$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: adhyiJpWpeYIcm/6dTS9sPJgJePJxKq7GSiWwov8Vnw= Subject key identifier: 18:1E:52:34:EC:A3:72:27:6E:8C:DC:6F:36:24:CF:3A:6C:3F:35:D7 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 1EF58A9F5A3F0E5FE0683E9AE83DF18FAFFAA967 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 0909 Signing time: Sun 21 Jun 2026 06:12:38 +0000 Manifest this update: Sun 21 Jun 2026 06:07:38 +0000 Manifest next update: Mon 22 Jun 2026 06:47:38 +0000 Files and hashes: 1: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) 2: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: YbxVlQik8sJLqDjIMDWMEyBCusZpP6dRzkQYfPXmZnQ=) 3: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) 4: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: wfZZc0P/yXfGDda/oEbN2+gQ9tT3XcdgZ0YjM8EkHpU=) 5: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=) 6: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) 7: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 06:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f5:8a:9f:5a:3f:0e:5f:e0:68:3e:9a:e8:3d:f1:8f:af:fa:a9:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Jun 21 06:07:38 2026 GMT Not After : Jun 22 06:47:38 2026 GMT Subject: CN=181E5234ECA372276E8CDC6F3624CF3A6C3F35D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:87:69:e1:82:56:32:6f:1d:17:2f:e8:f3: 39:2a:00:9b:75:ff:b6:a2:d9:76:b5:8e:e1:ea:06: d9:4b:a8:96:88:9a:c7:26:6f:f9:2c:4d:ec:de:35: e8:55:aa:8a:cc:7c:25:59:0f:30:90:b6:2d:21:49: dd:1c:73:60:7d:01:7c:f7:7f:b0:ae:6b:91:d5:e7: f2:b7:84:a3:ae:19:cf:d5:98:17:dc:86:fe:ec:4c: 8a:f3:ce:d6:2d:a0:f3:6b:38:59:32:1c:00:75:76: 9d:ea:fc:66:b2:56:93:c4:a9:d9:bd:63:c7:b9:b3: 80:db:18:b6:52:d0:ab:cb:2c:a6:9f:8d:bf:ca:b2: 95:98:a0:49:d8:0c:7a:9d:6a:a2:00:1e:e3:b0:33: 0f:ac:40:7b:b8:82:eb:64:fc:a4:39:3e:c5:d4:48: 8c:32:61:6c:7c:df:13:9a:bd:b8:0f:7a:40:4e:ff: e0:f4:73:42:a6:1f:1a:00:95:fa:d4:ba:2d:f8:aa: 0c:b6:0d:07:50:f7:16:c7:8d:55:99:e8:e2:0c:64: bb:51:0a:0e:bb:9b:f7:c7:eb:de:92:b0:2b:cd:01: 8e:73:f5:d9:c3:50:25:2c:3f:d9:dd:e7:c1:af:0d: 9a:f9:06:ab:f5:a1:54:b0:b0:d8:21:27:39:aa:53: fc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1E:52:34:EC:A3:72:27:6E:8C:DC:6F:36:24:CF:3A:6C:3F:35:D7 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:25:41:71:a0:aa:dc:a9:74:8f:7b:12:ad:b6:8f:bc:7b:6f: d3:9e:8b:19:93:7d:22:3c:2f:bf:5a:3c:7f:83:33:81:01:a0: bc:98:7f:eb:54:05:ac:c1:a7:1d:47:d2:53:01:9f:ac:ea:cb: 5f:22:06:86:bd:a2:76:e4:4f:22:53:2f:92:97:62:3c:bf:6a: 40:32:aa:35:2c:61:11:f9:94:82:87:cc:21:17:b4:a8:8e:7d: 97:a5:a2:92:ce:b8:98:e4:90:78:6b:ae:b5:6d:68:47:22:a1: 7b:18:99:d3:5c:1b:1f:9d:9f:e4:cb:95:01:8a:d3:26:03:0d: 4d:e6:7a:96:9a:97:43:13:85:a8:df:73:41:94:eb:19:a0:79: f0:5f:f1:4e:12:f0:04:3e:f1:58:de:e5:02:00:2b:04:41:0e: 93:5c:43:42:53:6e:13:1f:e5:4a:25:8e:dd:23:c6:f8:58:6e: 92:6b:e1:f6:90:dd:2b:ec:3a:7e:75:66:79:8d:4d:81:30:22: 71:5a:c9:fe:a8:27:63:79:95:3a:43:b5:fd:14:d9:27:72:7b: 4b:45:b0:d6:7e:d3:79:42:83:7d:6b:be:d0:01:e0:b4:97:e9: 1c:4c:79:84:35:e4:a9:b1:48:86:c2:62:82:64:ef:de:61:d8: 0a:37:e2:bc -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUHvWKn1o/Dl/gaD6a6D3xj6/6qWcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDYyMTA2MDczOFoX DTI2MDYyMjA2NDczOFowMzExMC8GA1UEAxMoMTgxRTUyMzRFQ0EzNzIyNzZFOENE QzZGMzYyNENGM0E2QzNGMzVENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJt/h2nhglYybx0XL+jzOSoAm3X/tqLZdrWO4eoG2UuoloiaxyZv+SxN7N41 6FWqisx8JVkPMJC2LSFJ3RxzYH0BfPd/sK5rkdXn8reEo64Zz9WYF9yG/uxMivPO 1i2g82s4WTIcAHV2ner8ZrJWk8Sp2b1jx7mzgNsYtlLQq8sspp+Nv8qylZigSdgM ep1qogAe47AzD6xAe7iC62T8pDk+xdRIjDJhbHzfE5q9uA96QE7/4PRzQqYfGgCV +tS6LfiqDLYNB1D3FseNVZno4gxku1EKDrub98fr3pKwK80BjnP12cNQJSw/2d3n wa8NmvkGq/WhVLCw2CEnOapT/H8CAwEAAaOCAhEwggINMB0GA1UdDgQWBBQYHlI0 7KNyJ26M3G82JM86bD811zAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCbJUFxoKrcqXSPexKtto+8e2/TnosZk30iPC+/Wjx/gzOBAaC8mH/rVAWswacd R9JTAZ+s6stfIgaGvaJ25E8iUy+Sl2I8v2pAMqo1LGER+ZSCh8whF7Sojn2XpaKS zriY5JB4a661bWhHIqF7GJnTXBsfnZ/ky5UBitMmAw1N5nqWmpdDE4Wo33NBlOsZ oHnwX/FOEvAEPvFY3uUCACsEQQ6TXENCU24TH+VKJY7dI8b4WG6Sa+H2kN0r7Dp+ dWZ5jU2BMCJxWsn+qCdjeZU6Q7X9FNkncntLRbDWftN5QoN9a77QAeC0l+kcTHmE NeSpsUiGwmKCZO/eYdgKN+K8 -----END CERTIFICATE-----Generated at Sun Jun 21 16:57:46 2026 by rpki-client