$ rpki-client -vvvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: 0V1+rRPdigwtCKIruPqIAsx5QwmT8SD5NSqpEQvoQhU= Subject key identifier: DA:7B:B7:73:DA:AA:B1:95:3F:DC:B3:2D:75:B9:0E:95:11:82:48:0D Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 5AF7E875C08FD862352AEB338F28E591249C2F37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 09E7 Signing time: Sun 15 Nov 2026 05:45:32 +0000 Manifest this update: Sun 15 Nov 2026 05:40:32 +0000 Manifest next update: Mon 16 Nov 2026 06:30:32 +0000 Files and hashes: 1: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: Kd5d5D6As0bcRgXGfiEQ86zbyYy89MgFbc7n+nAmNF8=) 2: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: pXU5vn2wZaGhdkg63jo+HVbWd8AAV6cZg7n1bhb4dAs=) 3: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: Z/F4FwjUwmzgoPNeRpL4gSxuZQevh/mf6ocmCs3mFYU=) 4: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: L5nXEZk8u99uDUdvi4n/OSkLKtMNAHr8KHN8EzMXIG8=) 5: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=) 6: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: DVk0g+7sfeXghpeQq0ZAqOlGgwEmPEsor9JtQjyE3Yg=) 7: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: gjxetdU1gVkaep7WfcAWKMpD910g/DFpEB00M3o4vak=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f7:e8:75:c0:8f:d8:62:35:2a:eb:33:8f:28:e5:91:24:9c:2f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Nov 15 05:40:32 2026 GMT Not After : Nov 16 06:30:32 2026 GMT Subject: CN=DA7BB773DAAAB1953FDCB32D75B90E951182480D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a1:02:c3:85:1c:c2:58:d2:4e:f8:eb:b5:d1: 92:ae:68:45:66:f8:c7:ba:40:91:12:a6:9b:b2:4d: a2:c6:9f:62:20:ac:3b:ac:7e:a8:c5:cb:eb:18:5b: d9:49:77:5a:64:58:34:b6:64:c1:56:a6:ba:f4:1b: 32:83:e9:f6:6a:9f:33:5c:0b:0a:8e:2f:e1:22:d8: 81:b5:09:d6:36:d6:ae:29:60:e4:52:b3:5f:ef:2a: e3:97:11:92:e2:45:31:ef:21:57:b7:d0:e0:6c:aa: e6:ba:d5:d0:29:37:6d:43:62:a8:48:78:e7:5f:67: bf:30:b7:f2:d3:1b:1c:70:7f:66:7b:ca:b1:28:e8: 18:f4:b1:f8:e1:3a:7d:c0:d9:92:6b:b9:b8:2b:c7: a4:ef:7d:5c:ea:28:78:b1:72:db:1f:ea:e9:c0:19: 78:d4:f7:aa:34:f8:93:60:54:aa:75:1c:00:bf:f4: 6a:b8:eb:77:19:44:a1:f2:60:df:0b:c5:75:75:cb: 31:31:42:e8:6d:ce:8a:f3:e2:38:a0:e6:f6:2e:f8: a7:45:f5:33:c8:ad:57:43:1c:31:e0:89:51:24:15: 59:9f:84:fc:f6:0f:05:52:13:1d:2f:9b:3d:c8:db: 59:6b:67:96:98:9d:28:07:8a:34:5f:c5:c9:c0:4b: 41:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7B:B7:73:DA:AA:B1:95:3F:DC:B3:2D:75:B9:0E:95:11:82:48:0D X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:93:93:64:05:31:b8:c2:32:19:3b:cc:64:08:7a:d8:ad:2b: e7:d1:32:34:34:58:12:ac:51:04:a2:2c:ab:a5:d1:00:06:03: 02:c2:dc:6e:04:80:af:49:7b:c9:5f:c3:8f:54:a5:af:6d:f3: cc:b4:3e:c6:c2:6d:58:76:e0:ed:96:78:1a:85:42:68:4a:62: 6a:97:af:d7:bd:b4:8f:ba:cf:94:74:68:b7:eb:ed:1a:17:d0: 87:0e:5e:8f:05:78:64:45:d9:f7:9f:6b:a9:2e:d4:4b:37:88: c7:2f:ad:54:be:1e:95:bc:21:a9:59:50:ce:82:5f:bb:d9:65: b5:fe:24:16:07:57:09:2d:79:13:ad:44:49:22:9e:46:36:b0: 28:ed:90:89:a4:bc:cd:7b:2e:6e:a8:e9:dc:28:ef:e7:87:cd: 84:fc:88:20:96:77:c2:5a:c4:b4:a8:12:6f:df:23:3b:7e:0c: c6:41:50:3e:ef:c9:bd:e2:01:3d:36:f7:59:e1:4e:97:40:2d: af:43:29:1d:9c:51:0f:79:db:ad:dd:9c:3a:c3:0a:d0:b7:53: b0:d5:35:76:f2:1a:41:d2:0d:90:66:82:9f:2e:18:aa:2c:ec: e9:74:b2:58:2f:75:e6:74:20:88:aa:d3:dd:6b:5c:50:21:bf: 1f:98:94:6a -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUWvfodcCP2GI1KuszjyjlkSScLzcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MTExNTA1NDAzMloX DTI2MTExNjA2MzAzMlowMzExMC8GA1UEAxMoREE3QkI3NzNEQUFBQjE5NTNGRENC MzJENzVCOTBFOTUxMTgyNDgwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPOhAsOFHMJY0k7467XRkq5oRWb4x7pAkRKmm7JNosafYiCsO6x+qMXL6xhb 2Ul3WmRYNLZkwVamuvQbMoPp9mqfM1wLCo4v4SLYgbUJ1jbWrilg5FKzX+8q45cR kuJFMe8hV7fQ4Gyq5rrV0Ck3bUNiqEh4519nvzC38tMbHHB/ZnvKsSjoGPSx+OE6 fcDZkmu5uCvHpO99XOooeLFy2x/q6cAZeNT3qjT4k2BUqnUcAL/0arjrdxlEofJg 3wvFdXXLMTFC6G3OivPiOKDm9i74p0X1M8itV0McMeCJUSQVWZ+E/PYPBVITHS+b PcjbWWtnlpidKAeKNF/FycBLQXsCAwEAAaOCAhEwggINMB0GA1UdDgQWBBTae7dz 2qqxlT/csy11uQ6VEYJIDTAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBMk5NkBTG4wjIZO8xkCHrYrSvn0TI0NFgSrFEEoiyrpdEABgMCwtxuBICvSXvJ X8OPVKWvbfPMtD7Gwm1YduDtlngahUJoSmJql6/XvbSPus+UdGi36+0aF9CHDl6P BXhkRdn3n2upLtRLN4jHL61Uvh6VvCGpWVDOgl+72WW1/iQWB1cJLXkTrURJIp5G NrAo7ZCJpLzNey5uqOncKO/nh82E/IgglnfCWsS0qBJv3yM7fgzGQVA+78m94gE9 NvdZ4U6XQC2vQykdnFEPedut3Zw6wwrQt1Ow1TV28hpB0g2QZoKfLhiqLOzpdLJY L3XmdCCIqtPda1xQIb8fmJRq -----END CERTIFICATE-----Generated at Sun Nov 15 20:40:44 2026 by rpki-client