$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft File: vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json) Hash identifier: 7qLthwGF8ewEaaIp784MiA3pvImF0HIVylqKyyDfiH8= Subject key identifier: 67:E8:6C:D9:78:95:E2:D7:19:6F:7C:F3:3B:6B:6A:30:B4:F5:22:11 Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 Certificate issuer: /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft Manifest number: 01BE Signing time: Sat 21 Jun 2025 02:29:43 +0000 Manifest this update: Sat 21 Jun 2025 02:29:42 +0000 Manifest next update: Sat 28 Jun 2025 02:29:42 +0000 Files and hashes: 1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: 5iZM0q9l4F2Q+2tlSboUWt1tlCaST1EYaPlaAMedXhM=) 2: 9D006D76ABFF11EFB2C29330C4F9AE02.roa (hash: sav0Vfh9ahqBtsGl4vXlcCzgGz1PO39Q+R+5OKHm5uw=) 3: 3D5EC616694B11EFABF9221EC4F9AE02.roa (hash: 8alxfWhIp7fRhom5siOZsw/HKgS/bAz4IL2gvyTSJPI=) 4: F6732580607111EF9102BD19C4F9AE02.roa (hash: wcbqbOVQnp7BuGlU2JxOrjCbdGxUZVyndV9A9ip3jUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Validity Not Before: Jun 21 02:29:42 2025 GMT Not After : Jun 28 02:29:42 2025 GMT Subject: CN=68561917-8cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:f7:14:85:32:c6:75:4d:c2:c8:37:4a:f3: c2:fc:58:cc:61:63:24:3a:67:1b:4a:7c:af:bb:94: cd:ed:3c:3c:3e:ff:86:8f:51:75:f8:e5:8d:0c:e7: 05:ce:d4:f8:52:86:ec:10:97:f5:4e:b1:1a:ee:84: 46:74:77:41:d2:0f:99:d2:6b:08:23:fc:f2:6f:68: 16:6a:a3:ed:9a:e8:cf:6f:eb:63:45:4b:29:14:c9: 56:15:40:df:12:a5:5d:d8:dc:dc:2d:52:d3:38:ba: 4d:2e:9c:c0:7f:3c:5f:1d:46:22:38:89:51:80:ef: 5e:ff:59:2e:09:28:e1:31:c3:a5:42:cc:39:45:b7: 38:61:7e:37:e7:02:01:4f:72:c6:16:5c:87:0b:a4: 25:f1:f0:3c:50:eb:be:d8:56:63:62:04:89:74:45: e4:56:51:e3:9d:31:fd:40:1b:47:62:21:e3:ab:b5: 16:58:85:f1:98:19:a6:b1:c9:f3:eb:db:81:99:78: 1f:6d:81:65:7c:da:7e:41:54:a3:a6:db:ad:01:77: 7b:1a:dd:88:70:e9:46:b7:e5:b1:94:df:10:77:c0: aa:ab:a5:96:fc:72:35:a6:24:6b:ef:df:fd:0b:81: bc:2e:db:68:89:5d:99:82:a1:69:b6:eb:23:bd:9f: 08:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E8:6C:D9:78:95:E2:D7:19:6F:7C:F3:3B:6B:6A:30:B4:F5:22:11 X509v3 Authority Key Identifier: keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:0b:38:a0:3e:c2:af:3e:a9:a5:69:8d:ac:53:25:67:46:1d: 6c:c6:7e:8d:2d:27:e6:b3:70:e8:bd:b3:69:62:e4:4c:e9:d6: 07:79:0f:1a:9d:f2:75:96:9a:4f:ad:b9:55:7f:c7:9b:4a:8b: 4e:7a:c0:d7:ac:8b:e3:ca:9d:98:96:b0:89:f8:df:96:dc:28: e7:7e:2b:6c:99:cf:2f:49:e6:7e:6d:7f:21:97:a8:d3:2f:6c: 7d:8a:48:d8:ca:46:1b:47:a0:9a:75:69:ff:90:cb:d3:66:cd: 64:fd:7d:28:2b:03:e8:d3:b3:8e:be:4a:15:87:0e:15:a7:d5: 78:d8:67:af:22:7a:a6:a7:3e:84:7c:13:ca:73:99:7e:6b:2e: 04:92:6a:6e:5a:f1:db:c3:96:70:81:c8:5e:0d:ca:56:4e:47: 17:0a:2e:22:23:57:0a:8c:18:b2:db:02:c5:cd:c5:92:27:7c: 86:dd:0a:b8:62:3d:a7:47:c1:ba:97:23:d7:b7:af:e3:bd:bd: 53:93:12:45:cc:fb:57:94:e0:d0:80:a4:59:58:72:7a:10:7b: d7:5a:52:c7:21:d6:6d:1e:57:2c:c0:37:f1:78:21:ad:8a:41: 38:8b:69:e2:48:b5:0f:79:1f:f9:aa:bf:d8:4b:9e:c5:db:b2: 37:fb:ae:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFODgxMTAvBgNVBAUTKEJFM0Y4QkRGODFCNjZCNEVEMkUxQzc0RUI1RDVGQjAx QjVGNzc2NDEwHhcNMjUwNjIxMDIyOTQyWhcNMjUwNjI4MDIyOTQyWjAYMRYwFAYD VQQDEw02ODU2MTkxNy04Y2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXX3FIUyxnVNwsg3SvPC/FjMYWMkOmcbSnyvu5TN7Tw8Pv+Gj1F1+OWNDOcF ztT4UobsEJf1TrEa7oRGdHdB0g+Z0msII/zyb2gWaqPtmujPb+tjRUspFMlWFUDf EqVd2NzcLVLTOLpNLpzAfzxfHUYiOIlRgO9e/1kuCSjhMcOlQsw5Rbc4YX435wIB T3LGFlyHC6Ql8fA8UOu+2FZjYgSJdEXkVlHjnTH9QBtHYiHjq7UWWIXxmBmmscnz 69uBmXgfbYFlfNp+QVSjptutAXd7Gt2IcOlGt+WxlN8Qd8Cqq6WW/HI1piRr79/9 C4G8LttoiV2ZgqFptusjvZ8IMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfobNl4 leLXGW988ztrajC09SIRMB8GA1UdIwQYMBaAFL4/i9+BtmtO0uHHTrXV+wG193ZB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREU4OC80QkZDQTE0MkMz RUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEwN1M0Y2RPdGRYN0FiWDNk a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqLUwzNEcyYTA3UzRjZE90ZFg3QWJYM2RrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REU4OC80QkZDQTE0MkMzRUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEw N1M0Y2RPdGRYN0FiWDNka0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwCzigPsKvPqmlaY2sUyVnRh1sxn6NLSfms3DovbNpYuRM6dYHeQ8a nfJ1lppPrblVf8ebSotOesDXrIvjyp2YlrCJ+N+W3Cjnfitsmc8vSeZ+bX8hl6jT L2x9ikjYykYbR6CadWn/kMvTZs1k/X0oKwPo07OOvkoVhw4Vp9V42GevInqmpz6E fBPKc5l+ay4EkmpuWvHbw5ZwgcheDcpWTkcXCi4iI1cKjBiy2wLFzcWSJ3yG3Qq4 Yj2nR8G6lyPXt6/jvb1TkxJFzPtXlODQgKRZWHJ6EHvXWlLHIdZtHlcswDfxeCGt ikE4i2niSLUPeR/5qr/YS57F27I3+645 -----END CERTIFICATE-----Generated at Sun Jun 22 07:36:08 2025 by rpki-client