$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: NgWic15INeI3hDAsRfINdKOA4dv2iMTWLDX1xOstGJA= Subject key identifier: CB:3A:F2:AC:DC:91:AC:8C:56:E4:D7:D5:30:83:4B:0C:53:B7:2D:FA Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 1072 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 1038 Signing time: Sat 02 Aug 2025 17:35:24 +0000 Manifest this update: Sat 02 Aug 2025 17:35:24 +0000 Manifest next update: Sat 09 Aug 2025 17:35:24 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: Nhr1dKuCWE5/o9mjxUP37H95T4Kpc130PbfSUAJIDFM=) 2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg=) 3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: ggdry6EXThW8/Iqa+JecYkvu6rQ2Ed52IzTRWBsgoGk=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM=) 6: 6007188446B111E98B793856C4F9AE02.roa (hash: YvD8e8mnmsaHRmkbd47odePbEhpcv8nyM6tzBDa3QPk=) 7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: bMzkx/wFNepXXNSOPh8Vc6hh0XPBuOSFoU3g8UlRrqg=) 8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 9HyQ/57eR9eFUhHAz1W5cHWihQdkbA5M8sMmhzOnJTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4210 (0x1072) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: Aug 2 17:35:24 2025 GMT Not After : Aug 9 17:35:24 2025 GMT Subject: CN=688e4c5c-b565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e4:54:93:45:d4:11:e6:30:70:08:0b:bd:61: 5a:df:90:57:1f:cc:43:06:bb:1c:07:4f:3c:46:e9: 69:1d:c8:5a:7e:ca:6b:82:5b:a7:f6:e4:87:83:db: 82:1d:1b:0b:ef:5f:f1:c5:a3:39:7e:9c:96:dd:23: fa:3a:21:91:d8:20:5d:b3:75:72:d8:32:de:ae:95: 00:a7:b8:4d:30:0d:00:75:c4:1a:9d:a9:c7:b9:79: b8:b8:5b:1c:e0:c5:0e:d9:be:d1:dc:37:4b:e9:c6: 17:8d:d2:ad:71:eb:8e:5b:69:44:74:50:58:8f:7c: 02:d4:08:77:5c:31:6d:78:f5:12:fc:e5:72:c3:e2: 5d:a8:7a:32:ed:21:5a:75:c5:19:a6:ed:cd:94:98: 04:5e:68:f9:6f:ee:21:36:33:ce:03:0f:b4:72:69: bc:22:14:2a:78:fe:19:b3:9b:d5:fe:93:ee:f7:be: dd:ab:99:f9:8b:d5:d3:ce:6c:f8:47:1c:0d:d2:93: 86:c5:10:cf:da:4b:00:c6:cc:11:82:e6:7c:57:22: 2a:c4:f9:f4:c6:37:0b:c7:2c:f0:55:c5:d0:40:22: 9e:50:a2:c1:e6:36:64:34:0e:12:4a:64:63:8f:7d: 31:0d:d8:c3:ed:19:0f:8c:d6:dc:d6:2e:a3:3e:1a: 15:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3A:F2:AC:DC:91:AC:8C:56:E4:D7:D5:30:83:4B:0C:53:B7:2D:FA X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:e9:e8:70:87:19:42:63:4d:af:12:8f:ba:5a:33:37:c4:95: 4a:79:80:34:e1:85:09:47:db:6d:9e:cd:f8:c2:b5:16:3d:6a: b2:be:50:7c:68:00:82:7d:1e:4b:59:b7:bb:6e:f7:66:20:cb: f6:0e:22:e1:fc:74:26:ba:60:e2:8c:ed:d4:65:3b:95:8a:6d: 92:e0:72:e7:2d:68:65:6e:cf:80:3e:e8:ee:72:07:94:a2:3b: 8a:b7:24:58:22:37:35:4b:47:9a:bd:56:8d:37:d2:21:d9:3f: 4a:f3:f8:c1:b8:7f:db:8e:2c:18:90:3b:99:f9:53:5c:3c:01: 66:cb:95:61:f4:d0:19:41:84:30:7e:0a:fb:cc:d0:09:3b:86: 24:29:35:e8:77:ab:14:6a:62:75:fd:47:df:72:3b:f2:ab:5f: 58:6f:5c:cb:46:16:9d:f5:b3:35:5f:e1:67:a4:fc:72:d8:c5: fb:aa:47:2d:cf:37:e3:f0:28:33:7b:3f:1e:b4:c3:63:df:be: 79:d0:a4:94:2c:60:2a:47:9d:03:ae:6e:b2:e4:7a:51:da:d2: 08:eb:51:53:4d:78:55:ff:23:a6:4e:92:13:e9:ef:8a:7e:7c: 1f:77:12:61:41:8b:3a:2d:f6:47:93:4e:13:94:1b:6c:96:3d: 3a:81:df:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUwODAyMTczNTI0WhcNMjUwODA5MTczNTI0WjAYMRYwFAYD VQQDEw02ODhlNGM1Yy1iNTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+RUk0XUEeYwcAgLvWFa35BXH8xDBrscB088RulpHchafsprglun9uSHg9uC HRsL71/xxaM5fpyW3SP6OiGR2CBds3Vy2DLerpUAp7hNMA0AdcQananHuXm4uFsc 4MUO2b7R3DdL6cYXjdKtceuOW2lEdFBYj3wC1Ah3XDFtePUS/OVyw+JdqHoy7SFa dcUZpu3NlJgEXmj5b+4hNjPOAw+0cmm8IhQqeP4Zs5vV/pPu977dq5n5i9XTzmz4 RxwN0pOGxRDP2ksAxswRguZ8VyIqxPn0xjcLxyzwVcXQQCKeUKLB5jZkNA4SSmRj j30xDdjD7RkPjNbc1i6jPhoVlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMs68qzc kayMVuTX1TCDSwxTty36MB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu6ehwhxlCY02vEo+6WjM3xJVKeYA04YUJR9ttns34wrUWPWqyvlB8 aACCfR5LWbe7bvdmIMv2DiLh/HQmumDijO3UZTuVim2S4HLnLWhlbs+APujucgeU ojuKtyRYIjc1S0eavVaNN9Ih2T9K8/jBuH/bjiwYkDuZ+VNcPAFmy5Vh9NAZQYQw fgr7zNAJO4YkKTXod6sUamJ1/Uffcjvyq19Yb1zLRhad9bM1X+FnpPxy2MX7qkct zzfj8Cgzez8etMNj37550KSULGAqR50Drm6y5HpR2tII61FTTXhV/yOmTpIT6e+K fnwfdxJhQYs6LfZHk04TlBtslj06gd/B -----END CERTIFICATE-----Generated at Mon Aug 4 16:06:08 2025 by rpki-client