$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: NqYTYnAYBU7qn60Pwu4tV9GCG4PA7+lhu3P4lUKZV9o= Subject key identifier: B4:55:11:61:BD:DB:24:C6:FB:D8:87:D4:E0:68:59:A6:8E:BE:4A:F5 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 75FE58E9CF78F6347ECA1C27A706C58B131F261A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 06A4 Signing time: Tue 01 Jul 2025 12:00:01 +0000 Manifest this update: Tue 01 Jul 2025 11:55:01 +0000 Manifest next update: Wed 02 Jul 2025 12:59:01 +0000 Files and hashes: 1: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: 4vaH7TrRAJBiZxZcwhmKcjyIv8SQYsNEawaa+MZtmtU=) 2: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: s+okMfZXtj3SK5Jzt/y85zlQTo28EGbzbEC4cKwM5bQ=) 3: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: BU8Bua231WXjTpoYm2Q4rTG4i8ZpYs4lZ3VI+83DR98=) 4: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 5: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: xvKfJAUQahRZdnZG06aeSaekVC7XFXOs5bCAlRAA2tM=) 6: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: uzPpD1+wysiRLLA9Sc5TqnjQ7+8KEGv1wYc/JxJ/OFU=) 7: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: 4JLtXOVAXpPqX6hxUny4rYQ+KzHdr2B7l5TXdy0MdRU=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 12:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:fe:58:e9:cf:78:f6:34:7e:ca:1c:27:a7:06:c5:8b:13:1f:26:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Jul 1 11:55:01 2025 GMT Not After : Jul 2 12:59:01 2025 GMT Subject: CN=B4551161BDDB24C6FBD887D4E06859A68EBE4AF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6a:83:fe:fa:c8:a6:88:af:5d:09:1f:44:6d: 65:2a:8f:6b:c9:d3:ca:b7:98:01:59:42:7e:fc:45: 3d:fa:a1:4e:38:93:ad:ad:d5:13:36:a1:97:e5:5e: ed:17:bd:a6:7e:01:25:25:ea:5d:28:23:07:3e:3f: cb:21:37:f2:93:1d:34:5e:f2:97:57:16:7f:65:39: 98:d0:f7:8d:2e:29:92:e5:f2:9e:42:f7:bf:d4:e0: 20:cf:fd:42:3e:75:2d:55:6b:dc:2a:aa:b8:9b:6c: a0:ee:40:ae:3d:c4:80:77:07:d6:6e:79:f6:ce:9f: 0a:a8:a5:dd:7f:db:0f:83:64:50:db:3b:13:51:bf: f2:0e:55:e7:e8:5d:50:50:e4:1b:be:90:c8:7d:c2: f3:eb:82:94:28:2a:01:49:db:2e:31:69:6a:22:d4: 1e:4a:11:5d:82:7d:c2:b8:c7:49:38:11:32:e2:ea: e2:b3:c4:44:9b:e1:4a:ee:89:e3:0f:a3:e8:30:e0: 04:15:bd:d2:7d:a8:f4:7b:25:2f:a6:a0:15:c9:82: ee:c0:4e:8d:5f:f1:e5:33:1a:64:fd:d9:ce:d9:b0: d9:f3:d8:a2:e2:3c:2b:de:89:7d:5f:70:f9:43:97: 6a:59:b3:fc:5e:31:f0:d5:34:33:09:8d:27:20:2a: 8b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:55:11:61:BD:DB:24:C6:FB:D8:87:D4:E0:68:59:A6:8E:BE:4A:F5 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:00:6c:27:39:85:36:b2:1a:b6:96:ae:5a:f8:72:dd:02:5a: f1:9d:5f:a4:5b:b9:d0:f8:2f:e6:2d:f0:08:ea:14:83:0e:f6: 3a:27:d4:eb:c1:ed:09:bd:86:01:a5:f3:b1:fc:05:17:92:56: 2d:77:d2:47:03:97:db:5f:da:47:f2:45:e3:2f:ce:b1:bf:7c: fd:25:ff:b9:38:2a:cc:91:c8:15:c6:48:db:6a:f3:48:09:b1: bd:43:d5:aa:77:65:1c:64:ce:15:53:6a:19:0a:00:53:8d:79: 7e:20:1a:b5:1f:5c:5b:5a:2e:b4:f7:20:72:b8:94:08:1f:c7: e0:c5:c3:74:2f:c4:19:e6:65:ad:cc:e1:1c:af:ec:cd:bf:bc: 6c:a6:80:0f:31:7b:45:0b:09:a7:e1:61:18:13:76:86:ef:10: 3c:24:be:6d:59:4e:76:cf:0c:8b:7e:6a:f1:48:8a:d1:9d:b7: 7c:5e:3d:f6:d3:72:dc:70:d7:3a:c9:55:32:04:c4:7d:72:fe: 97:16:de:52:f4:19:82:b3:fd:85:8c:16:3a:d1:cd:e8:20:c7: e8:7e:23:d9:83:6a:43:1a:9a:bd:c8:e3:4d:fd:36:93:c1:be: dd:b1:a5:a1:12:e2:b2:18:fa:6d:6e:60:07:f4:fd:75:c4:73: 96:0b:31:0b -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUdf5Y6c949jR+yhwnpwbFixMfJhowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDcwMTExNTUwMVoX DTI1MDcwMjEyNTkwMVowMzExMC8GA1UEAxMoQjQ1NTExNjFCRERCMjRDNkZCRDg4 N0Q0RTA2ODU5QTY4RUJFNEFGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANlqg/76yKaIr10JH0RtZSqPa8nTyreYAVlCfvxFPfqhTjiTra3VEzahl+Ve 7Re9pn4BJSXqXSgjBz4/yyE38pMdNF7yl1cWf2U5mND3jS4pkuXynkL3v9TgIM/9 Qj51LVVr3CqquJtsoO5Arj3EgHcH1m559s6fCqil3X/bD4NkUNs7E1G/8g5V5+hd UFDkG76QyH3C8+uClCgqAUnbLjFpaiLUHkoRXYJ9wrjHSTgRMuLq4rPERJvhSu6J 4w+j6DDgBBW90n2o9HslL6agFcmC7sBOjV/x5TMaZP3Zztmw2fPYouI8K96JfV9w +UOXalmz/F4x8NU0MwmNJyAqi/MCAwEAAaOCAhEwggINMB0GA1UdDgQWBBS0VRFh vdskxvvYh9TgaFmmjr5K9TAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQAGwnOYU2shq2lq5a+HLdAlrxnV+kW7nQ+C/mLfAI6hSDDvY6J9Trwe0JvYYB pfOx/AUXklYtd9JHA5fbX9pH8kXjL86xv3z9Jf+5OCrMkcgVxkjbavNICbG9Q9Wq d2UcZM4VU2oZCgBTjXl+IBq1H1xbWi609yByuJQIH8fgxcN0L8QZ5mWtzOEcr+zN v7xspoAPMXtFCwmn4WEYE3aG7xA8JL5tWU52zwyLfmrxSIrRnbd8Xj3203LccNc6 yVUyBMR9cv6XFt5S9BmCs/2FjBY60c3oIMfofiPZg2pDGpq9yONN/TaTwb7dsaWh EuKyGPptbmAH9P11xHOWCzEL -----END CERTIFICATE-----Generated at Wed Jul 2 00:36:25 2025 by rpki-client