$ rpki-client -vvvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: fCStV5iaOK2wOrIsCuqzLJVeW39KgzrJsIVZW0/afto= Subject key identifier: 0F:CA:28:72:87:07:86:9F:67:A6:A4:29:C5:22:02:0A:E7:08:C2:A7 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 4E215119EB36FB1B409177F75AFBBA3A03223F17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 0976 Signing time: Fri 11 Sep 2026 00:00:02 +0000 Manifest this update: Thu 10 Sep 2026 23:55:02 +0000 Manifest next update: Sat 12 Sep 2026 02:32:02 +0000 Files and hashes: 1: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: ETobkltH6QxmmsPTDtL9q7ioelS5YrLQQVK4vW8Jxyk=) 2: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=) 3: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: L5nXEZk8u99uDUdvi4n/OSkLKtMNAHr8KHN8EzMXIG8=) 4: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: pyBuq1tbBp+I7ZETxsad5cSpAut7Vzb63bzXYwkiNVA=) 5: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: Kd5d5D6As0bcRgXGfiEQ86zbyYy89MgFbc7n+nAmNF8=) 6: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: pXU5vn2wZaGhdkg63jo+HVbWd8AAV6cZg7n1bhb4dAs=) 7: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: gjxetdU1gVkaep7WfcAWKMpD910g/DFpEB00M3o4vak=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:21:51:19:eb:36:fb:1b:40:91:77:f7:5a:fb:ba:3a:03:22:3f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Sep 10 23:55:02 2026 GMT Not After : Sep 12 02:32:02 2026 GMT Subject: CN=0FCA28728707869F67A6A429C522020AE708C2A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a2:ba:8f:0c:ad:b2:28:34:93:8a:29:ef:1f: f9:e5:63:11:c7:30:4c:c1:48:45:f5:b5:f3:8b:aa: c9:3b:ed:c6:aa:84:22:fd:b2:5c:ab:02:79:8a:16: d9:13:20:dd:9d:8f:9c:4f:65:15:4a:3f:e0:d3:fc: 73:5b:66:97:7a:46:b1:a4:90:5b:59:c1:80:ce:17: aa:96:33:9a:cd:c6:e1:cf:50:0a:85:d0:00:fc:de: d0:94:b3:b0:bd:aa:43:a6:b8:56:8e:87:31:ba:79: ba:f1:41:9f:a3:5c:81:d9:78:c4:c0:87:84:b2:ed: 31:68:19:54:b4:8d:36:69:2e:a6:f4:74:be:9f:28: d8:75:b4:da:bd:ba:b4:8b:49:47:63:f7:da:91:35: 6a:5b:f3:89:0b:f7:9b:cb:9e:8a:d7:61:ad:c7:75: 20:8e:8d:cc:bd:f5:bc:fa:d8:83:7e:e7:46:55:6a: 11:ae:2a:05:62:2c:6c:9a:b8:a4:ad:96:9c:09:e4: fa:51:14:73:37:d9:a3:0f:4f:bb:07:0d:d3:eb:b5: 87:bf:50:7e:d3:67:03:d1:67:04:de:69:db:a9:87: b2:11:26:c9:28:56:84:23:1a:39:8a:e1:ea:1b:27: 4a:10:80:07:1f:a7:fa:f4:75:be:86:bc:75:aa:80: 4e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CA:28:72:87:07:86:9F:67:A6:A4:29:C5:22:02:0A:E7:08:C2:A7 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:46:5a:92:ea:2e:e9:de:ac:1b:e5:ac:63:34:f6:85:dc:53: b2:60:f8:8c:83:91:d8:c9:7e:65:8c:13:4b:9b:98:19:be:4f: 1a:8e:5a:2a:b9:b6:03:b2:6c:d6:5f:c2:a9:38:6a:be:38:ff: 6a:09:15:a8:97:89:b7:d5:9d:86:5c:c5:39:2a:b3:e2:d4:e2: 65:a4:7b:2f:ee:06:dc:fe:55:a1:bc:bc:0e:e4:a2:36:25:eb: 7c:e0:78:cc:64:4f:b7:c8:f4:c0:0c:1e:4c:8b:32:50:3d:9c: 2b:90:63:fe:38:42:96:3c:58:c1:90:0d:5d:b0:0c:67:42:ff: c4:36:dd:59:c5:78:d6:78:fb:c7:0b:ad:b3:a2:50:21:bf:d7: e4:13:52:07:ba:f9:c3:0e:0c:e2:39:5b:32:4d:6d:a0:73:2f: 8e:1a:92:1c:66:ff:70:12:b9:c5:ec:d7:b9:b0:18:a2:78:39: b5:2e:04:a8:a7:4a:7b:bf:ad:da:cf:dc:62:2b:02:9d:49:75: e8:8b:4a:96:c5:e0:1c:b4:02:d8:42:2f:b8:fb:56:e9:40:0a: d3:4a:3c:68:ba:ff:e4:51:23:7a:34:eb:bb:7d:03:03:4c:59: 7a:5c:1d:cd:e3:0e:51:70:d1:49:f7:ab:69:8b:da:0d:1f:fb: a8:d4:ed:5a -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUTiFRGes2+xtAkXf3Wvu6OgMiPxcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDkxMDIzNTUwMloX DTI2MDkxMjAyMzIwMlowMzExMC8GA1UEAxMoMEZDQTI4NzI4NzA3ODY5RjY3QTZB NDI5QzUyMjAyMEFFNzA4QzJBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJeiuo8MrbIoNJOKKe8f+eVjEccwTMFIRfW184uqyTvtxqqEIv2yXKsCeYoW 2RMg3Z2PnE9lFUo/4NP8c1tml3pGsaSQW1nBgM4XqpYzms3G4c9QCoXQAPze0JSz sL2qQ6a4Vo6HMbp5uvFBn6Ncgdl4xMCHhLLtMWgZVLSNNmkupvR0vp8o2HW02r26 tItJR2P32pE1alvziQv3m8ueitdhrcd1II6NzL31vPrYg37nRlVqEa4qBWIsbJq4 pK2WnAnk+lEUczfZow9PuwcN0+u1h79QftNnA9FnBN5p26mHshEmyShWhCMaOYrh 6hsnShCABx+n+vR1voa8daqATmUCAwEAAaOCAhEwggINMB0GA1UdDgQWBBQPyihy hweGn2empCnFIgIK5wjCpzAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCrRlqS6i7p3qwb5axjNPaF3FOyYPiMg5HYyX5ljBNLm5gZvk8ajloqubYDsmzW X8KpOGq+OP9qCRWol4m31Z2GXMU5KrPi1OJlpHsv7gbc/lWhvLwO5KI2Jet84HjM ZE+3yPTADB5MizJQPZwrkGP+OEKWPFjBkA1dsAxnQv/ENt1ZxXjWePvHC62zolAh v9fkE1IHuvnDDgziOVsyTW2gcy+OGpIcZv9wErnF7Ne5sBiieDm1LgSop0p7v63a z9xiKwKdSXXoi0qWxeActALYQi+4+1bpQArTSjxouv/kUSN6NOu7fQMDTFl6XB3N 4w5RcNFJ96tpi9oNH/uo1O1a -----END CERTIFICATE-----Generated at Fri Sep 11 03:18:59 2026 by rpki-client