$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft File: vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json) Hash identifier: 9kzItw8+D8lA7yT1eg7CkOlU3ZQHtb7juiX+xi56u6I= Subject key identifier: FF:BD:D9:93:40:B7:F2:2A:EC:E9:68:36:5F:A5:71:3B:EC:22:15:28 Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 Certificate issuer: /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft Manifest number: 01D8 Signing time: Mon 11 Aug 2025 03:04:15 +0000 Manifest this update: Mon 11 Aug 2025 03:04:14 +0000 Manifest next update: Mon 18 Aug 2025 03:04:14 +0000 Files and hashes: 1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: NqGsV+BvJLyWC5v9Q8yeh+/qCzYSPzs0y6cTEjQq2bw=) 2: 9D006D76ABFF11EFB2C29330C4F9AE02.roa (hash: sav0Vfh9ahqBtsGl4vXlcCzgGz1PO39Q+R+5OKHm5uw=) 3: 3D5EC616694B11EFABF9221EC4F9AE02.roa (hash: 8alxfWhIp7fRhom5siOZsw/HKgS/bAz4IL2gvyTSJPI=) 4: F6732580607111EF9102BD19C4F9AE02.roa (hash: wcbqbOVQnp7BuGlU2JxOrjCbdGxUZVyndV9A9ip3jUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Validity Not Before: Aug 11 03:04:14 2025 GMT Not After : Aug 18 03:04:14 2025 GMT Subject: CN=68995dae-2c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:22:e2:3f:a1:92:3e:53:b0:7a:94:86:81: 5f:3f:14:41:d2:68:4b:c0:b8:7d:05:c0:cb:31:8e: a9:5a:70:7a:bd:ff:2a:7e:37:8a:0c:79:1b:63:8d: b2:9c:a6:1d:1e:8b:fa:f8:43:cf:1c:e5:d9:a6:92: 34:06:b9:2e:a4:57:9b:ec:25:56:bb:41:fa:31:ff: 20:c1:8f:fa:84:a1:9b:1c:6e:cb:d1:56:15:a9:04: 83:68:99:55:bc:80:ef:bb:66:9f:1a:84:5f:15:8b: 09:76:f0:c6:77:47:08:2e:70:6e:bd:b3:ec:de:1d: 44:81:31:96:3d:64:6d:9f:69:bf:1c:20:7d:4c:41: 6c:ad:a9:d1:ef:48:89:fa:31:a7:b0:46:3e:a2:80: a7:42:bb:05:b4:ca:cf:04:81:c1:f0:90:30:8f:45: c5:3b:b2:4a:d9:a8:9b:a7:4f:0b:bc:07:43:23:5d: 8c:cf:33:d4:08:6b:fb:47:ff:44:63:fc:28:04:b1: fa:ae:fc:fd:4b:cb:80:a7:6e:e1:2c:1b:66:d3:be: 95:3e:93:44:1a:e9:ee:4c:bf:7c:81:1c:45:ae:3c: 38:b8:86:e5:b9:35:94:ad:4e:e8:1b:47:f1:38:e0: 76:98:64:43:96:5b:ff:ec:a6:b6:9b:d2:a3:27:f9: e7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BD:D9:93:40:B7:F2:2A:EC:E9:68:36:5F:A5:71:3B:EC:22:15:28 X509v3 Authority Key Identifier: keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:91:8d:27:4c:a3:51:4e:c2:2a:cf:16:27:67:cc:69:b2:65: ad:2b:71:30:66:10:ba:a7:d4:02:30:37:6d:fc:37:c5:fe:6d: b8:cb:da:10:02:29:9f:eb:f0:4c:75:6e:ed:e3:5e:ca:09:7a: 9e:68:0f:fd:c4:b5:ff:00:e1:41:d2:13:da:53:91:47:9e:5f: 5e:c7:18:3e:ac:f8:80:33:de:be:9a:6b:ba:fc:ed:14:ac:80: bc:df:34:01:c3:dc:57:30:66:ef:c0:71:a6:6e:13:fa:12:70: 2a:b8:89:a6:29:f3:51:76:76:cf:a3:39:a3:d5:9a:3b:e8:85: 1e:0a:d6:79:72:4b:a7:d2:46:70:e3:19:f2:4e:46:7c:1f:14: 1a:59:9a:54:5a:34:1c:7d:4e:3a:43:00:76:71:11:ec:24:54: f6:91:77:6e:ef:25:c3:f4:a3:db:6e:9d:b0:61:1c:84:5d:63: 3e:78:37:76:05:48:18:08:fa:ef:6c:5d:ed:2b:7d:56:9a:40: f8:3d:cb:13:ed:2e:9b:00:3e:b0:70:62:66:de:2d:15:b2:6c: bf:a6:8e:1a:31:45:ba:64:bf:07:bb:75:e1:bf:fb:fa:9d:35: 77:24:40:32:ab:2e:8c:2b:44:f0:4d:52:d7:f1:88:83:f1:9f: 33:16:d0:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFODgxMTAvBgNVBAUTKEJFM0Y4QkRGODFCNjZCNEVEMkUxQzc0RUI1RDVGQjAx QjVGNzc2NDEwHhcNMjUwODExMDMwNDE0WhcNMjUwODE4MDMwNDE0WjAYMRYwFAYD VQQDEw02ODk5NWRhZS0yYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNgi4j+hkj5TsHqUhoFfPxRB0mhLwLh9BcDLMY6pWnB6vf8qfjeKDHkbY42y nKYdHov6+EPPHOXZppI0BrkupFeb7CVWu0H6Mf8gwY/6hKGbHG7L0VYVqQSDaJlV vIDvu2afGoRfFYsJdvDGd0cILnBuvbPs3h1EgTGWPWRtn2m/HCB9TEFsranR70iJ +jGnsEY+ooCnQrsFtMrPBIHB8JAwj0XFO7JK2aibp08LvAdDI12MzzPUCGv7R/9E Y/woBLH6rvz9S8uAp27hLBtm076VPpNEGunuTL98gRxFrjw4uIbluTWUrU7oG0fx OOB2mGRDllv/7Ka2m9KjJ/nnOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+92ZNA t/Iq7OloNl+lcTvsIhUoMB8GA1UdIwQYMBaAFL4/i9+BtmtO0uHHTrXV+wG193ZB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREU4OC80QkZDQTE0MkMz RUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEwN1M0Y2RPdGRYN0FiWDNk a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqLUwzNEcyYTA3UzRjZE90ZFg3QWJYM2RrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REU4OC80QkZDQTE0MkMzRUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEw N1M0Y2RPdGRYN0FiWDNka0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArkY0nTKNRTsIqzxYnZ8xpsmWtK3EwZhC6p9QCMDdt/DfF/m24y9oQ Aimf6/BMdW7t417KCXqeaA/9xLX/AOFB0hPaU5FHnl9exxg+rPiAM96+mmu6/O0U rIC83zQBw9xXMGbvwHGmbhP6EnAquImmKfNRdnbPozmj1Zo76IUeCtZ5ckun0kZw 4xnyTkZ8HxQaWZpUWjQcfU46QwB2cRHsJFT2kXdu7yXD9KPbbp2wYRyEXWM+eDd2 BUgYCPrvbF3tK31WmkD4PcsT7S6bAD6wcGJm3i0Vsmy/po4aMUW6ZL8Hu3Xhv/v6 nTV3JEAyqy6MK0TwTVLX8YiD8Z8zFtBE -----END CERTIFICATE-----Generated at Mon Aug 11 07:29:05 2025 by rpki-client