$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft File: vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json) Hash identifier: /kiFxtZ4qVtsok+NtGySh/SvYZmKyhGOqLeDktAdED4= Subject key identifier: 2A:99:EE:03:FE:E7:95:ED:A0:3C:7D:72:0C:19:DE:E3:FC:F1:B7:3C Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 Certificate issuer: /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft Manifest number: 01FB Signing time: Sun 19 Oct 2025 05:01:51 +0000 Manifest this update: Sun 19 Oct 2025 05:01:50 +0000 Manifest next update: Sun 26 Oct 2025 05:01:50 +0000 Files and hashes: 1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: w43Qkytt6rUMWGlCsyF6pXrJBwvgDrTAcBvWXWWOXpc=) 2: 9D006D76ABFF11EFB2C29330C4F9AE02.roa (hash: sav0Vfh9ahqBtsGl4vXlcCzgGz1PO39Q+R+5OKHm5uw=) 3: 3D5EC616694B11EFABF9221EC4F9AE02.roa (hash: 8alxfWhIp7fRhom5siOZsw/HKgS/bAz4IL2gvyTSJPI=) 4: F6732580607111EF9102BD19C4F9AE02.roa (hash: wcbqbOVQnp7BuGlU2JxOrjCbdGxUZVyndV9A9ip3jUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Validity Not Before: Oct 19 05:01:50 2025 GMT Not After : Oct 26 05:01:50 2025 GMT Subject: CN=68f470bf-44ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:f8:9c:96:43:92:2d:e0:a1:49:00:82:0a: 80:39:65:8e:bf:48:8e:8e:3e:5d:48:eb:bf:af:3e: 93:7e:31:ad:43:16:18:4d:53:00:56:de:7b:83:75: c2:b6:de:c4:6e:a0:9e:af:ab:6f:ea:96:70:0e:64: 05:3a:ff:e4:7b:6e:a2:f4:88:a7:34:f9:c0:10:4e: 9b:13:d4:4f:36:de:99:0a:ca:ff:e6:e5:c3:a1:35: 25:ca:25:83:3b:d9:8a:da:1d:b7:7b:2f:54:72:d9: 0f:b7:4f:0d:4e:1b:a6:60:fa:fd:a4:a0:1e:d8:08: 60:2e:2b:7f:73:ef:81:58:c8:2e:d0:21:59:55:c9: f7:2d:dd:ea:0c:27:46:a7:6e:af:0a:3a:4f:e0:46: 45:a9:e8:19:b7:52:c4:18:a3:2f:a4:2a:5d:4a:1e: 8e:f8:f9:72:1d:b3:75:7f:b1:4d:57:48:e9:76:63: 00:02:a6:d7:2e:41:7b:2a:c4:42:45:c0:c7:9f:34: 51:73:94:1e:71:ba:1f:54:88:f3:4a:2e:3e:f9:4d: 57:a1:50:81:89:0d:67:d9:aa:a7:b6:c5:6b:16:d2: 70:16:33:56:9a:df:57:b6:b4:a4:df:3e:15:d9:71: c1:2f:9c:88:22:d8:db:4f:64:e8:c6:98:87:9e:d8: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:99:EE:03:FE:E7:95:ED:A0:3C:7D:72:0C:19:DE:E3:FC:F1:B7:3C X509v3 Authority Key Identifier: keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:c0:ff:5d:95:cf:ba:54:b5:c6:23:3a:7e:24:ae:4d:69:ec: ba:4b:14:e8:ba:7a:e9:3a:22:47:27:a0:4c:6c:93:17:f5:7c: 49:c2:7c:ee:2a:41:a0:8f:cb:70:76:24:c8:8e:90:0f:bb:9e: 82:f4:cd:d6:3a:6e:c3:0a:e4:57:3d:18:ab:7d:d7:7a:79:0e: cb:6b:29:fb:bd:8d:30:8d:1c:14:7a:58:6d:a9:d6:ad:8f:26: 7b:6d:f3:5d:1b:9e:21:ce:1e:48:9e:a0:2c:3e:7b:49:d5:00: 9d:22:b2:25:19:29:9c:de:af:ad:0c:2b:b7:b5:9f:56:04:04: ce:0c:3e:1c:51:3e:0b:54:fb:d8:90:47:97:a4:cc:eb:ae:97: dc:db:26:b6:10:0c:2c:a4:58:2d:58:84:a0:8f:21:a1:20:e2: ba:97:cc:f4:b4:4c:de:4f:b8:9e:18:d1:a5:06:d3:6d:e3:81: 94:a1:9c:40:be:7e:d7:13:19:43:37:02:5d:f9:bb:a9:2f:15: c5:93:97:8e:11:2a:58:ef:f9:a3:86:92:20:39:36:1f:45:26: ac:e8:1c:36:6c:f0:e3:7d:94:b1:80:47:6f:f4:1e:8b:0c:f3: 9a:9b:a6:c4:d1:05:4c:a6:1d:c4:d5:65:5a:b1:cd:8e:78:8a: de:ec:90:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFODgxMTAvBgNVBAUTKEJFM0Y4QkRGODFCNjZCNEVEMkUxQzc0RUI1RDVGQjAx QjVGNzc2NDEwHhcNMjUxMDE5MDUwMTUwWhcNMjUxMDI2MDUwMTUwWjAYMRYwFAYD VQQDEw02OGY0NzBiZi00NGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrL4nJZDki3goUkAggqAOWWOv0iOjj5dSOu/rz6TfjGtQxYYTVMAVt57g3XC tt7EbqCer6tv6pZwDmQFOv/ke26i9IinNPnAEE6bE9RPNt6ZCsr/5uXDoTUlyiWD O9mK2h23ey9UctkPt08NThumYPr9pKAe2AhgLit/c++BWMgu0CFZVcn3Ld3qDCdG p26vCjpP4EZFqegZt1LEGKMvpCpdSh6O+PlyHbN1f7FNV0jpdmMAAqbXLkF7KsRC RcDHnzRRc5QecbofVIjzSi4++U1XoVCBiQ1n2aqntsVrFtJwFjNWmt9XtrSk3z4V 2XHBL5yIItjbT2ToxpiHntjtoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqZ7gP+ 55XtoDx9cgwZ3uP88bc8MB8GA1UdIwQYMBaAFL4/i9+BtmtO0uHHTrXV+wG193ZB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREU4OC80QkZDQTE0MkMz RUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEwN1M0Y2RPdGRYN0FiWDNk a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqLUwzNEcyYTA3UzRjZE90ZFg3QWJYM2RrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REU4OC80QkZDQTE0MkMzRUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEw N1M0Y2RPdGRYN0FiWDNka0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgwP9dlc+6VLXGIzp+JK5Naey6SxTounrpOiJHJ6BMbJMX9XxJwnzu KkGgj8twdiTIjpAPu56C9M3WOm7DCuRXPRirfdd6eQ7Layn7vY0wjRwUelhtqdat jyZ7bfNdG54hzh5InqAsPntJ1QCdIrIlGSmc3q+tDCu3tZ9WBATODD4cUT4LVPvY kEeXpMzrrpfc2ya2EAwspFgtWISgjyGhIOK6l8z0tEzeT7ieGNGlBtNt44GUoZxA vn7XExlDNwJd+bupLxXFk5eOESpY7/mjhpIgOTYfRSas6Bw2bPDjfZSxgEdv9B6L DPOam6bE0QVMph3E1WVasc2OeIre7JCl -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:20 2025 by rpki-client