$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: WZ8YEnPp/P/4BjTSnEzoZ033Uolt++9SgHEmbeGKL+E= Subject key identifier: AC:54:7B:CA:EA:EE:A2:D5:C4:5F:22:20:96:C2:B3:54:65:DA:F4:5D Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 3DB27C021A9B39295454BBCC689BA6806E5D1388 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 064E Signing time: Sat 10 May 2025 12:00:02 +0000 Manifest this update: Sat 10 May 2025 11:55:02 +0000 Manifest next update: Sun 11 May 2025 14:35:02 +0000 Files and hashes: 1: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: BU8Bua231WXjTpoYm2Q4rTG4i8ZpYs4lZ3VI+83DR98=) 2: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: ByzypsVQgLQkRKZ/I6KhA/a9iiJ5fQWhO+kZk0l0dD8=) 3: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 4: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: vn9TTJ8OHvtEXk08Oge9wOEEDbl65wgfqBCgMXAgerU=) 5: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: s+okMfZXtj3SK5Jzt/y85zlQTo28EGbzbEC4cKwM5bQ=) 6: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: 4JLtXOVAXpPqX6hxUny4rYQ+KzHdr2B7l5TXdy0MdRU=) 7: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: xvKfJAUQahRZdnZG06aeSaekVC7XFXOs5bCAlRAA2tM=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b2:7c:02:1a:9b:39:29:54:54:bb:cc:68:9b:a6:80:6e:5d:13:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: May 10 11:55:02 2025 GMT Not After : May 11 14:35:02 2025 GMT Subject: CN=AC547BCAEAEEA2D5C45F222096C2B35465DAF45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:60:b0:e8:86:80:f6:2b:d6:0b:68:83:99:80: 7e:a5:64:d9:e7:36:8a:f2:40:da:a7:e9:a7:0e:4f: 7c:6b:6a:c3:bb:6b:7a:dc:d1:40:03:a3:9c:33:c8: c0:9c:7e:10:e6:36:cb:91:bc:ad:3b:b0:29:a0:e2: 70:8b:4a:63:f6:06:c1:d5:ea:21:14:df:9c:02:80: 96:b7:a3:5c:b7:f8:02:42:32:07:c9:10:04:62:06: 50:82:fc:a0:3b:eb:13:37:3b:05:bb:5f:76:b2:4c: 1a:32:ad:65:b0:db:7c:46:74:79:9e:da:9b:d5:8a: 6b:c3:5c:48:32:01:0c:f0:3d:b7:05:bf:95:5e:da: f8:80:59:da:31:93:78:37:a4:96:fb:7c:43:ec:f3: f6:59:8a:7e:d6:91:32:cf:ef:9f:ab:4f:36:72:bf: 7d:ad:05:f5:20:49:99:64:ae:bc:43:ab:ac:b6:4d: a3:33:e4:7a:5b:08:bd:1d:d9:82:50:3e:5d:a6:48: 1e:52:a6:dd:30:da:28:27:3d:1d:ef:21:8d:15:d1: 05:3f:c6:65:c6:b0:97:80:80:8d:a9:56:1d:2b:6d: e6:06:c5:2d:4f:ad:ea:f2:64:1b:95:af:2d:56:77: 40:6c:08:0f:93:d8:ad:26:7c:2c:85:6e:19:57:4a: 18:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:54:7B:CA:EA:EE:A2:D5:C4:5F:22:20:96:C2:B3:54:65:DA:F4:5D X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8e:ce:9b:10:b2:37:b7:13:1d:bf:27:07:a9:a6:c6:6e:3c: ed:4e:4b:ff:d9:80:d9:3e:1b:16:50:a1:b8:8f:ef:fb:ce:cc: e6:52:96:03:d4:4f:27:97:38:1a:c5:a0:a8:71:a4:89:8b:a2: e2:8a:b4:ab:6d:d2:8b:2b:f5:d3:03:d9:32:20:91:2e:37:60: 89:35:bd:ef:b6:7e:e3:c3:11:51:8a:93:0e:cc:13:cb:67:8f: 53:de:a1:98:51:4f:9f:f1:75:06:41:17:4f:aa:9d:5d:8b:48: 2a:d3:01:92:e4:72:61:a1:ab:ac:46:89:00:f8:b0:79:a3:7f: 57:66:04:98:fc:e1:92:68:a5:b6:b3:8a:48:d4:77:f8:3f:f5: 9b:21:f1:d5:b0:8b:5a:62:b0:02:c5:3b:b3:2c:a4:96:76:d6: 25:c3:bf:47:b4:5f:6c:58:de:f7:e9:d4:b6:ea:1d:3c:e9:77: 72:97:e4:89:1e:cb:ee:9d:61:d8:a5:0d:27:39:d5:23:86:0b: e6:ba:e9:cf:1b:89:67:ff:32:58:e1:fb:1c:cc:ff:e8:0e:cd: dd:66:12:05:91:5b:b8:72:39:32:bd:20:b2:90:80:e4:e0:18: a3:d0:fb:e3:1c:48:ec:d8:af:c8:0b:71:c2:e8:db:7e:43:fe: db:28:e6:e5 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUPbJ8AhqbOSlUVLvMaJumgG5dE4gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDUxMDExNTUwMloX DTI1MDUxMTE0MzUwMlowMzExMC8GA1UEAxMoQUM1NDdCQ0FFQUVFQTJENUM0NUYy MjIwOTZDMkIzNTQ2NURBRjQ1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtgsOiGgPYr1gtog5mAfqVk2ec2ivJA2qfppw5PfGtqw7tretzRQAOjnDPI wJx+EOY2y5G8rTuwKaDicItKY/YGwdXqIRTfnAKAlrejXLf4AkIyB8kQBGIGUIL8 oDvrEzc7BbtfdrJMGjKtZbDbfEZ0eZ7am9WKa8NcSDIBDPA9twW/lV7a+IBZ2jGT eDeklvt8Q+zz9lmKftaRMs/vn6tPNnK/fa0F9SBJmWSuvEOrrLZNozPkelsIvR3Z glA+XaZIHlKm3TDaKCc9He8hjRXRBT/GZcawl4CAjalWHStt5gbFLU+t6vJkG5Wv LVZ3QGwID5PYrSZ8LIVuGVdKGCkCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSsVHvK 6u6i1cRfIiCWwrNUZdr0XTAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+js6bELI3txMdvycHqabGbjztTkv/2YDZPhsWUKG4j+/7zszmUpYD1E8nlzga xaCocaSJi6LiirSrbdKLK/XTA9kyIJEuN2CJNb3vtn7jwxFRipMOzBPLZ49T3qGY UU+f8XUGQRdPqp1di0gq0wGS5HJhoausRokA+LB5o39XZgSY/OGSaKW2s4pI1Hf4 P/WbIfHVsItaYrACxTuzLKSWdtYlw79HtF9sWN736dS26h086Xdyl+SJHsvunWHY pQ0nOdUjhgvmuunPG4ln/zJY4fsczP/oDs3dZhIFkVu4cjkyvSCykIDk4Bij0Pvj HEjs2K/IC3HC6Nt+Q/7bKObl -----END CERTIFICATE-----Generated at Sun May 11 01:15:04 2025 by rpki-client