$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft File: J92Lu4-1-s3BnynT7CdF1RENip8.mft (raw, json) Hash identifier: MC7BJ4YXoqkKJnvOXeKndOr7qvKK+JSOkid8C1jQHHA= Subject key identifier: BA:45:FD:70:88:C8:B7:26:37:F5:BE:00:E6:F2:0D:3E:82:B3:BF:32 Authority key identifier: 27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F Certificate issuer: /CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Certificate serial: 091C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft Manifest number: 0917 Signing time: Thu 24 Apr 2025 20:10:36 +0000 Manifest this update: Thu 24 Apr 2025 20:10:36 +0000 Manifest next update: Thu 01 May 2025 20:10:36 +0000 Files and hashes: 1: J92Lu4-1-s3BnynT7CdF1RENip8.crl (hash: jntoLPCxLSsUgfmd0pttIekx8r2xl8qXmJ7FZrucDAE=) 2: CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa (hash: jPD93oq8qztqVjRiofsyP42XOpCIiQV5KYalzchExEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2332 (0x91c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3FD, serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Validity Not Before: Apr 24 20:10:36 2025 GMT Not After : May 1 20:10:36 2025 GMT Subject: CN=680a9abc-a1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:38:c5:0d:2e:aa:8b:e2:91:2f:07:d7:fb:24: de:25:cc:f8:d6:7f:1b:09:a8:00:2e:48:47:f0:50: dc:6e:ce:d5:89:b2:7f:a4:10:0f:2a:91:ec:08:25: c8:2f:bb:15:32:51:36:0b:5c:e9:49:2e:05:8d:c0: b9:e5:b3:03:fe:6e:14:db:04:52:a9:1d:e9:a9:b9: 8a:5a:4c:a7:0f:c6:ae:40:e4:af:43:6a:a8:88:14: 5e:a7:e3:9b:68:bc:14:6b:f6:8c:c0:de:d6:a6:91: f4:87:b1:03:39:5a:6b:80:1c:f6:38:63:79:dd:c1: 1c:c6:f4:d2:ee:15:0f:51:10:ad:1f:54:cd:bf:27: f6:58:fe:91:2b:23:a1:bb:34:fc:dd:b8:96:80:76: 7e:d6:28:02:71:7e:22:d1:4f:6f:76:94:8d:38:a2: a1:31:10:1d:b9:d1:b6:ec:1f:64:58:9c:4d:48:be: 65:36:af:81:3e:7e:d2:ad:aa:85:9b:04:c6:07:56: cd:66:16:4e:42:e2:2b:7d:a4:df:a0:5f:4f:82:b7: 33:d0:98:91:96:ba:8e:6e:14:9c:00:7d:86:f0:8b: 4b:23:69:a9:e5:a5:ad:3c:62:1f:5c:ed:41:fb:ce: ed:0a:9f:0c:92:1b:d2:f3:85:b8:20:8e:db:5f:c3: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:45:FD:70:88:C8:B7:26:37:F5:BE:00:E6:F2:0D:3E:82:B3:BF:32 X509v3 Authority Key Identifier: keyid:27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:d7:e9:be:16:10:74:8a:18:a9:c4:c4:8d:01:0b:e7:9d:76: a2:24:e5:5f:39:51:c6:84:cc:fd:15:59:57:85:6c:10:b7:79: 5c:35:bd:4f:80:58:9a:24:db:b3:6c:62:d9:ba:68:96:e0:86: d2:8f:6b:c9:70:f4:7f:c5:2d:48:0c:b9:38:c1:ba:a4:53:da: a6:e4:d3:a4:4e:ee:31:06:9d:17:61:df:a8:1b:e2:49:c6:1e: 44:6f:23:fa:56:2e:30:b7:bd:40:d6:cd:c8:99:4b:ce:0c:1b: 98:08:a0:64:04:b9:75:3d:22:7e:64:18:6d:49:3c:c5:20:ea: cf:61:68:30:9a:18:25:52:bf:04:9e:3e:e3:8c:ad:70:12:c2: f9:a7:6d:2c:c5:72:f8:a1:c7:0e:4d:64:2d:c6:cd:c1:b7:16: 7d:fe:34:f9:b7:f5:0d:e2:df:94:1a:f6:35:f6:38:46:bb:83: 52:ec:4c:ea:8a:a8:fb:f6:af:2a:31:b0:6c:b5:9a:a6:1d:ca: de:eb:44:09:e9:eb:79:e9:78:75:46:7e:98:59:dd:d3:a0:f5: 01:f9:15:ac:8f:39:d3:0e:27:68:48:58:01:16:a3:48:91:f0: 1e:b0:c0:00:3c:d5:7b:fa:90:c3:1f:75:9d:d7:37:96:dc:66: e3:7b:72:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMzRkQxMTAvBgNVBAUTKDI3REQ4QkJCOEZCNUZBQ0RDMTlGMjlEM0VDMjc0NUQ1 MTEwRDhBOUYwHhcNMjUwNDI0MjAxMDM2WhcNMjUwNTAxMjAxMDM2WjAYMRYwFAYD VQQDEw02ODBhOWFiYy1hMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DjFDS6qi+KRLwfX+yTeJcz41n8bCagALkhH8FDcbs7VibJ/pBAPKpHsCCXI L7sVMlE2C1zpSS4FjcC55bMD/m4U2wRSqR3pqbmKWkynD8auQOSvQ2qoiBRep+Ob aLwUa/aMwN7WppH0h7EDOVprgBz2OGN53cEcxvTS7hUPURCtH1TNvyf2WP6RKyOh uzT83biWgHZ+1igCcX4i0U9vdpSNOKKhMRAdudG27B9kWJxNSL5lNq+BPn7SraqF mwTGB1bNZhZOQuIrfaTfoF9Pgrcz0JiRlrqObhScAH2G8ItLI2mp5aWtPGIfXO1B +87tCp8MkhvS84W4II7bX8PZnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpF/XCI yLcmN/W+AObyDT6Cs78yMB8GA1UdIwQYMBaAFCfdi7uPtfrNwZ8p0+wnRdURDYqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzNGRC9BNkIzRDQ3ODlG MEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1zM0JueW5UN0NkRjFSRU5p cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o5Mkx1NC0xLXMzQm55blQ3Q2RGMVJFTmlwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzNGRC9BNkIzRDQ3ODlGMEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1z M0JueW5UN0NkRjFSRU5pcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU1+m+FhB0ihipxMSNAQvnnXaiJOVfOVHGhMz9FVlXhWwQt3lcNb1P gFiaJNuzbGLZumiW4IbSj2vJcPR/xS1IDLk4wbqkU9qm5NOkTu4xBp0XYd+oG+JJ xh5EbyP6Vi4wt71A1s3ImUvODBuYCKBkBLl1PSJ+ZBhtSTzFIOrPYWgwmhglUr8E nj7jjK1wEsL5p20sxXL4occOTWQtxs3BtxZ9/jT5t/UN4t+UGvY19jhGu4NS7Ezq iqj79q8qMbBstZqmHcre60QJ6et56Xh1Rn6YWd3ToPUB+RWsjznTDidoSFgBFqNI kfAesMAAPNV7+pDDH3Wd1zeW3Gbje3Jf -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:51 2025 by rpki-client