$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: 1C8T45MuPakjOU0q1XcSkAaTyZWfiyfehzuuPXdW8NE= Subject key identifier: 0F:83:65:B1:93:05:39:E2:02:0D:5B:57:FD:93:0E:FB:87:2D:41:E0 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 15D52F4D836763A95EF29596BF1728C79D4DD9CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 0634 Signing time: Fri 25 Apr 2025 17:14:14 +0000 Manifest this update: Fri 25 Apr 2025 17:09:14 +0000 Manifest next update: Sat 26 Apr 2025 19:05:14 +0000 Files and hashes: 1: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: 4JLtXOVAXpPqX6hxUny4rYQ+KzHdr2B7l5TXdy0MdRU=) 2: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: BU8Bua231WXjTpoYm2Q4rTG4i8ZpYs4lZ3VI+83DR98=) 3: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 4: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: WwDPRQFhCUBttM25LUQx++KJLw4DEH/RkF7P0pDVW6o=) 5: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: dK01qLTtGX3CKArXiFi/h/rylgmnynJmEO23ilk1zmc=) 6: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: s+okMfZXtj3SK5Jzt/y85zlQTo28EGbzbEC4cKwM5bQ=) 7: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: xvKfJAUQahRZdnZG06aeSaekVC7XFXOs5bCAlRAA2tM=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 19:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d5:2f:4d:83:67:63:a9:5e:f2:95:96:bf:17:28:c7:9d:4d:d9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Apr 25 17:09:14 2025 GMT Not After : Apr 26 19:05:14 2025 GMT Subject: CN=0F8365B1930539E2020D5B57FD930EFB872D41E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:cc:70:a8:f7:65:fe:b2:68:4f:df:33:6b: ab:47:38:8e:b0:67:99:0a:a4:79:37:f4:5b:56:f7: a7:7a:73:c6:25:bb:f0:6a:4d:5c:ee:bd:58:99:c9: a3:9b:8b:80:42:81:2d:d2:79:5a:35:a8:17:e2:74: c0:f2:fd:a4:36:07:25:06:ca:42:66:b7:e2:77:b4: 33:05:60:82:91:21:d2:18:9f:56:9c:07:70:d4:1d: 2d:71:51:d0:3d:3c:76:2f:03:a4:84:fb:1c:88:29: af:5c:05:4a:16:9d:2f:2d:07:de:6c:45:02:34:08: ec:cf:d0:14:48:89:95:dc:6f:40:98:82:0f:cc:8a: 0e:4c:e9:5a:53:84:03:84:16:56:ab:10:3c:bc:42: bb:46:27:24:7c:fb:dd:8c:ce:d5:11:5b:2e:ae:9e: ef:d5:82:cd:c4:38:c3:75:50:2c:42:82:4a:98:39: d8:54:c7:d4:38:70:cc:71:2d:1f:ea:eb:e7:cd:0d: 5b:8c:70:cf:9b:c6:ea:b4:99:17:4e:99:70:ce:fe: 7c:dc:b0:55:bc:3a:47:86:88:81:e0:a9:98:e8:e3: 40:fd:3a:6d:8e:a9:85:f2:75:fe:47:9b:1c:99:47: 5f:86:57:15:ed:7a:de:59:8d:c2:a4:e3:2a:93:eb: 78:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:83:65:B1:93:05:39:E2:02:0D:5B:57:FD:93:0E:FB:87:2D:41:E0 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:a5:aa:ec:fb:cb:db:be:43:aa:e6:07:aa:f2:3a:d5:3f:38: e3:2f:4a:4d:07:0b:be:15:0e:45:be:7c:a6:e7:7c:31:f1:81: 5f:08:cc:65:23:70:72:b0:25:1e:ad:c3:42:af:08:82:31:a8: 2a:37:86:65:73:d7:d2:f7:dc:c6:0f:7a:21:5b:cf:51:c7:5c: a1:e6:67:3f:fb:66:e3:be:e3:7c:72:07:01:a3:8b:8f:e6:70: 21:5c:6b:d9:b2:3a:04:8f:24:c3:98:1c:a5:a9:e8:6f:8d:9a: 77:c7:19:5c:85:13:9a:b7:98:da:d8:2e:a4:b7:1f:3d:7f:fc: 6b:36:5f:42:48:18:14:66:63:e6:8f:78:17:dd:08:55:e0:09: d0:5a:9a:5f:e3:16:6d:0a:92:aa:21:91:95:b6:ac:15:33:ab: 5a:f6:c2:50:1d:3d:33:4d:93:80:a4:a8:6c:e4:d8:65:91:4f: 33:c4:08:ed:ac:e5:16:7a:2b:69:4e:ae:39:01:ff:1e:33:3d: de:12:08:54:1c:25:40:ed:7d:44:1b:a3:64:99:51:83:f5:75: a9:68:3b:a7:d4:43:04:64:3a:c7:72:8f:b3:f8:47:45:3a:39: 80:be:22:9f:9e:7c:55:cc:70:39:56:6e:69:2f:ca:c6:46:e0: 66:ea:46:c9 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUFdUvTYNnY6le8pWWvxcox51N2c4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDQyNTE3MDkxNFoX DTI1MDQyNjE5MDUxNFowMzExMC8GA1UEAxMoMEY4MzY1QjE5MzA1MzlFMjAyMEQ1 QjU3RkQ5MzBFRkI4NzJENDFFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMlzHCo92X+smhP3zNrq0c4jrBnmQqkeTf0W1b3p3pzxiW78GpNXO69WJnJ o5uLgEKBLdJ5WjWoF+J0wPL9pDYHJQbKQma34ne0MwVggpEh0hifVpwHcNQdLXFR 0D08di8DpIT7HIgpr1wFShadLy0H3mxFAjQI7M/QFEiJldxvQJiCD8yKDkzpWlOE A4QWVqsQPLxCu0YnJHz73YzO1RFbLq6e79WCzcQ4w3VQLEKCSpg52FTH1DhwzHEt H+rr580NW4xwz5vG6rSZF06ZcM7+fNywVbw6R4aIgeCpmOjjQP06bY6phfJ1/keb HJlHX4ZXFe163lmNwqTjKpPreP8CAwEAAaOCAhEwggINMB0GA1UdDgQWBBQPg2Wx kwU54gINW1f9kw77hy1B4DAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC4pars+8vbvkOq5geq8jrVPzjjL0pNBwu+FQ5Fvnym53wx8YFfCMxlI3BysCUe rcNCrwiCMagqN4Zlc9fS99zGD3ohW89Rx1yh5mc/+2bjvuN8cgcBo4uP5nAhXGvZ sjoEjyTDmBylqehvjZp3xxlchROat5ja2C6ktx89f/xrNl9CSBgUZmPmj3gX3QhV 4AnQWppf4xZtCpKqIZGVtqwVM6ta9sJQHT0zTZOApKhs5NhlkU8zxAjtrOUWeitp Tq45Af8eMz3eEghUHCVA7X1EG6NkmVGD9XWpaDun1EMEZDrHco+z+EdFOjmAviKf nnxVzHA5Vm5pL8rGRuBm6kbJ -----END CERTIFICATE-----Generated at Sat Apr 26 05:01:25 2025 by rpki-client