$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft File: J92Lu4-1-s3BnynT7CdF1RENip8.mft (raw, json) Hash identifier: e8Vnn8847gDwzIjYH+wnFLdhyIiMSPU/3EBT5ZKHoKc= Subject key identifier: B7:1C:E1:44:D8:3B:E9:72:27:7B:44:BB:76:90:21:C7:85:97:57:F1 Authority key identifier: 27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F Certificate issuer: /CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Certificate serial: 095D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft Manifest number: 0957 Signing time: Fri 22 Aug 2025 20:17:49 +0000 Manifest this update: Fri 22 Aug 2025 20:17:48 +0000 Manifest next update: Fri 29 Aug 2025 20:17:48 +0000 Files and hashes: 1: J92Lu4-1-s3BnynT7CdF1RENip8.crl (hash: SzqBZ7A+RMFHYDJ+Ga06Lfm4pVdzfG6YHurQhAtTnjA=) 2: CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa (hash: 4fDeSPD5cEp99R2nDZ+LoAEar5uyKAG2X3DiDKhD9co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2397 (0x95d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3FD, serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Validity Not Before: Aug 22 20:17:48 2025 GMT Not After : Aug 29 20:17:48 2025 GMT Subject: CN=68a8d06d-786b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:29:a3:5f:d4:4a:28:49:dd:61:e9:b1:9f: e5:52:be:a7:95:fe:df:3e:0f:22:b2:51:df:16:da: 39:ba:96:bb:d4:b2:4c:c8:5d:63:ff:81:0f:8a:7a: 25:ca:99:74:58:57:b8:89:2b:1f:a5:91:59:6f:1f: 9c:f1:eb:34:08:f1:c1:e0:dc:90:4f:67:0e:81:f2: 88:89:92:1d:1b:a9:7e:1a:9d:44:76:8e:a3:63:6a: 20:e4:69:8d:89:23:1f:b5:75:0d:94:c7:99:be:a9: ef:d7:4e:d4:c7:14:94:53:ab:3a:75:e7:91:9e:dc: b0:cc:a2:9f:54:fe:ce:52:7b:6c:43:03:b7:c9:7f: 98:61:b4:51:5d:48:82:ad:18:f2:c5:6f:3c:23:5d: 05:b8:de:fc:01:d4:9f:67:33:30:7d:a6:23:4b:81: 83:42:be:ab:cd:b0:b7:21:c6:f4:82:c1:4c:08:29: 2e:b5:a4:62:dd:cf:cc:54:12:da:24:0b:f8:25:45: c2:e8:bd:68:72:5a:72:e5:aa:72:c1:11:b4:30:54: d4:63:12:61:49:22:87:a9:bd:09:cb:60:39:e8:4c: a5:46:64:18:fc:05:20:e2:97:cc:f9:42:ea:9b:6c: 97:9f:02:cc:a7:a5:20:c5:6c:92:71:4a:b3:65:53: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1C:E1:44:D8:3B:E9:72:27:7B:44:BB:76:90:21:C7:85:97:57:F1 X509v3 Authority Key Identifier: keyid:27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:48:0f:1d:2f:02:a1:77:39:bf:3b:aa:25:24:0a:50:cd:8d: 1d:f8:15:89:1b:7f:c3:44:7b:0c:10:34:f1:cb:1f:6a:24:1c: c4:47:09:69:2f:fa:cc:b6:5b:94:65:aa:ba:9f:05:be:43:70: 55:f3:fd:61:a8:4f:ec:79:65:d3:4b:e5:15:60:06:c2:4d:c8: bf:09:91:d7:65:00:18:18:dd:bc:09:79:b7:35:64:c7:6f:af: 8d:38:60:2c:da:e1:a6:3b:e4:a5:fc:ac:e5:87:be:fa:24:8a: 56:56:a8:74:09:cf:da:af:4c:3a:d8:44:be:db:f5:03:e9:7d: a1:aa:ad:24:54:57:01:37:a7:42:52:14:99:a2:42:47:ea:9e: 2b:a6:bf:57:ab:2d:59:87:79:97:8a:a8:65:e0:34:d9:be:95: 24:68:0a:4a:9b:5c:4d:d3:8b:0a:ce:6f:e1:d1:43:77:fd:34: a5:4b:b1:64:e7:74:a7:c1:f9:d4:97:a6:80:d3:e1:15:4d:a6: 67:32:1d:02:cb:31:77:7e:a9:ea:6b:de:8d:ca:4c:0d:33:98: 96:cb:4c:32:34:9e:c1:9f:6b:03:a3:c9:d2:79:fe:9c:fb:95: be:20:c5:8b:13:89:3a:38:c6:74:6d:9a:5d:35:6e:48:76:c0: a9:30:e8:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMzRkQxMTAvBgNVBAUTKDI3REQ4QkJCOEZCNUZBQ0RDMTlGMjlEM0VDMjc0NUQ1 MTEwRDhBOUYwHhcNMjUwODIyMjAxNzQ4WhcNMjUwODI5MjAxNzQ4WjAYMRYwFAYD VQQDEw02OGE4ZDA2ZC03ODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmr4po1/USihJ3WHpsZ/lUr6nlf7fPg8islHfFto5upa71LJMyF1j/4EPinol ypl0WFe4iSsfpZFZbx+c8es0CPHB4NyQT2cOgfKIiZIdG6l+Gp1Edo6jY2og5GmN iSMftXUNlMeZvqnv107UxxSUU6s6deeRntywzKKfVP7OUntsQwO3yX+YYbRRXUiC rRjyxW88I10FuN78AdSfZzMwfaYjS4GDQr6rzbC3Icb0gsFMCCkutaRi3c/MVBLa JAv4JUXC6L1oclpy5apywRG0MFTUYxJhSSKHqb0Jy2A56EylRmQY/AUg4pfM+ULq m2yXnwLMp6UgxWyScUqzZVObSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcc4UTY O+lyJ3tEu3aQIceFl1fxMB8GA1UdIwQYMBaAFCfdi7uPtfrNwZ8p0+wnRdURDYqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzNGRC9BNkIzRDQ3ODlG MEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1zM0JueW5UN0NkRjFSRU5p cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o5Mkx1NC0xLXMzQm55blQ3Q2RGMVJFTmlwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzNGRC9BNkIzRDQ3ODlGMEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1z M0JueW5UN0NkRjFSRU5pcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBSA8dLwKhdzm/O6olJApQzY0d+BWJG3/DRHsMEDTxyx9qJBzERwlp L/rMtluUZaq6nwW+Q3BV8/1hqE/seWXTS+UVYAbCTci/CZHXZQAYGN28CXm3NWTH b6+NOGAs2uGmO+Sl/Kzlh776JIpWVqh0Cc/ar0w62ES+2/UD6X2hqq0kVFcBN6dC UhSZokJH6p4rpr9Xqy1Zh3mXiqhl4DTZvpUkaApKm1xN04sKzm/h0UN3/TSlS7Fk 53SnwfnUl6aA0+EVTaZnMh0CyzF3fqnqa96NykwNM5iWy0wyNJ7Bn2sDo8nSef6c +5W+IMWLE4k6OMZ0bZpdNW5IdsCpMOjh -----END CERTIFICATE-----Generated at Sun Aug 24 00:13:45 2025 by rpki-client