$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: +4A+KOFnvtYOXT8fv+GX7E0xMEmfYqAYyQdSLF8DYUU= Subject key identifier: D9:EB:F0:9E:1E:10:97:A2:14:52:85:40:54:D4:35:C4:57:C9:FD:D3 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 74A21AF2D4695F24C228C7FC3138E2BB714F1410 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 06C9 Signing time: Fri 25 Jul 2025 16:46:37 +0000 Manifest this update: Fri 25 Jul 2025 16:41:37 +0000 Manifest next update: Sat 26 Jul 2025 18:04:37 +0000 Files and hashes: 1: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 2: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: 4ST+5apxw6qVsTElhnlAA+wtLA6AHMaTdaSfq8aRET0=) 3: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: f84YcxuwIHK+L8aIEhQTiPH66YcTKAJ7vZZo9VkG0+4=) 4: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: xvKfJAUQahRZdnZG06aeSaekVC7XFXOs5bCAlRAA2tM=) 5: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: BU8Bua231WXjTpoYm2Q4rTG4i8ZpYs4lZ3VI+83DR98=) 6: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: 4JLtXOVAXpPqX6hxUny4rYQ+KzHdr2B7l5TXdy0MdRU=) 7: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: s+okMfZXtj3SK5Jzt/y85zlQTo28EGbzbEC4cKwM5bQ=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 18:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a2:1a:f2:d4:69:5f:24:c2:28:c7:fc:31:38:e2:bb:71:4f:14:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Jul 25 16:41:37 2025 GMT Not After : Jul 26 18:04:37 2025 GMT Subject: CN=D9EBF09E1E1097A21452854054D435C457C9FDD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:3e:4b:ce:ac:42:f2:c4:1f:24:86:60:58: 86:48:73:f4:e9:37:b2:8a:25:10:14:25:4a:df:3e: 61:eb:10:c9:f4:25:40:2c:95:6d:9f:06:ad:92:b7: 79:1f:7d:8a:44:ab:d0:dd:ff:93:e3:95:aa:2d:4b: 8b:f4:db:18:8f:f5:24:81:05:9d:ee:8f:fb:4e:af: f3:75:66:77:e2:f6:86:fa:fa:9f:d5:73:94:4f:c1: ae:4b:3c:40:90:e0:38:12:9a:25:c3:2c:9c:35:2e: 3c:18:a2:34:05:76:02:59:f0:d3:c0:ed:55:15:2c: ac:31:18:15:62:70:bc:df:a3:95:16:8d:a3:35:87: 84:ce:30:65:de:34:3a:cc:79:55:07:b3:c7:4b:9f: b0:0d:b4:7d:06:43:42:df:8c:96:5b:d6:6e:96:31: 9f:1a:46:21:6e:3a:a1:1c:17:b8:b6:13:ce:22:38: d7:9a:fc:a2:63:93:a0:09:9f:d0:63:59:ff:27:57: ef:b9:d9:1d:07:06:57:35:e4:b4:16:dc:bf:dd:cb: 16:98:e2:f0:02:9a:9f:ac:d6:5b:ff:19:36:25:f8: 62:60:c2:f4:b5:0c:90:63:db:64:30:6c:d5:27:94: ce:9c:57:d2:ea:9c:f7:3a:8a:ed:0c:9e:24:d0:9d: 1d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EB:F0:9E:1E:10:97:A2:14:52:85:40:54:D4:35:C4:57:C9:FD:D3 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:91:f6:b2:62:db:2a:c3:c3:b6:96:9d:05:24:74:a6:f2:f5: 04:26:be:66:38:0f:e5:88:a6:10:09:e0:83:d8:94:7f:e5:5f: 3a:6a:a5:d5:02:e2:8d:dd:50:20:fc:f0:05:09:de:c5:4e:c9: df:3e:4e:38:5c:f4:11:05:0b:57:78:5e:67:d7:18:33:62:54: b9:dd:59:a6:dc:47:e2:9a:7e:10:51:e9:08:ee:6c:ac:40:2e: e3:d8:ae:4e:bd:65:f9:4c:9f:de:4c:62:02:76:52:a7:c2:cf: 25:8d:cc:75:21:b8:9d:ce:15:84:6c:c8:c2:79:ae:80:6b:87: 5b:86:32:38:13:3d:20:ee:e4:54:24:2c:bc:55:c7:f6:88:2f: 53:fd:bc:dc:af:67:c0:1d:77:38:be:44:7d:21:ca:16:68:f5: 06:a9:71:be:6c:5a:c2:25:bd:ef:49:52:cd:76:92:6f:f1:b2: c6:6b:04:7d:b1:dc:06:34:84:f7:e1:20:c8:32:df:a4:02:8b: 41:9d:bf:cb:a0:75:78:a3:ca:25:e7:f4:21:8f:b6:69:b8:bb: 0a:ba:42:10:01:fa:95:6c:ec:15:dd:d4:96:73:5b:fa:c6:54: 47:ba:7f:38:b8:c8:77:04:dd:11:3e:6a:e5:35:a7:3a:a6:2a: 6c:70:c2:14 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUdKIa8tRpXyTCKMf8MTjiu3FPFBAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDcyNTE2NDEzN1oX DTI1MDcyNjE4MDQzN1owMzExMC8GA1UEAxMoRDlFQkYwOUUxRTEwOTdBMjE0NTI4 NTQwNTRENDM1QzQ1N0M5RkREMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMK0PkvOrELyxB8khmBYhkhz9Ok3soolEBQlSt8+YesQyfQlQCyVbZ8GrZK3 eR99ikSr0N3/k+OVqi1Li/TbGI/1JIEFne6P+06v83Vmd+L2hvr6n9VzlE/Brks8 QJDgOBKaJcMsnDUuPBiiNAV2Alnw08DtVRUsrDEYFWJwvN+jlRaNozWHhM4wZd40 Osx5VQezx0ufsA20fQZDQt+MllvWbpYxnxpGIW46oRwXuLYTziI415r8omOToAmf 0GNZ/ydX77nZHQcGVzXktBbcv93LFpji8AKan6zWW/8ZNiX4YmDC9LUMkGPbZDBs 1SeUzpxX0uqc9zqK7QyeJNCdHfkCAwEAAaOCAhEwggINMB0GA1UdDgQWBBTZ6/Ce HhCXohRShUBU1DXEV8n90zAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB8kfayYtsqw8O2lp0FJHSm8vUEJr5mOA/liKYQCeCD2JR/5V86aqXVAuKN3VAg /PAFCd7FTsnfPk44XPQRBQtXeF5n1xgzYlS53Vmm3Efimn4QUekI7mysQC7j2K5O vWX5TJ/eTGICdlKnws8ljcx1IbidzhWEbMjCea6Aa4dbhjI4Ez0g7uRUJCy8Vcf2 iC9T/bzcr2fAHXc4vkR9IcoWaPUGqXG+bFrCJb3vSVLNdpJv8bLGawR9sdwGNIT3 4SDIMt+kAotBnb/LoHV4o8ol5/Qhj7ZpuLsKukIQAfqVbOwV3dSWc1v6xlRHun84 uMh3BN0RPmrlNac6pipscMIU -----END CERTIFICATE-----Generated at Sat Jul 26 01:53:49 2025 by rpki-client