$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: raB1dOwox589BSuTp2vTUIOagSelPSbCluIRsF2Uj0I= Subject key identifier: 38:8C:A0:3E:4B:FD:F1:78:A2:30:87:BD:80:57:06:08:83:6C:FD:96 Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 09F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 09EA Signing time: Mon 04 Aug 2025 20:11:44 +0000 Manifest this update: Mon 04 Aug 2025 20:11:44 +0000 Manifest next update: Mon 11 Aug 2025 20:11:44 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: ffmlS/W6K/XeNe7ODWGVvzwtu1oFiumIH2quopVd2to=) 2: C9F37B86584111F09E8EC450C4F9AE02.roa (hash: KrEmXnI7T+V4fJrByDl+yUXAqLDUTHQO1G1OMCM+LiE=) 3: E35939C2261711EC9990A750C4F9AE02.roa (hash: EKL344c874zXObfFghZmauIp/iQl7AGjIR7DSSwVyAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2551 (0x9f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Aug 4 20:11:44 2025 GMT Not After : Aug 11 20:11:44 2025 GMT Subject: CN=68911400-daf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:10:e2:86:67:29:ba:9b:13:3e:cf:29:dc: eb:5e:c5:6c:d4:6c:52:70:9c:27:a3:f1:6c:3b:ee: bf:28:4a:b0:38:f1:07:c0:2c:84:9b:e6:a4:70:71: 81:03:3c:f7:ac:1f:a5:b1:29:80:cb:7a:a2:68:39: 09:58:fb:ef:e7:c6:f2:f6:e3:09:c7:d7:2e:01:b2: 8b:6c:c6:63:d6:da:d0:cf:ce:ff:a0:35:f6:4d:e1: 36:90:f7:dd:b2:29:c7:c2:82:3b:0e:69:ac:22:d3: e7:84:36:da:4a:14:c4:55:14:39:83:42:a0:f5:6d: a3:15:63:59:7c:3c:90:5b:cd:13:e5:40:45:a7:54: 46:e8:16:22:22:5c:19:c7:a7:90:c7:08:35:36:f2: 07:9f:1a:04:c2:f5:ef:dc:8f:fa:73:bf:51:85:26: 3c:35:fb:cf:b2:b5:50:f5:84:fa:85:12:c6:dd:df: c5:e9:12:12:ee:ff:28:2e:08:d5:a8:bb:fd:13:da: 22:5b:e6:5e:83:25:2d:36:c4:12:70:d1:5a:e6:dc: b3:60:81:23:67:de:78:4b:c1:80:f7:be:1c:a6:47: 40:a4:70:8b:32:89:e9:d1:d3:4f:97:6e:e7:61:08: 16:d7:38:57:ef:42:d6:e2:2e:83:6c:35:43:de:01: 4c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8C:A0:3E:4B:FD:F1:78:A2:30:87:BD:80:57:06:08:83:6C:FD:96 X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:de:05:9e:c9:8c:77:71:9c:2c:3c:ac:0c:2b:e9:74:f7:9d: 12:cd:0c:04:89:4b:29:7f:9d:b9:d4:8e:e7:d1:23:42:98:55: bf:7b:26:8d:a7:9c:1d:74:82:50:c3:eb:18:75:05:c1:c3:49: 06:56:04:24:f9:79:1e:b5:9e:ed:37:5d:99:12:59:fb:15:b9: 86:f3:2f:aa:cf:d2:97:06:b3:57:47:e6:a0:a3:c9:19:88:36: 58:58:1f:21:31:a3:2f:21:eb:bc:bc:98:30:48:1f:22:d5:22: b2:36:ee:ef:a7:de:7d:fa:e9:2d:81:2f:aa:82:ec:81:eb:8d: 48:f7:5c:7b:6d:79:4d:5d:66:07:d4:8e:ba:4d:0c:b8:0b:ab: f4:65:e4:72:c4:75:e0:d8:b0:93:b3:55:45:2c:fd:9f:0f:e5: 15:84:2d:92:ef:b9:8a:8a:17:5e:2d:d1:f5:66:dc:fa:30:27: 78:42:ec:75:29:d4:06:b4:37:1b:90:2b:a0:96:00:ab:9d:33: c7:ad:a9:62:1a:90:51:18:99:88:49:a8:82:a2:72:e9:a2:8d: 78:51:fd:c4:bb:de:34:f5:5e:f6:a2:66:66:d2:15:f7:44:4d: 52:d3:8e:67:8e:8f:1d:cd:f3:03:95:80:54:0f:4a:74:91:38: 6e:e7:d4:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjUwODA0MjAxMTQ0WhcNMjUwODExMjAxMTQ0WjAYMRYwFAYD VQQDEw02ODkxMTQwMC1kYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPkQ4oZnKbqbEz7PKdzrXsVs1GxScJwno/FsO+6/KEqwOPEHwCyEm+akcHGB Azz3rB+lsSmAy3qiaDkJWPvv58by9uMJx9cuAbKLbMZj1trQz87/oDX2TeE2kPfd sinHwoI7DmmsItPnhDbaShTEVRQ5g0Kg9W2jFWNZfDyQW80T5UBFp1RG6BYiIlwZ x6eQxwg1NvIHnxoEwvXv3I/6c79RhSY8NfvPsrVQ9YT6hRLG3d/F6RIS7v8oLgjV qLv9E9oiW+ZegyUtNsQScNFa5tyzYIEjZ954S8GA974cpkdApHCLMonp0dNPl27n YQgW1zhX70LW4i6DbDVD3gFMUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiMoD5L /fF4ojCHvYBXBgiDbP2WMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS3gWeyYx3cZwsPKwMK+l0950SzQwEiUspf5251I7n0SNCmFW/eyaN p5wddIJQw+sYdQXBw0kGVgQk+XketZ7tN12ZEln7FbmG8y+qz9KXBrNXR+ago8kZ iDZYWB8hMaMvIeu8vJgwSB8i1SKyNu7vp959+uktgS+qguyB641I91x7bXlNXWYH 1I66TQy4C6v0ZeRyxHXg2LCTs1VFLP2fD+UVhC2S77mKihdeLdH1Ztz6MCd4Qux1 KdQGtDcbkCuglgCrnTPHraliGpBRGJmISaiConLpoo14Uf3Eu9409V72omZm0hX3 RE1S045njo8dzfMDlYBUD0p0kThu59QH -----END CERTIFICATE-----Generated at Wed Aug 6 12:44:17 2025 by rpki-client