$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: hYZcTBTTfmRuf15cMJE2Uv9PxPt6UCTenoUutq8NZJ4= Subject key identifier: 4E:A2:0E:A6:58:4D:73:C4:F8:6A:AF:07:ED:B2:49:D6:BF:03:5B:70 Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 1046 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 100C Signing time: Tue 06 May 2025 17:27:56 +0000 Manifest this update: Tue 06 May 2025 17:27:55 +0000 Manifest next update: Tue 13 May 2025 17:27:55 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: Jqu8ZPEK3/oFo/iTF5M/xK6Ir+TeKz8DbiT5SmZ/vyg=) 2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg=) 3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: ggdry6EXThW8/Iqa+JecYkvu6rQ2Ed52IzTRWBsgoGk=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM=) 6: 6007188446B111E98B793856C4F9AE02.roa (hash: YvD8e8mnmsaHRmkbd47odePbEhpcv8nyM6tzBDa3QPk=) 7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: bMzkx/wFNepXXNSOPh8Vc6hh0XPBuOSFoU3g8UlRrqg=) 8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 9HyQ/57eR9eFUhHAz1W5cHWihQdkbA5M8sMmhzOnJTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 17:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4166 (0x1046) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: May 6 17:27:55 2025 GMT Not After : May 13 17:27:55 2025 GMT Subject: CN=681a469b-0fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:ef:f7:95:bf:82:b8:74:c0:85:30:17:27: 08:0f:64:04:73:e6:6e:0f:ee:b0:c7:bb:99:da:e1: d2:6f:b2:f5:ed:69:31:cb:75:81:0a:ac:ee:56:81: 67:7e:e7:94:51:dd:a5:21:22:cc:57:50:e0:b5:b2: 1f:0f:e4:e6:dd:19:f7:e9:17:89:9d:c9:fb:11:bc: 3d:77:78:65:86:38:4f:93:c5:3e:bd:d7:b5:a9:51: 11:07:82:c1:a8:c9:f9:e8:93:18:d8:64:23:48:e5: d4:10:f9:65:98:10:ce:9e:af:71:85:aa:89:b6:61: 69:cc:16:80:14:d8:6a:7c:44:ae:c4:e8:4d:14:7d: ca:61:3f:2a:f1:7f:33:72:f2:35:69:31:62:cc:2a: 1e:3f:1f:b6:9a:47:a4:78:92:b7:fa:3a:8a:ca:83: f2:8c:34:d7:66:2f:cd:59:99:2f:db:f8:fb:4f:21: 44:e3:28:d1:4c:00:99:de:8a:74:be:9f:85:34:8f: a1:ca:c5:ea:8d:6b:a3:b0:43:e2:b1:c7:e4:9a:83: bd:95:17:0a:2f:80:3a:7d:40:7d:c8:fb:42:45:ed: 4b:6c:f3:40:d2:04:d4:e6:e4:7d:c8:47:fd:de:76: 5a:2b:63:8e:ea:75:9c:1f:e0:74:09:d9:93:92:e1: d8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A2:0E:A6:58:4D:73:C4:F8:6A:AF:07:ED:B2:49:D6:BF:03:5B:70 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:39:05:92:34:b0:83:b8:ea:20:e9:97:9e:52:f6:1e:81:c8: aa:98:4d:f9:f3:cd:79:9d:0e:a5:be:b5:e9:f5:78:1c:9f:b6: 4a:9d:d5:ba:c6:f6:40:e9:e3:e4:82:85:d3:19:a1:9a:35:f7: 19:97:d8:2e:23:12:e2:32:92:58:79:72:e3:2a:82:09:84:61: 5e:f9:34:4d:ea:8e:6a:08:5e:de:9d:3b:9f:6b:0f:ef:f5:68: ea:d2:bb:57:37:dc:29:10:56:1e:f2:a6:96:1c:dd:0d:7d:e6: 70:69:d4:53:89:58:45:3b:11:0e:5d:34:5f:c8:db:db:62:52: 04:b3:74:79:03:9b:c2:24:ec:a5:0b:4e:e9:d3:7b:38:16:34: 48:7c:8e:d4:6d:bf:c3:89:b6:4d:bc:9c:e2:5e:52:07:f9:44: f4:43:33:7d:85:5d:d7:0a:da:f3:81:42:6c:d5:9f:3e:81:8a: 93:b9:94:7b:0f:f2:db:58:94:b8:25:e7:89:9e:e0:6c:e1:ce: fb:6f:f9:c7:cc:5d:a5:c7:f5:c9:73:a7:bd:d1:57:03:0c:69: 37:84:74:18:8b:ad:6e:54:d2:f7:5d:be:f5:c6:a0:05:4a:e6: 7c:f3:5c:ef:a4:bb:a2:84:f3:86:f3:0a:89:36:25:0b:7c:f3: 75:86:e4:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUwNTA2MTcyNzU1WhcNMjUwNTEzMTcyNzU1WjAYMRYwFAYD VQQDEw02ODFhNDY5Yi0wZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFvv95W/grh0wIUwFycID2QEc+ZuD+6wx7uZ2uHSb7L17Wkxy3WBCqzuVoFn fueUUd2lISLMV1DgtbIfD+Tm3Rn36ReJncn7Ebw9d3hlhjhPk8U+vde1qVERB4LB qMn56JMY2GQjSOXUEPllmBDOnq9xhaqJtmFpzBaAFNhqfESuxOhNFH3KYT8q8X8z cvI1aTFizCoePx+2mkekeJK3+jqKyoPyjDTXZi/NWZkv2/j7TyFE4yjRTACZ3op0 vp+FNI+hysXqjWujsEPiscfkmoO9lRcKL4A6fUB9yPtCRe1LbPNA0gTU5uR9yEf9 3nZaK2OO6nWcH+B0CdmTkuHYzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6iDqZY TXPE+GqvB+2ySda/A1twMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVOQWSNLCDuOog6ZeeUvYegciqmE358815nQ6lvrXp9Xgcn7ZKndW6 xvZA6ePkgoXTGaGaNfcZl9guIxLiMpJYeXLjKoIJhGFe+TRN6o5qCF7enTufaw/v 9Wjq0rtXN9wpEFYe8qaWHN0NfeZwadRTiVhFOxEOXTRfyNvbYlIEs3R5A5vCJOyl C07p03s4FjRIfI7Ubb/DibZNvJziXlIH+UT0QzN9hV3XCtrzgUJs1Z8+gYqTuZR7 D/LbWJS4JeeJnuBs4c77b/nHzF2lx/XJc6e90VcDDGk3hHQYi61uVNL3Xb71xqAF SuZ881zvpLuihPOG8wqJNiULfPN1huQG -----END CERTIFICATE-----Generated at Thu May 8 07:30:05 2025 by rpki-client