$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: R29BNYVHjjIKUxfd9iagd3y5FJFbQ+h0sEHrQFu4fOc= Subject key identifier: 70:08:BF:64:75:43:F1:A9:2F:15:73:57:EB:56:55:95:FB:B3:33:1A Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 4111F0F3F20F6B5B3A0413B3E2A48D4D698B2352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 086F Signing time: Fri 27 Mar 2026 18:30:08 +0000 Manifest this update: Fri 27 Mar 2026 18:25:08 +0000 Manifest next update: Sat 28 Mar 2026 19:04:08 +0000 Files and hashes: 1: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: 9cZ6B9F58sakt/FrZfmSxh5N4/13bCa1uvfh91j5W9I=) 2: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: et9sX9j8mVyIEQ7rhxXwI2Tw0Q+V7/AO+pDt+RZD38g=) 3: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) 4: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) 5: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) 6: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) 7: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:11:f0:f3:f2:0f:6b:5b:3a:04:13:b3:e2:a4:8d:4d:69:8b:23:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Mar 27 18:25:08 2026 GMT Not After : Mar 28 19:04:08 2026 GMT Subject: CN=7008BF647543F1A92F157357EB565595FBB3331A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:8c:3b:8c:04:ea:93:d8:3c:7b:f2:7a:19: da:ad:8f:4a:86:34:db:4a:a1:56:6c:05:93:9b:f4: ca:0f:da:8a:fd:e3:be:45:b5:73:23:ea:3f:5e:0c: 6e:4d:4c:01:24:c7:4a:7a:28:90:a5:e6:8a:ac:5f: c7:68:59:da:47:c9:23:b0:51:86:cd:29:e4:24:c4: b8:76:61:d8:bf:14:f8:f6:9b:ac:e0:e8:79:73:3a: 6b:53:f6:73:25:d1:eb:06:ed:c7:53:ff:85:c3:ca: 2d:2b:ea:b6:7a:97:6f:06:4d:b2:51:52:f5:63:fc: ce:e3:ca:9b:88:a4:3f:09:05:13:59:c2:51:8e:08: fe:0a:f1:01:6c:0d:f0:15:4b:f5:77:36:18:87:d8: 8b:ea:6d:3b:82:03:d5:90:3f:38:f2:69:ac:59:18: c7:2d:f7:f6:53:ce:df:0e:49:fd:41:43:d9:52:35: 53:02:d6:6c:d9:e2:cd:ac:3f:59:a0:a5:4a:99:fd: 5d:93:e0:f4:ce:ba:16:fd:5c:9f:15:8a:7f:b3:1a: da:2e:05:1d:d9:8d:72:91:9c:f1:e2:0b:3f:cb:d6: a4:1e:21:18:59:28:a2:e0:d9:c6:46:9a:78:67:21: ca:68:bc:24:7a:a8:2d:ae:1f:1e:af:d6:8f:38:09: d3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:08:BF:64:75:43:F1:A9:2F:15:73:57:EB:56:55:95:FB:B3:33:1A X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:3e:45:08:2a:46:3d:b6:98:5e:39:15:3a:2a:90:de:ad:06: e7:cd:59:7d:80:15:3d:c0:f6:63:d2:79:3b:29:91:2e:5c:bc: 39:9a:7b:4b:9e:32:20:79:f6:c6:d6:4d:ca:1b:16:d6:52:07: c5:d7:f3:44:02:55:fe:67:00:6d:2d:e2:38:1a:2d:9e:54:95: 94:4e:22:8c:73:ff:fb:15:b5:44:29:4d:81:cf:58:b5:77:b7: 5c:97:16:06:ad:3c:f4:c2:82:71:c6:4a:5a:73:4f:c3:ee:6c: 3e:db:77:6a:54:e1:07:96:8b:c1:ee:fc:b6:c0:4b:4f:dd:34: a5:32:25:9d:f4:31:d6:10:57:5f:b2:c3:ff:06:9d:be:e2:ed: 37:22:86:32:ab:aa:fb:33:6b:f2:0a:87:3c:3d:1f:10:b8:5d: d8:89:08:98:b7:d9:f2:81:ec:85:52:a2:a7:cf:af:55:13:3b: 32:6c:cf:28:e4:e4:c6:2e:bc:d2:e5:85:7c:d7:c2:81:f2:52: cb:4a:ac:cd:93:4d:2d:ce:c2:87:70:33:35:a5:61:7c:74:66: dd:39:5c:48:6d:c2:48:d9:df:fc:c6:22:ea:e0:31:4f:9a:7f: 4b:e1:7a:40:6b:17:5a:8f:93:07:64:ac:f5:79:f1:85:d8:80: 25:61:e6:04 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUQRHw8/IPa1s6BBOz4qSNTWmLI1IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDMyNzE4MjUwOFoX DTI2MDMyODE5MDQwOFowMzExMC8GA1UEAxMoNzAwOEJGNjQ3NTQzRjFBOTJGMTU3 MzU3RUI1NjU1OTVGQkIzMzMxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALThjDuMBOqT2Dx78noZ2q2PSoY020qhVmwFk5v0yg/aiv3jvkW1cyPqP14M bk1MASTHSnookKXmiqxfx2hZ2kfJI7BRhs0p5CTEuHZh2L8U+PabrODoeXM6a1P2 cyXR6wbtx1P/hcPKLSvqtnqXbwZNslFS9WP8zuPKm4ikPwkFE1nCUY4I/grxAWwN 8BVL9Xc2GIfYi+ptO4ID1ZA/OPJprFkYxy339lPO3w5J/UFD2VI1UwLWbNnizaw/ WaClSpn9XZPg9M66Fv1cnxWKf7Ma2i4FHdmNcpGc8eILP8vWpB4hGFkoouDZxkaa eGchymi8JHqoLa4fHq/WjzgJ0+kCAwEAAaOCAhEwggINMB0GA1UdDgQWBBRwCL9k dUPxqS8Vc1frVlWV+7MzGjAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCqPkUIKkY9tpheORU6KpDerQbnzVl9gBU9wPZj0nk7KZEuXLw5mntLnjIgefbG 1k3KGxbWUgfF1/NEAlX+ZwBtLeI4Gi2eVJWUTiKMc//7FbVEKU2Bz1i1d7dclxYG rTz0woJxxkpac0/D7mw+23dqVOEHlovB7vy2wEtP3TSlMiWd9DHWEFdfssP/Bp2+ 4u03IoYyq6r7M2vyCoc8PR8QuF3YiQiYt9nygeyFUqKnz69VEzsybM8o5OTGLrzS 5YV818KB8lLLSqzNk00tzsKHcDM1pWF8dGbdOVxIbcJI2d/8xiLq4DFPmn9L4XpA axdaj5MHZKz1efGF2IAlYeYE -----END CERTIFICATE-----Generated at Sat Mar 28 10:40:42 2026 by rpki-client