$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft File: vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json) Hash identifier: ojUB6aFVDPtvVvk/7/8Ei3ELcrqV9cS3b06+AwwCXFw= Subject key identifier: 6E:86:70:55:D0:28:BC:16:4C:24:5E:AB:AC:D0:AA:E3:5E:00:E9:14 Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 Certificate issuer: /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft Manifest number: 0259 Signing time: Sun 19 Apr 2026 02:10:26 +0000 Manifest this update: Sun 19 Apr 2026 02:10:26 +0000 Manifest next update: Sun 26 Apr 2026 02:10:26 +0000 Files and hashes: 1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: NZQGZZ14i0GyeLLJ6jrOyj6MZiR0YwlS25TkGZSMlLU=) 2: 9D006D76ABFF11EFB2C29330C4F9AE02.roa (hash: HL0tiVcLo93pKRI9wv640TjU6z5PO5zrvY8dtgjSLKo=) 3: F6732580607111EF9102BD19C4F9AE02.roa (hash: /ToOn3RMZ92fr6FnnjfaLu2ML8hHadzy4x2reWCK0gw=) 4: 3D5EC616694B11EFABF9221EC4F9AE02.roa (hash: mD7usdC1Pui7I8rbOGC6trZPf/sZw/wYr0DldOLidTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Validity Not Before: Apr 19 02:10:26 2026 GMT Not After : Apr 26 02:10:26 2026 GMT Subject: CN=69e43992-19c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b0:9d:db:f3:e0:b5:d7:50:d9:18:de:e8:56: 50:35:5f:51:90:dc:c3:7e:d0:99:98:31:5c:83:e9: 99:44:a3:9b:4a:48:b4:02:52:94:60:bb:6a:fb:77: 56:20:df:fa:08:a9:e4:73:ff:3b:8c:2a:d0:0b:1c: 43:bd:7e:b4:47:23:02:40:83:db:13:9e:af:a5:ac: 63:9b:68:39:26:d6:79:e4:f6:b5:ca:04:f8:28:d5: b0:21:0e:a4:9c:b7:54:44:ba:c4:56:59:56:f0:c2: 1e:10:cb:28:b5:31:91:38:84:eb:91:5f:02:5e:aa: 47:35:7d:17:4b:2e:c3:5c:8c:36:e3:90:5e:bc:27: 02:27:c6:f2:8c:bd:5c:38:c0:c3:71:7a:15:47:d7: 5a:32:c6:a9:ba:d0:74:1a:2b:44:31:3d:1d:af:14: 61:0a:d1:10:4b:5b:bd:5a:b5:49:bf:41:3c:b3:5c: cd:76:12:2f:28:4f:b2:88:6a:ce:0f:2f:70:bc:51: 87:ec:55:0f:62:14:68:7c:b5:bf:24:16:2f:e4:c1: 76:ed:ad:c6:0d:62:84:ee:4e:74:45:2f:24:9e:26: 32:72:e0:7d:19:2c:d8:64:d4:8f:cf:68:b3:95:42: be:cd:0e:fc:fc:4d:15:a8:34:fc:b9:3c:a7:d2:7e: 76:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:86:70:55:D0:28:BC:16:4C:24:5E:AB:AC:D0:AA:E3:5E:00:E9:14 X509v3 Authority Key Identifier: keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9f:6b:3b:d0:f3:95:3e:df:c2:64:ce:63:a2:2b:ea:d6:cd: ed:54:c9:fb:5b:89:34:56:1c:ec:2c:5d:b0:9d:dd:35:d3:78: 50:80:09:2e:65:45:66:61:d9:93:b4:b6:fb:f5:36:4f:f5:45: 83:fb:fe:5c:ee:33:f0:4c:7e:a3:e1:d9:3f:84:a1:47:88:78: 1c:cc:d6:84:d1:ca:4d:d0:bd:77:30:6b:89:fa:cb:3c:a2:47: bf:74:12:e6:66:c9:19:66:71:c6:de:ae:2c:fe:3e:c4:12:ae: 05:d5:17:97:cc:4e:0b:11:86:d9:73:56:4c:99:ea:58:28:4f: 7b:88:b1:7b:49:0c:c2:9f:c2:3a:a0:42:b2:4f:8c:f7:c8:ad: c2:27:8e:a1:5b:ea:f5:05:60:31:41:56:93:4a:61:07:67:4b: 28:7b:de:69:65:ab:9d:70:00:5c:de:33:73:3c:f7:1b:84:7e: 56:e2:4a:4e:40:62:f9:5a:36:5e:38:3b:fc:43:1e:da:32:4a: 9f:53:7b:c1:74:fd:f3:20:46:c4:54:d1:fd:ca:e1:4b:aa:99: da:b7:90:55:0e:d7:08:f4:0d:dc:1b:85:57:ac:e8:27:81:8c: 1a:1a:d9:b1:1d:ba:23:38:03:c7:33:48:aa:d4:3e:51:72:ef: c4:f7:de:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFODgxMTAvBgNVBAUTKEJFM0Y4QkRGODFCNjZCNEVEMkUxQzc0RUI1RDVGQjAx QjVGNzc2NDEwHhcNMjYwNDE5MDIxMDI2WhcNMjYwNDI2MDIxMDI2WjAYMRYwFAYD VQQDEw02OWU0Mzk5Mi0xOWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl7Cd2/PgtddQ2Rje6FZQNV9RkNzDftCZmDFcg+mZRKObSki0AlKUYLtq+3dW IN/6CKnkc/87jCrQCxxDvX60RyMCQIPbE56vpaxjm2g5JtZ55Pa1ygT4KNWwIQ6k nLdURLrEVllW8MIeEMsotTGROITrkV8CXqpHNX0XSy7DXIw245BevCcCJ8byjL1c OMDDcXoVR9daMsaputB0GitEMT0drxRhCtEQS1u9WrVJv0E8s1zNdhIvKE+yiGrO Dy9wvFGH7FUPYhRofLW/JBYv5MF27a3GDWKE7k50RS8kniYycuB9GSzYZNSPz2iz lUK+zQ78/E0VqDT8uTyn0n525wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG6GcFXQ KLwWTCReq6zQquNeAOkUMB8GA1UdIwQYMBaAFL4/i9+BtmtO0uHHTrXV+wG193ZB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREU4OC80QkZDQTE0MkMz RUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEwN1M0Y2RPdGRYN0FiWDNk a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqLUwzNEcyYTA3UzRjZE90ZFg3QWJYM2RrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REU4OC80QkZDQTE0MkMzRUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEw N1M0Y2RPdGRYN0FiWDNka0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbJ9rO9DzlT7fwmTOY6Ir6tbN7VTJ+1uJNFYc7CxdsJ3dNdN4UIAJLmVFZmHZ k7S2+/U2T/VFg/v+XO4z8Ex+o+HZP4ShR4h4HMzWhNHKTdC9dzBrifrLPKJHv3QS 5mbJGWZxxt6uLP4+xBKuBdUXl8xOCxGG2XNWTJnqWChPe4ixe0kMwp/COqBCsk+M 98itwieOoVvq9QVgMUFWk0phB2dLKHveaWWrnXAAXN4zczz3G4R+VuJKTkBi+Vo2 Xjg7/EMe2jJKn1N7wXT98yBGxFTR/crhS6qZ2reQVQ7XCPQN3BuFV6zoJ4GMGhrZ sR26IzgDxzNIqtQ+UXLvxPfeFA== -----END CERTIFICATE-----Generated at Sun Apr 19 08:51:30 2026 by rpki-client