$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: q1UP1bk6vls/ejAxb7UHn+oNrwMhv7YFhlfPwd3q9Fg= Subject key identifier: 60:3E:5B:CC:56:D7:B5:2F:79:36:87:8A:5C:50:1A:63:36:FC:49:6F Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 09C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 09B4 Signing time: Thu 24 Apr 2025 19:54:30 +0000 Manifest this update: Thu 24 Apr 2025 19:54:29 +0000 Manifest next update: Thu 01 May 2025 19:54:29 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: eSABdeQk7i92WpEOYsPqo+GdT1CEl3HLqxgKYxdW41M=) 2: E35939C2261711EC9990A750C4F9AE02.roa (hash: EKL344c874zXObfFghZmauIp/iQl7AGjIR7DSSwVyAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2496 (0x9c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Apr 24 19:54:29 2025 GMT Not After : May 1 19:54:29 2025 GMT Subject: CN=680a96f5-5481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:98:35:a9:23:d5:0f:2f:0c:76:cc:ba:62: 9a:3e:17:7e:05:94:a4:85:eb:59:3e:bf:5c:ec:53: 89:9e:69:fd:76:c6:2f:ce:d5:91:fd:1e:7c:e0:e7: a1:98:54:a3:44:ad:61:55:1c:ef:fe:04:ab:6e:66: 6b:f8:3d:4e:52:d7:54:b0:c9:ff:93:3d:be:ca:04: e6:38:55:9c:6d:0c:d5:8d:50:8e:fe:56:18:91:96: c9:0f:17:b7:06:42:08:5d:82:a1:38:7d:db:79:f1: 04:ae:97:29:c8:88:bf:37:2a:64:57:89:c7:4a:e8: 2f:ed:07:f0:d7:05:06:3b:79:e9:4b:96:e1:07:63: 64:36:d6:56:9a:8c:be:08:87:a8:3e:25:47:d6:72: 37:20:9f:7a:3a:1e:8d:90:28:f9:69:be:89:d6:09: 52:cd:b3:68:58:a4:89:74:e4:f4:24:e6:87:dd:21: 3d:e4:fe:10:23:17:b9:b6:8b:17:70:b2:00:c1:aa: e0:d9:b4:a4:8b:4d:65:65:90:e7:51:dc:f4:e9:68: eb:6d:d1:dd:94:21:28:55:6b:6d:09:8b:be:01:c6: dc:fe:69:0f:3b:ab:17:f9:70:df:25:73:e4:1b:91: e7:97:dd:bf:a0:bd:43:7b:f4:3e:ec:dd:0d:e1:fe: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3E:5B:CC:56:D7:B5:2F:79:36:87:8A:5C:50:1A:63:36:FC:49:6F X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4c:d2:4e:94:91:89:a1:33:2f:29:0e:6c:7f:3e:23:9a:06: 4d:81:0e:ca:3e:2b:04:33:b4:07:bd:bb:7d:f4:72:6e:fd:0b: 45:2a:90:74:1a:7c:cb:a4:1d:9c:49:ef:35:38:8a:6e:c0:b7: f5:14:37:e9:e4:b2:e1:4e:48:37:19:d5:ce:6b:b5:d1:46:40: db:3d:c8:a0:9a:fe:c7:a9:95:39:05:07:15:24:ff:c0:83:ab: f8:76:f4:ac:7d:f6:a9:74:b9:df:24:af:77:7d:f0:29:b8:08: 6d:ea:10:8b:e6:8a:70:54:f5:44:2e:db:37:9d:4d:c0:91:17: 69:44:a8:3a:2e:94:76:35:fb:0a:e2:37:91:ea:6e:bb:82:5c: ff:18:45:37:34:0c:90:98:a4:bf:27:d7:38:c9:4b:d2:f7:bc: 6f:0e:b2:9c:f0:83:59:07:21:dd:4f:08:3d:03:6a:e5:3c:12: 4a:0c:d3:e7:f3:21:bc:c1:16:6f:17:91:1f:57:ec:be:52:1e: 5e:6e:73:34:13:59:ae:71:e4:34:c2:66:10:a8:5e:d3:57:9a: 48:8e:6b:9e:f5:ea:c3:bb:c0:7e:23:e4:1c:cf:77:f4:5c:0d: 06:b3:ac:6d:cf:38:4f:58:31:14:e5:ae:d3:01:e0:54:91:e3: dc:21:a7:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjUwNDI0MTk1NDI5WhcNMjUwNTAxMTk1NDI5WjAYMRYwFAYD VQQDEw02ODBhOTZmNS01NDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJmYNakj1Q8vDHbMumKaPhd+BZSkhetZPr9c7FOJnmn9dsYvztWR/R584Oeh mFSjRK1hVRzv/gSrbmZr+D1OUtdUsMn/kz2+ygTmOFWcbQzVjVCO/lYYkZbJDxe3 BkIIXYKhOH3befEErpcpyIi/NypkV4nHSugv7Qfw1wUGO3npS5bhB2NkNtZWmoy+ CIeoPiVH1nI3IJ96Oh6NkCj5ab6J1glSzbNoWKSJdOT0JOaH3SE95P4QIxe5tosX cLIAwarg2bSki01lZZDnUdz06WjrbdHdlCEoVWttCYu+Acbc/mkPO6sX+XDfJXPk G5Hnl92/oL1De/Q+7N0N4f5HGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGA+W8xW 17UveTaHilxQGmM2/ElvMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGTNJOlJGJoTMvKQ5sfz4jmgZNgQ7KPisEM7QHvbt99HJu/QtFKpB0 GnzLpB2cSe81OIpuwLf1FDfp5LLhTkg3GdXOa7XRRkDbPcigmv7HqZU5BQcVJP/A g6v4dvSsffapdLnfJK93ffApuAht6hCL5opwVPVELts3nU3AkRdpRKg6LpR2NfsK 4jeR6m67glz/GEU3NAyQmKS/J9c4yUvS97xvDrKc8INZByHdTwg9A2rlPBJKDNPn 8yG8wRZvF5EfV+y+Uh5ebnM0E1muceQ0wmYQqF7TV5pIjmue9erDu8B+I+Qcz3f0 XA0Gs6xtzzhPWDEU5a7TAeBUkePcIadD -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:56 2025 by rpki-client