$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: +8433FvM4tXv3KZnBpF9P1TFkCut+SDYWFH97+PlqgM= Subject key identifier: A6:80:02:F9:C0:4C:42:22:F1:06:9E:4F:34:E9:A5:BC:88:6A:24:7D Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 1052 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 1018 Signing time: Sat 31 May 2025 17:31:26 +0000 Manifest this update: Sat 31 May 2025 17:31:26 +0000 Manifest next update: Sat 07 Jun 2025 17:31:26 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: 086mPEJm2NA8J+/iTNjkh/WbxI6p9q3BUdAycf1Kc1Q=) 2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg=) 3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: ggdry6EXThW8/Iqa+JecYkvu6rQ2Ed52IzTRWBsgoGk=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM=) 6: 6007188446B111E98B793856C4F9AE02.roa (hash: YvD8e8mnmsaHRmkbd47odePbEhpcv8nyM6tzBDa3QPk=) 7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: bMzkx/wFNepXXNSOPh8Vc6hh0XPBuOSFoU3g8UlRrqg=) 8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 9HyQ/57eR9eFUhHAz1W5cHWihQdkbA5M8sMmhzOnJTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4178 (0x1052) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: May 31 17:31:26 2025 GMT Not After : Jun 7 17:31:26 2025 GMT Subject: CN=683b3cee-60e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9d:b8:85:cc:84:85:66:87:52:f0:c9:31:08: 68:10:4c:6f:42:c5:4e:46:db:47:6c:54:36:c7:b3: 2b:41:4f:be:8a:c4:78:3f:b0:e3:a2:df:19:83:68: e0:92:12:29:64:64:4e:18:b7:00:46:63:e9:17:3a: 5c:de:cf:33:a7:39:cf:dc:69:8f:c5:b3:a1:1d:e4: 31:18:b4:96:43:70:02:14:b2:6b:4b:83:8f:91:ff: c7:3f:dc:ab:a8:71:54:29:f1:34:3a:51:8d:1a:67: 22:78:b9:cc:67:ac:3b:90:bd:7a:28:c3:cf:bb:13: 0a:f3:54:39:ec:d0:18:68:d1:aa:9b:cc:bb:2c:05: 32:52:c1:40:a3:35:61:bd:84:cf:af:80:9b:19:d5: ac:b4:1c:75:e1:af:bd:86:33:80:ac:39:9f:f1:f9: e2:0c:9c:2a:b3:38:5d:a5:91:76:e4:e6:6a:bb:19: 93:48:af:4f:e5:41:5d:27:b2:f1:4e:6b:d9:5d:1f: 54:4f:c6:84:1b:ca:92:54:50:b2:06:f4:1c:fc:fd: 28:98:ad:f9:b7:23:6d:bd:bc:59:76:59:31:d7:04: 6b:75:18:87:a8:72:7e:09:ef:79:7e:b6:99:9d:2b: dd:b0:b3:57:cb:97:e7:0d:13:95:7f:5f:df:db:82: dc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:80:02:F9:C0:4C:42:22:F1:06:9E:4F:34:E9:A5:BC:88:6A:24:7D X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:fd:1a:cb:52:4d:4d:44:5b:d5:e5:75:31:c7:ec:95:74:db: e6:06:9f:c3:8b:d2:8e:40:8b:cb:81:36:c5:3e:70:8c:26:1f: 51:b9:da:77:76:4f:3d:22:85:8a:dc:1f:ec:47:5a:67:14:f8: b7:6a:7b:6f:87:f7:a6:ae:2b:4c:ca:99:4b:68:d8:21:61:31: 4d:a9:99:6b:88:ff:5f:8b:2e:a3:e7:ba:81:ec:b4:0d:39:c2: 36:34:9d:76:91:12:20:b3:24:36:4a:3f:27:3d:df:2f:cb:e6: e8:29:1d:42:c7:33:35:7d:db:c4:ac:78:42:85:08:4a:18:c1: 90:94:c8:5a:50:d8:b2:82:75:7f:f3:54:da:04:fc:0b:08:9c: 2d:dc:8f:f5:04:5e:ba:9f:9f:88:0e:75:71:c0:eb:49:c3:12: ee:e7:af:1f:0c:a1:a7:e7:94:d8:f1:6d:cd:c2:48:6f:f8:6f: d3:bd:25:bc:8c:c1:09:fc:35:94:9b:4d:c7:90:9c:51:35:2e: fa:1b:eb:d1:86:7a:8d:84:2c:2e:e9:4a:55:78:3d:51:be:37: 65:13:98:4a:a3:4c:73:2d:8d:e8:a8:74:c6:ba:b9:36:af:23: b5:c0:cb:62:f5:55:c7:0d:10:e8:d7:ab:04:84:af:57:0e:9b: 55:2c:04:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUwNTMxMTczMTI2WhcNMjUwNjA3MTczMTI2WjAYMRYwFAYD VQQDEw02ODNiM2NlZS02MGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnp24hcyEhWaHUvDJMQhoEExvQsVORttHbFQ2x7MrQU++isR4P7Djot8Zg2jg khIpZGROGLcARmPpFzpc3s8zpznP3GmPxbOhHeQxGLSWQ3ACFLJrS4OPkf/HP9yr qHFUKfE0OlGNGmcieLnMZ6w7kL16KMPPuxMK81Q57NAYaNGqm8y7LAUyUsFAozVh vYTPr4CbGdWstBx14a+9hjOArDmf8fniDJwqszhdpZF25OZquxmTSK9P5UFdJ7Lx TmvZXR9UT8aEG8qSVFCyBvQc/P0omK35tyNtvbxZdlkx1wRrdRiHqHJ+Ce95fraZ nSvdsLNXy5fnDROVf1/f24LcTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaAAvnA TEIi8QaeTzTppbyIaiR9MB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY/RrLUk1NRFvV5XUxx+yVdNvmBp/Di9KOQIvLgTbFPnCMJh9Rudp3 dk89IoWK3B/sR1pnFPi3antvh/emritMyplLaNghYTFNqZlriP9fiy6j57qB7LQN OcI2NJ12kRIgsyQ2Sj8nPd8vy+boKR1CxzM1fdvErHhChQhKGMGQlMhaUNiygnV/ 81TaBPwLCJwt3I/1BF66n5+IDnVxwOtJwxLu568fDKGn55TY8W3Nwkhv+G/TvSW8 jMEJ/DWUm03HkJxRNS76G+vRhnqNhCwu6UpVeD1RvjdlE5hKo0xzLY3oqHTGurk2 ryO1wMti9VXHDRDo16sEhK9XDptVLAQd -----END CERTIFICATE-----Generated at Mon Jun 2 19:21:40 2025 by rpki-client