$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: P7qyXANfOZp/oc9TnGUwm2KsOJbLXcXY1CnMPeiqFuE= Subject key identifier: 6C:40:E2:D3:6A:32:8F:28:54:D6:85:2E:36:32:28:9D:17:D4:49:E3 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 241CB08B97A44CB5EBEF314D51577C88EB5D3327 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 06C5 Signing time: Wed 23 Jul 2025 07:03:32 +0000 Manifest this update: Wed 23 Jul 2025 06:58:32 +0000 Manifest next update: Thu 24 Jul 2025 09:29:32 +0000 Files and hashes: 1: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: xvKfJAUQahRZdnZG06aeSaekVC7XFXOs5bCAlRAA2tM=) 2: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 3: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: 4JLtXOVAXpPqX6hxUny4rYQ+KzHdr2B7l5TXdy0MdRU=) 4: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: BU8Bua231WXjTpoYm2Q4rTG4i8ZpYs4lZ3VI+83DR98=) 5: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: s+okMfZXtj3SK5Jzt/y85zlQTo28EGbzbEC4cKwM5bQ=) 6: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: TANGbSN22qkrrr6w80bErsPQdD8LMhQIyKu5b5aDD24=) 7: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: T2oouqLdW8/HEdNDKcpXueGb9WviDiuNbMXQl0utXwM=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 09:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1c:b0:8b:97:a4:4c:b5:eb:ef:31:4d:51:57:7c:88:eb:5d:33:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Jul 23 06:58:32 2025 GMT Not After : Jul 24 09:29:32 2025 GMT Subject: CN=6C40E2D36A328F2854D6852E3632289D17D449E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3a:c4:e8:88:3c:af:43:cb:1c:72:61:8c:bc: de:e1:37:40:72:7f:6a:af:ad:25:8b:48:df:c0:f1: 49:87:a7:af:6b:15:a4:dd:fb:d3:12:39:b2:80:d0: 98:9b:0a:87:71:4c:5c:a2:7c:e8:02:80:0b:5e:25: ce:6a:6e:dc:f3:df:63:31:42:eb:71:ac:bc:13:fc: 09:6a:ad:fe:98:88:90:fe:b5:87:35:d0:92:07:e5: e3:0d:11:10:ce:01:43:52:5f:20:60:ec:37:68:a9: 9e:ea:5a:94:06:3e:2d:a1:fc:c4:23:14:a2:bc:45: 7b:3b:fa:54:55:94:da:c4:f4:a0:9a:34:a0:6c:b6: 3c:47:cb:48:84:fd:d3:ca:62:a2:91:52:1d:e3:38: 5f:50:73:ef:fc:14:3e:49:52:61:23:1d:4b:9d:cf: 6d:92:17:15:cb:fe:c2:a5:e2:4f:e7:e6:03:f8:ee: 88:a9:00:65:eb:3d:8f:cd:99:7b:5f:95:d4:c9:b0: 81:d7:16:3f:96:64:71:dc:90:44:77:ca:b9:01:d5: 88:42:3c:00:81:5b:54:51:a9:f6:5f:e9:f2:7d:37: 5e:24:4f:cf:99:d4:ba:37:33:d6:4e:33:3c:f8:7b: 64:9e:92:43:be:58:4d:66:da:5f:25:7a:06:01:6f: 55:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:40:E2:D3:6A:32:8F:28:54:D6:85:2E:36:32:28:9D:17:D4:49:E3 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:89:b5:d2:f9:4e:d8:e3:66:fc:cf:b3:be:4f:35:49:3d:96: 6e:41:04:34:ab:f5:08:22:3a:dd:53:28:8e:f7:7a:77:fa:76: 96:6e:f2:c0:35:d5:2b:c9:e4:f7:13:1f:6e:00:8d:a0:c2:dc: 1e:21:5b:8f:f9:c1:e6:7b:41:fd:3d:ad:0c:5f:dc:bb:00:97: f4:ff:89:c8:bb:99:62:19:17:44:2f:4f:74:01:54:6e:45:55: 1b:cf:e8:cb:76:b6:67:be:9b:46:bc:ac:60:d4:e8:30:b9:bd: b6:52:f5:25:e4:85:8f:54:84:e2:65:69:ca:34:fc:32:12:96: 9a:f9:63:84:b0:fb:1a:96:85:53:4f:9c:3a:ce:5d:53:e2:26: b3:7d:7f:2f:4f:33:16:56:36:b7:b0:86:a9:f9:8e:59:8b:c5: 59:9b:f3:68:b6:ff:1f:d9:16:51:f6:00:6d:f5:68:71:61:17: 25:10:70:40:9b:b6:36:a2:ba:74:46:bb:01:0a:55:61:f0:25: 41:36:c7:9d:42:c4:65:57:a1:68:7c:74:fa:31:9c:1b:e4:35: 6d:4c:59:0c:5d:49:b9:60:6f:45:13:ef:63:6b:b2:74:53:40: f3:75:06:2d:28:d0:a6:37:bb:9e:e2:f2:6f:a8:a2:fd:59:7a: 76:a8:b2:cc -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUJBywi5ekTLXr7zFNUVd8iOtdMycwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDcyMzA2NTgzMloX DTI1MDcyNDA5MjkzMlowMzExMC8GA1UEAxMoNkM0MEUyRDM2QTMyOEYyODU0RDY4 NTJFMzYzMjI4OUQxN0Q0NDlFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANE6xOiIPK9DyxxyYYy83uE3QHJ/aq+tJYtI38DxSYenr2sVpN370xI5soDQ mJsKh3FMXKJ86AKAC14lzmpu3PPfYzFC63GsvBP8CWqt/piIkP61hzXQkgfl4w0R EM4BQ1JfIGDsN2ipnupalAY+LaH8xCMUorxFezv6VFWU2sT0oJo0oGy2PEfLSIT9 08piopFSHeM4X1Bz7/wUPklSYSMdS53PbZIXFcv+wqXiT+fmA/juiKkAZes9j82Z e1+V1MmwgdcWP5ZkcdyQRHfKuQHViEI8AIFbVFGp9l/p8n03XiRPz5nUujcz1k4z PPh7ZJ6SQ75YTWbaXyV6BgFvVUECAwEAAaOCAhEwggINMB0GA1UdDgQWBBRsQOLT ajKPKFTWhS42MiidF9RJ4zAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBOibXS+U7Y42b8z7O+TzVJPZZuQQQ0q/UIIjrdUyiO93p3+naWbvLANdUryeT3 Ex9uAI2gwtweIVuP+cHme0H9Pa0MX9y7AJf0/4nIu5liGRdEL090AVRuRVUbz+jL drZnvptGvKxg1Ogwub22UvUl5IWPVITiZWnKNPwyEpaa+WOEsPsaloVTT5w6zl1T 4iazfX8vTzMWVja3sIap+Y5Zi8VZm/Notv8f2RZR9gBt9WhxYRclEHBAm7Y2orp0 RrsBClVh8CVBNsedQsRlV6FofHT6MZwb5DVtTFkMXUm5YG9FE+9ja7J0U0DzdQYt KNCmN7ue4vJvqKL9WXp2qLLM -----END CERTIFICATE-----Generated at Wed Jul 23 08:13:17 2025 by rpki-client