$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft File: vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json) Hash identifier: OTFCr70338bCsHoiVub8I39cUc/2bH00+cd26PFWWdQ= Subject key identifier: 88:EF:40:42:8A:5B:8B:BC:11:D7:8E:FB:F4:5B:75:12:62:51:85:3E Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 Certificate issuer: /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft Manifest number: 023E Signing time: Sun 01 Mar 2026 03:26:27 +0000 Manifest this update: Sun 01 Mar 2026 03:26:27 +0000 Manifest next update: Sun 08 Mar 2026 03:26:27 +0000 Files and hashes: 1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: n3F3boyGaNB3+kIHcqMjFG8xU6N0XSGfrMtxJkDanTA=) 2: F6732580607111EF9102BD19C4F9AE02.roa (hash: wcbqbOVQnp7BuGlU2JxOrjCbdGxUZVyndV9A9ip3jUk=) 3: 3D5EC616694B11EFABF9221EC4F9AE02.roa (hash: 8alxfWhIp7fRhom5siOZsw/HKgS/bAz4IL2gvyTSJPI=) 4: 9D006D76ABFF11EFB2C29330C4F9AE02.roa (hash: sav0Vfh9ahqBtsGl4vXlcCzgGz1PO39Q+R+5OKHm5uw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Validity Not Before: Mar 1 03:26:27 2026 GMT Not After : Mar 8 03:26:27 2026 GMT Subject: CN=69a3b1e3-38b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:91:ed:22:a1:c7:5b:92:a4:97:0b:79:0f: 6d:ac:4f:c8:a1:cd:27:3f:51:6f:bd:16:2c:63:9c: 22:b3:53:cf:15:7c:ea:05:26:3e:42:63:0d:b1:bb: 66:7a:2c:d9:d4:1e:2c:0d:56:e0:fc:bf:1b:8e:c8: df:76:ef:4a:74:f1:07:3a:d5:68:c3:8d:35:5a:b8: c7:33:9e:43:d1:a5:58:cd:ac:8e:00:b2:c0:73:4e: 2e:83:cd:e5:7e:46:f1:f7:87:c2:1c:eb:87:eb:06: 43:53:b1:46:41:85:f7:d7:1a:3b:ae:b4:b6:78:0c: 4a:91:02:a6:cc:9c:74:86:e1:2a:49:f4:40:cc:80: 5c:9c:df:9d:42:93:2b:fe:8f:7a:89:bf:9d:a0:1a: 4c:53:5d:c5:a8:74:63:ef:68:3d:40:dc:4e:33:0c: 93:03:97:68:82:c2:15:57:aa:c1:5b:61:f9:2c:7a: ab:40:98:05:05:5a:ad:aa:54:96:3f:c9:eb:83:d0: 71:8a:92:60:13:dc:f7:e4:3a:3e:1a:13:87:fc:c6: 02:12:6d:59:ce:bd:f5:a1:68:e2:6f:62:54:55:76: 4c:56:9b:c5:4e:d9:05:58:d3:5e:71:1a:aa:72:7e: c7:ac:fe:b8:ca:56:f8:8e:3d:de:f8:5b:44:7f:8b: bc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EF:40:42:8A:5B:8B:BC:11:D7:8E:FB:F4:5B:75:12:62:51:85:3E X509v3 Authority Key Identifier: keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:47:4d:1f:d4:8e:b1:f7:72:bb:f5:91:04:9a:55:68:1e:db: 1c:3b:6e:0f:76:aa:d8:2c:d7:cc:64:34:62:81:d2:f4:e3:fc: 5e:77:69:fd:c9:df:29:9c:7a:8b:e5:a1:13:93:47:cf:f2:37: a6:a2:bd:bf:ad:b8:e7:bc:09:b4:c5:52:bf:58:22:4c:96:57: 5f:38:7d:2e:3c:97:4b:f8:64:0b:37:b5:22:1e:a6:07:43:87: a3:ac:89:4c:8d:92:95:5b:27:84:7e:71:01:aa:1c:c8:f7:c0: 73:46:65:58:28:32:53:c2:95:62:fa:ed:4b:1f:3b:d4:f2:d7: 0e:74:50:e8:9a:cb:d4:ee:61:43:95:c8:e7:d3:43:27:97:40: b4:8e:35:3c:d6:a5:ed:d9:d3:03:ce:8c:49:c3:de:77:fd:00: 4b:76:0d:bf:4e:7c:7c:95:b6:6f:b6:5e:93:3d:a4:0e:46:4b: ec:bc:24:2f:02:14:87:d5:98:d6:ca:77:d5:95:6f:7a:cc:7d: 08:69:24:a1:da:23:35:59:e0:c2:fa:98:d8:3c:c4:35:6a:5a: 16:a5:71:1a:39:e5:fa:88:91:df:fa:1e:51:fb:22:70:f2:e3: 87:be:59:5b:56:b0:60:3b:e8:8b:94:7e:7b:b1:09:00:f9:e4: 80:15:56:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFODgxMTAvBgNVBAUTKEJFM0Y4QkRGODFCNjZCNEVEMkUxQzc0RUI1RDVGQjAx QjVGNzc2NDEwHhcNMjYwMzAxMDMyNjI3WhcNMjYwMzA4MDMyNjI3WjAYMRYwFAYD VQQDDA02OWEzYjFlMy0zOGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslKR7SKhx1uSpJcLeQ9trE/Ioc0nP1FvvRYsY5wis1PPFXzqBSY+QmMNsbtm eizZ1B4sDVbg/L8bjsjfdu9KdPEHOtVow401WrjHM55D0aVYzayOALLAc04ug83l fkbx94fCHOuH6wZDU7FGQYX31xo7rrS2eAxKkQKmzJx0huEqSfRAzIBcnN+dQpMr /o96ib+doBpMU13FqHRj72g9QNxOMwyTA5dogsIVV6rBW2H5LHqrQJgFBVqtqlSW P8nrg9BxipJgE9z35Do+GhOH/MYCEm1Zzr31oWjib2JUVXZMVpvFTtkFWNNecRqq cn7HrP64ylb4jj3e+FtEf4u8OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIjvQEKK W4u8EdeO+/RbdRJiUYU+MB8GA1UdIwQYMBaAFL4/i9+BtmtO0uHHTrXV+wG193ZB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREU4OC80QkZDQTE0MkMz RUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEwN1M0Y2RPdGRYN0FiWDNk a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqLUwzNEcyYTA3UzRjZE90ZFg3QWJYM2RrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REU4OC80QkZDQTE0MkMzRUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEw N1M0Y2RPdGRYN0FiWDNka0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnEdNH9SOsfdyu/WRBJpVaB7bHDtuD3aq2CzXzGQ0YoHS9OP8Xndp/cnfKZx6 i+WhE5NHz/I3pqK9v62457wJtMVSv1giTJZXXzh9LjyXS/hkCze1Ih6mB0OHo6yJ TI2SlVsnhH5xAaocyPfAc0ZlWCgyU8KVYvrtSx871PLXDnRQ6JrL1O5hQ5XI59ND J5dAtI41PNal7dnTA86MScPed/0AS3YNv058fJW2b7Zekz2kDkZL7LwkLwIUh9WY 1sp31ZVvesx9CGkkodojNVngwvqY2DzENWpaFqVxGjnl+oiR3/oeUfsicPLjh75Z W1awYDvoi5R+e7EJAPnkgBVWTA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:27:13 2026 by rpki-client