$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft File: vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json) Hash identifier: V+yoRnB8mjhQCeu7DnKrs81l0HrwRiHtwYZkszjYsdc= Subject key identifier: 8E:8A:DC:26:BB:77:49:AD:8D:56:A3:AB:C2:1F:FB:94:6E:24:37:CD Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 Certificate issuer: /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft Manifest number: 0192 Signing time: Sat 29 Mar 2025 03:11:50 +0000 Manifest this update: Sat 29 Mar 2025 03:11:50 +0000 Manifest next update: Sat 05 Apr 2025 03:11:49 +0000 Files and hashes: 1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: 2agWPLjAl5ZNyajwgA193OMIjQTO+JUVZyunkbU9A48=) 2: 9D006D76ABFF11EFB2C29330C4F9AE02.roa (hash: CXDVIgiuNptNCeJ8NB+6MdXnGgNKgLyiUdDI4rzlHVA=) 3: 3D5EC616694B11EFABF9221EC4F9AE02.roa (hash: M+0mgI5Ut93Y6DOGad04m6fdax48NQUBHwqd8iGMoRw=) 4: F6732580607111EF9102BD19C4F9AE02.roa (hash: 51DVl3Ge9v5KS2ba5XYaktSxSA94TqREr4vREv9ZdDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DE88 Validity Not Before: Mar 29 03:11:50 2025 GMT Not After : Apr 5 03:11:49 2025 GMT Subject: CN=67e764f6-56b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:89:d2:e7:63:07:ec:6a:32:e0:75:11:8c: 32:80:85:91:91:ef:a1:98:52:64:8e:a3:1f:7c:b2: 96:45:6f:db:7b:57:52:2b:70:4c:71:3d:8f:e7:27: f5:70:f2:4f:a4:d3:2d:a3:f5:82:d8:f1:1c:4e:1d: eb:fb:26:f6:83:d4:4e:7f:12:8d:31:53:34:77:ae: 6f:49:ec:17:d2:24:43:59:c6:fc:f1:3b:ee:40:f8: 4d:91:0e:dc:cf:cb:4a:49:16:b4:3d:d3:32:57:fb: 16:d5:b4:1b:7d:3f:cd:57:f3:9f:65:9e:64:f4:5d: 00:c4:0d:f4:62:ae:64:19:ca:e5:d5:33:81:6a:80: c0:64:d6:f8:f4:f1:93:0d:09:57:6b:0b:6c:25:75: 54:86:d9:95:d8:9b:84:53:b1:99:a3:68:e0:3b:5e: ee:8d:eb:34:64:a2:9d:7b:06:4d:ad:f1:01:a4:38: 36:f9:7e:c3:28:7c:1f:a1:9f:c4:2b:35:b4:07:28: c2:c6:f0:27:10:7e:4f:e9:fb:9f:f2:fd:3a:c6:4c: 3d:46:75:8c:8b:e8:dd:c9:d1:29:11:87:95:f8:9d: cf:8f:57:b9:87:35:99:45:5c:e2:60:10:ef:e3:4b: 1f:6a:40:29:98:25:24:3b:18:c7:c0:21:3a:23:75: 8c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8A:DC:26:BB:77:49:AD:8D:56:A3:AB:C2:1F:FB:94:6E:24:37:CD X509v3 Authority Key Identifier: keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:35:27:40:33:fb:c4:77:18:30:cd:63:bd:e9:26:4a:3a:d0: 5a:75:1c:7a:a5:84:15:14:c6:e1:97:41:9b:c4:77:3f:2b:b9: 75:03:7f:74:f6:cd:0e:3e:e1:30:1e:ae:a6:6f:3d:fb:99:90: 19:31:20:e6:bd:93:54:f5:4a:1c:e4:b4:de:95:be:57:72:0e: 5b:a7:45:82:11:bf:77:9f:ef:58:6e:1b:40:c3:63:81:d3:81: 62:98:7a:81:cb:66:01:77:1e:de:05:4c:7c:8c:5b:de:57:62: df:0c:18:18:d0:12:7d:20:90:c6:72:c6:bc:c1:0f:20:ba:a2: 20:51:7c:4a:45:2c:59:77:0b:60:b4:6a:58:bd:37:81:74:b9: ee:e8:9b:80:f9:7c:19:7b:cf:0f:35:b3:26:b3:be:8f:92:d8: 71:62:58:00:6a:20:24:93:3d:4a:0c:31:02:47:27:11:97:2a: ae:08:1b:35:57:be:0d:12:18:37:a8:32:bc:e8:7c:c5:1d:fa: a5:95:31:3a:d0:0b:1c:75:69:5d:2e:42:2c:ea:5e:55:3b:83: d4:0b:f9:8e:53:e1:a8:0d:7d:1c:a6:5f:d4:61:b8:27:75:1c: ea:68:6a:d4:a3:71:22:a0:8d:1f:f4:6a:f8:e5:69:f4:12:a7: dd:b9:03:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFODgxMTAvBgNVBAUTKEJFM0Y4QkRGODFCNjZCNEVEMkUxQzc0RUI1RDVGQjAx QjVGNzc2NDEwHhcNMjUwMzI5MDMxMTUwWhcNMjUwNDA1MDMxMTQ5WjAYMRYwFAYD VQQDEw02N2U3NjRmNi01NmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7SJ0udjB+xqMuB1EYwygIWRke+hmFJkjqMffLKWRW/be1dSK3BMcT2P5yf1 cPJPpNMto/WC2PEcTh3r+yb2g9ROfxKNMVM0d65vSewX0iRDWcb88TvuQPhNkQ7c z8tKSRa0PdMyV/sW1bQbfT/NV/OfZZ5k9F0AxA30Yq5kGcrl1TOBaoDAZNb49PGT DQlXawtsJXVUhtmV2JuEU7GZo2jgO17ujes0ZKKdewZNrfEBpDg2+X7DKHwfoZ/E KzW0ByjCxvAnEH5P6fuf8v06xkw9RnWMi+jdydEpEYeV+J3Pj1e5hzWZRVziYBDv 40sfakApmCUkOxjHwCE6I3WMQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6K3Ca7 d0mtjVajq8If+5RuJDfNMB8GA1UdIwQYMBaAFL4/i9+BtmtO0uHHTrXV+wG193ZB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREU4OC80QkZDQTE0MkMz RUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEwN1M0Y2RPdGRYN0FiWDNk a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqLUwzNEcyYTA3UzRjZE90ZFg3QWJYM2RrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REU4OC80QkZDQTE0MkMzRUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEw N1M0Y2RPdGRYN0FiWDNka0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2NSdAM/vEdxgwzWO96SZKOtBadRx6pYQVFMbhl0GbxHc/K7l1A390 9s0OPuEwHq6mbz37mZAZMSDmvZNU9Uoc5LTelb5Xcg5bp0WCEb93n+9YbhtAw2OB 04FimHqBy2YBdx7eBUx8jFveV2LfDBgY0BJ9IJDGcsa8wQ8guqIgUXxKRSxZdwtg tGpYvTeBdLnu6JuA+XwZe88PNbMms76PkthxYlgAaiAkkz1KDDECRycRlyquCBs1 V74NEhg3qDK86HzFHfqllTE60AscdWldLkIs6l5VO4PUC/mOU+GoDX0cpl/UYbgn dRzqaGrUo3EioI0f9Gr45Wn0EqfduQNk -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:01 2025 by rpki-client