$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: LGLe8WWjl8riHTO3CSmqI0zf1uCKDtx7OioSkMczk9c= Subject key identifier: D3:2B:46:AB:C9:0E:10:88:6D:0E:6B:17:74:84:5F:4F:79:8A:7D:EA Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 10F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 10B3 Signing time: Tue 24 Mar 2026 17:13:32 +0000 Manifest this update: Tue 24 Mar 2026 17:13:32 +0000 Manifest next update: Tue 31 Mar 2026 17:13:32 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: hsUk2JHt+AOWsl4AYXb0mdjN8+oaOBZMjb2s2ATk6/o=) 2: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: vrAJ7z1fSpJjGKtrMPh5IwHUZxDG1ko4bALeyyyT95o=) 3: 6007188446B111E98B793856C4F9AE02.roa (hash: F74p5ch7S9ZemwYmfO7s1urmMOLkTy/KwgLFbRsCsyE=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: vHFFGav5jT6207ykKhwLk1mYRk+A/3Ad6NJ4mcOs2U0=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: sxxBQXaxmx2/mhExro9TLoIXfWeEVD4qaorx3l/HsBQ=) 6: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: UuWF6KeypCIEZVIGweXbl7BvzcdwOy44XbTHZZwKzr8=) 7: 5E46267A46B111E98B793856C4F9AE02.roa (hash: alpoJ/dJyOOayO88hPVQWa6n17xwZWeFLTeDr+7hL4c=) 8: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: sRW4qj4RQsjO0u1DDYNLTyYoXxRig9f6VKT6JhSAD6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4340 (0x10f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: Mar 24 17:13:32 2026 GMT Not After : Mar 31 17:13:32 2026 GMT Subject: CN=69c2c63c-5eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:a1:fb:3d:a6:4e:4d:c9:e1:83:b1:48:0e: ed:a4:90:ec:91:a7:52:fb:9e:0f:16:7a:3c:17:6f: 21:b5:ac:b8:d7:a7:54:4d:14:91:89:bb:87:2d:77: 75:ac:fc:11:76:97:14:76:6b:b9:e7:9e:7b:f0:5d: 05:1e:b7:ce:5d:53:9f:04:e1:62:b5:32:39:d8:cc: 16:13:37:5f:c1:ef:f2:c9:dd:f3:97:1d:b6:6d:23: 69:46:8d:35:b1:22:8f:d9:e2:6e:ba:f1:e7:d5:d9: 07:1a:5c:49:cf:85:92:48:36:e6:09:b5:d8:d8:1b: f7:5a:74:d8:cd:78:48:4c:44:33:88:ee:31:b8:47: 5e:2b:ad:a1:bd:44:4b:b8:53:e4:c5:c1:6c:ac:8f: bd:26:e6:e3:e8:c7:16:ec:23:f1:91:8a:67:16:05: c2:8e:51:8f:44:14:92:45:ac:43:c9:a8:94:d6:07: a7:0c:88:55:20:c3:a6:50:e3:b1:27:a3:23:44:29: d9:14:e7:cf:d8:ec:63:33:22:02:d7:a5:45:76:a6: 7e:f7:5e:fe:e3:74:c5:d5:eb:bf:b5:2c:0d:54:1b: de:99:31:3e:ae:00:8d:16:c5:02:0e:6d:ff:22:71: b1:b2:5f:74:f0:0e:a0:34:7c:f5:57:7d:8b:28:b0: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2B:46:AB:C9:0E:10:88:6D:0E:6B:17:74:84:5F:4F:79:8A:7D:EA X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:2d:ac:9c:b2:a7:4e:ac:57:a6:d9:70:41:98:64:b0:01:3b: 90:a1:a8:62:d8:21:a9:5d:25:fb:8a:c5:7b:b4:f8:3b:ae:2e: 6e:46:fc:cf:85:ae:77:d4:01:8b:f5:a1:1a:01:e6:b7:a5:4f: c1:e1:24:e2:62:ba:b7:75:f7:fd:d6:77:53:fc:7a:d3:19:d1: 3c:1b:a3:71:6b:41:4c:2c:e4:d4:78:55:d9:97:7d:d9:25:36: ae:2b:be:b7:04:f4:2e:66:7e:8e:e6:8e:fd:58:27:c0:55:54: 46:36:fe:5d:67:fd:ce:65:e9:c7:6d:77:ac:df:75:26:64:a2: bd:21:c2:8d:46:6f:63:09:13:51:7d:87:84:5b:32:40:47:77: 70:34:12:a5:10:b1:92:e9:66:b2:5c:43:33:3e:c1:85:ee:be: 37:3d:8a:6d:06:4b:29:08:03:ed:b7:95:b4:9c:be:18:f3:62: 9e:ac:5b:c9:f3:59:bd:3f:a2:93:00:18:ab:13:f6:40:f8:05: 1d:a4:07:14:72:67:0e:4e:f6:4e:f2:40:47:de:4a:a4:31:38: c6:c9:89:5e:ff:21:2b:e1:9d:f2:fb:59:57:89:e3:9b:fc:30: d9:3a:c7:09:50:14:54:f3:bf:92:c0:74:26:36:11:25:e9:99: 54:8d:c9:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjYwMzI0MTcxMzMyWhcNMjYwMzMxMTcxMzMyWjAYMRYwFAYD VQQDEw02OWMyYzYzYy01ZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0+h+z2mTk3J4YOxSA7tpJDskadS+54PFno8F28htay416dUTRSRibuHLXd1 rPwRdpcUdmu555578F0FHrfOXVOfBOFitTI52MwWEzdfwe/yyd3zlx22bSNpRo01 sSKP2eJuuvHn1dkHGlxJz4WSSDbmCbXY2Bv3WnTYzXhITEQziO4xuEdeK62hvURL uFPkxcFsrI+9Jubj6McW7CPxkYpnFgXCjlGPRBSSRaxDyaiU1genDIhVIMOmUOOx J6MjRCnZFOfP2OxjMyIC16VFdqZ+917+43TF1eu/tSwNVBvemTE+rgCNFsUCDm3/ InGxsl908A6gNHz1V32LKLDX1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMrRqvJ DhCIbQ5rF3SEX095in3qMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWS2snLKnTqxXptlwQZhksAE7kKGoYtghqV0l+4rFe7T4O64ubkb8z4Wud9QB i/WhGgHmt6VPweEk4mK6t3X3/dZ3U/x60xnRPBujcWtBTCzk1HhV2Zd92SU2riu+ twT0LmZ+juaO/VgnwFVURjb+XWf9zmXpx213rN91JmSivSHCjUZvYwkTUX2HhFsy QEd3cDQSpRCxkulmslxDMz7Bhe6+Nz2KbQZLKQgD7beVtJy+GPNinqxbyfNZvT+i kwAYqxP2QPgFHaQHFHJnDk72TvJAR95KpDE4xsmJXv8hK+Gd8vtZV4njm/ww2TrH CVAUVPO/ksB0JjYRJemZVI3JOg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:42:12 2026 by rpki-client