$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: /O6AT6SCQ5qwocUTSVc/JIMSMi4AxVrqZua5zx3b7kQ= Subject key identifier: 98:DA:A5:CD:64:81:6F:FB:DF:34:6E:06:3C:D4:D8:91:20:F1:22:B9 Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 10E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 10A7 Signing time: Mon 02 Mar 2026 01:06:51 +0000 Manifest this update: Mon 02 Mar 2026 01:06:49 +0000 Manifest next update: Mon 09 Mar 2026 01:06:49 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: wK4M9VYO4EOgj8gRwpQqNRn62kphFwdnJzIwrDF/rNE=) 2: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: UuWF6KeypCIEZVIGweXbl7BvzcdwOy44XbTHZZwKzr8=) 3: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: sxxBQXaxmx2/mhExro9TLoIXfWeEVD4qaorx3l/HsBQ=) 4: 5E46267A46B111E98B793856C4F9AE02.roa (hash: alpoJ/dJyOOayO88hPVQWa6n17xwZWeFLTeDr+7hL4c=) 5: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: vrAJ7z1fSpJjGKtrMPh5IwHUZxDG1ko4bALeyyyT95o=) 6: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: sRW4qj4RQsjO0u1DDYNLTyYoXxRig9f6VKT6JhSAD6E=) 7: 3848F884F23311EE97946A35C4F9AE02.roa (hash: vHFFGav5jT6207ykKhwLk1mYRk+A/3Ad6NJ4mcOs2U0=) 8: 6007188446B111E98B793856C4F9AE02.roa (hash: F74p5ch7S9ZemwYmfO7s1urmMOLkTy/KwgLFbRsCsyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4328 (0x10e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: Mar 2 01:06:49 2026 GMT Not After : Mar 9 01:06:49 2026 GMT Subject: CN=69a4e2aa-8be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:26:fb:14:72:81:c7:3d:30:77:b1:38:eb:66: 3a:6e:98:e3:b9:aa:01:91:b5:8e:8c:7c:66:af:18: 25:02:f8:71:9e:f3:10:fd:81:fe:1c:8d:b7:76:81: f3:d1:57:71:00:d7:23:86:c6:a1:7a:4c:4d:f9:88: 46:71:47:2c:d9:09:18:80:af:b8:cc:06:a8:8d:a5: e3:61:26:f7:2b:ea:84:97:c1:34:e2:a5:35:8e:8b: e0:2d:44:3a:4b:d8:84:dc:a6:11:6d:7d:db:75:f3: 5b:fd:fd:0b:c2:3e:f6:89:fe:e7:4d:df:56:37:1e: 23:a8:db:ad:84:57:a1:9a:c5:29:8d:2a:0b:ca:16: 3c:b5:37:4f:2e:03:68:24:31:d7:ee:59:d7:91:96: 08:fd:ec:74:c2:b2:8c:2a:58:74:97:72:53:e4:2d: 20:4d:00:1c:30:ef:71:49:f9:8a:af:4d:a3:c5:31: 4c:3e:d6:85:a6:ca:7d:78:c5:67:b6:a3:45:52:1f: aa:4e:17:5f:2d:56:12:35:b1:de:b4:ce:60:bd:da: 15:e4:7c:05:f5:1b:40:8d:03:79:58:68:ea:50:43: ba:9f:bf:63:69:8d:57:c1:eb:6b:ef:29:e0:a9:f5: 34:44:4f:55:97:61:cd:cc:b8:e7:62:8a:a4:21:a0: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DA:A5:CD:64:81:6F:FB:DF:34:6E:06:3C:D4:D8:91:20:F1:22:B9 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a3:5f:b4:37:b7:08:16:2c:5b:0f:1b:33:41:bd:db:3d:06: 5f:82:da:fe:7f:3d:f8:f3:ed:33:e0:59:ed:89:d4:68:9b:5b: 17:8d:4a:7d:ea:5c:90:19:91:33:43:01:5b:e0:4b:32:fe:dc: 23:9e:ab:ad:7b:ad:b9:24:1b:d7:67:15:ae:c3:77:07:8d:62: d9:67:72:08:2d:92:5f:35:ef:ad:d6:09:5c:6e:dc:ec:4b:5a: 27:c1:e2:08:93:43:69:d7:8c:d4:ac:d1:3c:e8:0c:7c:b0:b1: 7f:9e:d5:2e:1d:37:2f:19:f5:4b:2c:1a:30:88:c7:5c:e3:a4: 51:14:53:bc:2d:7f:37:bd:9b:45:c7:52:5c:b9:f9:ba:74:6f: b3:2f:a9:b5:f5:ed:52:9e:58:60:dc:47:b3:f7:41:ff:19:a1: 04:c3:dd:41:e4:db:da:07:df:c2:48:f9:fb:3f:b8:b4:f7:f3: 1e:ee:34:eb:49:d0:2e:18:68:17:1a:63:5d:e1:4e:4e:5d:2d: a7:3b:0f:0b:a8:57:9f:6f:f9:05:83:7d:1f:71:4d:ec:fd:a5: 76:af:05:55:5f:fe:9d:33:cf:7c:78:ea:f6:07:a0:86:8c:a9: 0b:bc:39:b9:77:94:90:df:d8:af:d9:93:70:cc:f1:70:9c:df: 6b:e8:47:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjYwMzAyMDEwNjQ5WhcNMjYwMzA5MDEwNjQ5WjAYMRYwFAYD VQQDEw02OWE0ZTJhYS04YmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSb7FHKBxz0wd7E462Y6bpjjuaoBkbWOjHxmrxglAvhxnvMQ/YH+HI23doHz 0VdxANcjhsahekxN+YhGcUcs2QkYgK+4zAaojaXjYSb3K+qEl8E04qU1jovgLUQ6 S9iE3KYRbX3bdfNb/f0Lwj72if7nTd9WNx4jqNuthFehmsUpjSoLyhY8tTdPLgNo JDHX7lnXkZYI/ex0wrKMKlh0l3JT5C0gTQAcMO9xSfmKr02jxTFMPtaFpsp9eMVn tqNFUh+qThdfLVYSNbHetM5gvdoV5HwF9RtAjQN5WGjqUEO6n79jaY1Xwetr7yng qfU0RE9Vl2HNzLjnYoqkIaDvzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjapc1k gW/73zRuBjzU2JEg8SK5MB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANaNftDe3CBYsWw8bM0G92z0GX4La/n89+PPtM+BZ7YnUaJtbF41KfepckBmR M0MBW+BLMv7cI56rrXutuSQb12cVrsN3B41i2WdyCC2SXzXvrdYJXG7c7EtaJ8Hi CJNDadeM1KzRPOgMfLCxf57VLh03Lxn1SywaMIjHXOOkURRTvC1/N72bRcdSXLn5 unRvsy+ptfXtUp5YYNxHs/dB/xmhBMPdQeTb2gffwkj5+z+4tPfzHu4060nQLhho FxpjXeFOTl0tpzsPC6hXn2/5BYN9H3FN7P2ldq8FVV/+nTPPfHjq9geghoypC7w5 uXeUkN/Yr9mTcMzxcJzfa+hHtA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:31:08 2026 by rpki-client