$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: pqVXWzY3iFJWld8Zk5aTZXqyEcZ/tjERud7IhohiDIg= Subject key identifier: 8C:34:A2:78:78:6B:DD:85:AB:67:63:04:51:BC:3B:51:94:12:F2:9C Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 0970 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 0965 Signing time: Sun 24 Nov 2024 19:44:58 +0000 Manifest this update: Sun 24 Nov 2024 19:44:57 +0000 Manifest next update: Sun 01 Dec 2024 19:44:57 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: zhkgBlWxTDqQFMCT1ZNQ/T4xpauP7hU2qWLg7zkBncU=) 2: E35939C2261711EC9990A750C4F9AE02.roa (hash: DzSac6j8MZfa9oP61oFslZ4Gy+B8YE6Crs7TqBZ64po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2416 (0x970) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Nov 24 19:44:57 2024 GMT Not After : Dec 1 19:44:57 2024 GMT Subject: CN=6743823a-2083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:8e:d4:c5:a7:ce:79:dd:9c:3a:01:79:33: 8c:05:4a:58:84:c4:ef:2c:34:48:52:8f:38:79:9f: f8:d6:11:ef:9f:be:e4:f5:11:30:07:07:a6:65:0c: d4:0a:13:db:a1:c6:46:79:1a:85:38:5d:7a:f4:af: 0a:e3:e6:ce:00:84:bd:bf:49:88:7f:e9:14:01:03: 54:4d:1f:5b:91:1f:88:f9:a5:36:a1:41:07:90:3c: eb:5c:6c:33:3d:16:04:57:49:79:55:18:89:56:62: 1b:03:bc:68:52:59:0c:8f:13:5b:42:18:18:38:86: 0d:c9:dc:02:43:2b:a4:b1:14:64:5c:2f:74:8c:57: 6c:51:0a:27:22:c7:e4:38:98:ac:34:05:e6:88:1c: cd:27:d2:69:0f:fb:6d:7f:13:2b:33:d0:ee:d8:45: ca:d8:29:9e:4b:3b:84:27:da:63:3b:fe:ef:bf:50: ab:1d:3f:93:61:af:f1:97:d3:17:c2:93:81:56:b9: 33:b3:06:83:71:14:a4:44:15:86:53:47:b9:06:19: 40:19:0e:02:88:82:58:b6:1f:52:3d:79:f0:ea:c7: e1:87:51:99:8d:c7:76:a8:c2:7e:01:d6:78:80:e1: 34:6b:bc:2d:8f:fb:89:0c:0f:6a:d7:bb:c2:ac:67: 16:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:34:A2:78:78:6B:DD:85:AB:67:63:04:51:BC:3B:51:94:12:F2:9C X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b0:9e:66:ae:dd:36:c2:f3:59:0a:8b:e6:d7:0f:a1:02:07: c2:3c:8b:b8:87:d7:3e:56:7d:26:9e:f0:68:db:cf:e3:07:a6: f0:f5:8a:d4:16:58:3b:22:a4:45:0a:0f:5a:5f:02:40:a4:a0: 6f:aa:b2:4d:98:0f:e1:5c:fc:54:11:b1:69:94:8f:60:9d:6e: 7b:1d:b5:b3:35:51:b4:2b:12:58:b7:8f:c1:6e:c2:c3:66:4c: 36:7c:51:82:c1:99:9a:9b:6c:fa:fe:06:c2:8c:f6:54:09:6d: 90:8e:1b:09:b5:33:55:fe:dd:de:71:c0:e4:70:af:81:36:b2: 07:23:f2:7f:92:e0:f7:b7:98:1e:6f:8b:d8:39:d4:57:5c:15: a2:a2:4d:a2:4d:05:8a:dd:73:17:8e:c1:65:e6:d2:eb:6b:90: ea:41:d1:df:2c:89:83:2b:4d:6d:f9:18:70:3f:6c:79:5c:1c: 9e:9c:5d:52:fa:fd:db:6c:b1:34:fc:33:9c:c4:9e:b2:ad:1a: 78:1c:3d:e8:d7:5b:6e:a8:df:c6:8d:f8:df:34:f6:0c:66:47: 5f:2f:2d:88:22:6d:bd:5f:7a:c3:9a:f5:0f:b3:f9:53:87:27: 1b:42:63:16:3f:bc:f3:4b:c9:39:50:b1:db:ff:c2:ec:c1:42: 02:fe:be:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjQxMTI0MTk0NDU3WhcNMjQxMjAxMTk0NDU3WjAYMRYwFAYD VQQDEw02NzQzODIzYS0yMDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyImO1MWnznndnDoBeTOMBUpYhMTvLDRIUo84eZ/41hHvn77k9REwBwemZQzU ChPbocZGeRqFOF169K8K4+bOAIS9v0mIf+kUAQNUTR9bkR+I+aU2oUEHkDzrXGwz PRYEV0l5VRiJVmIbA7xoUlkMjxNbQhgYOIYNydwCQyuksRRkXC90jFdsUQonIsfk OJisNAXmiBzNJ9JpD/ttfxMrM9Du2EXK2CmeSzuEJ9pjO/7vv1CrHT+TYa/xl9MX wpOBVrkzswaDcRSkRBWGU0e5BhlAGQ4CiIJYth9SPXnw6sfhh1GZjcd2qMJ+AdZ4 gOE0a7wtj/uJDA9q17vCrGcWtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIw0onh4 a92Fq2djBFG8O1GUEvKcMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKsJ5mrt02wvNZCovm1w+hAgfCPIu4h9c+Vn0mnvBo28/jB6bw9YrU Flg7IqRFCg9aXwJApKBvqrJNmA/hXPxUEbFplI9gnW57HbWzNVG0KxJYt4/BbsLD Zkw2fFGCwZmam2z6/gbCjPZUCW2QjhsJtTNV/t3eccDkcK+BNrIHI/J/kuD3t5ge b4vYOdRXXBWiok2iTQWK3XMXjsFl5tLra5DqQdHfLImDK01t+RhwP2x5XByenF1S +v3bbLE0/DOcxJ6yrRp4HD3o11tuqN/GjfjfNPYMZkdfLy2IIm29X3rDmvUPs/lT hycbQmMWP7zzS8k5ULHb/8LswUIC/r6Y -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:08 2024 by rpki-client on console-fra.rpki-client.org