
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier: vJpNX1aLDfV/v6GMgOnCmsCOSDZ3JLTXlFWqvuiHclk=
Subject key identifier: C8:78:D0:D1:1C:A0:AA:A9:4A:F2:35:AB:4C:CA:07:7E:C8:19:44:FE
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial: 5109C3327E7E019ED4C26D2020DE9C2C6ECEA6A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number: 097B
Signing time: Thu 23 Jul 2026 04:45:42 +0000
Manifest this update: Thu 23 Jul 2026 04:40:42 +0000
Manifest next update: Fri 24 Jul 2026 08:33:42 +0000
Files and hashes: 1: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: 3ggSTM9Di1FgXo3Ut6sBwZJGn9C5XLQtwoGmuGHyLTs=)
2: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: wx7mDDVDVvssyRRRK7qXWbAqlJxXiOpWt5/RcILxYjM=)
3: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: wD2X/rnLvjYX7xyPB9Jt+GcW/s8Zi1WkDFOO2rKFbBY=)
4: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: 6bUioHOiplX0nplUReMAUW/pmAQYfQERH31QOiWI09E=)
5: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: uKziAmnKEFzqB9nfk5eW2+yVcFJdYkRgt8r/NipgvDk=)
6: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: BuEBPTJ2vfTWlZKFjMl32JrJQqRwp1mqSuqe+EmcFIA=)
7: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: SlyeO73BsaZhNaBtds/ns68oiIGA+OXgFydVUq6b7Yc=)
8: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: Y4k57xRWRy9X0jeYDXKld09T8mLHah2yzMR8vWq3R2M=)
9: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: 7oXfpj3C/mgJ9C72voMZZOZTwU/VWJrw70I4Vj4hZRU=)
10: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: PcC/yHv/pv/0LnnL2KbTMBZa2GukoOXTzGVnMt4z1pU=)
11: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: nQW/gChgRCJZOUmKfXuBxzd9ebuiuqT7zJMBaxZsIrM=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:09:c3:32:7e:7e:01:9e:d4:c2:6d:20:20:de:9c:2c:6e:ce:a6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Validity
Not Before: Jul 23 04:40:42 2026 GMT
Not After : Jul 24 08:33:42 2026 GMT
Subject: CN=C878D0D11CA0AAA94AF235AB4CCA077EC81944FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:d6:5b:79:c5:1c:52:3c:24:08:2d:1a:5b:
c4:bc:ad:84:e7:8f:7b:65:f7:b1:f3:4f:c7:c5:49:
d5:ee:e8:66:dd:3a:76:72:36:38:5d:f8:99:ac:99:
15:d6:64:0d:a6:bc:ba:e7:fa:9d:bc:b8:0c:5c:22:
aa:d4:5b:47:5d:e1:d4:7a:3c:2f:b5:d8:e3:65:bd:
ed:e1:7e:7d:94:3b:d1:4a:4f:48:61:29:9f:3d:7f:
11:e9:88:c4:19:5b:7b:44:28:1a:99:37:1f:10:71:
14:6f:d0:94:15:67:fb:58:1d:78:1b:a0:38:51:ae:
04:d1:f0:a4:b7:6a:9d:92:84:c3:ec:41:b3:c9:1d:
97:c2:57:59:4f:15:ff:bc:66:19:df:8f:04:22:44:
e2:1f:66:4e:31:00:4b:43:2f:3d:35:8c:b3:54:12:
88:c3:09:dd:eb:46:09:24:33:35:a9:9d:1b:d9:a7:
9f:73:fd:6a:5b:96:fa:e7:db:71:9f:35:c8:81:70:
59:ea:6a:fe:c8:b3:0f:71:ad:b5:3e:9a:03:24:6b:
a0:76:89:cd:d9:d8:9a:1d:be:36:87:58:54:46:44:
f9:47:2b:cb:69:f5:6a:99:80:b6:6c:24:8a:cb:47:
99:00:83:69:ae:d3:31:bf:fc:b9:c4:ac:05:59:56:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:78:D0:D1:1C:A0:AA:A9:4A:F2:35:AB:4C:CA:07:7E:C8:19:44:FE
X509v3 Authority Key Identifier:
keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:55:44:97:53:f7:a8:28:8a:fe:5e:82:f2:57:ac:46:92:45:
b2:a8:79:0f:0f:be:8d:4c:18:3f:24:57:da:ab:54:92:3d:f6:
e9:04:72:61:2d:55:5b:33:45:e9:72:06:90:53:7b:30:75:01:
73:a1:6c:da:d9:68:0f:80:27:95:07:2c:65:f7:ee:7a:2b:fd:
e9:b2:a2:3c:8f:93:88:62:67:a2:d0:17:e8:0e:1f:3a:1e:fc:
6f:37:a8:9a:15:9d:03:4e:72:63:08:2a:50:84:57:37:4c:96:
cb:52:b8:e6:87:50:ff:5d:44:77:dd:29:5f:cf:3b:25:8b:9e:
8c:da:eb:07:57:55:2b:87:f6:63:c3:41:b7:f0:ed:38:78:fc:
ae:69:db:f9:e9:9a:fa:39:73:b2:bf:39:c3:3c:ac:a7:7e:58:
e4:45:fd:45:4e:73:43:e2:66:cf:57:30:46:42:e2:84:6e:0b:
91:b7:7c:a2:0d:4f:7b:15:07:65:e2:99:ab:73:50:6b:9b:5e:
c1:68:40:3b:49:62:82:29:11:c2:99:f4:57:58:d1:3c:3d:a5:
19:ca:ea:b4:6d:4c:66:bd:51:4a:6e:90:fa:39:d0:4c:59:3c:
78:74:0e:d7:02:83:e2:10:6b:a2:39:9a:24:ed:b5:22:a9:21:
6f:94:01:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:01 2026 by rpki-client