$ rpki-client -vvvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: FdM7i311IMnWPn2IiazEe7XoKS1GZGxcaOcR25qPmeM= Subject key identifier: 89:75:4B:57:17:ED:06:C6:EA:1F:D4:E7:93:84:49:C9:E9:87:BF:B7 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 47E3EC00C33501E2920790B2178C1A2C8D138A5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 098A Signing time: Mon 21 Sep 2026 16:23:49 +0000 Manifest this update: Mon 21 Sep 2026 16:18:49 +0000 Manifest next update: Tue 22 Sep 2026 18:35:49 +0000 Files and hashes: 1: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: L5nXEZk8u99uDUdvi4n/OSkLKtMNAHr8KHN8EzMXIG8=) 2: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=) 3: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: Kd5d5D6As0bcRgXGfiEQ86zbyYy89MgFbc7n+nAmNF8=) 4: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: pXU5vn2wZaGhdkg63jo+HVbWd8AAV6cZg7n1bhb4dAs=) 5: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: Sct8XFUXaWdfps9d1EqIlNpnjJarJU2X88XdaRvutLo=) 6: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: gjxetdU1gVkaep7WfcAWKMpD910g/DFpEB00M3o4vak=) 7: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: OiPbhLg0l0qALFaxQ7AiFKzsXkUMsijWogGz/FhHe18=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e3:ec:00:c3:35:01:e2:92:07:90:b2:17:8c:1a:2c:8d:13:8a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Sep 21 16:18:49 2026 GMT Not After : Sep 22 18:35:49 2026 GMT Subject: CN=89754B5717ED06C6EA1FD4E7938449C9E987BFB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e4:58:23:3a:e6:ff:49:f0:d4:07:7a:4c:26: c8:6e:39:90:fc:49:98:cd:2e:54:28:dc:6f:e9:50: 0f:59:bf:55:6c:8e:05:e4:24:a2:95:61:d2:5e:e4: cb:8e:01:f6:76:86:4e:6f:e4:fa:02:01:43:c7:ee: b2:59:f1:a3:00:d0:ba:43:59:89:7e:62:d4:b0:96: 48:a0:30:c5:b5:a3:6d:c2:d9:2d:fa:4a:60:0b:49: f2:ae:c7:5f:65:82:fc:0f:eb:10:44:20:4f:49:3c: c9:5a:07:86:95:20:b9:17:99:1f:f1:00:7d:7f:ba: 97:22:2a:b1:d9:f2:da:b4:43:01:91:3e:40:d0:4b: 22:e3:3a:70:1e:b5:ae:b1:10:6c:74:27:1b:86:f8: 3f:e7:39:1a:b6:45:a2:37:a1:82:0a:12:c7:e7:fc: 0d:5f:5f:1d:b4:91:89:6e:64:44:5c:cc:c9:f4:65: ac:7f:44:a4:7e:0f:33:a7:df:f7:34:de:f3:98:6a: e2:69:0a:8a:f0:0b:a8:1c:3e:30:c1:92:a9:5b:a5: 98:53:b9:6d:ea:02:89:48:9b:39:2c:47:8d:2f:4d: fd:d8:99:cd:2a:24:4f:f8:47:5c:ac:2b:ef:e5:52: 87:88:4b:97:c7:1e:f5:86:e2:ab:92:47:7c:4e:65: a5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:75:4B:57:17:ED:06:C6:EA:1F:D4:E7:93:84:49:C9:E9:87:BF:B7 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:69:1e:42:97:c0:0f:24:b4:00:30:2a:c3:ee:fd:e0:82:4f: 67:b1:b7:21:a8:47:42:17:d2:4d:66:be:b9:c3:3d:b6:c1:58: c7:56:6f:a1:3a:eb:3f:88:9d:92:dc:36:63:9f:a5:f6:c0:56: 28:97:d3:68:93:b3:bf:1b:b1:3d:9e:bb:a7:0b:82:82:71:ad: 73:0f:ec:b5:ad:70:ca:38:70:32:6d:ac:7a:b7:91:30:94:52: f4:06:bc:89:47:e4:32:60:86:63:59:bf:51:e3:df:53:1f:99: d7:1f:d7:66:8a:6c:0a:d9:cb:7d:1d:1e:a4:6b:14:16:51:72: e3:24:11:2a:ef:69:18:a3:64:de:39:dd:1a:af:58:c3:98:f3: 95:a3:43:4e:36:9a:de:81:36:c4:d7:5e:fe:0e:7e:cc:83:46: a6:da:10:c2:71:09:82:74:f9:2e:2d:43:7d:4a:51:b5:c6:11: 55:cf:61:fc:c0:dd:50:46:f5:22:91:0a:3d:44:69:80:da:57: 99:01:07:51:24:16:21:63:f2:20:e5:73:e5:b5:b8:e9:18:86: 30:ae:e2:9d:a7:f0:be:06:c1:9c:c6:ac:13:62:14:32:fe:a1: 99:e5:11:d3:7b:4f:06:46:fd:5c:42:18:55:cc:4e:7b:3c:c3: 82:66:3e:9a -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUR+PsAMM1AeKSB5CyF4waLI0TilswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDkyMTE2MTg0OVoX DTI2MDkyMjE4MzU0OVowMzExMC8GA1UEAxMoODk3NTRCNTcxN0VEMDZDNkVBMUZE NEU3OTM4NDQ5QzlFOTg3QkZCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfkWCM65v9J8NQHekwmyG45kPxJmM0uVCjcb+lQD1m/VWyOBeQkopVh0l7k y44B9naGTm/k+gIBQ8fuslnxowDQukNZiX5i1LCWSKAwxbWjbcLZLfpKYAtJ8q7H X2WC/A/rEEQgT0k8yVoHhpUguReZH/EAfX+6lyIqsdny2rRDAZE+QNBLIuM6cB61 rrEQbHQnG4b4P+c5GrZFojehggoSx+f8DV9fHbSRiW5kRFzMyfRlrH9EpH4PM6ff 9zTe85hq4mkKivALqBw+MMGSqVulmFO5beoCiUibOSxHjS9N/diZzSokT/hHXKwr 7+VSh4hLl8ce9Ybiq5JHfE5lpVsCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSJdUtX F+0Gxuof1OeThEnJ6Ye/tzAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBWaR5Cl8APJLQAMCrD7v3ggk9nsbchqEdCF9JNZr65wz22wVjHVm+hOus/iJ2S 3DZjn6X2wFYol9Nok7O/G7E9nrunC4KCca1zD+y1rXDKOHAybax6t5EwlFL0BryJ R+QyYIZjWb9R499TH5nXH9dmimwK2ct9HR6kaxQWUXLjJBEq72kYo2TeOd0ar1jD mPOVo0NONpregTbE117+Dn7Mg0am2hDCcQmCdPkuLUN9SlG1xhFVz2H8wN1QRvUi kQo9RGmA2leZAQdRJBYhY/Ig5XPltbjpGIYwruKdp/C+BsGcxqwTYhQy/qGZ5RHT e08GRv1cQhhVzE57PMOCZj6a -----END CERTIFICATE-----Generated at Mon Sep 21 23:44:52 2026 by rpki-client