$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft File: J92Lu4-1-s3BnynT7CdF1RENip8.mft (raw, json) Hash identifier: lvDrhi+cVAlvLa9i5A0UOz80mAoz+HJrGaXElYHnDGs= Subject key identifier: 72:0E:82:6D:D4:0F:07:E7:C2:69:FB:1C:BA:47:85:97:C7:6A:1C:C1 Authority key identifier: 27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F Certificate issuer: /CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Certificate serial: 0943 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft Manifest number: 093D Signing time: Wed 02 Jul 2025 20:28:15 +0000 Manifest this update: Wed 02 Jul 2025 20:28:14 +0000 Manifest next update: Wed 09 Jul 2025 20:28:14 +0000 Files and hashes: 1: J92Lu4-1-s3BnynT7CdF1RENip8.crl (hash: iBaqzrQieuudyksjv+V83Jw0nZ5nr4biHx7ALtJzQe8=) 2: CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa (hash: 4fDeSPD5cEp99R2nDZ+LoAEar5uyKAG2X3DiDKhD9co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2371 (0x943) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3FD, serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Validity Not Before: Jul 2 20:28:14 2025 GMT Not After : Jul 9 20:28:14 2025 GMT Subject: CN=6865965e-57ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:32:af:3c:0e:24:b9:56:e4:e6:4c:ef:b2: 0c:0a:8a:01:13:b1:68:ca:84:ab:fd:e2:de:00:11: 27:0d:0d:13:e4:ef:db:81:90:5d:e2:1e:c4:2c:30: fe:c0:2a:16:b4:d0:78:e7:1d:4d:4c:74:8e:74:fd: 07:41:72:cf:a9:14:04:18:a8:04:96:a0:2b:50:d8: 1f:68:91:5c:bc:c9:dd:a4:bd:96:c2:8a:78:e2:af: 10:ad:6e:68:3e:2f:4b:aa:b9:db:25:a6:eb:55:83: 4b:23:37:0c:40:c0:69:12:04:96:52:36:34:f0:7b: 73:59:eb:94:65:12:18:bc:2e:e2:3f:00:58:4d:99: ce:2e:57:43:69:b0:05:c2:a7:3c:c5:4e:84:c3:f3: cf:c5:6c:a5:fb:89:5c:93:fb:e6:2d:ce:f9:61:02: d8:77:6b:4c:46:08:f3:25:39:11:93:ab:51:a3:54: bb:5e:07:47:5a:0e:c6:56:71:d6:58:cf:63:0a:9e: 4b:c1:90:03:db:a7:fe:85:13:ca:0d:27:44:ba:33: 93:a2:e3:81:b3:ea:a7:16:70:6a:11:05:84:76:89: 6c:86:79:c2:55:9c:e7:03:28:6d:9e:0e:4a:9f:71: bd:c3:12:72:20:3f:80:42:0c:df:ee:cb:54:6b:36: 43:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0E:82:6D:D4:0F:07:E7:C2:69:FB:1C:BA:47:85:97:C7:6A:1C:C1 X509v3 Authority Key Identifier: keyid:27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:e8:81:22:33:23:f7:97:cd:ff:63:c0:58:0a:30:15:65:2b: ce:5d:e3:2c:6e:f2:e0:68:8d:57:9e:dc:13:50:c1:a7:0b:a6: 25:43:87:6a:0c:f1:31:3e:37:6a:4d:18:9a:59:4a:1a:30:cb: a5:2c:4c:09:4e:54:dd:0e:8b:78:82:a4:b5:95:bd:65:c9:62: 5e:68:52:7d:8c:6c:ca:dc:0f:75:20:70:05:2f:be:f8:38:91: cc:45:c2:f6:18:a5:d4:11:61:0a:92:72:98:a3:ca:7e:75:dd: 2d:f2:d7:66:97:18:34:24:44:54:86:3a:c5:0b:f7:ee:08:44: 62:0c:4e:ff:cf:82:c8:00:c9:0d:91:4d:ce:3f:65:a8:54:88: 35:cc:48:f3:85:5e:26:a7:0f:3e:53:0d:ce:fb:9b:14:27:9c: d5:b9:d7:61:cf:57:d1:99:81:cd:aa:48:3d:e9:9a:db:ea:84: c5:bd:fd:1e:47:0d:e8:43:1d:80:de:60:af:44:00:8b:e4:a9: dd:4c:73:fc:12:21:09:2a:72:be:bb:d2:28:d7:da:4d:4c:6c: 61:94:58:16:66:aa:9d:12:61:27:6d:12:ab:ab:93:64:13:5d: 08:48:e9:5d:fd:04:05:ab:cd:81:c3:fc:14:e4:c0:5d:1e:e8: 2c:53:0b:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMzRkQxMTAvBgNVBAUTKDI3REQ4QkJCOEZCNUZBQ0RDMTlGMjlEM0VDMjc0NUQ1 MTEwRDhBOUYwHhcNMjUwNzAyMjAyODE0WhcNMjUwNzA5MjAyODE0WjAYMRYwFAYD VQQDEw02ODY1OTY1ZS01N2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrcyrzwOJLlW5OZM77IMCooBE7FoyoSr/eLeABEnDQ0T5O/bgZBd4h7ELDD+ wCoWtNB45x1NTHSOdP0HQXLPqRQEGKgElqArUNgfaJFcvMndpL2Wwop44q8QrW5o Pi9LqrnbJabrVYNLIzcMQMBpEgSWUjY08HtzWeuUZRIYvC7iPwBYTZnOLldDabAF wqc8xU6Ew/PPxWyl+4lck/vmLc75YQLYd2tMRgjzJTkRk6tRo1S7XgdHWg7GVnHW WM9jCp5LwZAD26f+hRPKDSdEujOTouOBs+qnFnBqEQWEdolshnnCVZznAyhtng5K n3G9wxJyID+AQgzf7stUazZDIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIOgm3U Dwfnwmn7HLpHhZfHahzBMB8GA1UdIwQYMBaAFCfdi7uPtfrNwZ8p0+wnRdURDYqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzNGRC9BNkIzRDQ3ODlG MEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1zM0JueW5UN0NkRjFSRU5p cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o5Mkx1NC0xLXMzQm55blQ3Q2RGMVJFTmlwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzNGRC9BNkIzRDQ3ODlGMEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1z M0JueW5UN0NkRjFSRU5pcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW6IEiMyP3l83/Y8BYCjAVZSvOXeMsbvLgaI1XntwTUMGnC6YlQ4dq DPExPjdqTRiaWUoaMMulLEwJTlTdDot4gqS1lb1lyWJeaFJ9jGzK3A91IHAFL774 OJHMRcL2GKXUEWEKknKYo8p+dd0t8tdmlxg0JERUhjrFC/fuCERiDE7/z4LIAMkN kU3OP2WoVIg1zEjzhV4mpw8+Uw3O+5sUJ5zVuddhz1fRmYHNqkg96Zrb6oTFvf0e Rw3oQx2A3mCvRACL5KndTHP8EiEJKnK+u9Io19pNTGxhlFgWZqqdEmEnbRKrq5Nk E10ISOld/QQFq82Bw/wU5MBdHugsUwtw -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:14 2025 by rpki-client