$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: mIOZ4+vcDRnNnpedhTJNugKvjQQFawc3i4vaEiOPvLU= Subject key identifier: 8D:80:4B:B5:10:59:02:2C:89:00:C4:DF:5E:D5:89:BE:7B:DB:4D:80 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 6C64EECB1AE18E4799FDEE09E36A2E4B519D596B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 0671 Signing time: Sat 31 May 2025 12:00:02 +0000 Manifest this update: Sat 31 May 2025 11:55:02 +0000 Manifest next update: Sun 01 Jun 2025 15:21:02 +0000 Files and hashes: 1: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 2: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: BU8Bua231WXjTpoYm2Q4rTG4i8ZpYs4lZ3VI+83DR98=) 3: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: s+okMfZXtj3SK5Jzt/y85zlQTo28EGbzbEC4cKwM5bQ=) 4: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: 4JLtXOVAXpPqX6hxUny4rYQ+KzHdr2B7l5TXdy0MdRU=) 5: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: xvKfJAUQahRZdnZG06aeSaekVC7XFXOs5bCAlRAA2tM=) 6: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: tLe1kCR/OefmsLRfY8JHMvHsF+A7BiV5PfSxXbwlDOY=) 7: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: TJIfu1X8LdrP8gsc+jKs/4BFxy77H3zL/NLAyOKyWS8=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Jun 2025 15:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:64:ee:cb:1a:e1:8e:47:99:fd:ee:09:e3:6a:2e:4b:51:9d:59:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: May 31 11:55:02 2025 GMT Not After : Jun 1 15:21:02 2025 GMT Subject: CN=8D804BB51059022C8900C4DF5ED589BE7BDB4D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:65:81:67:54:51:b7:b9:8f:f5:97:9a:0a: 5b:eb:3f:ab:e9:12:2b:d0:fd:22:39:e7:86:3f:55: 8e:04:76:e6:3d:07:87:81:8a:60:8b:03:76:ba:89: a8:a0:49:e1:7c:f0:d9:f5:7e:46:3c:42:00:99:8b: 7f:24:60:bc:16:eb:82:dc:6a:97:a9:13:50:d0:66: cd:39:02:4a:5b:df:d2:9a:f1:23:a0:50:3f:f7:16: 19:6b:09:23:5b:32:11:0b:8b:7c:7f:3c:6a:e9:da: d7:f3:13:d9:00:85:9d:98:02:96:aa:09:2c:99:c1: fa:f2:bb:f1:35:06:00:e2:bc:6b:6e:ad:88:ed:41: 4f:0f:fe:2e:e0:8f:ac:b7:ab:24:9d:60:a5:49:79: cf:39:0b:6d:35:df:d9:95:b3:83:1d:61:8d:19:20: ef:e1:6e:60:ba:69:40:9e:84:28:72:da:89:34:9e: 9a:e8:1a:39:91:56:55:43:eb:01:ba:6d:d5:80:07: 48:29:55:50:8a:da:e8:56:c4:10:f7:f0:4d:6f:ca: 75:05:55:92:80:7d:f0:e4:43:3e:18:85:63:6d:c4: ae:73:b8:9d:9f:38:c1:9e:d3:f2:1c:21:9b:48:54: a0:a8:d4:16:57:8f:18:db:27:dc:f1:b7:39:64:5d: 16:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:80:4B:B5:10:59:02:2C:89:00:C4:DF:5E:D5:89:BE:7B:DB:4D:80 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:77:9a:19:57:11:b2:4c:16:96:2d:9e:64:17:97:77:1d:8f: 7e:4e:cd:fe:f9:df:12:19:69:94:d3:db:8a:4d:93:9a:97:f2: 2c:42:d6:98:b4:5b:8d:08:a8:c3:2a:06:8f:50:c8:3f:12:44: 9e:f3:be:50:20:a4:19:5e:c7:eb:6b:ea:10:5a:ca:65:b2:16: 51:f5:ec:e6:0c:ba:e2:91:b6:cd:6c:42:99:6c:77:fd:11:a0: 1a:ab:16:f0:2d:af:62:59:eb:3b:63:5a:42:6b:55:e8:f8:a6: 70:08:42:6f:29:a1:ac:ae:f0:04:8e:0c:37:73:e8:79:40:19: 5f:4e:46:b5:1e:a8:2b:d2:78:ac:75:c8:e0:0b:29:58:7d:40: df:23:24:bc:b8:28:6e:76:1f:16:08:44:c0:e2:5f:ea:7e:2c: 35:dc:1b:2c:d5:77:23:21:5d:3f:02:57:c5:a4:e3:e1:eb:2e: 02:ac:41:42:e0:29:f5:a9:8c:fb:98:8a:ab:5c:65:d6:62:c4: a5:14:80:f6:49:66:1e:28:c2:e4:74:b7:4d:e8:50:a4:5a:d7: 01:5e:fc:4b:78:f6:6b:8e:bd:81:8b:ab:4f:74:64:5f:ac:ff: ce:b5:6e:30:f9:ed:11:e3:ad:ac:bf:86:6a:0f:2b:94:24:8f: 87:ef:f1:0f -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUbGTuyxrhjkeZ/e4J42ouS1GdWWswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDUzMTExNTUwMloX DTI1MDYwMTE1MjEwMlowMzExMC8GA1UEAxMoOEQ4MDRCQjUxMDU5MDIyQzg5MDBD NERGNUVENTg5QkU3QkRCNEQ4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlUZYFnVFG3uY/1l5oKW+s/q+kSK9D9Ijnnhj9VjgR25j0Hh4GKYIsDdrqJ qKBJ4Xzw2fV+RjxCAJmLfyRgvBbrgtxql6kTUNBmzTkCSlvf0prxI6BQP/cWGWsJ I1syEQuLfH88auna1/MT2QCFnZgClqoJLJnB+vK78TUGAOK8a26tiO1BTw/+LuCP rLerJJ1gpUl5zzkLbTXf2ZWzgx1hjRkg7+FuYLppQJ6EKHLaiTSemugaOZFWVUPr Abpt1YAHSClVUIra6FbEEPfwTW/KdQVVkoB98ORDPhiFY23ErnO4nZ84wZ7T8hwh m0hUoKjUFlePGNsn3PG3OWRdFlsCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSNgEu1 EFkCLIkAxN9e1Ym+e9tNgDAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC5d5oZVxGyTBaWLZ5kF5d3HY9+Ts3++d8SGWmU09uKTZOal/IsQtaYtFuNCKjD KgaPUMg/EkSe875QIKQZXsfra+oQWsplshZR9ezmDLrikbbNbEKZbHf9EaAaqxbw La9iWes7Y1pCa1Xo+KZwCEJvKaGsrvAEjgw3c+h5QBlfTka1Hqgr0nisdcjgCylY fUDfIyS8uChudh8WCETA4l/qfiw13Bss1XcjIV0/AlfFpOPh6y4CrEFC4Cn1qYz7 mIqrXGXWYsSlFID2SWYeKMLkdLdN6FCkWtcBXvxLePZrjr2Bi6tPdGRfrP/OtW4w +e0R462sv4ZqDyuUJI+H7/EP -----END CERTIFICATE-----Generated at Sat May 31 16:38:06 2025 by rpki-client