
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier: SiHd2DAtTQP1lvSRWua/BpZUctLTac7TDDsKmowDvNg=
Subject key identifier: 20:25:CC:43:E7:F0:FB:34:5E:0B:97:6D:D2:AC:2A:FD:0A:4A:FE:71
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial: 51F7B3033FE36938DBA7BB80D8F1959342AEFB86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number: 0916
Signing time: Tue 12 May 2026 21:12:12 +0000
Manifest this update: Tue 12 May 2026 21:07:12 +0000
Manifest next update: Wed 13 May 2026 22:28:12 +0000
Files and hashes: 1: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=)
2: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=)
3: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=)
4: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: LmssScU0DJj+deqThCxgQCERGC+M91OD6a/F/dO/8Z8=)
5: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=)
6: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=)
7: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=)
8: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=)
9: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=)
10: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=)
11: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f7:b3:03:3f:e3:69:38:db:a7:bb:80:d8:f1:95:93:42:ae:fb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Validity
Not Before: May 12 21:07:12 2026 GMT
Not After : May 13 22:28:12 2026 GMT
Subject: CN=2025CC43E7F0FB345E0B976DD2AC2AFD0A4AFE71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e7:57:f3:61:9f:84:ce:c4:33:be:c4:17:e2:
88:5e:7f:01:58:76:9b:c3:50:ed:1a:16:6f:61:5a:
61:16:64:9d:c7:f7:51:db:67:bf:3c:d3:c7:fa:9b:
7c:a4:08:ed:66:28:b2:39:1b:c8:6a:91:17:44:f2:
ce:4b:34:ac:d5:ee:88:fc:23:d6:1c:61:99:02:9c:
8c:71:91:83:27:a0:7c:e3:6d:5b:ea:d5:22:96:49:
09:75:3e:42:3a:08:e0:f0:ba:59:bf:5c:55:e0:7e:
a6:50:b0:30:1d:4c:fc:c9:01:e3:35:89:7d:fb:25:
72:76:99:59:2b:cf:e7:f1:5a:05:b2:11:eb:62:62:
4a:a4:43:2d:78:72:3d:71:84:87:ca:28:0e:8a:e8:
d7:bf:56:a7:33:02:47:0b:9a:8e:d1:e0:02:b5:e9:
3e:56:33:c6:8d:11:f7:9a:a1:62:64:2e:d3:80:cc:
fa:0f:0e:d5:ac:b8:9c:0b:67:0c:e9:72:4a:0f:62:
bb:a5:6d:cb:19:c9:bf:4c:f8:43:aa:9f:46:50:80:
67:78:0c:87:44:a0:f5:de:b0:55:38:a5:7c:97:6e:
f8:18:d8:e9:1f:ef:db:ae:62:77:99:78:17:28:cc:
44:09:f1:69:5c:17:1a:b7:de:49:6f:4a:d4:0d:c0:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:25:CC:43:E7:F0:FB:34:5E:0B:97:6D:D2:AC:2A:FD:0A:4A:FE:71
X509v3 Authority Key Identifier:
keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bb:7a:6b:a8:3e:b2:9a:cc:46:1d:fc:3a:f9:09:95:10:fd:
0f:44:b7:00:27:ee:55:60:ab:80:3f:8e:90:c3:f3:55:79:46:
44:b6:b9:6c:79:b2:11:63:eb:82:c7:7d:9e:8c:a3:af:9a:91:
46:07:26:75:10:0e:e2:3e:b5:2c:80:1e:ab:ba:3e:9e:9f:91:
33:64:21:f6:4a:95:16:3a:b6:37:d3:5e:fc:59:0d:fe:17:8c:
8f:fd:58:ad:f2:d8:3a:62:8c:34:3c:50:b6:fd:d2:c2:b6:fa:
41:2f:eb:14:92:8c:61:47:81:70:48:39:d3:d0:e6:ff:11:87:
cc:66:09:46:35:0f:9c:c9:f0:9d:ff:b4:e7:38:37:bc:c5:ba:
8a:db:f9:29:d3:37:f3:58:13:47:5a:f1:e5:fb:0f:38:c9:f6:
95:01:4c:45:d1:b8:81:df:d0:10:bc:49:5a:f8:6f:e0:4c:40:
53:f4:f6:97:f3:8c:3d:7d:a2:a8:8a:6d:22:11:3b:28:8b:ab:
2a:6f:d7:71:6c:f7:44:53:f2:ca:a9:ee:2b:8c:4a:7b:8d:8e:
b5:9d:7d:9f:08:7c:78:89:59:dd:94:00:21:4b:57:ce:2c:4d:
39:5c:c3:4c:7f:04:f1:e3:97:e7:69:d1:ea:8c:9e:15:d6:bc:
80:2b:7d:37
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUfezAz/jaTjbp7uA2PGVk0Ku+4YwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2
MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI2MDUxMjIxMDcxMloX
DTI2MDUxMzIyMjgxMlowMzExMC8GA1UEAxMoMjAyNUNDNDNFN0YwRkIzNDVFMEI5
NzZERDJBQzJBRkQwQTRBRkU3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOfnV/Nhn4TOxDO+xBfiiF5/AVh2m8NQ7RoWb2FaYRZkncf3UdtnvzzTx/qb
fKQI7WYosjkbyGqRF0Tyzks0rNXuiPwj1hxhmQKcjHGRgyegfONtW+rVIpZJCXU+
QjoI4PC6Wb9cVeB+plCwMB1M/MkB4zWJffslcnaZWSvP5/FaBbIR62JiSqRDLXhy
PXGEh8ooDoro179WpzMCRwuajtHgArXpPlYzxo0R95qhYmQu04DM+g8O1ay4nAtn
DOlySg9iu6VtyxnJv0z4Q6qfRlCAZ3gMh0Sg9d6wVTilfJdu+BjY6R/v265id5l4
FyjMRAnxaVwXGrfeSW9K1A3AP20CAwEAAaOCAhswggIXMB0GA1UdDgQWBBQgJcxD
5/D7NF4Ll23SrCr9Ckr+cTAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE
NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU
aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5
ODAwMDAvMC85ODlEMzJENUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEy
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAcbt6a6g+sprMRh38OvkJlRD9D0S3ACfuVWCrgD+OkMPzVXlG
RLa5bHmyEWPrgsd9noyjr5qRRgcmdRAO4j61LIAeq7o+np+RM2Qh9kqVFjq2N9Ne
/FkN/heMj/1YrfLYOmKMNDxQtv3Swrb6QS/rFJKMYUeBcEg509Dm/xGHzGYJRjUP
nMnwnf+05zg3vMW6itv5KdM381gTR1rx5fsPOMn2lQFMRdG4gd/QELxJWvhv4ExA
U/T2l/OMPX2iqIptIhE7KIurKm/XcWz3RFPyyqnuK4xKe42OtZ19nwh8eIlZ3ZQA
IUtXzixNOVzDTH8E8eOX52nR6oyeFda8gCt9Nw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:59:45 2026 by rpki-client