$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: YZuhhrQuR9rmLW0ve/XEikDUZiloV37T9RliUkiPbgM= Subject key identifier: 3F:84:1D:FA:E2:BB:5E:1E:F1:2E:8E:41:3A:A1:F3:CB:9E:F8:E7:6C Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 09BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 09B1 Signing time: Fri 18 Apr 2025 20:06:14 +0000 Manifest this update: Fri 18 Apr 2025 20:06:13 +0000 Manifest next update: Fri 25 Apr 2025 20:06:13 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: L1kBxCYfTvqyNv/cZ8N/ER0sWhcgxzv6fKlLMyJ0BRk=) 2: E35939C2261711EC9990A750C4F9AE02.roa (hash: EKL344c874zXObfFghZmauIp/iQl7AGjIR7DSSwVyAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 20:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2493 (0x9bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Apr 18 20:06:13 2025 GMT Not After : Apr 25 20:06:13 2025 GMT Subject: CN=6802b0b5-826d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0f:84:82:f2:33:bd:cc:4c:32:bb:b5:ea:33: 9b:09:11:22:17:09:9d:86:5d:d7:12:d4:7d:eb:2b: 1d:72:14:d9:e7:44:d8:9d:8a:6b:ce:53:1b:ff:d8: c0:16:c7:e0:92:86:0e:28:11:83:fa:18:bd:01:f4: 62:69:90:72:c9:a4:d1:f3:98:a3:c4:91:48:5a:e3: 88:d3:d1:b9:b0:f5:f0:5a:f7:da:96:27:e9:69:52: aa:7f:ee:7f:ca:3a:e4:6a:73:c9:8a:96:44:15:ce: 93:70:a0:06:a0:d3:c2:eb:d6:60:79:7e:8d:3c:fe: 24:eb:e8:e8:2c:b6:93:3f:a5:91:25:fd:1f:90:da: 8d:45:3f:32:5d:3c:6d:a6:1e:c9:80:37:b3:b3:55: f8:a2:ba:8b:e5:c7:4e:17:b2:2b:7e:f7:c4:7f:72: bb:65:75:1e:5f:02:02:85:fe:e4:d4:a0:14:57:d8: b6:7a:86:77:79:ba:70:05:d6:cb:54:58:24:71:eb: 1a:20:e8:9d:f7:ba:24:c7:ca:ec:95:9f:b2:f3:a9: 8d:32:3d:06:4f:c1:f7:42:67:95:d2:36:7d:cd:6b: d3:f1:dd:44:98:ad:92:3f:1a:b1:46:62:da:76:8d: 6d:4d:f0:50:62:58:d9:37:ec:f6:35:8b:b7:8b:5a: a6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:84:1D:FA:E2:BB:5E:1E:F1:2E:8E:41:3A:A1:F3:CB:9E:F8:E7:6C X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:6b:25:16:3f:4a:8c:c3:00:31:ca:c7:e1:a5:53:bb:1c:08: d2:bf:0d:4c:ba:e3:96:b8:5c:a4:67:27:01:33:17:3b:c5:60: a1:fd:1f:8f:26:e2:be:c2:0e:0a:1c:db:a8:38:24:d8:e9:d1: 8d:a9:01:8f:6d:e2:1d:47:3c:01:37:be:b7:a5:df:18:17:83: 6b:09:80:2e:df:85:32:e7:87:3f:c3:66:a0:73:7b:80:e6:2a: 40:6c:16:ae:09:e4:d6:82:71:60:c8:8c:69:67:5b:cf:da:3c: 99:8e:db:ef:4d:62:c4:d6:9b:a3:87:8d:33:4b:46:8d:58:89: 77:df:db:30:b6:7f:dc:be:3a:a6:ca:a8:c4:91:d2:74:7f:6e: 46:cd:5c:2c:95:c7:e0:fd:05:f9:fa:6c:0a:3b:f4:c3:58:5e: 17:ad:f2:e0:fa:68:5d:56:11:20:76:2e:d9:7f:78:8c:b5:0e: 0b:83:f5:4d:5f:bb:e6:c8:06:12:b5:11:2b:9d:83:97:20:2f: b4:ec:50:b1:41:d7:c4:c2:4e:56:6d:04:e0:24:72:79:16:25: 79:c3:26:16:e1:f8:d2:bd:f9:72:b4:7a:17:6d:47:8e:47:48: 9c:43:b5:03:9e:7c:16:93:a8:f3:9d:72:0d:a3:65:80:9a:d4: 1a:94:c8:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjUwNDE4MjAwNjEzWhcNMjUwNDI1MjAwNjEzWjAYMRYwFAYD VQQDEw02ODAyYjBiNS04MjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug+EgvIzvcxMMru16jObCREiFwmdhl3XEtR96ysdchTZ50TYnYprzlMb/9jA FsfgkoYOKBGD+hi9AfRiaZByyaTR85ijxJFIWuOI09G5sPXwWvfalifpaVKqf+5/ yjrkanPJipZEFc6TcKAGoNPC69ZgeX6NPP4k6+joLLaTP6WRJf0fkNqNRT8yXTxt ph7JgDezs1X4orqL5cdOF7IrfvfEf3K7ZXUeXwIChf7k1KAUV9i2eoZ3ebpwBdbL VFgkcesaIOid97okx8rslZ+y86mNMj0GT8H3QmeV0jZ9zWvT8d1EmK2SPxqxRmLa do1tTfBQYljZN+z2NYu3i1qmmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+EHfri u14e8S6OQTqh88ue+OdsMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjayUWP0qMwwAxysfhpVO7HAjSvw1MuuOWuFykZycBMxc7xWCh/R+P JuK+wg4KHNuoOCTY6dGNqQGPbeIdRzwBN763pd8YF4NrCYAu34Uy54c/w2agc3uA 5ipAbBauCeTWgnFgyIxpZ1vP2jyZjtvvTWLE1pujh40zS0aNWIl339swtn/cvjqm yqjEkdJ0f25GzVwslcfg/QX5+mwKO/TDWF4XrfLg+mhdVhEgdi7Zf3iMtQ4Lg/VN X7vmyAYStRErnYOXIC+07FCxQdfEwk5WbQTgJHJ5FiV5wyYW4fjSvflytHoXbUeO R0icQ7UDnnwWk6jznXINo2WAmtQalMga -----END CERTIFICATE-----Generated at Sat Apr 19 07:46:28 2025 by rpki-client