$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft File: vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json) Hash identifier: TSEsZPifSrmb+o8+oXbkctdqN7Xr+FFcMZWG6N+8F/g= Subject key identifier: 9E:D1:16:3B:DB:DD:85:E8:A6:A4:83:75:99:0E:AB:80:35:6C:D7:7A Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 Certificate issuer: /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft Manifest number: 026B Signing time: Thu 21 May 2026 02:19:52 +0000 Manifest this update: Thu 21 May 2026 02:19:51 +0000 Manifest next update: Thu 28 May 2026 02:19:51 +0000 Files and hashes: 1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: jmGRGyVb/iBWisS70WgFYpFAXVBkVhK1Rj13+uRVKXw=) 2: F6732580607111EF9102BD19C4F9AE02.roa (hash: vjw0ZDNhGZYYZvURoK7T9a0f/Cvv2iSDqaaJOXeDsko=) 3: 9D006D76ABFF11EFB2C29330C4F9AE02.roa (hash: gpTT47Zm52/oXmlCRQ9joE/pQOm48+JhXhIfyvy7DVY=) 4: 3D5EC616694B11EFABF9221EC4F9AE02.roa (hash: E4M2glENp14yC8XqERK+K5RnK+5kQXHvoIyYZ3+OkHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641 Validity Not Before: May 21 02:19:51 2026 GMT Not After : May 28 02:19:51 2026 GMT Subject: CN=6a0e6bc8-e7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:78:74:b2:e8:49:ff:18:e3:1f:cc:5b:10:78: 76:4f:ea:4f:56:c7:7a:c8:f0:e6:57:e4:e6:ce:d1: 52:f2:a1:7f:b8:22:74:63:42:a9:70:b1:d0:48:79: 0d:c0:17:62:29:78:01:9c:bf:0d:32:11:b6:83:e9: 18:69:6a:ae:07:b4:1b:58:1d:3f:bb:b0:a6:4a:4f: f7:1b:78:cd:f9:ce:1b:39:06:2c:8c:c0:0b:01:c5: c5:fa:cb:c0:8d:23:ae:cd:7c:86:5c:b5:bd:43:5e: 3f:13:0c:a7:c4:c5:78:a6:c3:c8:a7:a1:cc:cc:09: b0:69:89:8e:a3:df:2d:5e:15:c5:6c:d0:50:18:07: 1e:23:97:76:94:ba:a3:e5:76:30:ff:2b:2e:26:9b: 3c:1b:cc:2b:7b:ef:c6:4c:2d:0e:1e:00:3b:8a:fd: 0e:9f:25:bb:63:42:cd:4e:a0:9f:62:30:73:f0:cd: df:95:bf:86:19:ee:5d:73:45:1f:1d:3b:20:1b:c0: ff:12:88:06:02:a5:47:f1:6b:81:9b:2d:b8:f7:c9: be:e9:e9:09:9a:36:ff:13:ba:70:14:c0:55:d5:ce: b6:85:ee:f1:8c:0e:1a:14:11:0d:33:ca:ba:75:88: 5b:b6:4d:74:73:63:36:e4:d6:33:77:5f:90:25:8c: bc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D1:16:3B:DB:DD:85:E8:A6:A4:83:75:99:0E:AB:80:35:6C:D7:7A X509v3 Authority Key Identifier: keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:df:db:9b:f7:00:7f:af:f4:4f:e5:5f:be:8a:a6:72:84:e2: e2:51:44:fe:be:d6:ad:ac:fc:ac:8a:b3:02:ad:ad:12:5f:a4: 75:72:39:c7:d7:5d:27:41:9d:08:24:cf:c5:2f:39:9f:b5:67: 07:33:ed:c5:bf:15:7f:3f:dc:4c:7b:4c:ab:40:10:a1:47:31: 55:f4:20:0e:90:cc:06:ee:b4:b4:fc:ff:d4:ca:3f:2b:36:ea: 9e:25:46:12:d3:49:7b:56:dc:08:c1:1a:37:6a:b9:fe:2a:37: 67:60:d9:69:c2:f0:2a:41:1e:c4:1f:72:6e:3f:ee:3b:3a:f2: 2c:6d:02:d1:ab:08:f3:71:e3:99:4c:01:3f:10:6d:f4:69:30: 11:b6:4f:e7:05:c2:d8:39:15:d8:7a:40:bc:52:ee:9f:3b:2a: 09:fb:dd:7e:2c:20:43:61:85:ed:42:36:dd:94:2d:bb:b6:10: 5b:3b:b6:e7:0c:a4:63:1a:89:c5:ec:24:3e:0e:70:e5:79:20: 0d:35:11:39:f4:d2:e1:3a:e6:9e:1a:82:43:2f:cc:86:3a:e7: a1:22:e0:dd:81:53:59:27:7f:57:6f:f2:2d:cb:1c:0a:3d:b4: e6:d2:51:17:27:a7:6e:01:24:6a:40:23:d5:c3:b1:35:93:e3: c3:2c:f3:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFODgxMTAvBgNVBAUTKEJFM0Y4QkRGODFCNjZCNEVEMkUxQzc0RUI1RDVGQjAx QjVGNzc2NDEwHhcNMjYwNTIxMDIxOTUxWhcNMjYwNTI4MDIxOTUxWjAYMRYwFAYD VQQDEw02YTBlNmJjOC1lN2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nh0suhJ/xjjH8xbEHh2T+pPVsd6yPDmV+TmztFS8qF/uCJ0Y0KpcLHQSHkN wBdiKXgBnL8NMhG2g+kYaWquB7QbWB0/u7CmSk/3G3jN+c4bOQYsjMALAcXF+svA jSOuzXyGXLW9Q14/EwynxMV4psPIp6HMzAmwaYmOo98tXhXFbNBQGAceI5d2lLqj 5XYw/ysuJps8G8wre+/GTC0OHgA7iv0OnyW7Y0LNTqCfYjBz8M3flb+GGe5dc0Uf HTsgG8D/EogGAqVH8WuBmy2498m+6ekJmjb/E7pwFMBV1c62he7xjA4aFBENM8q6 dYhbtk10c2M25NYzd1+QJYy8vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7RFjvb 3YXopqSDdZkOq4A1bNd6MB8GA1UdIwQYMBaAFL4/i9+BtmtO0uHHTrXV+wG193ZB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREU4OC80QkZDQTE0MkMz RUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEwN1M0Y2RPdGRYN0FiWDNk a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqLUwzNEcyYTA3UzRjZE90ZFg3QWJYM2RrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REU4OC80QkZDQTE0MkMzRUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEw N1M0Y2RPdGRYN0FiWDNka0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO9/bm/cAf6/0T+VfvoqmcoTi4lFE/r7Wraz8rIqzAq2tEl+kdXI5x9ddJ0Gd CCTPxS85n7VnBzPtxb8Vfz/cTHtMq0AQoUcxVfQgDpDMBu60tPz/1Mo/KzbqniVG EtNJe1bcCMEaN2q5/io3Z2DZacLwKkEexB9ybj/uOzryLG0C0asI83HjmUwBPxBt 9GkwEbZP5wXC2DkV2HpAvFLunzsqCfvdfiwgQ2GF7UI23ZQtu7YQWzu25wykYxqJ xewkPg5w5XkgDTUROfTS4TrmnhqCQy/MhjrnoSLg3YFTWSd/V2/yLcscCj205tJR FyenbgEkakAj1cOxNZPjwyzzoQ== -----END CERTIFICATE-----Generated at Thu May 21 10:16:05 2026 by rpki-client