$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: zrjqHuBEbUwnMF3y6/HxKX11iWpGwZ3OLHtvVwNx0p4= Subject key identifier: 0E:7E:FD:16:36:57:E4:08:BE:80:D7:B1:A3:90:07:96:1B:AE:D2:D7 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 13083646B1CC0099B91D5A4C9872296222A7B04C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 0861 Signing time: Thu 19 Mar 2026 12:00:02 +0000 Manifest this update: Thu 19 Mar 2026 11:55:02 +0000 Manifest next update: Fri 20 Mar 2026 14:11:02 +0000 Files and hashes: 1: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) 2: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: LbqjVDRN1bc/2BnTGDHBcuVuPQsKgdY9pniRKkpm80w=) 3: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) 4: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=) 5: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: d0WnRtOEYcM/BjmsZXwT1ESXd12VzrkXMDRHrciG52U=) 6: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) 7: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 14:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:08:36:46:b1:cc:00:99:b9:1d:5a:4c:98:72:29:62:22:a7:b0:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Mar 19 11:55:02 2026 GMT Not After : Mar 20 14:11:02 2026 GMT Subject: CN=0E7EFD163657E408BE80D7B1A39007961BAED2D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:4a:b4:69:35:c7:8c:62:07:80:9d:d2:8e: 14:fb:74:ad:a6:7c:27:8a:0f:e1:c5:f7:d8:21:5e: ea:3b:56:ad:02:e6:41:4d:96:6c:bd:23:f3:6c:d0: 8e:0d:fc:1c:7d:bb:05:e7:59:bd:d7:61:1c:1d:f4: 06:c0:a7:e5:24:78:4b:6d:45:9b:8a:19:7c:02:62: bd:3e:9d:92:02:e9:2c:09:2e:d6:92:17:af:7c:6c: 1a:fe:44:79:66:6b:9f:e1:7f:9f:31:8f:88:be:ad: 9a:78:cb:86:b3:0a:ed:a6:33:b9:9c:57:6a:ee:ad: d2:fd:21:e6:84:c9:08:c5:16:72:53:85:07:4f:b9: af:fc:09:dd:40:17:99:80:4a:70:35:d4:60:9d:a4: 3c:f0:b1:1c:99:d0:ec:06:81:8b:0c:1b:3f:68:5a: 2c:23:9e:ad:39:bf:cf:ba:10:c5:44:d4:c5:5c:e7: b2:a9:34:f0:3e:4c:22:8b:cd:ff:af:4b:d4:33:46: c8:eb:03:b9:aa:8d:12:b4:a1:8e:9e:79:2c:31:2e: c4:a0:37:53:2d:71:db:aa:ff:27:02:1a:c9:e0:81: 13:e7:8d:ec:ff:4f:de:0e:0f:f7:72:c6:95:33:6e: db:f8:0f:2e:1e:37:69:f8:61:48:7e:f7:be:f7:73: a7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7E:FD:16:36:57:E4:08:BE:80:D7:B1:A3:90:07:96:1B:AE:D2:D7 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:29:33:91:cc:e9:ff:2c:63:fa:ec:6b:1d:3a:2b:28:b8:f1: 01:5a:56:06:7b:05:a2:76:b9:c9:c5:dc:26:5b:89:ca:8c:c7: b5:37:5c:ba:4e:8d:25:e3:3b:3a:8b:4d:d5:12:fd:a3:9b:42: 44:fb:57:3c:7a:56:63:11:c0:bd:b2:eb:60:73:22:70:a8:d8: 5e:b4:d2:94:16:fe:ce:2e:b7:52:b5:42:26:04:5c:59:ca:e4: 36:de:a7:84:d3:0c:ed:4b:34:4f:42:20:d9:35:2a:45:aa:5d: f7:fd:a2:30:8f:d4:27:cd:29:8a:37:bf:19:73:4c:1e:32:29: 8a:d0:0a:ed:b7:c8:4d:72:c7:cc:97:07:f0:8f:71:1f:72:4e: 40:03:f4:49:97:ab:4d:7e:ba:a9:15:cc:af:93:dc:b1:e1:a7: d1:14:33:37:94:ae:e7:93:c2:71:a3:91:c8:f5:1a:57:11:f9: de:1c:12:4e:ef:25:ab:6a:b5:54:cb:50:dd:01:42:6d:8c:cb: c5:a7:95:8a:4c:c9:f5:0f:76:db:65:d9:91:3b:c8:dd:28:55: e2:64:cb:81:1e:6d:89:d4:bd:fa:40:85:5d:88:5c:67:59:03: eb:d3:ab:1e:53:3a:70:28:75:73:35:f7:a7:a6:ec:38:6d:a1: e7:8a:27:25 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUEwg2RrHMAJm5HVpMmHIpYiKnsEwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDMxOTExNTUwMloX DTI2MDMyMDE0MTEwMlowMzExMC8GA1UEAxMoMEU3RUZEMTYzNjU3RTQwOEJFODBE N0IxQTM5MDA3OTYxQkFFRDJENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEXSrRpNceMYgeAndKOFPt0raZ8J4oP4cX32CFe6jtWrQLmQU2WbL0j82zQ jg38HH27BedZvddhHB30BsCn5SR4S21Fm4oZfAJivT6dkgLpLAku1pIXr3xsGv5E eWZrn+F/nzGPiL6tmnjLhrMK7aYzuZxXau6t0v0h5oTJCMUWclOFB0+5r/wJ3UAX mYBKcDXUYJ2kPPCxHJnQ7AaBiwwbP2haLCOerTm/z7oQxUTUxVznsqk08D5MIovN /69L1DNGyOsDuaqNErShjp55LDEuxKA3Uy1x26r/JwIayeCBE+eN7P9P3g4P93LG lTNu2/gPLh43afhhSH73vvdzp6kCAwEAAaOCAhEwggINMB0GA1UdDgQWBBQOfv0W NlfkCL6A17GjkAeWG67S1zAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4KTORzOn/LGP67GsdOisouPEBWlYGewWidrnJxdwmW4nKjMe1N1y6To0l4zs6 i03VEv2jm0JE+1c8elZjEcC9sutgcyJwqNhetNKUFv7OLrdStUImBFxZyuQ23qeE 0wztSzRPQiDZNSpFql33/aIwj9QnzSmKN78Zc0weMimK0Artt8hNcsfMlwfwj3Ef ck5AA/RJl6tNfrqpFcyvk9yx4afRFDM3lK7nk8Jxo5HI9RpXEfneHBJO7yWrarVU y1DdAUJtjMvFp5WKTMn1D3bbZdmRO8jdKFXiZMuBHm2J1L36QIVdiFxnWQPr06se UzpwKHVzNfenpuw4baHniicl -----END CERTIFICATE-----Generated at Thu Mar 19 22:00:49 2026 by rpki-client