$ rpki-client -vvvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: Jeb3/ddCAgKwF7BFHrHI3vtIJvKvYT4qE+y6dy0XJv8= Subject key identifier: EC:3F:F9:5B:2C:96:79:5F:BA:C9:4D:04:CF:F8:A1:14:70:85:36:92 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 15D5ABB39D1CC972D42485F926883E7D7A876823 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 098C Signing time: Tue 22 Sep 2026 12:00:01 +0000 Manifest this update: Tue 22 Sep 2026 11:55:01 +0000 Manifest next update: Wed 23 Sep 2026 15:26:01 +0000 Files and hashes: 1: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: Kd5d5D6As0bcRgXGfiEQ86zbyYy89MgFbc7n+nAmNF8=) 2: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: ja3gafaN7fcs0QLZZ3SLdkGF/aR+2er86cWOTYR52UQ=) 3: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: L5nXEZk8u99uDUdvi4n/OSkLKtMNAHr8KHN8EzMXIG8=) 4: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: pXU5vn2wZaGhdkg63jo+HVbWd8AAV6cZg7n1bhb4dAs=) 5: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: gjxetdU1gVkaep7WfcAWKMpD910g/DFpEB00M3o4vak=) 6: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: Sz8Yqo9El2Bi4eL3F+Huj3SiQQVuMNGxLIiSQIJ4RT8=) 7: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d5:ab:b3:9d:1c:c9:72:d4:24:85:f9:26:88:3e:7d:7a:87:68:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Sep 22 11:55:01 2026 GMT Not After : Sep 23 15:26:01 2026 GMT Subject: CN=EC3FF95B2C96795FBAC94D04CFF8A11470853692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8a:e5:eb:e9:47:19:d8:06:f7:ed:d7:f6:14: 8f:3b:7c:b2:ee:bf:3e:ab:77:59:de:5e:8e:8a:60: 52:ac:10:df:e8:9d:0d:f9:49:d7:7a:1a:32:24:b5: c6:7d:57:cb:a2:4a:e5:f4:61:27:7c:27:b2:22:db: 63:4c:69:96:eb:02:ea:f5:7a:26:8a:f0:29:83:b2: 30:d5:24:f4:46:42:97:a1:d3:24:0f:eb:13:83:63: 32:fd:ec:51:a1:4b:23:ef:21:7d:5f:23:92:7f:5c: c7:ea:75:51:d1:48:93:eb:60:03:28:eb:00:1d:9c: b7:c5:65:2b:9f:41:b9:cb:67:43:ed:24:02:ab:3c: 6b:ab:de:c5:cf:0f:f4:2b:90:a9:da:cb:e5:22:80: 47:70:d6:e8:8b:65:20:bb:1a:fb:61:40:11:20:75: 3c:41:f8:54:98:9c:53:67:18:3d:3a:ea:70:18:cf: 3c:78:7f:cc:12:77:95:e7:99:df:21:8e:e8:94:1f: 1a:78:c5:e4:ce:d9:9e:72:0b:4b:10:ce:19:92:46: 69:e9:f7:8e:e7:fe:18:dc:f9:84:56:04:36:eb:53: 53:5d:df:4f:0e:40:51:c9:fa:40:98:af:53:b4:f5: 5d:56:13:e7:c8:80:ab:52:fd:ff:91:f3:87:c5:12: 92:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3F:F9:5B:2C:96:79:5F:BA:C9:4D:04:CF:F8:A1:14:70:85:36:92 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d5:ac:fd:1e:10:16:de:3c:9f:2f:79:bf:99:e2:ac:02:8f: f7:5e:6e:7d:1e:97:db:af:95:c1:ea:18:52:2d:73:9d:82:ab: 0e:2d:90:1e:a5:0f:a2:6d:96:d7:d8:1f:0f:4a:7a:5a:51:74: d5:9c:8d:c8:7b:8a:7e:4d:6f:55:2a:55:6b:b5:35:28:73:a9: 12:40:5a:59:5f:62:a5:97:c1:07:40:9f:64:1f:1e:65:18:09: a3:57:fa:a5:f2:39:1b:5e:47:3c:2a:db:b7:a0:2c:e9:83:7a: 56:95:cd:49:f9:52:86:91:2b:ff:83:6e:a5:6e:8b:e0:ea:6e: 96:ac:10:a0:57:64:2e:11:74:ad:4a:33:fd:cd:b8:71:83:51: 7a:f3:19:7f:b2:35:2d:0f:34:80:ee:fc:b1:08:19:ec:63:57: 02:05:8e:da:22:de:be:2e:23:51:3a:fb:54:c1:f6:22:16:d1: ce:d4:09:da:81:4e:ee:65:37:3b:76:67:51:41:94:39:ae:bd: 44:7e:8a:04:90:b1:bd:2a:5e:9c:e8:a1:b6:a9:77:f4:9d:5b: 5d:c0:ba:ba:14:79:6a:b1:20:e1:9f:db:b2:38:59:4d:b1:39: 01:4d:f1:39:7c:db:0e:de:3e:d5:8b:41:35:60:68:8b:c2:0c: 09:76:46:c8 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUFdWrs50cyXLUJIX5Jog+fXqHaCMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDkyMjExNTUwMVoX DTI2MDkyMzE1MjYwMVowMzExMC8GA1UEAxMoRUMzRkY5NUIyQzk2Nzk1RkJBQzk0 RDA0Q0ZGOEExMTQ3MDg1MzY5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOSK5evpRxnYBvft1/YUjzt8su6/Pqt3Wd5ejopgUqwQ3+idDflJ13oaMiS1 xn1Xy6JK5fRhJ3wnsiLbY0xplusC6vV6JorwKYOyMNUk9EZCl6HTJA/rE4NjMv3s UaFLI+8hfV8jkn9cx+p1UdFIk+tgAyjrAB2ct8VlK59BuctnQ+0kAqs8a6vexc8P 9CuQqdrL5SKAR3DW6ItlILsa+2FAESB1PEH4VJicU2cYPTrqcBjPPHh/zBJ3leeZ 3yGO6JQfGnjF5M7ZnnILSxDOGZJGaen3juf+GNz5hFYENutTU13fTw5AUcn6QJiv U7T1XVYT58iAq1L9/5Hzh8USkp8CAwEAAaOCAhEwggINMB0GA1UdDgQWBBTsP/lb LJZ5X7rJTQTP+KEUcIU2kjAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAA1az9HhAW3jyfL3m/meKsAo/3Xm59Hpfbr5XB6hhSLXOdgqsOLZAepQ+ibZbX 2B8PSnpaUXTVnI3Ie4p+TW9VKlVrtTUoc6kSQFpZX2Kll8EHQJ9kHx5lGAmjV/ql 8jkbXkc8Ktu3oCzpg3pWlc1J+VKGkSv/g26lbovg6m6WrBCgV2QuEXStSjP9zbhx g1F68xl/sjUtDzSA7vyxCBnsY1cCBY7aIt6+LiNROvtUwfYiFtHO1AnagU7uZTc7 dmdRQZQ5rr1EfooEkLG9Kl6c6KG2qXf0nVtdwLq6FHlqsSDhn9uyOFlNsTkBTfE5 fNsO3j7Vi0E1YGiLwgwJdkbI -----END CERTIFICATE-----Generated at Wed Sep 23 02:04:35 2026 by rpki-client