$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: V7WuSwswa6epvIwxiwRRUTzc/zVx2KcOsIRhagwbkEM= Subject key identifier: 24:99:9F:47:1A:5B:D7:F2:B9:69:F2:EA:2C:C9:EB:BB:D8:95:EC:E5 Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 107C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 1042 Signing time: Fri 22 Aug 2025 17:32:30 +0000 Manifest this update: Fri 22 Aug 2025 17:32:29 +0000 Manifest next update: Fri 29 Aug 2025 17:32:29 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: 5eNG95cmmNhk8gCeFMZSimipvOMf2Xa+ujaMCcsRzoo=) 2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg=) 3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: ggdry6EXThW8/Iqa+JecYkvu6rQ2Ed52IzTRWBsgoGk=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM=) 6: 6007188446B111E98B793856C4F9AE02.roa (hash: YvD8e8mnmsaHRmkbd47odePbEhpcv8nyM6tzBDa3QPk=) 7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: bMzkx/wFNepXXNSOPh8Vc6hh0XPBuOSFoU3g8UlRrqg=) 8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 9HyQ/57eR9eFUhHAz1W5cHWihQdkbA5M8sMmhzOnJTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4220 (0x107c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: Aug 22 17:32:29 2025 GMT Not After : Aug 29 17:32:29 2025 GMT Subject: CN=68a8a9ad-cb37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:32:2f:9d:7d:0e:82:21:8e:a3:dd:7d:1c: eb:12:e4:ff:15:fa:f3:c9:7a:5c:52:b1:82:d1:45: 72:86:90:85:6a:d1:dd:16:c7:00:72:23:61:e5:33: f8:0d:cf:da:d0:ad:fe:3a:18:1c:5f:2a:c6:b8:21: 79:05:18:d7:e0:7c:1d:08:a6:b4:e1:71:ad:6d:7f: 81:6e:99:1b:83:43:64:ec:60:36:f8:c8:9d:ab:e0: 7a:2f:db:4b:e7:c0:cc:43:e6:84:62:de:6a:7d:59: 89:85:a5:b6:39:dd:97:3c:1e:e1:4a:29:75:69:3e: 41:79:48:bb:36:69:e3:8a:cd:6a:47:5f:68:bf:4e: 54:a6:22:4c:08:20:14:bf:d4:96:20:0b:14:44:ea: 68:f4:c7:18:d1:4e:58:28:16:1a:4f:30:f9:92:bc: a8:e8:47:a6:d7:fa:8d:a7:dd:41:37:2a:03:61:8c: 16:4e:52:a0:4a:49:20:7e:85:5b:af:9a:e2:fc:90: a2:3f:b5:60:c9:f4:a4:3a:82:6d:cc:dc:18:40:aa: f8:5f:e7:fe:16:15:ca:b0:1e:f2:e2:fc:c3:7b:1e: 48:c8:66:b7:7a:71:ec:21:67:b8:27:67:4f:14:4a: 8d:02:31:57:9a:26:f3:3a:af:83:90:7b:43:92:f4: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:99:9F:47:1A:5B:D7:F2:B9:69:F2:EA:2C:C9:EB:BB:D8:95:EC:E5 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c6:0e:9a:fd:af:c1:d5:f0:29:bd:9e:cc:41:90:64:48:ab: 98:21:f8:16:2b:0c:56:dc:53:3d:83:2a:19:c3:e1:6c:b3:9e: 79:67:0b:7f:58:a6:2b:66:62:6b:99:03:8a:65:34:8a:e0:af: 62:d2:34:a4:24:5f:db:7f:3f:4b:99:d5:7a:78:f1:7d:c0:23: fd:43:ac:3b:1d:61:11:37:b3:8e:cc:a3:53:3e:e5:71:78:02: fe:0b:f6:22:cd:4f:c7:2b:78:79:bc:45:74:9a:0d:08:3c:bb: 8b:f0:e4:80:3c:56:69:7b:5a:d0:57:e1:e1:8c:56:a0:65:fa: bd:64:cf:81:8c:b5:fc:e0:0e:32:6b:8e:8d:e4:6d:b2:21:af: bf:9d:5b:52:1f:26:a1:e7:5d:96:8e:8a:bb:a2:6d:f4:fe:81: 5e:8c:cd:24:00:77:41:12:06:82:e0:ae:09:ae:ff:fa:25:47: 5b:8d:d4:53:9d:15:1d:83:b3:80:98:29:36:8b:f3:f9:f9:ec: c7:35:46:94:d7:6d:f7:d9:e7:de:f1:c4:c6:e1:2c:8e:71:cf: 3e:58:14:a4:49:df:ef:5d:5f:93:ec:fa:d7:64:fb:5d:70:be: 91:cb:c8:60:98:7b:d9:f3:6f:65:b3:07:d7:54:3b:5f:f8:2b: 3c:a8:0b:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUwODIyMTczMjI5WhcNMjUwODI5MTczMjI5WjAYMRYwFAYD VQQDEw02OGE4YTlhZC1jYjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgAyL519DoIhjqPdfRzrEuT/FfrzyXpcUrGC0UVyhpCFatHdFscAciNh5TP4 Dc/a0K3+OhgcXyrGuCF5BRjX4HwdCKa04XGtbX+Bbpkbg0Nk7GA2+Midq+B6L9tL 58DMQ+aEYt5qfVmJhaW2Od2XPB7hSil1aT5BeUi7Nmnjis1qR19ov05UpiJMCCAU v9SWIAsUROpo9McY0U5YKBYaTzD5kryo6Eem1/qNp91BNyoDYYwWTlKgSkkgfoVb r5ri/JCiP7VgyfSkOoJtzNwYQKr4X+f+FhXKsB7y4vzDex5IyGa3enHsIWe4J2dP FEqNAjFXmibzOq+DkHtDkvSV7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSZn0ca W9fyuWny6izJ67vYlezlMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAexg6a/a/B1fApvZ7MQZBkSKuYIfgWKwxW3FM9gyoZw+Fss555Zwt/ WKYrZmJrmQOKZTSK4K9i0jSkJF/bfz9LmdV6ePF9wCP9Q6w7HWERN7OOzKNTPuVx eAL+C/YizU/HK3h5vEV0mg0IPLuL8OSAPFZpe1rQV+HhjFagZfq9ZM+BjLX84A4y a46N5G2yIa+/nVtSHyah512Wjoq7om30/oFejM0kAHdBEgaC4K4Jrv/6JUdbjdRT nRUdg7OAmCk2i/P5+ezHNUaU12332efe8cTG4SyOcc8+WBSkSd/vXV+T7PrXZPtd cL6Ry8hgmHvZ829lswfXVDtf+Cs8qAsk -----END CERTIFICATE-----Generated at Sat Aug 23 13:59:28 2025 by rpki-client