$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: xTa+e6X3xB/bry9387YORDK4JeJBW6qAGn+PHnN07tI= Subject key identifier: 2B:1A:3E:CC:29:F6:23:82:46:23:62:80:19:C7:66:28:F8:71:2C:77 Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 1062 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 1028 Signing time: Wed 02 Jul 2025 17:38:06 +0000 Manifest this update: Wed 02 Jul 2025 17:38:05 +0000 Manifest next update: Wed 09 Jul 2025 17:38:05 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: WZj0Ix7CqPDSyCkhmKw8yk37ieecWA5E5DRgAiq97Mo=) 2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg=) 3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: ggdry6EXThW8/Iqa+JecYkvu6rQ2Ed52IzTRWBsgoGk=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM=) 6: 6007188446B111E98B793856C4F9AE02.roa (hash: YvD8e8mnmsaHRmkbd47odePbEhpcv8nyM6tzBDa3QPk=) 7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: bMzkx/wFNepXXNSOPh8Vc6hh0XPBuOSFoU3g8UlRrqg=) 8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 9HyQ/57eR9eFUhHAz1W5cHWihQdkbA5M8sMmhzOnJTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4194 (0x1062) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: Jul 2 17:38:05 2025 GMT Not After : Jul 9 17:38:05 2025 GMT Subject: CN=68656e7e-2d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:06:ec:03:32:ba:8c:6c:f5:25:80:57:61:26: 26:0c:c2:6f:76:b4:df:af:3b:f4:b3:3f:6b:2d:12: a2:ac:d1:ba:f9:96:87:10:ee:93:6c:a3:33:3c:b7: 53:73:0e:b2:ef:d0:af:19:46:a4:67:2e:2e:57:f6: ac:df:96:af:3a:56:84:76:d3:32:3b:63:a8:80:fa: 0f:f3:f7:6a:f6:cf:1c:9a:39:71:b1:5c:93:bc:ad: f1:3e:9d:46:2c:11:11:44:70:6c:0f:f6:fa:d7:57: 2c:39:94:66:fd:93:9b:96:8d:ae:cf:67:b2:5c:3a: 96:a7:40:8b:52:c8:e5:99:ed:e5:0d:a6:8e:8d:e1: b4:2c:39:f7:e5:65:aa:a8:d4:e1:e5:81:75:9a:8a: f0:70:73:b7:f9:65:48:a6:10:a9:b4:d0:5d:f3:86: d7:bc:5f:9b:4c:c3:45:c9:63:aa:50:be:82:f5:e7: de:39:4c:60:70:f6:cb:c3:8f:f1:22:68:2f:88:d1: bc:9d:9b:7b:9b:e6:7d:91:58:14:01:52:9a:e4:75: 92:e9:a1:0f:4f:9e:98:ec:f1:ea:38:15:26:b1:17: ca:e7:b5:9b:af:96:f2:fd:4c:b6:c0:f2:f5:66:f5: 4a:cb:f9:aa:95:06:11:d9:88:3f:9f:ec:6f:80:4d: 89:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1A:3E:CC:29:F6:23:82:46:23:62:80:19:C7:66:28:F8:71:2C:77 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:64:38:43:f0:01:3d:06:07:d9:c1:70:39:df:b4:62:ec:1b: 06:ff:68:61:ee:7c:7d:ad:8b:39:da:7e:fe:7a:fc:c8:03:e2: bb:57:a4:72:9e:28:99:b3:c2:98:1d:34:eb:0b:db:e6:b8:eb: 46:53:72:fd:5a:e4:93:02:c6:fd:82:a4:fa:22:43:8f:9a:6c: 54:ac:76:33:a5:a2:22:e0:85:8a:dd:72:ed:24:26:d3:aa:c6: 82:2b:f9:73:65:cd:83:93:a7:d9:2f:69:6a:c2:a3:54:63:75: a8:7a:9e:bc:67:5f:aa:86:19:32:eb:ea:b0:74:e2:19:8e:dc: fe:da:bf:df:49:a5:00:34:e4:38:09:49:0d:7a:ce:0d:cb:a3: 3b:e8:c0:b4:1c:9d:45:f5:29:24:a5:ae:96:38:27:34:c0:af: dd:f3:1d:7b:5e:55:30:90:a7:5e:d0:7b:3d:48:95:1f:68:12: 2b:56:16:71:5d:fe:e6:e2:5e:0a:e1:c0:04:f7:d9:a8:f0:5d: 0b:05:4e:d3:cc:a0:0f:27:16:d8:f3:55:f5:f7:31:a0:a2:f8: 11:c9:16:cb:7b:d5:eb:1a:f6:e7:2f:ff:6c:2f:e8:6e:70:f3: 10:c7:1e:6a:b2:e1:00:96:ba:f3:e7:dc:36:34:85:e3:ac:b1: 19:a5:a0:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUwNzAyMTczODA1WhcNMjUwNzA5MTczODA1WjAYMRYwFAYD VQQDEw02ODY1NmU3ZS0yZDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8gbsAzK6jGz1JYBXYSYmDMJvdrTfrzv0sz9rLRKirNG6+ZaHEO6TbKMzPLdT cw6y79CvGUakZy4uV/as35avOlaEdtMyO2OogPoP8/dq9s8cmjlxsVyTvK3xPp1G LBERRHBsD/b611csOZRm/ZOblo2uz2eyXDqWp0CLUsjlme3lDaaOjeG0LDn35WWq qNTh5YF1morwcHO3+WVIphCptNBd84bXvF+bTMNFyWOqUL6C9efeOUxgcPbLw4/x ImgviNG8nZt7m+Z9kVgUAVKa5HWS6aEPT56Y7PHqOBUmsRfK57Wbr5by/Uy2wPL1 ZvVKy/mqlQYR2Yg/n+xvgE2JZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsaPswp 9iOCRiNigBnHZij4cSx3MB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwZDhD8AE9BgfZwXA537Ri7BsG/2hh7nx9rYs52n7+evzIA+K7V6Ry niiZs8KYHTTrC9vmuOtGU3L9WuSTAsb9gqT6IkOPmmxUrHYzpaIi4IWK3XLtJCbT qsaCK/lzZc2Dk6fZL2lqwqNUY3Woep68Z1+qhhky6+qwdOIZjtz+2r/fSaUANOQ4 CUkNes4Ny6M76MC0HJ1F9Skkpa6WOCc0wK/d8x17XlUwkKde0Hs9SJUfaBIrVhZx Xf7m4l4K4cAE99mo8F0LBU7TzKAPJxbY81X19zGgovgRyRbLe9XrGvbnL/9sL+hu cPMQxx5qsuEAlrrz59w2NIXjrLEZpaCH -----END CERTIFICATE-----Generated at Thu Jul 3 06:50:04 2025 by rpki-client