$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: tXQ2uYVJZm143JV6yX5EMM9t4vo9u1XXMIB3L9KOsyc= Subject key identifier: 84:66:1A:6C:C0:11:E9:88:72:82:6F:DE:16:86:C6:B0:D1:33:0D:0F Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 1105 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 10C4 Signing time: Sun 26 Apr 2026 17:15:09 +0000 Manifest this update: Sun 26 Apr 2026 17:15:09 +0000 Manifest next update: Sun 03 May 2026 17:15:09 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: PQkjPa9nZLromVmP9YUYEVD23xQRtW5WbowUkZuqbKY=) 2: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: vrAJ7z1fSpJjGKtrMPh5IwHUZxDG1ko4bALeyyyT95o=) 3: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: sRW4qj4RQsjO0u1DDYNLTyYoXxRig9f6VKT6JhSAD6E=) 4: 6007188446B111E98B793856C4F9AE02.roa (hash: F74p5ch7S9ZemwYmfO7s1urmMOLkTy/KwgLFbRsCsyE=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: sxxBQXaxmx2/mhExro9TLoIXfWeEVD4qaorx3l/HsBQ=) 6: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: UuWF6KeypCIEZVIGweXbl7BvzcdwOy44XbTHZZwKzr8=) 7: 5E46267A46B111E98B793856C4F9AE02.roa (hash: alpoJ/dJyOOayO88hPVQWa6n17xwZWeFLTeDr+7hL4c=) 8: 3848F884F23311EE97946A35C4F9AE02.roa (hash: vHFFGav5jT6207ykKhwLk1mYRk+A/3Ad6NJ4mcOs2U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 17:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4357 (0x1105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: Apr 26 17:15:09 2026 GMT Not After : May 3 17:15:09 2026 GMT Subject: CN=69ee481d-8664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:05:57:2b:f8:0e:9e:b2:6a:23:5e:18:10:97: 85:2e:5b:27:1c:53:a6:d1:79:cd:87:58:b3:45:24: bf:81:79:14:ea:ac:26:60:43:33:18:9d:02:7e:92: dc:ce:3b:03:cd:9d:7c:a6:78:56:50:39:dd:04:77: 35:ab:9a:a5:95:84:62:1a:c5:e4:eb:32:82:80:47: fc:64:9d:dc:a8:3c:2b:a9:56:0b:ef:df:90:65:b0: 93:50:cc:b8:12:fe:d2:25:5a:d3:f6:7f:93:25:1b: 05:73:fb:ca:31:7d:fc:55:13:02:4a:23:5e:ad:f0: a9:0e:f4:57:f0:37:59:8f:d8:70:a8:53:34:ba:19: d3:fd:3c:20:a6:81:98:e5:46:09:4e:f4:1e:eb:e3: 80:94:f7:7f:c9:74:c0:92:95:c5:a7:87:48:47:e1: 5f:27:87:cf:82:6b:e4:94:a2:93:f4:34:62:cc:03: ae:66:8f:bc:e6:1d:43:ed:5c:10:89:7c:b0:09:61: 0b:6e:eb:06:03:7a:a7:e7:1a:19:ef:9d:d9:8d:27: e4:5e:e1:b6:f5:3b:e7:75:78:ce:d0:f1:44:96:cc: 7a:75:51:d0:a2:68:d2:d2:84:a5:63:70:9d:3c:d8: 8c:8e:ad:91:2f:e4:59:6b:2b:7e:97:97:93:a7:09: 0f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:66:1A:6C:C0:11:E9:88:72:82:6F:DE:16:86:C6:B0:D1:33:0D:0F X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:df:68:82:49:86:26:e4:c8:4d:fb:b3:7e:69:38:63:a2:0b: 69:18:ca:eb:75:20:46:f4:41:86:75:20:c2:77:90:7a:64:6c: d9:6e:0d:b9:58:74:71:aa:22:05:ac:6c:fd:48:bf:d4:0f:81: c7:68:5e:3d:08:96:68:8d:5f:15:55:6c:b2:8e:f9:64:bd:e4: 67:4f:59:bd:f2:cd:05:16:36:3f:5b:28:1f:0f:a8:5a:65:61: 65:86:9c:0b:2c:3f:1b:92:9d:06:e2:b2:5c:18:bb:02:f7:2a: 79:34:f5:ac:7c:06:2b:7a:e3:d7:cd:f6:44:70:da:17:47:50: 61:57:73:35:9f:ea:cd:2e:6a:04:61:ce:ca:8b:a5:9d:8d:5b: c1:0f:7d:b5:1d:02:46:df:8c:8e:93:c0:54:ac:ff:1a:0e:c0: 20:c8:bf:0f:70:87:7f:48:78:ae:8d:10:80:2e:05:68:61:f9: ac:13:df:8a:8f:a2:90:7d:2b:00:d6:fd:8d:ed:06:e9:6f:42: c4:3e:65:a0:b7:f5:9a:02:d4:6c:fe:bb:fc:07:f3:8a:fb:26: cc:cd:d3:e2:38:e5:d5:03:a0:b5:39:11:f1:12:b1:99:83:65: de:6c:ed:b7:54:eb:7c:f5:7e:e4:84:07:1f:d7:f0:64:49:a2: 68:6c:e4:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjYwNDI2MTcxNTA5WhcNMjYwNTAzMTcxNTA5WjAYMRYwFAYD VQQDEw02OWVlNDgxZC04NjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngVXK/gOnrJqI14YEJeFLlsnHFOm0XnNh1izRSS/gXkU6qwmYEMzGJ0CfpLc zjsDzZ18pnhWUDndBHc1q5qllYRiGsXk6zKCgEf8ZJ3cqDwrqVYL79+QZbCTUMy4 Ev7SJVrT9n+TJRsFc/vKMX38VRMCSiNerfCpDvRX8DdZj9hwqFM0uhnT/TwgpoGY 5UYJTvQe6+OAlPd/yXTAkpXFp4dIR+FfJ4fPgmvklKKT9DRizAOuZo+85h1D7VwQ iXywCWELbusGA3qn5xoZ753ZjSfkXuG29TvndXjO0PFElsx6dVHQomjS0oSlY3Cd PNiMjq2RL+RZayt+l5eTpwkPZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRmGmzA EemIcoJv3haGxrDRMw0PMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVt9ogkmGJuTITfuzfmk4Y6ILaRjK63UgRvRBhnUgwneQemRs2W4NuVh0caoi Baxs/Ui/1A+Bx2hePQiWaI1fFVVsso75ZL3kZ09ZvfLNBRY2P1soHw+oWmVhZYac Cyw/G5KdBuKyXBi7AvcqeTT1rHwGK3rj1832RHDaF0dQYVdzNZ/qzS5qBGHOyoul nY1bwQ99tR0CRt+MjpPAVKz/Gg7AIMi/D3CHf0h4ro0QgC4FaGH5rBPfio+ikH0r ANb9je0G6W9CxD5loLf1mgLUbP67/AfzivsmzM3T4jjl1QOgtTkR8RKxmYNl3mzt t1TrfPV+5IQHH9fwZEmiaGzkOw== -----END CERTIFICATE-----Generated at Mon Apr 27 23:54:56 2026 by rpki-client