$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json) Hash identifier: iEVpopDHKmqvjHuLHwGNwXsNXmGtuYyOKcr0aD/TfP4= Subject key identifier: F4:1B:A0:B6:AE:36:88:95:0D:A8:4C:0D:3F:0E:49:95:67:AB:E2:0F Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Certificate serial: 5CADA6A74E0227E1317310BC776D5B67726343BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft Manifest number: 0802 Signing time: Sun 19 Oct 2025 19:36:01 +0000 Manifest this update: Sun 19 Oct 2025 19:31:01 +0000 Manifest next update: Mon 20 Oct 2025 22:29:01 +0000 Files and hashes: 1: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=) 2: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=) 3: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=) 4: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: 4ofVYOiy9bM4+vkuWB31s3OUP5KJAt+Dx1oyajbND1U=) 5: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=) 6: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=) 7: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=) 8: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=) 9: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=) 10: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=) 11: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ad:a6:a7:4e:02:27:e1:31:73:10:bc:77:6d:5b:67:72:63:43:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12 Validity Not Before: Oct 19 19:31:01 2025 GMT Not After : Oct 20 22:29:01 2025 GMT Subject: CN=F41BA0B6AE3688950DA84C0D3F0E499567ABE20F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e3:65:33:d3:b0:cd:d1:d6:dd:44:5f:fd:e3: d7:3e:24:d6:33:58:49:17:65:0e:ed:7e:8d:4b:0f: 3e:78:95:77:ee:bd:90:e2:51:c4:c3:fd:68:2a:e0: b4:7b:ab:62:d1:1d:0d:34:30:60:ba:6e:af:88:10: 45:c5:00:ae:dd:50:58:cf:30:ae:ab:74:b3:66:e9: 16:20:7d:8e:c5:3b:5e:a8:fa:e7:3b:e3:66:62:9c: 38:e9:e5:c0:ab:5b:01:38:e5:c4:89:24:90:d1:7d: 48:4c:83:9a:f2:96:77:c8:a9:e8:e5:9a:6e:4c:6f: 6e:d6:2b:e2:84:e4:bb:95:c4:6e:94:64:3c:59:7b: 0f:e9:2c:83:30:f2:51:0e:da:d8:82:d4:f8:27:2a: 9b:9d:e5:cf:f3:0e:8f:e8:88:06:f9:76:be:79:e9: 50:0e:68:a2:5c:fd:d9:4c:a7:90:fd:19:69:ee:6d: 6a:33:73:ee:50:a3:50:35:70:b2:94:16:6d:b7:f4: 8c:fe:1c:ad:6a:52:2a:46:2e:48:aa:d2:d0:64:09: 42:3f:93:ce:58:3b:c7:7c:79:31:10:98:5d:dc:a4: c9:2c:f0:cf:2e:cf:1a:d6:74:17:3b:df:3d:8f:70: 92:0d:33:4e:a0:58:7e:02:a5:c7:48:e5:05:5e:74: ab:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1B:A0:B6:AE:36:88:95:0D:A8:4C:0D:3F:0E:49:95:67:AB:E2:0F X509v3 Authority Key Identifier: keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:aa:98:9b:a1:a6:9d:59:df:83:ba:55:2a:54:40:3d:6f:4b: 87:fe:b6:c6:bd:86:44:6a:ca:bc:3b:ef:bb:4e:4e:d9:f0:b5: 6e:37:a4:40:b3:e3:49:7c:3a:64:93:fa:bd:a4:ca:d4:32:58: eb:c2:4c:35:1e:f9:ed:03:22:f5:ca:e3:7b:95:68:78:2c:c9: 5c:45:b3:23:f4:26:bf:68:f7:d3:43:ce:57:e5:2a:b4:de:89: 76:1c:31:f8:b6:8d:1c:7e:7c:00:45:c5:24:88:f3:c4:44:b4: a6:cd:4c:00:98:38:8f:84:85:1e:f3:e3:d3:e2:ae:5a:2e:3e: c4:e3:5c:65:29:a6:ba:90:11:0c:bf:af:74:31:a4:1d:8a:96: 0c:ab:8c:89:f2:7d:b8:29:fb:b3:50:b5:2b:56:8f:25:9f:83: a8:ad:91:7b:87:4f:cb:b2:13:54:9c:15:00:e3:cd:3f:c2:f4: 5c:0b:e7:84:e0:43:99:2e:f6:32:b1:a4:2a:3c:58:60:75:ab: 46:eb:f5:62:bc:40:29:27:0f:5c:b8:dc:60:38:c4:5f:9d:07: ae:cb:7d:4b:9b:d9:a5:ed:fb:93:64:8b:3b:e5:1c:26:8e:b1: 47:a2:24:fe:9e:9d:00:52:8b:2e:27:13:f9:cf:21:81:26:d4: ff:23:43:4e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXK2mp04CJ+ExcxC8d21bZ3JjQ70wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2 MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI1MTAxOTE5MzEwMVoX DTI1MTAyMDIyMjkwMVowMzExMC8GA1UEAxMoRjQxQkEwQjZBRTM2ODg5NTBEQTg0 QzBEM0YwRTQ5OTU2N0FCRTIwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvjZTPTsM3R1t1EX/3j1z4k1jNYSRdlDu1+jUsPPniVd+69kOJRxMP9aCrg tHurYtEdDTQwYLpur4gQRcUArt1QWM8wrqt0s2bpFiB9jsU7Xqj65zvjZmKcOOnl wKtbATjlxIkkkNF9SEyDmvKWd8ip6OWabkxvbtYr4oTku5XEbpRkPFl7D+ksgzDy UQ7a2ILU+Ccqm53lz/MOj+iIBvl2vnnpUA5oolz92UynkP0Zae5tajNz7lCjUDVw spQWbbf0jP4crWpSKkYuSKrS0GQJQj+Tzlg7x3x5MRCYXdykySzwzy7PGtZ0Fzvf PY9wkg0zTqBYfgKlx0jlBV50qysCAwEAAaOCAhswggIXMB0GA1UdDgQWBBT0G6C2 rjaIlQ2oTA0/DkmVZ6viDzAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5 ODAwMDAvMC85ODlEMzJENUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAQKqYm6GmnVnfg7pVKlRAPW9Lh/62xr2GRGrKvDvvu05O2fC1 bjekQLPjSXw6ZJP6vaTK1DJY68JMNR757QMi9crje5VoeCzJXEWzI/Qmv2j300PO V+UqtN6Jdhwx+LaNHH58AEXFJIjzxES0ps1MAJg4j4SFHvPj0+KuWi4+xONcZSmm upARDL+vdDGkHYqWDKuMifJ9uCn7s1C1K1aPJZ+DqK2Re4dPy7ITVJwVAOPNP8L0 XAvnhOBDmS72MrGkKjxYYHWrRuv1YrxAKScPXLjcYDjEX50Hrst9S5vZpe37k2SL O+UcJo6xR6Ik/p6dAFKLLicT+c8hgSbU/yNDTg== -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:21 2025 by rpki-client