$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: ypnamEfdgkgxw/ODIAwhWmbFN1ixwRuK64us2qsPWMc= Subject key identifier: 30:35:26:96:F8:F4:02:07:03:7D:95:9F:A6:63:B7:11:17:98:67:98 Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 1083 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 1049 Signing time: Thu 04 Sep 2025 17:33:40 +0000 Manifest this update: Thu 04 Sep 2025 17:33:40 +0000 Manifest next update: Thu 11 Sep 2025 17:33:40 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: 05qgFBLJhlAwckOMhxM++nAinFqHn4WhrsMhhU7tFwo=) 2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg=) 3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: ggdry6EXThW8/Iqa+JecYkvu6rQ2Ed52IzTRWBsgoGk=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM=) 6: 6007188446B111E98B793856C4F9AE02.roa (hash: YvD8e8mnmsaHRmkbd47odePbEhpcv8nyM6tzBDa3QPk=) 7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: bMzkx/wFNepXXNSOPh8Vc6hh0XPBuOSFoU3g8UlRrqg=) 8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 9HyQ/57eR9eFUhHAz1W5cHWihQdkbA5M8sMmhzOnJTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 17:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4227 (0x1083) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: Sep 4 17:33:40 2025 GMT Not After : Sep 11 17:33:40 2025 GMT Subject: CN=68b9cd74-ed1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b4:bb:26:71:4a:f5:e3:78:07:6e:63:fd:d6: 3e:63:13:22:d4:26:19:39:53:e6:56:e3:d3:d2:4b: 8f:3f:5c:a8:4d:27:a4:f9:09:cf:af:ed:79:50:5a: 24:33:2d:0f:37:33:46:60:e1:30:50:0c:85:8b:c6: c2:41:87:88:c9:1e:93:4f:0b:d0:34:f7:0f:2a:e7: aa:87:b4:2e:29:7f:90:7f:e4:7e:0a:33:ef:ac:53: a3:50:75:3f:d0:25:e1:53:d7:89:62:bc:c2:4c:2d: 1d:d7:a0:88:51:ca:b1:f8:f5:57:40:c9:75:62:8a: 88:5e:4c:45:8d:53:0b:77:75:25:ae:cb:d7:3b:fd: 75:1c:ae:ae:9d:51:5a:32:c2:60:1f:06:c0:92:b1: e6:33:97:5b:1c:43:65:64:ce:1f:98:c1:6a:0d:83: b9:11:6a:44:58:b5:0d:05:1c:73:09:b6:5a:ae:dd: 19:94:25:8f:e2:14:15:f2:49:89:3c:44:24:a1:fa: e9:63:ed:7d:2b:86:b5:26:a9:91:99:56:9d:4a:b0: b1:5c:4f:87:30:a1:b0:94:6a:98:03:46:e9:63:09: 08:32:b8:1a:3c:df:b7:ad:43:ae:ca:39:4a:16:96: 54:a6:97:19:64:cd:72:8c:50:77:48:f9:f0:9e:14: 62:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:35:26:96:F8:F4:02:07:03:7D:95:9F:A6:63:B7:11:17:98:67:98 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e3:55:6d:9e:47:65:ff:20:e1:a5:11:5e:d9:43:95:64:58: c5:91:c8:f2:6d:b4:aa:1e:56:a5:10:ad:86:69:ce:aa:7b:4e: fa:38:b2:e2:e2:0c:6b:b6:d6:fc:78:fc:39:37:db:b3:28:8d: 82:5b:a3:29:50:57:c3:b7:1b:4a:a1:97:b6:f5:12:a3:be:74: 80:05:03:4c:9a:e8:7d:c5:e6:b2:1d:26:d6:95:1b:29:15:aa: ef:d7:ae:21:fa:dc:f8:03:94:94:77:39:4f:3d:4c:ec:6c:af: 06:34:c7:c6:4e:fb:ec:39:3e:b0:32:52:dd:45:10:05:96:e6: 6a:08:c8:49:6b:b9:08:8e:66:9e:5f:29:eb:ce:a5:58:03:5b: bd:a7:5b:df:25:bc:e3:b3:54:a2:72:74:01:5f:bd:f4:7b:01: 14:70:d1:58:93:2d:c7:63:56:04:06:22:b2:61:f9:90:d8:63: 7e:04:0e:73:85:7c:f5:55:60:65:33:d2:a2:50:3e:87:d7:a3: c0:9a:1f:a9:26:84:05:77:5f:cc:e6:4d:10:1b:b7:5d:fe:0f: c8:b1:1d:ac:64:00:a9:fa:e4:b2:d8:68:5a:26:bf:cd:ff:92: a2:6b:ad:1c:48:88:af:ae:a8:dd:8a:46:63:33:2c:d8:09:8b: d1:ff:e5:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUwOTA0MTczMzQwWhcNMjUwOTExMTczMzQwWjAYMRYwFAYD VQQDEw02OGI5Y2Q3NC1lZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrS7JnFK9eN4B25j/dY+YxMi1CYZOVPmVuPT0kuPP1yoTSek+QnPr+15UFok My0PNzNGYOEwUAyFi8bCQYeIyR6TTwvQNPcPKueqh7QuKX+Qf+R+CjPvrFOjUHU/ 0CXhU9eJYrzCTC0d16CIUcqx+PVXQMl1YoqIXkxFjVMLd3UlrsvXO/11HK6unVFa MsJgHwbAkrHmM5dbHENlZM4fmMFqDYO5EWpEWLUNBRxzCbZart0ZlCWP4hQV8kmJ PEQkofrpY+19K4a1JqmRmVadSrCxXE+HMKGwlGqYA0bpYwkIMrgaPN+3rUOuyjlK FpZUppcZZM1yjFB3SPnwnhRiuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDA1Jpb4 9AIHA32Vn6ZjtxEXmGeYMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb41Vtnkdl/yDhpRFe2UOVZFjFkcjybbSqHlalEK2Gac6qe076OLLi 4gxrttb8ePw5N9uzKI2CW6MpUFfDtxtKoZe29RKjvnSABQNMmuh9xeayHSbWlRsp Farv164h+tz4A5SUdzlPPUzsbK8GNMfGTvvsOT6wMlLdRRAFluZqCMhJa7kIjmae XynrzqVYA1u9p1vfJbzjs1SicnQBX730ewEUcNFYky3HY1YEBiKyYfmQ2GN+BA5z hXz1VWBlM9KiUD6H16PAmh+pJoQFd1/M5k0QG7dd/g/IsR2sZACp+uSy2GhaJr/N /5Kia60cSIivrqjdikZjMyzYCYvR/+XU -----END CERTIFICATE-----Generated at Sat Sep 6 12:00:45 2025 by rpki-client