$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: DNTZqAmgdNzCmH8/j0/UQ6CY0uJhbnZht93UOgvWPnM= Subject key identifier: A7:79:F8:A1:E6:5D:AD:F5:76:D3:3B:FF:E5:FA:ED:3C:A4:A9:27:9A Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 7BA6E36FB4278BC46EE6BB89D5DC6BAA4C0900B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 06C6 Signing time: Thu 24 Jul 2025 00:00:02 +0000 Manifest this update: Wed 23 Jul 2025 23:55:02 +0000 Manifest next update: Fri 25 Jul 2025 01:52:02 +0000 Files and hashes: 1: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: s+okMfZXtj3SK5Jzt/y85zlQTo28EGbzbEC4cKwM5bQ=) 2: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 3: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: 4JLtXOVAXpPqX6hxUny4rYQ+KzHdr2B7l5TXdy0MdRU=) 4: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: BU8Bua231WXjTpoYm2Q4rTG4i8ZpYs4lZ3VI+83DR98=) 5: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: xvKfJAUQahRZdnZG06aeSaekVC7XFXOs5bCAlRAA2tM=) 6: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: essxQXlxfaKy+Vtlc1R6NTj5frbjTK8eaEv93IPGXAE=) 7: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: BgpRuTp4N3FvLjPwvvEtKtwG64pokAYRKRLwe5Kyxrw=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 01:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a6:e3:6f:b4:27:8b:c4:6e:e6:bb:89:d5:dc:6b:aa:4c:09:00:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Jul 23 23:55:02 2025 GMT Not After : Jul 25 01:52:02 2025 GMT Subject: CN=A779F8A1E65DADF576D33BFFE5FAED3CA4A9279A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:db:60:c1:a3:2a:40:e9:45:98:16:d9:56: 5c:41:43:83:9b:ac:da:c1:f0:cd:a6:23:60:ff:7a: 07:58:f3:7c:49:3a:37:2f:3f:b6:8b:22:0d:a3:7e: d6:d0:80:fa:cb:0e:cb:41:9c:be:51:53:2a:0f:d3: 43:ef:f3:a2:1c:1c:a5:ed:b7:b7:f5:73:44:80:72: 1d:a1:9b:6e:b1:d3:19:1a:c0:82:0c:a7:67:1b:da: 30:77:bb:8a:5e:5d:a6:4b:42:ac:43:c3:42:20:69: 83:37:a9:f8:ac:6d:7e:8d:60:1e:21:7f:f3:18:60: e9:ff:b8:36:70:82:18:f0:4b:d1:c4:ac:7e:5e:63: 0a:88:5c:f7:d1:7d:9a:0a:94:88:74:a1:50:ad:de: 6d:ff:16:30:a4:25:82:1d:16:74:ee:f5:e6:16:47: 49:1e:5f:56:18:94:2f:fb:52:69:fb:ea:ff:68:66: e8:1c:2a:3b:fe:18:6b:1c:58:03:25:e2:1c:65:f1: fc:d7:6d:97:31:76:c2:59:57:f4:65:94:8d:e3:ce: 7e:ed:c0:31:7c:26:5d:d9:60:8f:d0:ca:ee:de:54: 70:e7:be:8b:d2:a0:01:19:43:ec:4f:ea:50:c7:04: 50:62:f9:4f:c8:c0:fd:98:4b:12:a0:db:40:5b:d9: b8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:79:F8:A1:E6:5D:AD:F5:76:D3:3B:FF:E5:FA:ED:3C:A4:A9:27:9A X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:76:a3:7d:3b:81:bf:be:3f:a1:ca:d2:ea:b2:99:00:63:5a: 03:63:77:72:88:89:26:45:6c:93:00:3f:eb:a6:1f:51:f3:25: 20:1e:9d:ad:80:f7:62:cc:ad:c3:8f:ac:ec:c9:e7:94:14:7a: 59:33:8e:4d:96:6c:ad:fc:a9:ba:1e:b7:dc:79:a6:d9:35:e4: 13:f2:5f:ff:c4:9a:68:db:a8:c0:dc:8c:3b:c9:53:be:ce:70: 7c:fc:71:f2:21:d8:9f:f4:ae:36:85:52:f0:9f:21:8f:04:5e: 12:e7:a9:91:34:49:ee:63:d2:36:c9:4f:b7:14:eb:fe:85:0b: af:9f:df:0e:fa:36:8a:a8:37:65:87:49:75:ee:57:a1:1a:7e: 53:e2:e0:14:d6:d1:63:9e:91:76:b3:b0:6a:31:b7:09:51:18: d9:ba:f8:bd:50:e1:e4:5e:08:b3:00:9e:16:df:cb:25:55:46: 9b:9f:3a:c3:fa:3f:35:5f:85:0b:12:a5:e4:5e:c1:50:b1:2b: bd:bf:05:03:23:a6:0d:e0:cd:4a:e2:40:dd:4f:26:30:dd:71: 38:a8:98:f6:8f:ab:cb:b0:5f:df:bb:49:f7:87:96:89:93:cd: 91:e7:bf:a7:b9:94:54:31:a5:67:80:4b:0e:3c:57:d9:12:e3: 17:d7:d1:71 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUe6bjb7Qni8Ru5ruJ1dxrqkwJALkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDcyMzIzNTUwMloX DTI1MDcyNTAxNTIwMlowMzExMC8GA1UEAxMoQTc3OUY4QTFFNjVEQURGNTc2RDMz QkZGRTVGQUVEM0NBNEE5Mjc5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMA122DBoypA6UWYFtlWXEFDg5us2sHwzaYjYP96B1jzfEk6Ny8/tosiDaN+ 1tCA+ssOy0GcvlFTKg/TQ+/zohwcpe23t/VzRIByHaGbbrHTGRrAggynZxvaMHe7 il5dpktCrEPDQiBpgzep+Kxtfo1gHiF/8xhg6f+4NnCCGPBL0cSsfl5jCohc99F9 mgqUiHShUK3ebf8WMKQlgh0WdO715hZHSR5fVhiUL/tSafvq/2hm6BwqO/4YaxxY AyXiHGXx/NdtlzF2wllX9GWUjePOfu3AMXwmXdlgj9DK7t5UcOe+i9KgARlD7E/q UMcEUGL5T8jA/ZhLEqDbQFvZuN0CAwEAAaOCAhEwggINMB0GA1UdDgQWBBSnefih 5l2t9XbTO//l+u08pKknmjAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC1dqN9O4G/vj+hytLqspkAY1oDY3dyiIkmRWyTAD/rph9R8yUgHp2tgPdizK3D j6zsyeeUFHpZM45Nlmyt/Km6HrfceabZNeQT8l//xJpo26jA3Iw7yVO+znB8/HHy Idif9K42hVLwnyGPBF4S56mRNEnuY9I2yU+3FOv+hQuvn98O+jaKqDdlh0l17leh Gn5T4uAU1tFjnpF2s7BqMbcJURjZuvi9UOHkXgizAJ4W38slVUabnzrD+j81X4UL EqXkXsFQsSu9vwUDI6YN4M1K4kDdTyYw3XE4qJj2j6vLsF/fu0n3h5aJk82R57+n uZRUMaVngEsOPFfZEuMX19Fx -----END CERTIFICATE-----Generated at Thu Jul 24 04:57:11 2025 by rpki-client