$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: FnX8NVmmSyEgL4p8TjOdKweAPHMHgZV70omYZ+Qp2TI= Subject key identifier: 8A:6D:7B:35:52:21:EA:F6:B8:C4:D1:6B:B8:D0:8F:87:E0:08:4B:05 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 45B93A32B40503B8AE9318D8EF699FC0BE669381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 0895 Signing time: Fri 17 Apr 2026 00:00:01 +0000 Manifest this update: Thu 16 Apr 2026 23:55:01 +0000 Manifest next update: Sat 18 Apr 2026 02:11:01 +0000 Files and hashes: 1: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=) 2: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) 3: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) 4: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) 5: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) 6: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: WCcFB0BZaZbRGoY2UIZEJiyPZEk0NPGHxN9DRNCCh44=) 7: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: vVqTOp8GmaC9DttxcKFparHQOpNNAjR7QyhsurnfNB8=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 02:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b9:3a:32:b4:05:03:b8:ae:93:18:d8:ef:69:9f:c0:be:66:93:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Apr 16 23:55:01 2026 GMT Not After : Apr 18 02:11:01 2026 GMT Subject: CN=8A6D7B355221EAF6B8C4D16BB8D08F87E0084B05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:bb:ad:23:0b:f5:ee:30:08:e0:aa:2c:58: 76:21:3c:37:b6:ce:5a:6c:fb:6e:bc:4d:bd:82:d3: 85:cb:4d:20:a0:6f:00:d0:2d:67:a6:25:61:80:90: 5f:54:88:14:e2:90:bb:e3:d9:0f:33:85:35:a0:94: 2e:cd:03:ed:b9:3b:0a:59:53:90:09:f9:e2:16:88: de:7f:d4:ea:f1:79:03:ed:b0:e2:01:15:47:b3:03: 15:9c:d5:37:cf:41:ef:db:19:22:4b:0e:4a:18:92: ec:a4:c3:e8:ea:93:c0:58:f7:3d:f2:0b:ca:18:dc: a7:74:f9:a1:32:1c:cc:10:43:fe:98:00:85:ce:be: 5a:06:a2:09:ee:ad:7c:f3:04:ee:7e:57:bf:b9:4e: 50:99:d3:85:78:4c:41:4f:75:15:bc:79:10:7b:a4: 6f:99:bc:98:be:10:59:03:87:b7:8f:dd:96:68:f7: 96:ff:51:d3:b5:ca:ff:ef:ea:af:90:a7:9a:8b:67: bf:0e:3d:e9:fe:aa:fb:dc:bc:33:b2:41:ef:25:0f: 83:29:9a:a7:62:cc:ed:11:9b:1e:dc:a6:56:36:ff: b3:79:20:cc:5f:bc:09:57:d8:2f:e7:cd:8c:6e:ba: 2e:34:ff:15:43:0c:90:2c:1e:00:f4:6c:e7:b7:9c: af:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6D:7B:35:52:21:EA:F6:B8:C4:D1:6B:B8:D0:8F:87:E0:08:4B:05 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:c1:db:66:b7:5d:73:b9:34:d6:67:a6:81:8e:e9:f5:e1:22: e5:47:c4:71:e4:3a:0e:d1:0c:20:13:4e:df:03:32:54:fc:ca: 52:f8:1c:05:19:b5:02:af:74:0e:ec:a4:70:65:9d:80:fa:58: e9:27:c4:e1:d4:bc:fe:28:94:a0:a1:bd:fd:15:38:61:6e:0f: d6:2c:e2:f1:d4:a1:f5:97:e8:2c:d6:0e:71:36:48:fd:28:95: f6:07:27:14:8c:ce:0c:76:b0:a3:f6:7d:ac:ef:30:4d:9a:25: 34:f2:4e:26:e1:93:1d:42:8e:78:97:4c:c3:80:ff:39:36:f0: c1:80:54:27:e1:2d:e0:e5:0a:45:b6:16:35:e7:3a:11:1e:e6: 86:5a:bc:60:49:e4:49:a8:3e:76:59:b0:95:c8:26:75:d3:c9: f6:90:9e:37:ff:15:01:bf:ef:ac:0a:e0:ac:07:87:ce:c2:3a: 01:c2:6b:b8:91:03:7e:78:27:93:05:f7:6c:d2:40:2e:76:76: 65:0e:4a:3e:1a:38:cb:c9:51:3a:a3:5b:07:4f:38:9f:0a:4d: e1:39:78:2d:6e:22:bc:00:47:0d:8d:d7:5c:8d:13:be:7f:d4: 08:52:e6:7d:93:72:48:09:5d:0d:74:81:a5:f7:27:6d:4f:4e: ee:ca:f4:a6 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIURbk6MrQFA7iukxjY72mfwL5mk4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDQxNjIzNTUwMVoX DTI2MDQxODAyMTEwMVowMzExMC8GA1UEAxMoOEE2RDdCMzU1MjIxRUFGNkI4QzRE MTZCQjhEMDhGODdFMDA4NEIwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVQu60jC/XuMAjgqixYdiE8N7bOWmz7brxNvYLThctNIKBvANAtZ6YlYYCQ X1SIFOKQu+PZDzOFNaCULs0D7bk7CllTkAn54haI3n/U6vF5A+2w4gEVR7MDFZzV N89B79sZIksOShiS7KTD6OqTwFj3PfILyhjcp3T5oTIczBBD/pgAhc6+WgaiCe6t fPME7n5Xv7lOUJnThXhMQU91Fbx5EHukb5m8mL4QWQOHt4/dlmj3lv9R07XK/+/q r5Cnmotnvw496f6q+9y8M7JB7yUPgymap2LM7RGbHtymVjb/s3kgzF+8CVfYL+fN jG66LjT/FUMMkCweAPRs57ecr9cCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSKbXs1 UiHq9rjE0Wu40I+H4AhLBTAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC3wdtmt11zuTTWZ6aBjun14SLlR8Rx5DoO0QwgE07fAzJU/MpS+BwFGbUCr3QO 7KRwZZ2A+ljpJ8Th1Lz+KJSgob39FThhbg/WLOLx1KH1l+gs1g5xNkj9KJX2BycU jM4MdrCj9n2s7zBNmiU08k4m4ZMdQo54l0zDgP85NvDBgFQn4S3g5QpFthY15zoR HuaGWrxgSeRJqD52WbCVyCZ108n2kJ43/xUBv++sCuCsB4fOwjoBwmu4kQN+eCeT Bfds0kAudnZlDko+GjjLyVE6o1sHTzifCk3hOXgtbiK8AEcNjddcjRO+f9QIUuZ9 k3JICV0NdIGl9ydtT07uyvSm -----END CERTIFICATE-----Generated at Fri Apr 17 08:08:51 2026 by rpki-client