$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: PsWGw2DkHIRyLTrz0mw+LURL88NdLVYV/Dw76lZVAa4= Subject key identifier: A4:B0:87:95:54:39:EE:A3:A7:80:E0:9C:CC:C5:26:D7:8E:C3:C1:A1 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 6DA40469641BE84A69F9AF89B2BA22722D386CD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 06FC Signing time: Sat 23 Aug 2025 12:00:01 +0000 Manifest this update: Sat 23 Aug 2025 11:55:01 +0000 Manifest next update: Sun 24 Aug 2025 14:49:01 +0000 Files and hashes: 1: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) 2: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) 3: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: BpFQO/Oq8/oSyiEFj9GtPAlbRh71/THE0IoCYOm/v0A=) 4: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 5: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) 6: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) 7: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: wGbjDn5fgoRorYHEYkfCMy/+Vhnctrg2Kj8Jq15KQ6A=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a4:04:69:64:1b:e8:4a:69:f9:af:89:b2:ba:22:72:2d:38:6c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Aug 23 11:55:01 2025 GMT Not After : Aug 24 14:49:01 2025 GMT Subject: CN=A4B087955439EEA3A780E09CCCC526D78EC3C1A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:0d:10:f2:2b:ff:5c:7a:c6:e2:a8:af:4f: 3d:3d:a0:f2:66:52:99:ce:8d:f1:00:c3:02:4e:75: b4:da:a8:3e:56:57:47:2c:91:a1:03:9e:64:1c:d8: 90:f4:e7:01:20:0c:bb:2e:0e:e7:b7:13:81:38:ac: 2f:95:b3:ed:b4:fa:62:0f:61:cc:af:10:78:36:ef: f8:45:0c:ed:22:87:84:b3:d9:22:7e:72:93:fb:22: 98:c8:2c:3e:57:e0:56:16:b6:82:29:a5:af:6e:a4: f0:05:7a:b5:fd:f0:dc:92:4a:30:8a:18:92:e6:e9: 27:e5:c9:47:4d:65:69:ae:0e:e0:40:55:cf:0d:46: bb:8c:e4:8f:1b:8c:2b:35:7e:cb:73:4e:9a:c3:a3: d0:28:9b:02:b6:0a:81:d3:1d:60:83:7d:7e:31:9b: c4:18:d7:ad:6f:da:1d:b8:74:73:43:1b:49:72:31: b9:e0:71:78:14:e5:a9:ac:67:a0:68:8b:0a:a9:70: 45:2b:42:55:20:be:16:3a:4f:e0:50:45:b2:14:81: 88:bd:80:f9:77:50:73:35:3f:66:5a:a8:92:1a:22: 60:66:06:9c:a1:1c:06:74:44:5d:d0:2e:27:9c:d2: 25:e2:90:d7:cf:ec:c3:8f:69:15:a4:bb:e7:7d:b4: af:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B0:87:95:54:39:EE:A3:A7:80:E0:9C:CC:C5:26:D7:8E:C3:C1:A1 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c2:56:9d:62:06:82:e4:d0:67:16:d0:59:9e:08:9f:e0:ec: 6a:43:14:52:08:e5:25:24:2f:a8:e0:f2:bc:de:d4:c8:d0:4b: a3:e2:fc:c4:0a:a4:7f:9e:e9:18:09:9d:e6:e3:8e:07:a9:f1: 96:b5:80:4c:ec:93:c6:b3:8a:ac:c5:d2:7b:c2:ae:b3:51:6e: 52:01:b6:d0:06:25:7b:05:d1:59:65:6e:01:ad:17:07:56:86: 9b:5e:51:ec:e8:25:c8:00:38:e2:c4:8e:38:98:81:d6:8e:51: 68:6e:c5:a4:de:00:8c:19:7d:bf:20:27:59:c5:5a:4a:bc:bd: 49:53:3f:6c:c2:fd:56:55:4b:4e:22:45:bf:5d:c8:aa:19:0b: 77:4c:9a:20:ad:3e:5e:a6:c2:b7:6a:50:b0:4c:0f:5d:3e:a0: 17:30:04:9e:e0:de:71:e1:84:32:24:43:b8:a3:d1:3c:94:6e: 5c:fb:a8:77:0b:af:a4:b0:c4:df:f4:e6:88:ec:95:dc:7e:7e: 6c:e8:0e:15:a6:28:37:23:dd:d9:a5:c7:2a:9f:c9:81:11:e7: 18:3f:df:dc:7d:c6:ce:14:84:e6:d0:39:e2:7f:41:50:f3:41: 3d:e0:ea:42:fc:71:86:fc:72:78:0b:a5:36:ce:5d:e8:54:e5: da:86:3a:6d -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUbaQEaWQb6Epp+a+Jsroici04bNkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDgyMzExNTUwMVoX DTI1MDgyNDE0NDkwMVowMzExMC8GA1UEAxMoQTRCMDg3OTU1NDM5RUVBM0E3ODBF MDlDQ0NDNTI2RDc4RUMzQzFBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPfDRDyK/9cesbiqK9PPT2g8mZSmc6N8QDDAk51tNqoPlZXRyyRoQOeZBzY kPTnASAMuy4O57cTgTisL5Wz7bT6Yg9hzK8QeDbv+EUM7SKHhLPZIn5yk/simMgs PlfgVha2gimlr26k8AV6tf3w3JJKMIoYkubpJ+XJR01laa4O4EBVzw1Gu4zkjxuM KzV+y3NOmsOj0CibArYKgdMdYIN9fjGbxBjXrW/aHbh0c0MbSXIxueBxeBTlqaxn oGiLCqlwRStCVSC+FjpP4FBFshSBiL2A+XdQczU/ZlqokhoiYGYGnKEcBnREXdAu J5zSJeKQ18/sw49pFaS75320rwECAwEAAaOCAhEwggINMB0GA1UdDgQWBBSksIeV VDnuo6eA4JzMxSbXjsPBoTAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQATwladYgaC5NBnFtBZngif4OxqQxRSCOUlJC+o4PK83tTI0Euj4vzECqR/nukY CZ3m444HqfGWtYBM7JPGs4qsxdJ7wq6zUW5SAbbQBiV7BdFZZW4BrRcHVoabXlHs 6CXIADjixI44mIHWjlFobsWk3gCMGX2/ICdZxVpKvL1JUz9swv1WVUtOIkW/Xciq GQt3TJogrT5epsK3alCwTA9dPqAXMASe4N5x4YQyJEO4o9E8lG5c+6h3C6+ksMTf 9OaI7JXcfn5s6A4Vpig3I93Zpccqn8mBEecYP9/cfcbOFITm0Dnif0FQ80E94OpC /HGG/HJ4C6U2zl3oVOXahjpt -----END CERTIFICATE-----Generated at Sat Aug 23 21:00:27 2025 by rpki-client