$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: DlqLSh9FteQLRL/ofUTBjBC9nKFEYKXu+tsxg7IJHds= Subject key identifier: 04:75:AF:95:5C:29:2F:94:B8:86:B3:6D:21:E7:D9:85:9B:A1:B8:CD Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 263C4EB0A870231C20D8C2AEC01039693A6B1B7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 0624 Signing time: Tue 15 Apr 2025 12:00:02 +0000 Manifest this update: Tue 15 Apr 2025 11:55:02 +0000 Manifest next update: Wed 16 Apr 2025 13:39:02 +0000 Files and hashes: 1: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: xvKfJAUQahRZdnZG06aeSaekVC7XFXOs5bCAlRAA2tM=) 2: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: 4JLtXOVAXpPqX6hxUny4rYQ+KzHdr2B7l5TXdy0MdRU=) 3: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: BU8Bua231WXjTpoYm2Q4rTG4i8ZpYs4lZ3VI+83DR98=) 4: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: Hk545dpgPWa1TNBsGM79xm83wFhnP1Wc0cG7NPHqhMM=) 5: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: s+okMfZXtj3SK5Jzt/y85zlQTo28EGbzbEC4cKwM5bQ=) 6: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: 79U4LQioeCFbd5WRLEHrqFmf37k5/kJmnQiLgyec4zM=) 7: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 13:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3c:4e:b0:a8:70:23:1c:20:d8:c2:ae:c0:10:39:69:3a:6b:1b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Apr 15 11:55:02 2025 GMT Not After : Apr 16 13:39:02 2025 GMT Subject: CN=0475AF955C292F94B886B36D21E7D9859BA1B8CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:df:17:6b:2b:78:d0:2f:48:04:3d:0e:ba:4c: a2:3f:6c:ad:cf:a4:77:0e:89:d3:c5:d2:1a:68:de: 13:2d:67:a7:d5:1c:89:08:c5:de:7d:e9:84:45:c2: 70:53:f9:10:fb:59:dc:ca:44:3a:e7:0c:00:bb:a5: 88:dc:e5:68:8a:c5:66:0d:22:80:a7:a9:ce:b7:fd: 32:b8:89:09:75:59:71:68:ff:b5:ba:a9:d0:5d:8a: 0a:3c:84:fa:d9:eb:c3:61:37:c3:b1:e4:7d:6e:5c: a6:66:6c:26:8b:4a:cb:52:75:f0:43:18:b4:5c:ba: 40:d8:20:f0:e1:ce:ea:ef:43:80:54:3a:ee:fb:b5: c8:85:1c:58:a2:58:3d:8a:ff:3d:90:00:8b:db:41: c9:5a:01:c5:5c:1d:ec:b8:e6:52:d0:2c:ab:35:3b: ac:d4:07:f1:11:a4:ca:89:79:a2:9c:56:a8:4d:92: 97:0f:36:07:11:24:ab:d5:db:28:db:96:eb:a2:87: 5d:d8:b4:25:c8:96:f7:b4:61:34:8f:2e:d3:38:3b: 92:e9:d9:6d:16:be:2e:ce:34:2a:09:de:80:52:15: 12:67:fd:f1:44:29:b3:c6:f5:0d:ed:6d:72:0e:0a: 40:1e:53:ca:1f:89:97:18:9e:7a:a8:9e:b6:07:6e: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:75:AF:95:5C:29:2F:94:B8:86:B3:6D:21:E7:D9:85:9B:A1:B8:CD X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:4f:6f:e7:9c:83:7f:71:d7:98:d3:c8:0f:58:1c:b8:be:10: db:ba:ef:1c:8d:ce:6a:1e:e7:2c:4e:96:32:c2:8d:49:4c:3e: 00:81:84:59:c1:28:b5:a0:16:71:f7:d3:41:01:8f:d7:f9:8d: e7:95:b9:b3:27:62:4f:d9:b7:f0:4c:61:03:fb:5c:c6:d4:7f: 77:85:8d:e0:5c:56:c1:30:bb:c2:fd:55:24:ef:09:5c:20:7f: 4f:79:bd:85:9b:48:c6:a9:37:a8:d5:e5:bc:77:c7:1d:d6:65: d6:30:9a:39:d2:b2:7c:74:0c:eb:e9:5f:ce:27:39:ec:bd:60: fa:08:71:22:25:df:18:fa:c6:68:85:3a:fb:0f:cd:1a:36:d6: 48:d3:59:79:8e:50:a2:8d:d3:ec:e1:22:86:38:0c:9e:11:89: 90:e1:8e:41:29:c8:9d:c1:49:da:6e:47:5b:5c:4b:20:f8:4b: c2:a3:c0:ae:f1:68:4b:ea:ad:82:90:d3:11:92:5c:a0:96:a8: 0f:4c:ea:5f:be:69:42:b4:44:00:21:97:8e:bd:28:22:0c:85: d5:80:4c:3f:94:48:b1:9b:67:3e:a3:5d:b0:d6:35:ae:7b:f4: eb:24:3f:d2:19:2d:e3:98:6a:36:87:07:d2:31:af:d0:e6:4e: 51:da:ad:24 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUJjxOsKhwIxwg2MKuwBA5aTprG30wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDQxNTExNTUwMloX DTI1MDQxNjEzMzkwMlowMzExMC8GA1UEAxMoMDQ3NUFGOTU1QzI5MkY5NEI4ODZC MzZEMjFFN0Q5ODU5QkExQjhDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLfF2sreNAvSAQ9DrpMoj9src+kdw6J08XSGmjeEy1np9UciQjF3n3phEXC cFP5EPtZ3MpEOucMALuliNzlaIrFZg0igKepzrf9MriJCXVZcWj/tbqp0F2KCjyE +tnrw2E3w7HkfW5cpmZsJotKy1J18EMYtFy6QNgg8OHO6u9DgFQ67vu1yIUcWKJY PYr/PZAAi9tByVoBxVwd7LjmUtAsqzU7rNQH8RGkyol5opxWqE2Slw82BxEkq9Xb KNuW66KHXdi0JciW97RhNI8u0zg7kunZbRa+Ls40KgnegFIVEmf98UQps8b1De1t cg4KQB5Tyh+JlxieeqietgducZcCAwEAAaOCAhEwggINMB0GA1UdDgQWBBQEda+V XCkvlLiGs20h59mFm6G4zTAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQByT2/nnIN/cdeY08gPWBy4vhDbuu8cjc5qHucsTpYywo1JTD4AgYRZwSi1oBZx 99NBAY/X+Y3nlbmzJ2JP2bfwTGED+1zG1H93hY3gXFbBMLvC/VUk7wlcIH9Peb2F m0jGqTeo1eW8d8cd1mXWMJo50rJ8dAzr6V/OJznsvWD6CHEiJd8Y+sZohTr7D80a NtZI01l5jlCijdPs4SKGOAyeEYmQ4Y5BKcidwUnabkdbXEsg+EvCo8Cu8WhL6q2C kNMRklyglqgPTOpfvmlCtEQAIZeOvSgiDIXVgEw/lEixm2c+o12w1jWue/TrJD/S GS3jmGo2hwfSMa/Q5k5R2q0k -----END CERTIFICATE-----Generated at Wed Apr 16 02:31:08 2025 by rpki-client