$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: YVG5r+xmrRJfQGM+I/MgMyW1a5bwVhsjPwpY5krkcYo= Subject key identifier: 27:AC:F4:DE:B7:64:B2:52:9F:69:E2:4E:A7:79:D7:C6:FD:34:8F:BB Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 1A3F15162A947FBCF0F02B235902836E9FE18CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 08B4 Signing time: Mon 04 May 2026 16:51:21 +0000 Manifest this update: Mon 04 May 2026 16:46:21 +0000 Manifest next update: Tue 05 May 2026 18:41:21 +0000 Files and hashes: 1: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) 2: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) 3: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) 4: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) 5: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=) 6: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: GpdMvuW3RDqNWoOoHuArDRyux/t5fdSQ+vvilUy1LhQ=) 7: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: jp86GZ5uJs1nt7B7jP5jjys6ANjkysGQRisMoJxheYo=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 18:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:3f:15:16:2a:94:7f:bc:f0:f0:2b:23:59:02:83:6e:9f:e1:8c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: May 4 16:46:21 2026 GMT Not After : May 5 18:41:21 2026 GMT Subject: CN=27ACF4DEB764B2529F69E24EA779D7C6FD348FBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:d6:ba:c3:34:a8:e9:5b:b3:01:02:9d:f9:20: d4:78:9e:54:83:ec:61:da:12:24:f9:78:c0:a9:d8: 95:ef:fd:48:6d:ff:79:67:08:76:00:70:e7:7e:36: dd:59:6d:c2:6e:6f:53:8c:2a:03:60:7a:22:27:d8: 7f:c9:b2:cc:86:7c:27:56:c7:6f:da:7d:79:98:4f: db:95:83:6c:30:1a:68:43:3c:fb:52:b7:2b:73:2b: 1c:45:4d:2d:bc:66:9a:c8:06:8f:bd:23:c5:f2:9c: a0:2e:86:82:60:2a:82:bc:b1:28:29:34:80:ab:bb: c3:21:0b:a8:98:bc:a6:4f:10:67:8b:8e:72:0d:2f: d9:eb:a5:db:1d:18:4c:55:38:8f:d8:9a:65:05:89: f0:27:73:4f:e0:85:97:ad:3f:e0:2b:9c:f5:2d:00: d5:52:3d:22:66:c4:d3:0b:0a:a9:5b:7b:55:4e:fd: 19:c3:5d:97:a0:5c:2c:af:fd:dc:64:4b:c2:05:e5: 2f:18:17:1c:4b:3e:f2:8f:ea:63:ba:7a:42:eb:bb: 1a:1c:08:63:54:90:a8:6b:2a:9e:46:6d:d7:53:87: 7d:16:08:3a:21:31:13:28:18:ee:7d:4c:27:9f:16: 70:19:4e:18:b4:5f:f1:ec:0f:c3:33:cd:1c:2d:57: b9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AC:F4:DE:B7:64:B2:52:9F:69:E2:4E:A7:79:D7:C6:FD:34:8F:BB X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f7:1e:b7:8e:b0:00:0e:c4:0b:8b:ba:e2:bf:17:32:64:45: e8:52:e1:73:b7:62:89:be:63:ac:01:6e:21:a7:ed:ad:c9:0d: 40:68:09:ef:a3:1f:a0:2f:e2:9b:59:96:14:d9:4d:90:fb:2e: 19:33:07:ea:b5:06:61:50:95:7d:f8:1d:ae:9d:e0:72:c6:cd: 08:35:49:39:91:0d:f3:9e:a3:70:bc:c0:92:06:02:f7:14:de: b6:2f:46:ad:dc:ac:36:8a:58:b6:8f:53:f3:f3:d6:37:99:36: ff:b9:b4:29:ba:14:bd:67:df:6f:f0:9d:7e:5e:c9:d9:94:12: 0a:73:bb:a5:7f:51:ad:43:05:ce:ca:b2:c1:38:36:14:00:12: 76:6e:5f:6b:38:0e:41:c8:1c:ae:c4:46:bb:4a:09:b7:7c:c6: cb:66:a6:74:88:31:47:be:57:06:19:25:b0:b9:6c:38:23:a9: 63:06:b8:fc:29:74:97:3e:30:0c:b8:d5:53:0a:9d:11:00:42: 23:8c:15:5f:7c:e0:54:2b:b0:c6:08:77:b7:5c:cc:ba:9c:1e: 45:a5:64:29:e7:34:b7:95:a9:c2:78:e3:64:1d:8a:a7:28:08: 7c:32:6c:df:8c:4c:1b:a0:20:23:dc:ec:0b:5f:49:15:86:7a: 93:f0:74:d6 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUGj8VFiqUf7zw8CsjWQKDbp/hjKcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDUwNDE2NDYyMVoX DTI2MDUwNTE4NDEyMVowMzExMC8GA1UEAxMoMjdBQ0Y0REVCNzY0QjI1MjlGNjlF MjRFQTc3OUQ3QzZGRDM0OEZCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAP3WusM0qOlbswECnfkg1HieVIPsYdoSJPl4wKnYle/9SG3/eWcIdgBw5342 3Vltwm5vU4wqA2B6IifYf8myzIZ8J1bHb9p9eZhP25WDbDAaaEM8+1K3K3MrHEVN LbxmmsgGj70jxfKcoC6GgmAqgryxKCk0gKu7wyELqJi8pk8QZ4uOcg0v2eul2x0Y TFU4j9iaZQWJ8CdzT+CFl60/4Cuc9S0A1VI9ImbE0wsKqVt7VU79GcNdl6BcLK/9 3GRLwgXlLxgXHEs+8o/qY7p6Quu7GhwIY1SQqGsqnkZt11OHfRYIOiExEygY7n1M J58WcBlOGLRf8ewPwzPNHC1XuRkCAwEAAaOCAhEwggINMB0GA1UdDgQWBBQnrPTe t2SyUp9p4k6nedfG/TSPuzAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCz9x63jrAADsQLi7rivxcyZEXoUuFzt2KJvmOsAW4hp+2tyQ1AaAnvox+gL+Kb WZYU2U2Q+y4ZMwfqtQZhUJV9+B2uneByxs0INUk5kQ3znqNwvMCSBgL3FN62L0at 3Kw2ili2j1Pz89Y3mTb/ubQpuhS9Z99v8J1+XsnZlBIKc7ulf1GtQwXOyrLBODYU ABJ2bl9rOA5ByByuxEa7Sgm3fMbLZqZ0iDFHvlcGGSWwuWw4I6ljBrj8KXSXPjAM uNVTCp0RAEIjjBVffOBUK7DGCHe3XMy6nB5FpWQp5zS3lanCeONkHYqnKAh8Mmzf jEwboCAj3OwLX0kVhnqT8HTW -----END CERTIFICATE-----Generated at Tue May 5 09:35:11 2026 by rpki-client