$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: XPoYG56fID0WRTPj0cunodCC/L9NxGnhrRn8ex4ouqM= Subject key identifier: B1:54:08:7D:67:80:C5:57:28:B7:F8:B8:E2:80:B7:9D:61:83:D9:39 Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 106A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 1030 Signing time: Fri 18 Jul 2025 17:35:23 +0000 Manifest this update: Fri 18 Jul 2025 17:35:22 +0000 Manifest next update: Fri 25 Jul 2025 17:35:22 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: VifT99KT21EUkLeBepE/nPpq8PMSQi1lUqUTaVD7tVg=) 2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg=) 3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: ggdry6EXThW8/Iqa+JecYkvu6rQ2Ed52IzTRWBsgoGk=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM=) 6: 6007188446B111E98B793856C4F9AE02.roa (hash: YvD8e8mnmsaHRmkbd47odePbEhpcv8nyM6tzBDa3QPk=) 7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: bMzkx/wFNepXXNSOPh8Vc6hh0XPBuOSFoU3g8UlRrqg=) 8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 9HyQ/57eR9eFUhHAz1W5cHWihQdkbA5M8sMmhzOnJTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4202 (0x106a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: Jul 18 17:35:22 2025 GMT Not After : Jul 25 17:35:22 2025 GMT Subject: CN=687a85db-5620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:0d:14:87:e0:67:71:bc:d5:33:12:51:be: 3d:0f:9c:4b:a2:93:6b:bb:c6:b3:f6:b8:15:37:95: 0f:ed:0a:64:3b:dc:bf:39:16:28:ae:6f:68:67:a8: 91:c7:c2:ee:84:3c:0d:30:e9:15:c3:88:c2:1f:d3: da:1c:32:2f:40:e2:80:7a:3d:6b:a4:8c:a5:a5:b4: c1:28:10:85:22:f3:09:bd:d6:2b:f7:04:71:aa:a3: e2:6e:c4:fd:90:76:f8:d0:69:e7:de:b1:da:3a:a5: bd:79:91:90:89:c3:8b:40:2c:56:79:14:e6:b1:c8: 37:84:b2:c0:5e:ec:e3:db:27:bc:dc:85:1d:5c:48: 3b:ef:30:6f:13:52:28:00:d7:38:80:a6:73:04:ef: c7:59:62:68:f4:66:3c:b6:a6:d5:24:df:8d:04:cf: e2:66:4c:46:ad:73:46:8c:a0:11:66:b3:eb:65:fb: b7:30:03:fc:72:51:c6:f7:55:f5:8f:06:43:7b:a3: b1:9c:3d:62:a0:2f:e3:9f:7d:b0:d8:04:41:6a:32: 7b:b6:e2:01:98:7c:71:77:a5:a9:21:db:d8:bc:e3: f4:94:6b:6f:21:c8:e8:91:7e:ca:1a:d5:88:44:e9: 68:06:57:2d:f6:66:90:45:4e:e9:e2:93:68:b7:27: 2e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:54:08:7D:67:80:C5:57:28:B7:F8:B8:E2:80:B7:9D:61:83:D9:39 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:dc:4b:ef:05:6f:53:34:ee:2a:54:fb:0d:7e:c2:0b:2a:ea: 0f:f4:95:d1:d5:96:0f:a9:4b:67:f5:dc:9b:72:7d:c4:8f:91: 83:22:b8:5a:0a:fe:ec:bc:ec:cc:80:79:19:24:20:2c:75:97: 28:9c:c2:03:9d:6e:58:25:94:a6:98:b1:82:6b:d9:d1:4f:37: 0c:85:dc:d6:91:6e:64:08:56:37:f1:07:c5:cc:65:03:c7:06: a3:a9:a4:07:08:a7:a2:2a:42:86:37:c7:de:5a:d8:81:68:58: dd:0d:38:5e:68:e4:13:26:26:e4:67:7a:f3:86:79:31:42:2f: e9:f5:99:48:bb:17:8d:1c:8a:60:8f:c6:1b:26:e5:74:6b:fe: 7b:e8:56:08:6f:fc:5e:a5:bf:f2:02:39:17:ea:38:43:21:d8: c8:5d:85:1c:b1:42:e8:93:ba:99:70:b5:bd:ae:aa:11:37:39: 51:61:65:6f:a4:af:a3:86:5f:b3:6b:c3:f9:a0:97:1f:ab:e1: 8f:34:b7:ac:84:48:0d:85:3a:bf:6e:0e:eb:7c:af:6f:0a:6a: 63:3f:63:79:9e:73:a7:f3:f3:db:10:be:9a:ba:30:87:21:66: 5f:67:c7:50:3a:57:97:7b:1a:36:ef:c0:f8:10:70:a8:35:a4: ec:90:52:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUwNzE4MTczNTIyWhcNMjUwNzI1MTczNTIyWjAYMRYwFAYD VQQDEw02ODdhODVkYi01NjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+YNFIfgZ3G81TMSUb49D5xLopNru8az9rgVN5UP7QpkO9y/ORYorm9oZ6iR x8LuhDwNMOkVw4jCH9PaHDIvQOKAej1rpIylpbTBKBCFIvMJvdYr9wRxqqPibsT9 kHb40Gnn3rHaOqW9eZGQicOLQCxWeRTmscg3hLLAXuzj2ye83IUdXEg77zBvE1Io ANc4gKZzBO/HWWJo9GY8tqbVJN+NBM/iZkxGrXNGjKARZrPrZfu3MAP8clHG91X1 jwZDe6OxnD1ioC/jn32w2ARBajJ7tuIBmHxxd6WpIdvYvOP0lGtvIcjokX7KGtWI ROloBlct9maQRU7p4pNotycuwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFUCH1n gMVXKLf4uOKAt51hg9k5MB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB93EvvBW9TNO4qVPsNfsILKuoP9JXR1ZYPqUtn9dybcn3Ej5GDIrha Cv7svOzMgHkZJCAsdZconMIDnW5YJZSmmLGCa9nRTzcMhdzWkW5kCFY38QfFzGUD xwajqaQHCKeiKkKGN8feWtiBaFjdDTheaOQTJibkZ3rzhnkxQi/p9ZlIuxeNHIpg j8YbJuV0a/576FYIb/xepb/yAjkX6jhDIdjIXYUcsULok7qZcLW9rqoRNzlRYWVv pK+jhl+za8P5oJcfq+GPNLeshEgNhTq/bg7rfK9vCmpjP2N5nnOn8/PbEL6aujCH IWZfZ8dQOleXexo278D4EHCoNaTskFJ9 -----END CERTIFICATE-----Generated at Sun Jul 20 17:26:33 2025 by rpki-client