$ rpki-client -vvvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: EQpVej+mj5k6c+QvTHBZWp7Y8DTNzVJ3eFqmiQI/kPQ= Subject key identifier: E4:41:CB:DF:73:89:BD:7E:D3:73:18:0C:4C:B4:3A:04:D6:26:19:4F Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 59541D0E6F3F1F348FA18D7403099DEDA295C1A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 09C8 Signing time: Tue 27 Oct 2026 12:00:01 +0000 Manifest this update: Tue 27 Oct 2026 11:55:01 +0000 Manifest next update: Wed 28 Oct 2026 12:53:01 +0000 Files and hashes: 1: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=) 2: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: R1MTiyQnl0nWQ2YVqF1n61ukhUTRWke03JQc4419GrE=) 3: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: pXU5vn2wZaGhdkg63jo+HVbWd8AAV6cZg7n1bhb4dAs=) 4: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: L5nXEZk8u99uDUdvi4n/OSkLKtMNAHr8KHN8EzMXIG8=) 5: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: gjxetdU1gVkaep7WfcAWKMpD910g/DFpEB00M3o4vak=) 6: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: Kd5d5D6As0bcRgXGfiEQ86zbyYy89MgFbc7n+nAmNF8=) 7: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: QUb7ChJa1HiC1ObYB1Wni5vVe/r6WtkP3PTHuVjuYRg=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 12:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:54:1d:0e:6f:3f:1f:34:8f:a1:8d:74:03:09:9d:ed:a2:95:c1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Oct 27 11:55:01 2026 GMT Not After : Oct 28 12:53:01 2026 GMT Subject: CN=E441CBDF7389BD7ED373180C4CB43A04D626194F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:56:d6:a4:2d:02:b8:2c:43:86:30:f3:aa:20: c0:13:da:6a:fd:ea:69:69:a8:15:39:f5:f2:92:96: bc:ca:68:9c:79:25:6c:bc:fc:d6:17:ac:39:03:3f: 7a:42:1a:fb:e7:7d:bb:ea:ea:a9:7d:9c:d3:fc:49: c3:95:7f:65:85:27:32:ea:14:de:f4:72:1b:69:67: 6f:91:ee:a0:5a:e8:d1:5b:2f:3d:b8:5f:00:a1:5f: d9:4e:7a:4e:9c:8c:ef:4c:77:6f:6d:23:67:a4:70: b8:6c:04:e8:30:fa:34:b7:1c:cf:7e:d2:f1:aa:04: 15:47:b0:5f:bc:93:02:8d:c8:da:10:21:ab:c3:b1: f0:2b:95:cc:35:81:30:8c:b4:fc:11:54:e9:46:dd: 0b:3e:4e:66:e3:ca:66:75:80:0f:43:7e:14:a6:ab: d3:d6:0a:f5:04:0a:98:ca:5c:e7:0f:fe:54:a0:be: c2:de:8b:f6:49:30:47:96:26:a1:6c:be:f1:82:46: 63:55:5b:f3:0c:bc:1a:59:1b:cb:15:4e:fb:a0:c7: 20:7c:15:49:bd:c4:c7:cc:cf:ef:52:dd:e1:f6:20: 68:77:0c:1a:a0:28:7f:44:db:22:a6:b5:56:53:de: a7:13:e7:a7:7d:8b:71:eb:88:8e:1d:c1:49:f5:d1: ba:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:41:CB:DF:73:89:BD:7E:D3:73:18:0C:4C:B4:3A:04:D6:26:19:4F X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a2:08:eb:23:6c:f7:c6:f9:93:2c:03:91:e8:18:e7:55:bc: 76:98:75:aa:ed:a9:99:ca:dd:55:14:44:9e:77:d1:dd:d8:c2: 51:02:e0:29:cc:2b:6f:c4:fa:ad:82:71:7a:ca:98:18:d4:00: df:cd:51:0c:b0:25:3d:8d:3f:26:b6:14:d9:3b:0c:8d:53:ff: 00:48:9e:73:ef:39:b8:cf:3e:ba:33:e5:66:ef:24:0f:ce:41: ce:80:3c:49:75:ba:ca:68:54:b9:a5:b0:81:57:48:9a:d1:6f: 45:96:29:fb:70:1f:f6:41:8c:df:99:d5:9b:85:83:26:57:7c: 2e:20:33:ad:4b:42:27:bd:b9:97:0f:f3:a2:8b:87:44:f9:33: ec:8c:d9:f8:6e:5f:de:b5:c0:c3:65:64:86:bc:2b:16:95:00: 9c:3f:14:32:16:17:4c:62:6a:ad:5f:bc:cd:57:78:1e:4c:cf: 86:40:56:6a:9c:f0:6c:a6:aa:0f:70:c1:13:9a:e0:80:71:fa: a8:77:08:4d:bc:63:5e:42:ec:af:7d:61:fd:74:24:4b:b5:cc: 01:69:2b:6d:8f:a2:2e:96:45:5a:fa:1d:a8:58:a1:3e:0e:aa: c6:f1:44:2c:4b:dc:13:64:b8:cf:2d:92:34:b4:22:46:29:e2: cc:89:9d:dd -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUWVQdDm8/HzSPoY10Awmd7aKVwaEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MTAyNzExNTUwMVoX DTI2MTAyODEyNTMwMVowMzExMC8GA1UEAxMoRTQ0MUNCREY3Mzg5QkQ3RUQzNzMx ODBDNENCNDNBMDRENjI2MTk0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANpW1qQtArgsQ4Yw86ogwBPaav3qaWmoFTn18pKWvMponHklbLz81hesOQM/ ekIa++d9u+rqqX2c0/xJw5V/ZYUnMuoU3vRyG2lnb5HuoFro0VsvPbhfAKFf2U56 TpyM70x3b20jZ6RwuGwE6DD6NLccz37S8aoEFUewX7yTAo3I2hAhq8Ox8CuVzDWB MIy0/BFU6UbdCz5OZuPKZnWAD0N+FKar09YK9QQKmMpc5w/+VKC+wt6L9kkwR5Ym oWy+8YJGY1Vb8wy8GlkbyxVO+6DHIHwVSb3Ex8zP71Ld4fYgaHcMGqAof0TbIqa1 VlPepxPnp32LceuIjh3BSfXRut0CAwEAAaOCAhEwggINMB0GA1UdDgQWBBTkQcvf c4m9ftNzGAxMtDoE1iYZTzAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBnogjrI2z3xvmTLAOR6BjnVbx2mHWq7amZyt1VFESed9Hd2MJRAuApzCtvxPqt gnF6ypgY1ADfzVEMsCU9jT8mthTZOwyNU/8ASJ5z7zm4zz66M+Vm7yQPzkHOgDxJ dbrKaFS5pbCBV0ia0W9Flin7cB/2QYzfmdWbhYMmV3wuIDOtS0InvbmXD/Oii4dE +TPsjNn4bl/etcDDZWSGvCsWlQCcPxQyFhdMYmqtX7zNV3geTM+GQFZqnPBspqoP cMETmuCAcfqodwhNvGNeQuyvfWH9dCRLtcwBaSttj6IulkVa+h2oWKE+DqrG8UQs S9wTZLjPLZI0tCJGKeLMiZ3d -----END CERTIFICATE-----Generated at Tue Oct 27 17:30:23 2026 by rpki-client