$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: /Pr3CbDEU5MamB3+qIS142iwl+Jv0FuhBLVxtrrixts= Subject key identifier: A6:44:D2:7A:54:24:D3:4E:A9:9E:C6:9F:34:C9:10:D7:CE:B6:62:D2 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 38E90B6CF0B83C3772B31F24A6DA5C6473A95DB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 0774 Signing time: Mon 03 Nov 2025 17:57:39 +0000 Manifest this update: Mon 03 Nov 2025 17:52:39 +0000 Manifest next update: Tue 04 Nov 2025 20:19:39 +0000 Files and hashes: 1: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: o52FNivly8ZlNi3hwL3cgQcNSYNk8jN0ofxSu8Jei/w=) 2: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) 3: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: tZwMXGfamwxoHe/Oyt4KWahJlhBtFrbe3a2oVGEHbCY=) 4: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) 5: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 6: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) 7: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 20:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e9:0b:6c:f0:b8:3c:37:72:b3:1f:24:a6:da:5c:64:73:a9:5d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Nov 3 17:52:39 2025 GMT Not After : Nov 4 20:19:39 2025 GMT Subject: CN=A644D27A5424D34EA99EC69F34C910D7CEB662D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7a:94:fb:85:c9:35:37:7f:6d:bf:ea:38:1c: ae:80:10:bf:32:62:7d:7a:49:6d:8b:5d:4c:7b:f7: 87:d9:ed:86:07:d4:9e:a9:f3:27:d6:48:19:e6:48: 2f:d9:89:ec:b1:3e:08:2d:3a:02:21:7a:5a:71:d5: a2:05:73:6b:32:85:b0:d2:3e:1c:54:f5:5e:65:86: 34:5f:54:6f:98:3c:95:d3:c1:ff:68:c1:df:1d:da: 53:00:20:3e:01:e1:29:25:36:2f:05:75:5d:34:4c: 5c:df:07:f1:19:23:30:fe:e0:b1:5b:ab:a3:94:29: 6d:d9:1a:50:2a:01:25:e3:9c:4f:2a:cf:fc:34:c9: 94:19:0c:9d:1e:e0:53:9d:c6:a2:7f:ce:ef:ae:2f: 4a:eb:dd:4b:e8:ec:f8:50:4b:00:63:38:04:69:a4: 4a:27:32:48:e9:79:2f:1a:5d:dd:35:9b:a0:12:e5: 34:5c:21:18:a2:e5:12:8f:07:17:b5:c6:a6:e5:cd: db:a7:aa:53:3b:37:70:e9:fe:46:9b:2a:65:9c:c8: a2:77:51:7c:38:49:24:66:bf:0d:b8:ad:e9:07:d0: d3:0a:2d:09:d6:62:c3:60:ca:15:ae:c1:f8:2f:2b: c0:86:c5:61:06:9e:75:80:ec:00:17:84:5f:8c:a6: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:44:D2:7A:54:24:D3:4E:A9:9E:C6:9F:34:C9:10:D7:CE:B6:62:D2 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:81:4d:c1:cb:19:e7:e0:16:b9:58:8d:8d:97:0e:12:4e:c8: d2:c3:4e:2f:ef:f9:ec:6c:87:c1:5d:74:d1:a6:01:83:2c:02: ed:58:7d:dd:8a:a7:1f:c1:75:7b:6f:1e:d8:83:58:b9:78:b5: b1:1a:80:df:23:2e:4c:71:fd:a5:b6:0e:bf:90:d0:24:78:fb: 2b:6d:1f:ce:1c:3c:ce:f5:e4:b0:df:6c:53:d8:e7:55:02:84: 02:82:33:18:c6:a7:c5:4b:5d:7c:db:b2:e5:c8:68:12:c6:b3: b5:23:22:3a:06:25:84:6e:5b:66:3f:3e:c7:b7:ba:dd:d9:64: 3b:85:53:df:a7:42:f5:9b:b5:1c:3d:b8:87:d4:0c:be:0b:e5: ed:43:5c:80:af:f5:fc:48:b6:1c:a7:ac:2f:2b:40:1f:f2:36: 66:c5:29:18:08:88:8c:70:d5:67:e6:ed:88:d4:40:0e:af:3f: b1:74:0f:2e:bc:a6:6c:3b:96:59:6f:9b:3b:ad:46:0b:ed:db: 7e:81:ae:6e:3a:95:1c:31:76:c7:58:97:da:c5:14:de:09:25: 41:d2:bc:67:1e:d9:99:c8:da:35:a3:51:9c:db:13:c5:ae:cf: 8d:5a:b9:26:00:11:62:af:1d:25:c2:70:a0:b5:08:6a:59:e1: f6:95:46:eb -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUOOkLbPC4PDdysx8kptpcZHOpXbkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MTEwMzE3NTIzOVoX DTI1MTEwNDIwMTkzOVowMzExMC8GA1UEAxMoQTY0NEQyN0E1NDI0RDM0RUE5OUVD NjlGMzRDOTEwRDdDRUI2NjJEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAON6lPuFyTU3f22/6jgcroAQvzJifXpJbYtdTHv3h9nthgfUnqnzJ9ZIGeZI L9mJ7LE+CC06AiF6WnHVogVzazKFsNI+HFT1XmWGNF9Ub5g8ldPB/2jB3x3aUwAg PgHhKSU2LwV1XTRMXN8H8RkjMP7gsVuro5QpbdkaUCoBJeOcTyrP/DTJlBkMnR7g U53Gon/O764vSuvdS+js+FBLAGM4BGmkSicySOl5Lxpd3TWboBLlNFwhGKLlEo8H F7XGpuXN26eqUzs3cOn+RpsqZZzIondRfDhJJGa/Dbit6QfQ0wotCdZiw2DKFa7B +C8rwIbFYQaedYDsABeEX4ymctMCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSmRNJ6 VCTTTqmexp80yRDXzrZi0jAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAlgU3Byxnn4Ba5WI2Nlw4STsjSw04v7/nsbIfBXXTRpgGDLALtWH3diqcfwXV7 bx7Yg1i5eLWxGoDfIy5Mcf2ltg6/kNAkePsrbR/OHDzO9eSw32xT2OdVAoQCgjMY xqfFS11827LlyGgSxrO1IyI6BiWEbltmPz7Ht7rd2WQ7hVPfp0L1m7UcPbiH1Ay+ C+XtQ1yAr/X8SLYcp6wvK0Af8jZmxSkYCIiMcNVn5u2I1EAOrz+xdA8uvKZsO5ZZ b5s7rUYL7dt+ga5uOpUcMXbHWJfaxRTeCSVB0rxnHtmZyNo1o1Gc2xPFrs+NWrkm ABFirx0lwnCgtQhqWeH2lUbr -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:18 2025 by rpki-client