$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: PYBWm5EQIzS05cAsp0m82cs5TYDwRYi3ByR4bza+HXM= Subject key identifier: 08:FA:1D:6A:20:28:65:71:81:74:CF:95:76:DC:46:B9:46:9C:0B:8B Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 0A74FEFE766C583A46AF1D1CA4F96A592BDBA36C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 0718 Signing time: Tue 09 Sep 2025 12:00:02 +0000 Manifest this update: Tue 09 Sep 2025 11:55:02 +0000 Manifest next update: Wed 10 Sep 2025 12:47:02 +0000 Files and hashes: 1: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: bfFBDoWkmM68ltA1CYkVqULXefNW+DgTfpMK7q6SgV0=) 2: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: W/YWBwHB9nEUr2e6exMFrYvYtIj+XrWI/AZLZ9m17wU=) 3: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) 4: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 5: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) 6: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) 7: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 12:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:74:fe:fe:76:6c:58:3a:46:af:1d:1c:a4:f9:6a:59:2b:db:a3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Sep 9 11:55:02 2025 GMT Not After : Sep 10 12:47:02 2025 GMT Subject: CN=08FA1D6A202865718174CF9576DC46B9469C0B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:86:04:12:3f:16:1a:c0:0e:d3:97:49:a0:8f: b6:f5:53:02:35:d9:2d:be:69:a5:1d:f4:75:bf:ee: 58:3c:23:74:f6:46:3b:9a:fa:b7:97:a8:0e:eb:6f: d5:dc:e0:0b:38:9c:58:13:2d:06:d5:64:fb:09:57: c3:00:0a:65:9a:e5:59:67:dd:30:0e:ed:e1:c4:5e: 74:11:4c:dd:c6:d7:2f:46:af:1a:22:18:69:a8:fb: 58:88:38:f8:b5:06:5f:00:81:b0:bd:7e:5e:22:05: fc:c9:79:7f:9e:7d:f6:2d:a0:bc:4e:c1:df:53:68: 79:cb:0b:2a:f6:77:fb:55:4f:81:80:90:9f:cf:3f: b5:30:90:a8:22:85:85:65:2b:8e:bb:91:df:d4:92: 69:2a:5e:c6:07:7b:16:11:84:15:5a:66:1d:b6:6f: f5:0b:0c:f3:58:f1:e8:89:0b:d1:95:0e:ff:0d:eb: 7c:c4:14:b9:2d:9b:b0:57:a4:a1:85:a9:92:4b:26: 01:77:a6:70:ff:27:98:12:18:4a:f4:2d:20:01:42: 88:4f:dd:9e:7f:76:76:7b:f6:00:83:46:aa:94:77: 11:71:66:79:44:b2:36:5d:8e:df:4e:3c:3f:77:a3: ef:cd:5b:bf:5e:c5:cc:14:56:fb:96:40:17:19:51: 2a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FA:1D:6A:20:28:65:71:81:74:CF:95:76:DC:46:B9:46:9C:0B:8B X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0e:05:77:ec:ca:5b:44:f4:f5:b5:2e:e4:1e:16:56:bf:80: 36:61:32:ac:0f:f5:10:a4:c5:ea:d9:18:57:6b:85:fc:37:86: 57:1b:99:6c:8c:e4:a7:32:20:cc:14:1f:f6:81:0b:9e:2a:ee: b0:57:d1:ef:b3:56:15:75:04:4a:94:5e:85:54:58:ba:c8:ea: 42:f7:4c:31:33:a5:f9:cd:ef:d8:9e:76:ed:49:7a:b8:69:3b: 2b:10:96:bc:40:02:d4:a2:49:eb:1e:1c:d1:0b:ee:32:dd:f3: b9:b9:a2:0f:e0:14:a7:0d:c7:18:3c:93:fa:a3:21:91:ab:de: b7:22:7a:1a:4d:b8:ef:d9:80:27:7f:35:11:58:b8:06:df:39: 97:b7:95:f2:e0:5e:06:b5:da:85:86:69:af:93:bb:a9:cf:63: a8:b7:54:d5:b3:73:9d:b6:ca:6c:63:4d:0c:67:9c:39:28:bb: a5:95:9f:bc:ab:10:36:e3:2e:c0:12:a1:ad:11:ce:3c:62:b0: 0e:a6:e0:d5:a6:02:27:aa:fe:7b:13:a3:a6:bd:28:d4:32:46: 49:a2:8c:23:ff:e7:c8:a6:d9:4d:55:56:93:c4:f5:fb:24:54: af:9f:2e:f4:dd:b3:49:d5:11:77:af:de:c8:5b:a2:1e:33:1a: dc:cd:2a:81 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUCnT+/nZsWDpGrx0cpPlqWSvbo2wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDkwOTExNTUwMloX DTI1MDkxMDEyNDcwMlowMzExMC8GA1UEAxMoMDhGQTFENkEyMDI4NjU3MTgxNzRD Rjk1NzZEQzQ2Qjk0NjlDMEI4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqGBBI/FhrADtOXSaCPtvVTAjXZLb5ppR30db/uWDwjdPZGO5r6t5eoDutv 1dzgCzicWBMtBtVk+wlXwwAKZZrlWWfdMA7t4cRedBFM3cbXL0avGiIYaaj7WIg4 +LUGXwCBsL1+XiIF/Ml5f5599i2gvE7B31NoecsLKvZ3+1VPgYCQn88/tTCQqCKF hWUrjruR39SSaSpexgd7FhGEFVpmHbZv9QsM81jx6IkL0ZUO/w3rfMQUuS2bsFek oYWpkksmAXemcP8nmBIYSvQtIAFCiE/dnn92dnv2AINGqpR3EXFmeUSyNl2O3048 P3ej781bv17FzBRW+5ZAFxlRKmsCAwEAAaOCAhEwggINMB0GA1UdDgQWBBQI+h1q IChlcYF0z5V23Ea5RpwLizAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/DgV37MpbRPT1tS7kHhZWv4A2YTKsD/UQpMXq2RhXa4X8N4ZXG5lsjOSnMiDM FB/2gQueKu6wV9Hvs1YVdQRKlF6FVFi6yOpC90wxM6X5ze/YnnbtSXq4aTsrEJa8 QALUoknrHhzRC+4y3fO5uaIP4BSnDccYPJP6oyGRq963InoaTbjv2YAnfzURWLgG 3zmXt5Xy4F4GtdqFhmmvk7upz2Oot1TVs3OdtspsY00MZ5w5KLullZ+8qxA24y7A EqGtEc48YrAOpuDVpgInqv57E6OmvSjUMkZJoowj/+fIptlNVVaTxPX7JFSvny70 3bNJ1RF3r97IW6IeMxrczSqB -----END CERTIFICATE-----Generated at Wed Sep 10 00:48:54 2025 by rpki-client