$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: TRSR2hG7fIdi23iXVUB1TBkbuUrCv4WXz4UaBcU2xDY= Subject key identifier: E0:87:4B:51:72:EF:BD:4C:7F:25:C7:FB:9C:8E:56:85:DE:09:51:40 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 2E6631AA91337490D1744A2F1E7A793999F5AD89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 08C1 Signing time: Tue 12 May 2026 12:00:02 +0000 Manifest this update: Tue 12 May 2026 11:55:02 +0000 Manifest next update: Wed 13 May 2026 15:14:02 +0000 Files and hashes: 1: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) 2: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=) 3: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: /jBNeoEtPMfLgfA5fRUyk6gxhsXgGiiUSQyhqKDNFhI=) 4: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: tjw2x1+0ZtaOIGvHLHmQACBIoaNsr42TYgI70OxFL8c=) 5: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) 6: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) 7: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:66:31:aa:91:33:74:90:d1:74:4a:2f:1e:7a:79:39:99:f5:ad:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: May 12 11:55:02 2026 GMT Not After : May 13 15:14:02 2026 GMT Subject: CN=E0874B5172EFBD4C7F25C7FB9C8E5685DE095140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:f6:ad:4b:52:73:5f:1a:39:42:22:db:1b: e0:6f:0e:d9:d7:a4:b0:d4:ad:6d:30:3b:1b:ce:e7: 60:9c:a7:7a:66:67:c1:d1:90:e4:d7:fd:b8:83:a6: 1b:77:66:60:03:a4:bf:aa:55:0c:86:ee:c7:17:cb: b3:71:0b:c3:02:75:69:90:54:2a:07:31:82:2c:61: e6:9b:d3:8e:f2:67:78:5a:5c:f5:79:c6:e1:02:8a: 3a:ca:17:cc:c1:e0:cf:45:43:9f:cf:c0:ce:00:d3: 3b:81:20:97:d4:28:34:48:80:3a:f6:33:7a:af:03: 8e:65:c2:9f:4f:ee:aa:06:4d:a8:66:ea:46:e5:93: bf:8d:f8:09:ad:14:9f:91:7f:b2:ce:72:87:b5:26: c0:a8:47:29:0f:e7:f7:e0:86:78:e0:22:cb:9d:13: 07:f7:50:05:1d:f9:09:ef:e0:d1:fc:b6:d8:a3:0a: 3e:8d:4e:58:d9:51:7a:06:9b:20:37:c4:c2:b1:ad: 53:7f:ed:18:5f:dd:56:86:4c:f7:2a:f0:30:14:39: ab:d5:78:5b:3c:93:45:bd:d3:f9:24:c7:78:0a:91: 92:e5:da:5a:4b:b2:ed:8a:48:60:cf:e1:79:2c:dc: 85:79:79:3d:13:ed:ea:c2:f8:dd:57:1e:53:31:ff: 27:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:87:4B:51:72:EF:BD:4C:7F:25:C7:FB:9C:8E:56:85:DE:09:51:40 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ef:04:09:7d:fa:26:a3:1d:64:ed:d1:c7:b4:c0:3b:ce:a5: 08:74:b2:a7:77:0a:61:0f:ad:b6:65:52:26:07:aa:6e:f0:4d: d5:e7:bd:47:61:6b:27:2d:a3:bd:c3:25:3f:be:0e:4b:8f:fa: 8a:ce:8b:5a:e9:1d:fd:4d:52:11:eb:dc:45:1c:9b:43:5a:39: 24:47:47:55:08:24:cc:5b:35:d9:be:1f:10:0d:6c:a7:c6:c6: b2:8a:4b:a8:34:90:57:d5:99:8c:27:12:f6:9c:3b:01:c7:02: 05:a0:6f:80:9c:04:57:45:5b:10:c4:c2:0c:b1:08:54:da:1f: 2e:8f:ab:6a:0e:3a:d7:08:14:b3:b4:b4:af:1d:ce:97:ae:71: a8:37:fb:7e:32:19:88:39:8b:85:01:03:17:07:d4:97:ab:2f: 84:3f:83:d8:e3:bc:75:df:ee:f7:63:ee:1b:00:3a:e1:ff:7b: 30:2d:97:00:22:45:a3:eb:ed:24:0c:59:16:ff:37:c0:aa:d4: 03:3f:42:1e:e0:ea:ea:d5:ea:2e:de:d3:fe:c6:d2:34:b8:b6: 85:87:0e:df:94:c1:56:9c:16:c5:e0:9b:aa:0e:0d:5a:73:fb: b2:c0:dd:9c:bf:b2:2f:39:8d:4f:82:c4:5b:73:22:c3:2b:09: 9c:eb:7b:ca -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIULmYxqpEzdJDRdEovHnp5OZn1rYkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDUxMjExNTUwMloX DTI2MDUxMzE1MTQwMlowMzExMC8GA1UEAxMoRTA4NzRCNTE3MkVGQkQ0QzdGMjVD N0ZCOUM4RTU2ODVERTA5NTE0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMar9q1LUnNfGjlCItsb4G8O2deksNStbTA7G87nYJynemZnwdGQ5Nf9uIOm G3dmYAOkv6pVDIbuxxfLs3ELwwJ1aZBUKgcxgixh5pvTjvJneFpc9XnG4QKKOsoX zMHgz0VDn8/AzgDTO4Egl9QoNEiAOvYzeq8DjmXCn0/uqgZNqGbqRuWTv434Ca0U n5F/ss5yh7UmwKhHKQ/n9+CGeOAiy50TB/dQBR35Ce/g0fy22KMKPo1OWNlRegab IDfEwrGtU3/tGF/dVoZM9yrwMBQ5q9V4WzyTRb3T+STHeAqRkuXaWkuy7YpIYM/h eSzchXl5PRPt6sL43VceUzH/J7kCAwEAAaOCAhEwggINMB0GA1UdDgQWBBTgh0tR cu+9TH8lx/ucjlaF3glRQDAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZ7wQJffomox1k7dHHtMA7zqUIdLKndwphD622ZVImB6pu8E3V571HYWsnLaO9 wyU/vg5Lj/qKzota6R39TVIR69xFHJtDWjkkR0dVCCTMWzXZvh8QDWynxsayikuo NJBX1ZmMJxL2nDsBxwIFoG+AnARXRVsQxMIMsQhU2h8uj6tqDjrXCBSztLSvHc6X rnGoN/t+MhmIOYuFAQMXB9SXqy+EP4PY47x13+73Y+4bADrh/3swLZcAIkWj6+0k DFkW/zfAqtQDP0Ie4Orq1eou3tP+xtI0uLaFhw7flMFWnBbF4JuqDg1ac/uywN2c v7IvOY1PgsRbcyLDKwmc63vK -----END CERTIFICATE-----Generated at Wed May 13 01:26:41 2026 by rpki-client