$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: WNNEAEzq+TwP6iBnWG2gQP8Jsytfw7ZEMkFLP2rS0/Y= Subject key identifier: 85:15:77:DE:E6:24:B0:68:46:73:C5:40:23:6B:F6:1E:B4:66:E0:AA Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 2F8580C6E9E892228DEF82CFB810164DFBD3D3E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 0688 Signing time: Sat 14 Jun 2025 12:00:01 +0000 Manifest this update: Sat 14 Jun 2025 11:55:01 +0000 Manifest next update: Sun 15 Jun 2025 13:42:01 +0000 Files and hashes: 1: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: BU8Bua231WXjTpoYm2Q4rTG4i8ZpYs4lZ3VI+83DR98=) 2: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: ZnoCmZ1X2chQt3LPWVB9O4DUigZepiypnD6lixeOy2c=) 3: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: Mu+obgyTpZwMk//FUYLiINU7rCf61zYnEgQZnLaTiCo=) 4: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 5: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: xvKfJAUQahRZdnZG06aeSaekVC7XFXOs5bCAlRAA2tM=) 6: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: 4JLtXOVAXpPqX6hxUny4rYQ+KzHdr2B7l5TXdy0MdRU=) 7: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: s+okMfZXtj3SK5Jzt/y85zlQTo28EGbzbEC4cKwM5bQ=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 13:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:85:80:c6:e9:e8:92:22:8d:ef:82:cf:b8:10:16:4d:fb:d3:d3:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Jun 14 11:55:01 2025 GMT Not After : Jun 15 13:42:01 2025 GMT Subject: CN=851577DEE624B0684673C540236BF61EB466E0AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:7d:1b:74:0d:40:5d:30:c2:82:31:2d:5d: 32:60:0c:2c:bb:b4:d0:f2:b0:b1:6c:7c:74:29:71: a6:a9:94:58:8c:42:c9:32:3c:da:ed:f7:f2:47:2d: b8:fd:4c:34:04:b1:f2:b8:80:4c:20:d9:4d:58:d6: cb:a0:ff:bb:4e:e3:c5:5b:a2:c6:84:cf:7e:90:3b: c2:b1:99:60:cf:23:fd:a0:cb:72:b5:70:40:0a:75: 99:ad:1e:ea:b6:9e:e5:5c:3f:a0:da:51:d1:2a:0b: 0e:ef:4c:e6:95:79:21:92:0c:d0:a1:66:86:18:ca: 93:ec:51:6f:cf:f6:3d:3f:28:81:d7:0d:3d:73:77: 8a:d5:bc:69:51:a3:bc:33:ee:48:e8:32:7b:0c:73: 86:16:49:02:9d:a9:7c:4c:36:fd:7a:08:a9:c5:34: b4:e8:4b:81:c8:3b:5a:2d:29:3e:4d:7d:ea:32:b7: 20:34:f9:c4:93:12:be:3a:1e:7b:67:02:9c:d4:d4: 91:82:84:72:e3:86:d9:f4:cd:51:e9:7f:ee:d8:6d: 92:b6:4f:05:cb:fe:61:59:4b:e4:52:5f:58:b9:57: c8:16:8b:62:5d:4f:78:da:0d:fa:a6:de:f4:43:e2: 9f:27:db:cc:73:c6:61:9e:a4:c1:58:5a:a8:7e:b9: 3f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:15:77:DE:E6:24:B0:68:46:73:C5:40:23:6B:F6:1E:B4:66:E0:AA X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ba:1f:46:0e:d9:01:b0:e3:da:01:de:f8:0d:83:bb:e1:e6: 59:13:81:73:2f:8d:66:e0:bf:a4:e8:3b:2a:b9:04:27:de:96: 24:cf:17:18:d2:aa:d3:88:08:2a:56:be:e6:74:80:c5:f2:ec: b3:26:2c:3e:95:03:c4:c6:a3:a2:7c:6e:a2:d0:e4:59:8c:2c: 96:89:c4:50:f6:31:9c:5f:ba:5f:5a:e5:2c:4e:45:e7:8b:b8: a7:66:cd:6c:d8:0c:f8:ec:39:58:2b:46:21:ea:d1:57:3c:f4: 4d:87:fc:0d:d3:e2:17:6f:a5:45:50:9e:b0:0b:e2:91:c4:08: d4:15:f5:c8:77:45:83:11:8b:8d:00:5f:7d:27:a1:b5:a2:71: 1b:28:03:5e:c7:7f:6f:af:37:74:07:3b:a9:7d:6c:25:5f:fe: 78:dc:96:f1:4e:6c:1a:67:a5:e5:3d:dd:93:40:c1:9f:02:2e: 27:a2:0e:63:01:62:41:6b:fd:54:59:64:fe:94:64:f3:ed:df: 6b:f2:b6:bf:14:d1:4b:7e:02:76:17:db:a0:67:a3:94:50:98: 96:cc:2a:98:be:b0:bc:e6:d9:47:91:31:94:3e:a4:09:6a:35: 6c:d3:40:79:8d:3a:c4:8e:1b:0e:96:d6:c9:59:0a:a3:fb:57: f9:93:95:8e -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUL4WAxunokiKN74LPuBAWTfvT0+gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDYxNDExNTUwMVoX DTI1MDYxNTEzNDIwMVowMzExMC8GA1UEAxMoODUxNTc3REVFNjI0QjA2ODQ2NzND NTQwMjM2QkY2MUVCNDY2RTBBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALszfRt0DUBdMMKCMS1dMmAMLLu00PKwsWx8dClxpqmUWIxCyTI82u338kct uP1MNASx8riATCDZTVjWy6D/u07jxVuixoTPfpA7wrGZYM8j/aDLcrVwQAp1ma0e 6rae5Vw/oNpR0SoLDu9M5pV5IZIM0KFmhhjKk+xRb8/2PT8ogdcNPXN3itW8aVGj vDPuSOgyewxzhhZJAp2pfEw2/XoIqcU0tOhLgcg7Wi0pPk196jK3IDT5xJMSvjoe e2cCnNTUkYKEcuOG2fTNUel/7thtkrZPBcv+YVlL5FJfWLlXyBaLYl1PeNoN+qbe 9EPinyfbzHPGYZ6kwVhaqH65P2kCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSFFXfe 5iSwaEZzxUAja/YetGbgqjAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAauh9GDtkBsOPaAd74DYO74eZZE4FzL41m4L+k6DsquQQn3pYkzxcY0qrTiAgq Vr7mdIDF8uyzJiw+lQPExqOifG6i0ORZjCyWicRQ9jGcX7pfWuUsTkXni7inZs1s 2Az47DlYK0Yh6tFXPPRNh/wN0+IXb6VFUJ6wC+KRxAjUFfXId0WDEYuNAF99J6G1 onEbKANex39vrzd0BzupfWwlX/543JbxTmwaZ6XlPd2TQMGfAi4nog5jAWJBa/1U WWT+lGTz7d9r8ra/FNFLfgJ2F9ugZ6OUUJiWzCqYvrC85tlHkTGUPqQJajVs00B5 jTrEjhsOltbJWQqj+1f5k5WO -----END CERTIFICATE-----Generated at Sat Jun 14 18:52:57 2025 by rpki-client