
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json)
Hash identifier: 62DJi56CySf9IvBxIpkuahN75f7i5TkwgqTb/jZpcQ0=
Subject key identifier: 91:8C:D8:5B:29:91:EE:22:45:70:DA:22:35:61:73:76:D8:9B:F2:F1
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 183868DFE5987372BED5F64B36445737FD2A1287
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
Manifest number: 08FC
Signing time: Fri 12 Jun 2026 18:07:38 +0000
Manifest this update: Fri 12 Jun 2026 18:02:38 +0000
Manifest next update: Sat 13 Jun 2026 18:51:38 +0000
Files and hashes: 1: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=)
2: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=)
3: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=)
4: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: /KFaIekFfr8VktvbSSAmwYv6JaNtDaiT3auC1WyJavI=)
5: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=)
6: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=)
7: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: KUOkW0YSLi2qi3yCecGVYydtjCaZptGf/d/z1yC6GEY=)
Validation: OK
Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 18:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:38:68:df:e5:98:73:72:be:d5:f6:4b:36:44:57:37:fd:2a:12:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Jun 12 18:02:38 2026 GMT
Not After : Jun 13 18:51:38 2026 GMT
Subject: CN=918CD85B2991EE224570DA2235617376D89BF2F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:6d:3b:07:d5:66:a3:3e:01:22:e9:75:4f:
c5:8f:9f:a5:e1:f8:d8:b4:21:b5:69:c2:62:4f:a0:
f0:19:c9:f4:47:1a:f3:59:d0:bc:b4:ae:be:3a:d4:
8a:7a:49:40:60:8f:7c:6d:8b:69:59:bd:68:38:fa:
69:f5:cf:a1:e4:2b:f5:79:b7:84:bd:63:3b:23:65:
86:9c:c5:62:04:35:24:cb:84:da:f1:f4:10:16:61:
d8:22:05:eb:f4:98:6f:14:8f:4c:e0:d5:18:67:aa:
f0:eb:70:cf:04:c6:a8:9a:21:d6:61:db:2a:d6:29:
e6:4f:49:10:e4:6b:0a:0b:c4:bc:dd:9d:14:f9:07:
ad:1b:ae:a6:8f:d5:ef:88:d6:96:e5:0a:f0:7a:13:
4f:d6:64:63:a8:97:7a:9e:4f:9f:56:33:68:5b:06:
94:21:a9:ff:de:bb:0d:fb:b1:20:12:83:26:8a:8f:
33:4f:22:38:0d:c0:db:62:2d:e5:15:d4:1e:81:fc:
04:99:02:d4:04:ea:11:dd:80:b8:c2:90:f4:c2:fe:
e7:a2:c1:72:67:8c:26:e5:89:18:7e:35:81:ee:2b:
fd:55:d2:4f:23:f7:50:6f:70:42:b5:65:85:dc:b9:
37:c8:a3:58:ac:af:32:76:68:d6:ad:12:1c:50:98:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8C:D8:5B:29:91:EE:22:45:70:DA:22:35:61:73:76:D8:9B:F2:F1
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:68:77:31:bf:a2:23:a5:eb:66:97:66:35:db:45:17:22:10:
81:7d:06:f2:81:df:9d:81:a5:93:4b:26:4f:d6:72:ba:36:e9:
31:f1:73:60:99:4c:4b:02:c9:52:a1:f7:73:44:6e:86:eb:0d:
c4:c0:25:4e:e6:6f:36:e1:56:91:12:a4:d2:d0:f8:0b:63:b0:
da:42:2c:08:3c:19:0c:ba:14:18:8b:f0:f6:0b:6b:67:d4:03:
00:49:03:f5:f1:66:09:02:22:b4:71:79:56:11:c6:c9:e9:50:
f8:b2:cc:0b:c7:61:c8:0e:66:c2:a4:ca:97:f4:fd:bc:ce:55:
4f:1d:04:16:2d:81:fd:eb:5a:a3:68:a2:8c:18:d2:84:dc:e0:
43:ba:37:55:78:fe:a9:f8:25:b8:6d:9a:5f:68:ee:d7:91:85:
31:cf:ff:bb:85:fd:8a:cd:fe:34:7f:b1:f5:81:d2:37:2f:1c:
68:f6:22:92:15:e9:1c:0b:4c:0a:20:e3:38:89:bb:11:d1:5d:
8c:8a:b1:fb:c3:f6:30:28:f0:77:ea:68:6d:b7:ec:fd:3a:98:
1c:8c:31:93:f5:f4:bc:92:86:ea:49:47:24:99:b8:74:f2:8d:
74:ce:b9:88:e8:e9:3f:2a:45:af:28:a9:fd:24:f2:dd:23:3f:
fb:46:69:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:31:12 2026 by rpki-client