:13:ce:8e:64:df:7e:0e:12:8f: e5:49:8e:e5:42:43:49:b5:8e:0d:51:95:04:9f:20:30:55:a4: 28:81:52:b4:50:94:56:f1:dc:f5:f8:5a:c4:45:19:2d:be:21: 02:c9:c7:7a:9b:bf:25:0f:36:20:c4:55:5e:8e:a2:b5:7e:66: 72:fa:6b:c9:83:81:da:25:c2:1c:50:80:a3:66:8b:9e:4d:97: 9b:83:81:ad:a4:f7:d4:df:00:a2:33:9a:f7:d5:11:86:5d:13: fc:0f:11:a5:a7:c7:03:b3:ce:9b:38:5a:c4:9f:18:e0:a7:59: be:d4:29:1b:6b:17:cb:4a:ac:23:fd:73:cb:fe:5d:00:72:eb: d4:ba:5a:f1:de:84:90:96:9b:d0:b9:b6:e7:45:29:c7:9f:a5: 7a:5b:ee:dc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOv98i04HU8rUaqqGgfQq0gEMvDAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2 MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI2MDMyNTE2MzIxNloX DTI2MDMyNjE5MTQxNlowMzExMC8GA1UEAxMoMjNFRUZCMzY4N0ZCOUNCNzFDREM0 OTA5NTY0M0NEMzFDNDY0RkRCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbU+FZLmfRS4B95gAHu2xyoW40WJkBf28YFT40JPcXjRD8H5EKQffDbB2mV zZh7GCWVhSOb0BvOpGulEdCtk2vDgdzyVQrFmgUN20HZ1yCPWmTMCajCA2jj3Y20 ZJh3XKUEcJJO92IHQX71kE9cRhJIluBZLu3xlW5gHRTIim1ogLiuimqW2Xkkmhxp wp5WgoFCd/MUBjA0o2aQBDDM9pqNJ+iUUlYiaAFnGtPwfql2x6zfsViALC6siEpf ZQ/L9NlswLfDV3tOtFCbFYyJ/5JZYprSmyBpLJbvmMQQEBU717SBozyJB1zrkDUY L4bYRVWOkXvnHv8UVAK/uZLew+MCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQj7vs2 h/uctxzcSQlWQ80xxGT9tTAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5 ODAwMDAvMC85ODlEMzJENUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAqUirvrngQtSQ360tsUgbSpa1nlqvtbUwtoiUbDdfOJWn4eVC Ec+6LRUnlOy237k6FbbMOUUaexTSme/xrKQ4rPWwZNSQa9SX1kXOeDtFRlNyFi2w 8GyytIvaoOXyzZNfWMzBE86OZN9+DhKP5UmO5UJDSbWODVGVBJ8gMFWkKIFStFCU VvHc9fhaxEUZLb4hAsnHepu/JQ82IMRVXo6itX5mcvpryYOB2iXCHFCAo2aLnk2X m4OBraT31N8AojOa99URhl0T/A8RpafHA7POmzhaxJ8Y4KdZvtQpG2sXy0qsI/1z y/5dAHLr1Lpa8d6EkJab0Lm250Upx5+lelvu3A== -----END CERTIFICATE-----Generated at Thu Mar 26 04:16:45 2026 by rpki-client