$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: R9ITDDBYIXSYbITIf4aqqJnuXZJkmkE04d3GBQNf8e4= Subject key identifier: 5E:5C:C5:91:96:17:B7:1B:00:8C:5F:79:27:AF:4C:36:D0:78:2C:4D Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 102F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 0FFC Signing time: Tue 08 Apr 2025 17:28:39 +0000 Manifest this update: Tue 08 Apr 2025 17:28:38 +0000 Manifest next update: Tue 15 Apr 2025 17:28:38 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: JI7vpiDiRo/hiNRfi9hwH9x5BsjiwGGBsKIFONhOk5w=) 2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: g84xEJ5ykZMjzZgZWIb8W4X/zoO3Um4FhYPpDKCVB8E=) 3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: sVPaCSc2bcCAKD2poBldbcrhl65mJlc4QyQnO+jZmMc=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: 3yyD1jgucgucm90eBkzwGN8pA1GaVvywFk7br5+2pIo=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: vZxHW9v+mlkDb36aKmwFEOVDkr5RgcxOUaNZsIkNej4=) 6: 6007188446B111E98B793856C4F9AE02.roa (hash: mPz8p2CrH2JmH3Sb725igNrTRG19saMQGzxs8VfAHPE=) 7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: +BIl0WRLfLsKpfnz3iZ4Rc3b06FaqG+le22fYJBc22s=) 8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: l97Qx+I5/FSi2nPuMo4C+TzlRFSgb0mZdEVP8fFlEzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 17:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4143 (0x102f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7 Validity Not Before: Apr 8 17:28:38 2025 GMT Not After : Apr 15 17:28:38 2025 GMT Subject: CN=67f55cc6-4882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:14:00:50:e2:b5:e8:e8:e9:6c:66:be:cf:9c: 3e:90:83:5d:ab:71:07:4f:bc:51:27:1b:a8:2f:ac: e9:e5:08:18:e7:cd:8a:4c:f8:60:54:1d:4e:f0:5e: 52:77:85:4d:49:fa:04:36:69:46:68:58:cd:e3:f3: bb:76:bf:61:d0:b0:4e:56:55:6a:64:18:bc:16:73: 81:3f:4d:b9:74:0a:78:c6:ca:e1:4b:4b:0f:8f:1c: 4f:a0:fc:21:52:40:db:1e:b8:63:b0:84:7d:9a:88: b0:d7:d7:19:97:bd:9a:5e:17:26:c3:15:e9:b2:d2: 39:f5:76:dc:41:47:51:80:49:73:78:d2:56:a7:fb: d4:97:3e:6f:a8:bb:5b:5f:bf:30:0e:d3:81:dc:15: 1e:bb:39:a0:ad:45:b6:47:8a:ac:bc:38:ba:95:b6: 6f:4d:e9:c5:82:ab:71:37:49:10:e2:8e:31:31:90: 0b:ad:a7:41:b8:34:de:18:82:51:5f:f5:cd:fb:23: 8f:b9:0b:ce:89:81:8e:99:51:df:3d:96:aa:06:e2: d9:bc:ff:89:4c:e4:ce:06:16:bd:16:b6:c5:91:72: e1:77:dc:c2:a6:36:52:b2:cb:45:fb:25:6b:4d:d3: 73:5c:29:4e:ad:12:cd:95:b3:22:5a:ef:a9:84:ce: 7d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5C:C5:91:96:17:B7:1B:00:8C:5F:79:27:AF:4C:36:D0:78:2C:4D X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:8b:65:ef:43:bc:fc:24:e4:a5:f4:79:b3:1c:91:85:7e:27: 86:2f:85:bf:eb:be:be:dd:47:a7:ce:80:39:a8:a0:c7:6e:4e: 05:21:3d:06:4b:af:9d:64:e6:f0:a5:33:d2:f4:7c:f0:9c:17: 12:b9:49:c3:98:d4:d7:6c:c7:eb:9f:94:5d:89:91:2b:68:97: 31:cf:72:f4:04:1b:f2:bf:97:c4:7a:2a:d8:14:3f:db:ef:07: e2:7e:21:13:80:22:c4:7e:fa:58:3e:e1:d5:cf:c9:e4:71:2f: 35:22:c9:a6:53:65:5b:0e:62:4b:3b:39:39:3e:71:4b:5b:52: fd:71:cc:8e:09:91:36:5f:11:69:64:a5:60:33:b3:cf:1a:d2: b8:20:10:49:73:2a:63:1a:2e:d3:21:d4:51:fe:dd:ce:3e:22: ff:d9:be:cd:3b:f4:08:4d:81:18:c4:89:53:ab:a9:a5:58:27: 72:57:a5:b6:7f:00:22:f0:90:d6:2c:54:b6:fc:9e:f0:57:d5: 24:27:06:0c:5f:c0:df:fb:1a:d7:3e:3d:76:67:07:c4:a3:a0: c8:63:f3:2b:8f:57:db:c4:52:2e:07:fb:d2:dc:63:d0:22:20: f5:3b:1e:4e:fc:15:af:c5:f9:8d:e4:f1:44:59:9d:80:c0:7d: 5a:ba:f2:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUwNDA4MTcyODM4WhcNMjUwNDE1MTcyODM4WjAYMRYwFAYD VQQDEw02N2Y1NWNjNi00ODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRQAUOK16OjpbGa+z5w+kINdq3EHT7xRJxuoL6zp5QgY582KTPhgVB1O8F5S d4VNSfoENmlGaFjN4/O7dr9h0LBOVlVqZBi8FnOBP025dAp4xsrhS0sPjxxPoPwh UkDbHrhjsIR9moiw19cZl72aXhcmwxXpstI59XbcQUdRgElzeNJWp/vUlz5vqLtb X78wDtOB3BUeuzmgrUW2R4qsvDi6lbZvTenFgqtxN0kQ4o4xMZALradBuDTeGIJR X/XN+yOPuQvOiYGOmVHfPZaqBuLZvP+JTOTOBha9FrbFkXLhd9zCpjZSsstF+yVr TdNzXClOrRLNlbMiWu+phM59/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5cxZGW F7cbAIxfeSevTDbQeCxNMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZi2XvQ7z8JOSl9HmzHJGFfieGL4W/676+3UenzoA5qKDHbk4FIT0G S6+dZObwpTPS9HzwnBcSuUnDmNTXbMfrn5RdiZEraJcxz3L0BBvyv5fEeirYFD/b 7wfifiETgCLEfvpYPuHVz8nkcS81IsmmU2VbDmJLOzk5PnFLW1L9ccyOCZE2XxFp ZKVgM7PPGtK4IBBJcypjGi7TIdRR/t3OPiL/2b7NO/QITYEYxIlTq6mlWCdyV6W2 fwAi8JDWLFS2/J7wV9UkJwYMX8Df+xrXPj12ZwfEo6DIY/Mrj1fbxFIuB/vS3GPQ IiD1Ox5O/BWvxfmN5PFEWZ2AwH1auvIK -----END CERTIFICATE-----Generated at Wed Apr 9 01:12:23 2025 by rpki-client