$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: LB+0rRgaeatvjzimRvAZ9jnhkuqhOMjfyXyMOqggJ5M= Subject key identifier: 87:42:34:70:3A:12:5C:04:E3:FC:13:9D:FF:D6:A7:22:C7:A9:34:E0 Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 105A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 1020 Signing time: Mon 16 Jun 2025 17:27:01 +0000 Manifest this update: Mon 16 Jun 2025 17:27:00 +0000 Manifest next update: Mon 23 Jun 2025 17:27:00 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: ftuSigU37KCKWqjX3YGMVmv9BkDamqjKjPxEikM4eK8=) 2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg=) 3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: ggdry6EXThW8/Iqa+JecYkvu6rQ2Ed52IzTRWBsgoGk=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM=) 6: 6007188446B111E98B793856C4F9AE02.roa (hash: YvD8e8mnmsaHRmkbd47odePbEhpcv8nyM6tzBDa3QPk=) 7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: bMzkx/wFNepXXNSOPh8Vc6hh0XPBuOSFoU3g8UlRrqg=) 8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 9HyQ/57eR9eFUhHAz1W5cHWihQdkbA5M8sMmhzOnJTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4186 (0x105a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: Jun 16 17:27:00 2025 GMT Not After : Jun 23 17:27:00 2025 GMT Subject: CN=685053e5-608a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:35:98:71:4a:97:6a:79:3c:c8:08:0f:43: e2:ec:b7:4c:08:33:b8:c7:4e:d2:f4:41:ae:67:a9: 49:a2:9c:34:4f:54:63:cf:ea:9b:ec:61:03:cb:8a: 24:9c:88:93:d9:6b:44:d7:06:49:73:28:51:ab:38: 05:cb:11:37:01:a4:82:98:28:1f:78:dd:8c:b7:a7: c6:d0:89:c5:2a:bd:62:c3:b4:78:75:7e:c3:3a:ab: 30:b4:43:97:a9:bd:d9:6f:bc:dc:2a:00:ea:d6:f3: 93:ca:0d:e5:6a:06:61:9d:b9:b3:b6:00:f2:01:4f: f2:76:11:61:79:b2:a8:86:ae:c7:04:9f:3f:59:00: e4:82:42:29:36:41:c8:e6:9c:5a:90:8d:75:28:d2: 39:d0:e3:a1:fe:2d:b7:dd:0c:73:ed:b9:62:75:ba: ff:d3:98:52:5b:0b:b7:b2:5e:23:d2:52:ed:fb:ba: 59:a1:24:ed:34:4e:af:40:25:fe:ef:2a:b4:13:b3: c7:1e:02:c2:6d:d8:77:96:a2:32:0f:6e:e7:68:75: 63:27:ef:57:79:65:a4:0a:2d:98:a2:22:3e:b9:4d: 8d:47:4b:0e:8d:6c:58:fa:d5:ef:4d:e2:f6:a4:13: be:55:50:e7:76:b8:f0:90:88:c3:aa:6b:da:5a:f9: 7e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:42:34:70:3A:12:5C:04:E3:FC:13:9D:FF:D6:A7:22:C7:A9:34:E0 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:8c:bd:ce:02:45:3a:0b:e3:f9:5b:e7:d0:e8:84:36:87:e0: 2f:24:92:5a:d4:57:e4:c3:75:aa:5e:6e:60:03:65:b5:f6:9a: dd:85:ab:61:c0:e4:da:21:b3:fd:54:7f:7e:b9:bb:7b:c9:01: c2:4e:e5:79:45:8f:70:f1:29:95:68:9b:40:55:53:47:82:b9: 99:d2:1e:6b:94:d2:e0:38:11:57:5b:28:83:f3:07:2a:ca:28: 87:13:ba:d3:6b:29:4f:b5:03:01:77:31:91:fe:94:c4:08:eb: 36:26:bf:c0:f3:14:f1:3d:12:b7:91:25:1c:c8:1a:8f:af:0c: 27:10:eb:b6:17:a9:27:c5:49:30:aa:45:04:be:f4:22:87:a3: 83:bd:c8:11:50:15:65:69:d4:fa:f2:45:0b:89:32:34:ed:9a: f2:33:08:a1:e9:d4:49:ec:cc:73:3f:49:8d:77:f2:b8:14:ef: 0d:1d:89:3f:b9:38:50:ad:d8:b4:0a:69:95:8b:db:78:53:92: 8d:65:98:b2:62:81:86:61:51:35:bb:36:ec:41:ce:da:a3:65: bc:c1:83:8d:36:7a:00:42:46:12:80:08:a0:63:a3:cd:b6:6f: f8:8b:7b:d5:f4:56:28:24:07:7b:ac:89:88:6d:62:30:6c:b7: 97:ff:5f:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUwNjE2MTcyNzAwWhcNMjUwNjIzMTcyNzAwWjAYMRYwFAYD VQQDEw02ODUwNTNlNS02MDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB41mHFKl2p5PMgID0Pi7LdMCDO4x07S9EGuZ6lJopw0T1Rjz+qb7GEDy4ok nIiT2WtE1wZJcyhRqzgFyxE3AaSCmCgfeN2Mt6fG0InFKr1iw7R4dX7DOqswtEOX qb3Zb7zcKgDq1vOTyg3lagZhnbmztgDyAU/ydhFhebKohq7HBJ8/WQDkgkIpNkHI 5pxakI11KNI50OOh/i233Qxz7blidbr/05hSWwu3sl4j0lLt+7pZoSTtNE6vQCX+ 7yq0E7PHHgLCbdh3lqIyD27naHVjJ+9XeWWkCi2YoiI+uU2NR0sOjWxY+tXvTeL2 pBO+VVDndrjwkIjDqmvaWvl+5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdCNHA6 ElwE4/wTnf/WpyLHqTTgMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEjL3OAkU6C+P5W+fQ6IQ2h+AvJJJa1Ffkw3WqXm5gA2W19prdhath wOTaIbP9VH9+ubt7yQHCTuV5RY9w8SmVaJtAVVNHgrmZ0h5rlNLgOBFXWyiD8wcq yiiHE7rTaylPtQMBdzGR/pTECOs2Jr/A8xTxPRK3kSUcyBqPrwwnEOu2F6knxUkw qkUEvvQih6ODvcgRUBVladT68kULiTI07ZryMwih6dRJ7MxzP0mNd/K4FO8NHYk/ uThQrdi0CmmVi9t4U5KNZZiyYoGGYVE1uzbsQc7ao2W8wYONNnoAQkYSgAigY6PN tm/4i3vV9FYoJAd7rImIbWIwbLeX/19n -----END CERTIFICATE-----Generated at Mon Jun 16 22:41:03 2025 by rpki-client