$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: tWBBGIGT+NUQPVumyz8UtGCooLQsRrUau8Smrv+G+ok= Subject key identifier: 4F:C9:D2:3F:D6:24:20:39:E0:DA:1D:71:90:8D:11:26:28:9B:09:4E Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 4D9CE3D8BA64E46DB4733B55BEDF9B1F758EF924 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 0767 Signing time: Mon 27 Oct 2025 00:00:01 +0000 Manifest this update: Sun 26 Oct 2025 23:55:01 +0000 Manifest next update: Tue 28 Oct 2025 03:18:01 +0000 Files and hashes: 1: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) 2: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: H1Z5NWoJdHagxM+gDV6xHZhlk9AeV5ufGgieXdiGths=) 3: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) 4: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) 5: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 6: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) 7: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: O4+ex+wYsSj8Ghs50C37Z6k/mf/uHIAR3ag/R4i3UNM=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 03:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9c:e3:d8:ba:64:e4:6d:b4:73:3b:55:be:df:9b:1f:75:8e:f9:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Oct 26 23:55:01 2025 GMT Not After : Oct 28 03:18:01 2025 GMT Subject: CN=4FC9D23FD6242039E0DA1D71908D1126289B094E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:95:04:25:97:f5:30:a9:df:b4:b9:08:8e: ad:01:ba:8c:a9:39:3f:24:a7:53:96:d7:a6:83:5c: a7:32:d6:00:bb:8e:e7:4e:27:9b:b5:30:2f:ca:d5: 8a:c3:c3:d0:38:2a:e1:24:c3:e5:62:49:d7:fc:dc: c9:c3:13:ef:6c:51:3b:13:92:83:aa:82:02:3c:70: b0:06:c1:67:4f:0c:6f:03:70:4c:aa:97:ee:d4:6c: 0c:28:3f:d1:bb:61:0a:16:fc:74:e8:09:3d:7a:66: 96:6d:ec:ec:ef:5d:62:ed:f8:9b:ab:8a:21:25:a5: dd:b1:f7:30:20:6f:4c:45:03:8f:83:20:1a:2a:16: 30:1f:46:70:c0:96:7d:0e:9c:b4:69:52:c3:69:98: b2:eb:69:80:bf:a8:a0:04:3d:d3:37:2c:c6:7c:b5: 93:72:e0:c0:57:d0:55:67:09:a2:42:82:3e:a9:61: 6f:1f:e1:94:28:9c:21:6b:b3:32:b0:f7:27:8d:c8: 20:82:c3:d0:b1:14:5f:91:a5:37:96:4f:a8:9e:7a: ac:03:b0:d7:9a:38:b4:9b:0f:c2:5a:e9:58:56:34: 54:fb:e8:71:90:2e:b7:1f:fd:68:59:8d:b7:ca:20: 56:85:4a:ad:a5:71:ed:18:c0:f0:54:85:32:ba:2a: 2c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C9:D2:3F:D6:24:20:39:E0:DA:1D:71:90:8D:11:26:28:9B:09:4E X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:73:c0:b7:b9:ed:48:15:0a:ed:3c:b5:9a:3e:07:2f:4b:c2: c5:d8:77:f4:34:68:80:74:9e:f4:eb:f6:fd:20:5b:1f:3e:db: 27:95:0a:86:93:96:6d:ee:e2:b1:62:15:1b:50:25:6a:fb:68: 11:2d:1d:ab:47:8e:13:41:7c:5f:0e:54:c9:cb:6e:47:b0:10: 8c:c8:59:17:78:55:41:5d:c6:43:ed:c4:8f:15:1b:44:eb:5b: 9c:ec:25:0b:ca:01:7c:be:d6:59:62:40:44:df:57:d7:d2:69: a9:25:ba:43:ae:96:a8:85:22:6b:57:4e:ca:8e:4e:63:43:27: 41:85:be:45:2f:ba:23:bf:01:c9:59:db:1b:29:e7:18:f7:00: 62:b9:56:21:af:b7:7b:1e:a7:48:6f:81:2b:13:6c:a7:15:0e: 23:cc:83:05:d1:ae:36:0c:42:76:5e:6d:fd:2c:41:f0:77:2f: 9e:4f:16:db:ac:c0:b3:ac:b8:4f:eb:71:ea:cf:4d:d2:48:a1: 2b:72:fa:88:51:09:e7:7d:82:45:e9:9d:6c:7f:b1:15:b1:ea: 19:18:66:ae:28:be:11:43:af:86:12:99:4b:ed:ff:2b:b1:45: aa:fe:12:ee:2a:a1:bd:3f:f2:53:af:94:f2:9e:73:e2:14:e3: 80:33:af:0e -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUTZzj2Lpk5G20cztVvt+bH3WO+SQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MTAyNjIzNTUwMVoX DTI1MTAyODAzMTgwMVowMzExMC8GA1UEAxMoNEZDOUQyM0ZENjI0MjAzOUUwREEx RDcxOTA4RDExMjYyODlCMDk0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrVlQQll/Uwqd+0uQiOrQG6jKk5PySnU5bXpoNcpzLWALuO504nm7UwL8rV isPD0Dgq4STD5WJJ1/zcycMT72xROxOSg6qCAjxwsAbBZ08MbwNwTKqX7tRsDCg/ 0bthChb8dOgJPXpmlm3s7O9dYu34m6uKISWl3bH3MCBvTEUDj4MgGioWMB9GcMCW fQ6ctGlSw2mYsutpgL+ooAQ90zcsxny1k3LgwFfQVWcJokKCPqlhbx/hlCicIWuz MrD3J43IIILD0LEUX5GlN5ZPqJ56rAOw15o4tJsPwlrpWFY0VPvocZAutx/9aFmN t8ogVoVKraVx7RjA8FSFMroqLKcCAwEAAaOCAhEwggINMB0GA1UdDgQWBBRPydI/ 1iQgOeDaHXGQjREmKJsJTjAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCdc8C3ue1IFQrtPLWaPgcvS8LF2Hf0NGiAdJ706/b9IFsfPtsnlQqGk5Zt7uKx YhUbUCVq+2gRLR2rR44TQXxfDlTJy25HsBCMyFkXeFVBXcZD7cSPFRtE61uc7CUL ygF8vtZZYkBE31fX0mmpJbpDrpaohSJrV07Kjk5jQydBhb5FL7ojvwHJWdsbKecY 9wBiuVYhr7d7HqdIb4ErE2ynFQ4jzIMF0a42DEJ2Xm39LEHwdy+eTxbbrMCzrLhP 63Hqz03SSKErcvqIUQnnfYJF6Z1sf7EVseoZGGauKL4RQ6+GEplL7f8rsUWq/hLu KqG9P/JTr5TynnPiFOOAM68O -----END CERTIFICATE-----Generated at Mon Oct 27 14:08:43 2025 by rpki-client