$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft File: J92Lu4-1-s3BnynT7CdF1RENip8.mft (raw, json) Hash identifier: NmWKSHzhMYPYfxdZIInDZNJReT4dvPWoItvW2gIHE6M= Subject key identifier: BE:61:A9:6D:B7:CF:7B:BE:3C:6C:AF:C1:BB:71:A9:BA:07:31:23:76 Authority key identifier: 27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F Certificate issuer: /CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Certificate serial: 0937 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft Manifest number: 0932 Signing time: Sat 14 Jun 2025 20:03:31 +0000 Manifest this update: Sat 14 Jun 2025 20:03:31 +0000 Manifest next update: Sat 21 Jun 2025 20:03:31 +0000 Files and hashes: 1: J92Lu4-1-s3BnynT7CdF1RENip8.crl (hash: 9Z1SjQIg9sUuXqunU3rn69uSU3hgUwQibLYqZvIb9kU=) 2: CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa (hash: jPD93oq8qztqVjRiofsyP42XOpCIiQV5KYalzchExEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2359 (0x937) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3FD, serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Validity Not Before: Jun 14 20:03:31 2025 GMT Not After : Jun 21 20:03:31 2025 GMT Subject: CN=684dd593-d75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:ca:29:49:79:df:c3:4a:61:cc:ba:1e:a0: e4:c6:1b:47:7a:e3:66:3c:ed:5e:e9:67:c7:de:21: 2c:53:fd:2d:cb:90:80:8f:bb:bf:c8:80:71:7a:d0: b6:98:dc:4f:80:39:ad:b5:c9:d7:56:fd:f4:3f:d2: e9:ac:2d:77:37:a1:37:9c:be:28:52:27:ae:73:12: 84:94:00:c7:81:e9:f1:40:63:00:b8:9f:4d:62:86: 0e:b0:60:c5:d3:93:f5:63:a2:c5:28:e8:d9:88:47: 74:24:94:32:e6:46:37:80:dc:02:7f:ee:2d:a3:2a: 7b:2e:af:da:c9:dc:d1:16:fa:e2:03:3c:93:e3:95: 11:32:bc:0b:e4:5c:e7:f6:54:9a:54:d6:05:8e:61: 90:23:34:69:14:db:01:66:b4:1f:05:16:91:17:12: 16:95:98:62:48:12:e7:17:c8:9b:d3:82:6d:c2:aa: 73:91:16:08:7d:84:2e:fb:d8:49:e6:f8:db:88:b6: ed:26:62:f1:63:d5:aa:4d:9d:d0:ee:4e:ea:41:ac: fd:8b:fc:cd:fc:55:82:95:2a:e3:99:78:df:ae:ae: e1:40:2f:b9:b2:e0:63:41:4d:bd:bd:5d:50:82:5c: ac:c6:29:26:f1:31:2b:2a:ea:db:1a:95:f7:9a:10: e0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:61:A9:6D:B7:CF:7B:BE:3C:6C:AF:C1:BB:71:A9:BA:07:31:23:76 X509v3 Authority Key Identifier: keyid:27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:24:ed:8c:e4:76:7a:c1:44:e5:d8:8c:7d:ff:f5:92:76:b0: ca:93:3a:37:00:c4:01:8c:52:ec:3f:ac:51:e0:6b:5d:97:32: 55:4a:ff:fe:b4:4a:f2:00:9d:ed:a1:df:98:7e:ff:df:67:18: f3:01:90:bb:24:c3:b3:40:50:99:1d:bc:7f:f9:89:bf:11:4b: 47:84:2a:9a:f9:d8:dc:60:5b:05:65:8f:bc:c5:56:01:d3:aa: d4:28:35:6a:b7:dd:d8:6b:b6:b4:d7:90:2e:bb:47:c3:f0:ab: 83:d6:4a:37:52:97:6e:dd:0b:d5:77:29:ac:70:a8:70:d9:ce: 8c:2e:8f:55:cb:bd:c4:54:2f:b5:41:e4:31:f8:ba:69:f3:b8: 27:3f:7c:fd:5d:e9:f5:5c:8b:be:d2:9b:dd:01:10:29:7e:53: 97:23:ae:62:6d:47:04:34:15:d4:9f:1c:2b:ab:3e:c8:40:0a: 0f:cc:c1:e7:06:f3:8e:18:5a:39:ef:67:67:48:9c:6c:b0:a3: af:2a:b4:bd:34:11:ca:50:21:44:60:2c:ef:ef:a6:a9:d3:79: 77:2a:af:59:9d:b6:b9:74:ec:99:6a:99:66:aa:f6:70:0a:c3: 64:ff:ce:d7:ae:1a:55:a1:8d:8f:c2:c5:40:2f:9b:ae:68:94: fd:8d:b3:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMzRkQxMTAvBgNVBAUTKDI3REQ4QkJCOEZCNUZBQ0RDMTlGMjlEM0VDMjc0NUQ1 MTEwRDhBOUYwHhcNMjUwNjE0MjAwMzMxWhcNMjUwNjIxMjAwMzMxWjAYMRYwFAYD VQQDEw02ODRkZDU5My1kNzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNXKKUl538NKYcy6HqDkxhtHeuNmPO1e6WfH3iEsU/0ty5CAj7u/yIBxetC2 mNxPgDmttcnXVv30P9LprC13N6E3nL4oUieucxKElADHgenxQGMAuJ9NYoYOsGDF 05P1Y6LFKOjZiEd0JJQy5kY3gNwCf+4toyp7Lq/aydzRFvriAzyT45URMrwL5Fzn 9lSaVNYFjmGQIzRpFNsBZrQfBRaRFxIWlZhiSBLnF8ib04JtwqpzkRYIfYQu+9hJ 5vjbiLbtJmLxY9WqTZ3Q7k7qQaz9i/zN/FWClSrjmXjfrq7hQC+5suBjQU29vV1Q glysxikm8TErKurbGpX3mhDgLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5hqW23 z3u+PGyvwbtxqboHMSN2MB8GA1UdIwQYMBaAFCfdi7uPtfrNwZ8p0+wnRdURDYqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzNGRC9BNkIzRDQ3ODlG MEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1zM0JueW5UN0NkRjFSRU5p cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o5Mkx1NC0xLXMzQm55blQ3Q2RGMVJFTmlwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzNGRC9BNkIzRDQ3ODlGMEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1z M0JueW5UN0NkRjFSRU5pcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwJO2M5HZ6wUTl2Ix9//WSdrDKkzo3AMQBjFLsP6xR4GtdlzJVSv/+ tEryAJ3tod+Yfv/fZxjzAZC7JMOzQFCZHbx/+Ym/EUtHhCqa+djcYFsFZY+8xVYB 06rUKDVqt93Ya7a015Auu0fD8KuD1ko3Updu3QvVdymscKhw2c6MLo9Vy73EVC+1 QeQx+Lpp87gnP3z9Xen1XIu+0pvdARApflOXI65ibUcENBXUnxwrqz7IQAoPzMHn BvOOGFo572dnSJxssKOvKrS9NBHKUCFEYCzv76ap03l3Kq9Znba5dOyZaplmqvZw CsNk/87XrhpVoY2PwsVAL5uuaJT9jbMn -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:05 2025 by rpki-client