$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: PQK8gmCqybrS2KX7AxztLutf+f6Mae7rpb38fpmJfS8= Subject key identifier: 1F:80:65:92:38:E7:AB:3B:93:D1:65:BD:9A:4D:B1:82:11:CC:A7:99 Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 109C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 1062 Signing time: Wed 22 Oct 2025 17:48:51 +0000 Manifest this update: Wed 22 Oct 2025 17:48:51 +0000 Manifest next update: Wed 29 Oct 2025 17:48:51 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: qkyuVPeT6PoXn3fUCde96SiQmO48QDC+8qq0n1ybQmc=) 2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg=) 3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: ggdry6EXThW8/Iqa+JecYkvu6rQ2Ed52IzTRWBsgoGk=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM=) 6: 6007188446B111E98B793856C4F9AE02.roa (hash: YvD8e8mnmsaHRmkbd47odePbEhpcv8nyM6tzBDa3QPk=) 7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: bMzkx/wFNepXXNSOPh8Vc6hh0XPBuOSFoU3g8UlRrqg=) 8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 9HyQ/57eR9eFUhHAz1W5cHWihQdkbA5M8sMmhzOnJTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 17:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4252 (0x109c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: Oct 22 17:48:51 2025 GMT Not After : Oct 29 17:48:51 2025 GMT Subject: CN=68f91903-6af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:5b:87:ab:27:e4:44:70:0c:33:b2:26:65: a7:a8:48:3b:c6:57:24:5d:b0:3a:99:fa:b3:14:88: b6:bc:c2:8c:34:21:b2:48:b1:24:9d:65:fd:75:f0: 4b:3d:52:de:1d:af:1a:e6:67:5d:8d:7e:ba:96:f3: 7a:15:da:a9:7b:34:3f:a9:a1:74:6c:ac:be:d1:28: a2:52:1f:36:f6:16:40:e7:93:36:f9:b1:47:20:45: 9e:b3:aa:14:92:7f:bd:44:2c:b4:31:db:be:12:0a: 20:63:0e:d3:84:90:38:d1:9e:75:91:65:d1:79:22: 0b:fc:cf:f0:55:ba:a8:9f:a8:ce:0d:5f:42:96:0d: f2:b8:5f:04:1a:8f:34:6b:43:6e:97:3e:f2:be:98: 6c:37:83:c2:a7:e6:b5:5f:ea:4a:a4:09:0e:52:70: b6:18:82:a0:fd:35:bf:2c:8d:e5:ea:b3:96:19:5b: a7:bb:46:f2:ef:4f:c2:12:5a:bd:57:65:41:2e:7a: 9a:fa:f8:a5:3b:17:a7:b0:3f:16:42:d4:78:69:0d: e5:b5:ef:af:b1:c9:fa:9e:d5:20:3c:bc:19:7a:d2: d0:d7:66:f1:08:39:13:fb:4c:d0:b5:3a:f2:ad:ba: 96:47:cf:02:32:e9:f4:a8:cf:21:71:34:43:c0:a8: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:80:65:92:38:E7:AB:3B:93:D1:65:BD:9A:4D:B1:82:11:CC:A7:99 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:db:fc:22:fd:71:9b:2c:72:17:dc:31:c4:57:22:56:9a:be: 98:9c:57:ec:10:cd:01:eb:62:37:f9:43:0a:11:42:6f:2c:1d: 71:9b:c2:a0:d1:82:2e:e2:27:c7:b8:a5:38:08:88:ec:e3:c5: 6d:66:21:0b:54:7d:49:00:a1:d8:94:93:90:98:87:96:f4:f8: a8:43:75:cd:fb:72:c7:21:8d:d1:aa:7a:fb:5b:2b:2f:54:45: f3:87:7b:71:9e:af:7e:e2:bd:ae:34:cc:bc:dd:64:0c:f3:f3: b7:c7:95:71:95:fe:4c:b8:e2:3a:bf:fd:96:39:e6:25:a3:64: 4b:56:34:62:5a:35:a8:77:04:22:40:b4:8a:d9:cc:f6:56:71: 5d:08:05:48:52:08:48:67:7a:81:56:ea:64:cd:49:c6:3d:04: c2:4c:92:20:48:d2:1d:1e:f8:fe:32:17:46:58:b4:0b:6d:36: 48:c6:42:d7:29:e2:f2:19:58:a0:8d:ba:eb:a1:16:ba:22:dd: b7:c7:26:a0:01:fb:42:92:65:4c:ee:85:e2:72:db:3a:a8:5f: 29:02:d0:80:c2:dd:22:04:5f:a6:30:f7:a9:0e:ee:ec:a9:4f: 8c:43:e5:df:14:88:f6:39:71:aa:b0:1f:6e:51:28:c4:5b:59: 5b:77:68:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUxMDIyMTc0ODUxWhcNMjUxMDI5MTc0ODUxWjAYMRYwFAYD VQQDEw02OGY5MTkwMy02YWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFZbh6sn5ERwDDOyJmWnqEg7xlckXbA6mfqzFIi2vMKMNCGySLEknWX9dfBL PVLeHa8a5mddjX66lvN6FdqpezQ/qaF0bKy+0SiiUh829hZA55M2+bFHIEWes6oU kn+9RCy0Mdu+EgogYw7ThJA40Z51kWXReSIL/M/wVbqon6jODV9Clg3yuF8EGo80 a0Nulz7yvphsN4PCp+a1X+pKpAkOUnC2GIKg/TW/LI3l6rOWGVunu0by70/CElq9 V2VBLnqa+vilOxensD8WQtR4aQ3lte+vscn6ntUgPLwZetLQ12bxCDkT+0zQtTry rbqWR88CMun0qM8hcTRDwKhWrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+AZZI4 56s7k9FlvZpNsYIRzKeZMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw2/wi/XGbLHIX3DHEVyJWmr6YnFfsEM0B62I3+UMKEUJvLB1xm8Kg 0YIu4ifHuKU4CIjs48VtZiELVH1JAKHYlJOQmIeW9PioQ3XN+3LHIY3Rqnr7Wysv VEXzh3txnq9+4r2uNMy83WQM8/O3x5Vxlf5MuOI6v/2WOeYlo2RLVjRiWjWodwQi QLSK2cz2VnFdCAVIUghIZ3qBVupkzUnGPQTCTJIgSNIdHvj+MhdGWLQLbTZIxkLX KeLyGVigjbrroRa6It23xyagAftCkmVM7oXicts6qF8pAtCAwt0iBF+mMPepDu7s qU+MQ+XfFIj2OXGqsB9uUSjEW1lbd2gt -----END CERTIFICATE-----Generated at Wed Oct 22 19:02:23 2025 by rpki-client