$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: 2P2fHBXM4yDqkBak6evRDWMwZliaTnYjemTi5aE9Csg= Subject key identifier: 08:85:70:FC:04:66:D6:81:86:4C:4A:57:7A:A7:81:95:D4:52:6F:9B Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 10A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 1069 Signing time: Tue 04 Nov 2025 17:28:44 +0000 Manifest this update: Tue 04 Nov 2025 17:28:43 +0000 Manifest next update: Tue 11 Nov 2025 17:28:43 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: /vy2jNYE31Ro1OcN+MfZZsPUSKNel6++bh9yGhfJNkk=) 2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg=) 3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: ggdry6EXThW8/Iqa+JecYkvu6rQ2Ed52IzTRWBsgoGk=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM=) 6: 6007188446B111E98B793856C4F9AE02.roa (hash: YvD8e8mnmsaHRmkbd47odePbEhpcv8nyM6tzBDa3QPk=) 7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: bMzkx/wFNepXXNSOPh8Vc6hh0XPBuOSFoU3g8UlRrqg=) 8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 9HyQ/57eR9eFUhHAz1W5cHWihQdkbA5M8sMmhzOnJTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4259 (0x10a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: Nov 4 17:28:43 2025 GMT Not After : Nov 11 17:28:43 2025 GMT Subject: CN=690a37cb-7196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:74:32:3b:96:88:aa:bb:13:e2:df:8d:1f:c4: 02:62:ee:41:9d:1a:db:dd:9b:4f:b2:84:6b:54:95: df:ea:17:18:97:1b:10:63:e8:4c:2e:43:eb:85:03: b6:80:73:ef:9f:ae:b5:70:2c:43:a9:d3:d8:77:ae: 31:25:3e:d1:37:01:2b:f0:ec:af:2b:99:08:dc:94: f4:a5:1a:50:aa:de:91:13:17:58:12:7a:54:88:92: 93:2c:55:e8:a1:d7:14:30:2b:2e:7e:9d:9a:95:83: a4:f0:71:79:8d:17:ea:ce:28:8a:1c:25:bd:19:36: 75:2a:fe:6d:9c:2b:31:b6:57:9c:ff:e7:a3:d1:7b: 9b:99:e8:8e:f7:ed:fc:c6:c4:3f:09:53:c9:07:50: 34:8c:55:1a:f3:1a:08:03:0b:80:e6:e7:4a:55:9d: 34:27:b9:b4:24:b7:42:a2:11:3b:6a:5d:99:e2:a5: a6:37:1e:84:70:4d:0b:eb:10:53:a8:49:65:0b:f1: b1:b8:93:2c:40:65:eb:4f:aa:24:72:2b:d2:37:f0: 3d:0d:8e:2e:4e:b7:12:43:9b:c9:03:8d:7e:05:e5: 01:06:9b:be:b1:a9:04:bb:0a:37:7c:81:7f:5a:45: 15:c5:7e:99:f9:88:7d:46:6e:7f:09:b4:76:4e:d5: ff:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:85:70:FC:04:66:D6:81:86:4C:4A:57:7A:A7:81:95:D4:52:6F:9B X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:df:59:74:bd:30:c1:99:56:e2:f3:3d:d8:26:5a:ec:6d:b8: c2:94:25:6f:2d:6a:c5:68:2d:ba:cb:19:ed:1b:7b:0d:d0:c2: 8c:d1:27:0e:41:03:43:99:b3:45:87:45:4d:35:ca:a9:7f:b7: 90:8f:64:54:e0:3b:7d:5d:aa:c7:58:6a:73:01:79:2b:2c:11: e4:41:14:3a:6b:20:88:37:13:4e:7f:6f:3d:ae:68:70:06:fa: a4:9c:bf:84:24:56:55:f6:53:59:0d:f6:49:81:16:24:2f:0f: ad:5c:da:51:90:ad:8a:4c:2d:7a:84:e6:17:1b:29:de:8d:19: 8c:83:f4:ad:5b:20:e5:a5:c5:14:27:1b:2e:e9:a6:55:83:d0: ae:a3:10:83:6b:18:ff:74:bc:2e:0f:4c:ce:3a:f9:d0:8e:9d: 4c:84:26:70:81:30:3e:62:94:f3:f2:ce:bf:01:d1:a0:b6:f0: 23:fa:be:69:65:64:6d:16:06:db:fd:18:76:c2:49:0c:a1:ed: 0c:e6:28:dc:ed:5f:75:4a:35:b2:13:5d:47:2d:e6:16:9a:4d: 64:86:a2:5f:11:e8:bf:67:fe:29:de:d9:b7:85:9a:8c:47:ae: 75:63:3c:ad:c0:88:c1:5f:5b:f7:ed:dd:33:cc:cf:85:ec:f9: b0:81:f3:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUxMTA0MTcyODQzWhcNMjUxMTExMTcyODQzWjAYMRYwFAYD VQQDEw02OTBhMzdjYi03MTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHQyO5aIqrsT4t+NH8QCYu5BnRrb3ZtPsoRrVJXf6hcYlxsQY+hMLkPrhQO2 gHPvn661cCxDqdPYd64xJT7RNwEr8OyvK5kI3JT0pRpQqt6RExdYEnpUiJKTLFXo odcUMCsufp2alYOk8HF5jRfqziiKHCW9GTZ1Kv5tnCsxtlec/+ej0XubmeiO9+38 xsQ/CVPJB1A0jFUa8xoIAwuA5udKVZ00J7m0JLdCohE7al2Z4qWmNx6EcE0L6xBT qEllC/GxuJMsQGXrT6okcivSN/A9DY4uTrcSQ5vJA41+BeUBBpu+sakEuwo3fIF/ WkUVxX6Z+Yh9Rm5/CbR2TtX/7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiFcPwE ZtaBhkxKV3qngZXUUm+bMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk31l0vTDBmVbi8z3YJlrsbbjClCVvLWrFaC26yxntG3sN0MKM0ScO QQNDmbNFh0VNNcqpf7eQj2RU4Dt9XarHWGpzAXkrLBHkQRQ6ayCINxNOf289rmhw BvqknL+EJFZV9lNZDfZJgRYkLw+tXNpRkK2KTC16hOYXGynejRmMg/StWyDlpcUU Jxsu6aZVg9CuoxCDaxj/dLwuD0zOOvnQjp1MhCZwgTA+YpTz8s6/AdGgtvAj+r5p ZWRtFgbb/Rh2wkkMoe0M5ijc7V91SjWyE11HLeYWmk1khqJfEei/Z/4p3tm3hZqM R651YzytwIjBX1v37d0zzM+F7PmwgfPy -----END CERTIFICATE-----Generated at Wed Nov 5 03:31:01 2025 by rpki-client