$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: bpcIdAGG0UTdQnQ3hgK11Zm8ble6O4dAhdVNWO/VMSU= Subject key identifier: F5:05:82:07:9C:6F:D2:48:56:22:9F:70:01:15:9B:AA:97:13:7A:43 Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 09D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 09CC Signing time: Thu 12 Jun 2025 19:45:17 +0000 Manifest this update: Thu 12 Jun 2025 19:45:16 +0000 Manifest next update: Thu 19 Jun 2025 19:45:16 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: Dsqw37kJWmYAt2D1J2EB5wmII2/ZcvFTiZOhVZeX2k0=) 2: E35939C2261711EC9990A750C4F9AE02.roa (hash: EKL344c874zXObfFghZmauIp/iQl7AGjIR7DSSwVyAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2520 (0x9d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Jun 12 19:45:16 2025 GMT Not After : Jun 19 19:45:16 2025 GMT Subject: CN=684b2e4d-e070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:53:77:3d:82:21:eb:ac:d7:53:e4:e6:b7:4b: e0:26:d8:e4:68:dc:29:04:a7:37:f6:c9:98:67:fe: 45:29:5a:f8:9c:a0:6a:74:0c:47:d8:25:61:4c:46: 32:d3:f8:e1:7c:4c:38:54:a2:9d:98:89:9d:de:c3: 70:06:6f:dd:6b:4a:bc:5d:82:5a:a5:12:d4:5d:b6: 1f:d1:56:43:60:3e:86:0a:00:5a:cc:81:38:d2:07: b5:f5:89:fb:8d:42:8a:6c:1a:44:02:3e:2a:2d:af: 37:75:02:1e:2a:e9:d6:3a:ba:3e:fa:96:82:4d:d3: fa:50:23:4f:46:26:fa:bf:7e:a4:1d:46:e4:4b:ed: 6a:68:58:2e:d3:6e:51:09:e2:3b:7c:c6:13:c2:b1: 1f:2f:83:e0:0e:f3:4b:b8:19:52:de:a9:ff:bf:74: a1:8b:57:d5:2b:f7:07:b4:42:4f:c7:02:89:09:a8: ab:9c:f1:4a:ed:a3:bc:cd:a5:b1:b7:e0:d5:f8:de: ff:7a:e8:c9:e1:c1:f5:9d:0b:71:09:80:29:35:77: 06:97:b4:a5:a5:96:d9:25:6c:26:16:1f:64:97:b2: d9:4e:b0:3d:e6:27:df:51:5d:bb:87:53:55:70:7f: da:50:f8:17:ce:3c:18:dc:bd:18:e2:c6:d6:3d:4e: b9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:05:82:07:9C:6F:D2:48:56:22:9F:70:01:15:9B:AA:97:13:7A:43 X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:25:01:c7:1a:06:5a:48:f8:8f:2c:ac:88:b2:79:b4:30:a8: b2:1d:a7:10:17:a1:9e:00:6f:9e:88:d2:35:bc:36:1a:ca:53: c9:20:4f:ae:a8:6c:55:c9:10:d6:c3:81:dc:6a:a7:e9:ac:a6: 60:7c:9d:65:f8:6a:fd:ea:6a:b4:58:63:b9:72:24:f1:3a:01: 4b:4f:d9:87:30:7e:86:5b:e6:3f:eb:39:16:9d:36:61:b5:db: fd:a5:46:08:32:1d:fe:f2:2d:d4:eb:5e:ce:f4:d0:9b:d5:09: 38:d6:77:95:59:41:03:c4:a7:af:cb:21:bf:02:5b:2a:6a:93: fe:1c:b9:0a:27:92:f9:46:75:e2:76:e7:b5:e0:66:3b:d3:b5: dc:3b:3a:bc:06:a3:46:e4:7d:7c:9d:b6:f0:ca:bd:44:72:a1: 87:e9:b5:68:59:8b:e0:d7:9e:f0:8c:14:5e:27:96:c0:f0:e0: 19:05:a8:c3:68:54:2c:bc:1e:38:ae:af:a8:db:6f:54:fe:af: 0c:bc:56:96:c0:55:21:58:12:8a:28:b7:70:7e:5a:5b:87:9d: ce:90:ca:67:a2:e6:93:6b:84:83:b2:c1:e9:91:ee:b4:96:1b: ea:b7:48:09:bf:a5:10:d5:21:ef:c5:45:87:59:f4:db:87:4f: cc:63:88:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjUwNjEyMTk0NTE2WhcNMjUwNjE5MTk0NTE2WjAYMRYwFAYD VQQDEw02ODRiMmU0ZC1lMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11N3PYIh66zXU+Tmt0vgJtjkaNwpBKc39smYZ/5FKVr4nKBqdAxH2CVhTEYy 0/jhfEw4VKKdmImd3sNwBm/da0q8XYJapRLUXbYf0VZDYD6GCgBazIE40ge19Yn7 jUKKbBpEAj4qLa83dQIeKunWOro++paCTdP6UCNPRib6v36kHUbkS+1qaFgu025R CeI7fMYTwrEfL4PgDvNLuBlS3qn/v3Shi1fVK/cHtEJPxwKJCairnPFK7aO8zaWx t+DV+N7/eujJ4cH1nQtxCYApNXcGl7SlpZbZJWwmFh9kl7LZTrA95iffUV27h1NV cH/aUPgXzjwY3L0Y4sbWPU659QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUFggec b9JIViKfcAEVm6qXE3pDMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABJQHHGgZaSPiPLKyIsnm0MKiyHacQF6GeAG+eiNI1vDYaylPJIE+u qGxVyRDWw4HcaqfprKZgfJ1l+Gr96mq0WGO5ciTxOgFLT9mHMH6GW+Y/6zkWnTZh tdv9pUYIMh3+8i3U617O9NCb1Qk41neVWUEDxKevyyG/AlsqapP+HLkKJ5L5RnXi due14GY707XcOzq8BqNG5H18nbbwyr1EcqGH6bVoWYvg157wjBReJ5bA8OAZBajD aFQsvB44rq+o229U/q8MvFaWwFUhWBKKKLdwflpbh53OkMpnouaTa4SDssHpke60 lhvqt0gJv6UQ1SHvxUWHWfTbh0/MY4jb -----END CERTIFICATE-----Generated at Sat Jun 14 17:33:29 2025 by rpki-client