$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: NSOXGNGPUtlcqkY8ypvKjmDKebK6V7MU38BelXDfhk0= Subject key identifier: 81:8C:F9:7A:25:7A:A3:8D:DD:3C:48:E6:5E:FE:88:F0:8B:1D:E9:07 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 15BE670FBF0850D17AEC97A6ECE10FF43D9204B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 075B Signing time: Sun 19 Oct 2025 04:52:07 +0000 Manifest this update: Sun 19 Oct 2025 04:47:07 +0000 Manifest next update: Mon 20 Oct 2025 08:23:07 +0000 Files and hashes: 1: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) 2: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) 3: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) 4: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 5: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: SJGmWJNkEbJC+rwtV323YRzRWRIfrOJjD4WFctaZFBo=) 6: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: mecf2sfynvTxkZEeUlfKj6E8An76xny+3p1x+/fmF0k=) 7: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 08:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:be:67:0f:bf:08:50:d1:7a:ec:97:a6:ec:e1:0f:f4:3d:92:04:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Oct 19 04:47:07 2025 GMT Not After : Oct 20 08:23:07 2025 GMT Subject: CN=818CF97A257AA38DDD3C48E65EFE88F08B1DE907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:3b:1b:61:7c:65:8b:9a:d3:6d:ca:12:bb: 10:c8:7e:a6:b0:5f:43:7f:6f:da:b8:f3:14:c0:78: a2:41:b3:7b:bf:99:a1:8e:e0:34:56:3b:1c:8b:79: 3f:30:36:bc:f4:ef:df:f0:32:f1:1c:53:92:00:1f: cd:3d:2b:99:1a:08:4f:94:dc:d2:77:4a:50:cb:d5: 77:5e:cb:85:c2:4f:0f:e1:dc:b4:b5:40:cc:24:08: a1:ae:00:e8:6a:3a:57:cd:6f:a0:15:d6:b6:45:17: e1:92:b9:a8:ea:1f:73:6e:c0:91:f3:dc:bd:87:22: 10:68:55:57:ac:53:2b:85:52:d5:20:06:42:58:02: 32:25:55:05:f1:0b:b9:8b:e0:cc:7a:98:3e:2a:24: f9:df:38:6e:9e:54:a2:42:9a:22:fc:9a:e1:02:e6: 91:9c:dc:8f:c4:22:c3:e0:8c:1e:3c:4d:c8:a3:ba: 70:99:82:ca:f0:2f:60:74:e2:bb:e7:a8:7c:36:1d: 4c:d5:0d:4e:47:32:66:7d:07:9b:66:84:6b:16:e4: 51:06:7f:51:04:9c:c6:55:67:18:ff:20:78:f1:f9: 20:c3:10:4d:1a:49:42:ae:9c:4a:fc:67:54:59:61: e6:b1:7d:11:d4:99:43:a9:d5:d2:4b:53:27:d5:a0: 71:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8C:F9:7A:25:7A:A3:8D:DD:3C:48:E6:5E:FE:88:F0:8B:1D:E9:07 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0c:1f:72:a7:47:be:d6:3b:19:d1:d0:8d:26:2c:48:28:3a: 1f:dd:c9:b3:db:d6:af:fc:93:d1:bd:8b:b0:e4:ca:41:6f:d3: c0:3a:07:b6:17:af:c4:41:c3:22:94:70:09:46:a3:62:d0:fd: 34:c3:6a:e8:07:8a:e6:36:2a:16:70:a6:1e:53:ed:ec:e1:9d: 33:08:81:7a:de:67:36:e3:1d:8b:d3:d4:a8:c2:fb:ec:ac:da: 76:8c:99:d4:4f:71:d2:db:da:0f:33:3a:c0:43:cd:00:93:84: 3b:cc:74:49:aa:ad:f0:9e:e2:68:fe:cc:59:86:73:b9:96:ef: f5:65:cb:66:a4:6f:6f:11:15:c5:6b:34:10:d4:09:1a:e9:e9: 2b:6a:f6:3c:51:00:f7:c0:2a:aa:53:06:93:7f:c8:d5:66:c7: 62:ed:03:1d:99:fa:a0:ff:06:84:32:3b:bc:db:7c:78:50:58: af:94:f5:20:ab:4d:86:c5:74:6d:24:c9:d0:14:19:0a:f1:8e: cb:5f:41:bc:fc:bc:49:ce:20:83:f7:36:cc:3d:fd:cc:00:ce: e4:f5:6e:a9:12:5b:cf:92:17:97:d8:73:cf:b2:6a:00:50:45: 62:5a:f7:0e:0f:ea:dd:0a:b3:00:22:f2:01:ed:5c:0e:3f:0d: 92:ad:1d:43 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUFb5nD78IUNF67Jem7OEP9D2SBLUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MTAxOTA0NDcwN1oX DTI1MTAyMDA4MjMwN1owMzExMC8GA1UEAxMoODE4Q0Y5N0EyNTdBQTM4REREM0M0 OEU2NUVGRTg4RjA4QjFERTkwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALz1OxthfGWLmtNtyhK7EMh+prBfQ39v2rjzFMB4okGze7+ZoY7gNFY7HIt5 PzA2vPTv3/Ay8RxTkgAfzT0rmRoIT5Tc0ndKUMvVd17LhcJPD+HctLVAzCQIoa4A 6Go6V81voBXWtkUX4ZK5qOofc27AkfPcvYciEGhVV6xTK4VS1SAGQlgCMiVVBfEL uYvgzHqYPiok+d84bp5UokKaIvya4QLmkZzcj8Qiw+CMHjxNyKO6cJmCyvAvYHTi u+eofDYdTNUNTkcyZn0Hm2aEaxbkUQZ/UQScxlVnGP8gePH5IMMQTRpJQq6cSvxn VFlh5rF9EdSZQ6nV0ktTJ9WgcQECAwEAAaOCAhEwggINMB0GA1UdDgQWBBSBjPl6 JXqjjd08SOZe/ojwix3pBzAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCLDB9yp0e+1jsZ0dCNJixIKDof3cmz29av/JPRvYuw5MpBb9PAOge2F6/EQcMi lHAJRqNi0P00w2roB4rmNioWcKYeU+3s4Z0zCIF63mc24x2L09SowvvsrNp2jJnU T3HS29oPMzrAQ80Ak4Q7zHRJqq3wnuJo/sxZhnO5lu/1ZctmpG9vERXFazQQ1Aka 6ekravY8UQD3wCqqUwaTf8jVZsdi7QMdmfqg/waEMju823x4UFivlPUgq02GxXRt JMnQFBkK8Y7LX0G8/LxJziCD9zbMPf3MAM7k9W6pElvPkheX2HPPsmoAUEViWvcO D+rdCrMAIvIB7VwOPw2SrR1D -----END CERTIFICATE-----Generated at Sun Oct 19 23:22:28 2025 by rpki-client