$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: Pc941Chhr1gy79OWeOYsUt7rWiy0PoV6iN27PpBFtuw= Subject key identifier: 5F:FB:A4:8F:CD:54:D4:6B:6B:F6:38:A5:32:1C:59:76:FA:DD:FA:C9 Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 09D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 09C8 Signing time: Wed 04 Jun 2025 19:53:55 +0000 Manifest this update: Wed 04 Jun 2025 19:53:55 +0000 Manifest next update: Wed 11 Jun 2025 19:53:55 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: 0NnpenV8Uri0bh+SQk2kK4IaYLRncDY94oP5xIZs2Gg=) 2: E35939C2261711EC9990A750C4F9AE02.roa (hash: EKL344c874zXObfFghZmauIp/iQl7AGjIR7DSSwVyAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 19:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2516 (0x9d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Jun 4 19:53:55 2025 GMT Not After : Jun 11 19:53:55 2025 GMT Subject: CN=6840a453-8946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:57:3b:c1:ac:fe:3d:d4:90:ee:92:5d:c1:91: 60:75:30:7a:4b:ed:6c:a1:df:12:d8:1f:46:78:3c: 57:62:bb:79:d5:0b:16:1f:35:98:2d:31:35:a9:7d: 04:58:33:28:30:7e:58:cd:52:c7:da:53:fd:4d:80: 13:a2:fb:91:1c:b7:43:b7:bd:b4:61:2d:a4:30:ac: e7:46:55:33:b0:92:98:0b:1e:57:6b:f8:a4:fe:5f: 8d:aa:77:77:b1:47:e1:be:a3:6d:26:26:9f:69:cf: a0:5b:69:1b:22:e7:e9:be:8e:b9:eb:de:4b:11:bb: f3:a3:89:22:62:b7:f6:c6:e9:40:d8:03:7a:4e:9c: ec:c1:bf:1c:3b:dc:8e:aa:d9:df:9e:bf:6b:0c:e4: 1b:91:a2:90:3f:38:41:05:70:42:fa:22:67:93:a0: c2:7e:d5:e4:66:61:d4:8e:e1:e9:01:fa:8a:ca:e9: f8:39:80:47:ff:5c:de:75:5c:7d:3c:26:14:f9:ad: e5:80:e6:c8:d2:8d:f3:d2:05:18:58:43:6e:8b:72: be:32:74:00:d7:37:80:c3:69:bb:84:6d:6f:d8:19: e3:cc:b3:4e:4a:2c:ea:cc:6b:14:3f:96:73:f5:2e: a7:68:da:1c:5d:1d:ad:53:20:4d:12:e7:6b:84:e0: cd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FB:A4:8F:CD:54:D4:6B:6B:F6:38:A5:32:1C:59:76:FA:DD:FA:C9 X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:77:0a:e1:cd:a4:e2:e0:29:c3:3c:10:cc:d7:3b:a5:4b:54: ea:cc:3a:f2:ea:8d:1d:8a:ee:08:b7:dc:a5:65:58:c7:0b:31: c9:4b:db:bc:25:c8:35:45:1d:6a:a4:2d:4a:18:21:35:c3:80: 6b:29:c3:a1:cc:70:89:47:4c:51:0f:a5:b8:98:09:5b:d1:fc: 8f:18:5b:58:f7:1b:e6:81:5b:88:39:6c:75:7f:3c:0e:2b:25: f3:2f:f3:35:89:3d:04:e9:f6:0b:08:04:4f:d8:ff:c6:52:c9: 10:43:ba:27:12:8c:39:b5:67:9d:72:82:81:09:56:8a:50:64: 5b:c1:af:8d:82:2b:b5:53:29:65:a7:08:29:77:bb:02:7b:11: 21:4e:55:8f:82:b2:4c:fb:2e:eb:31:9a:70:ee:fa:39:23:09: c6:30:7c:60:9e:5c:f1:26:da:95:0b:40:ad:cc:b9:de:96:d4: f3:08:71:4d:02:a3:3e:c4:49:b0:66:40:28:64:5a:8a:48:04: f8:36:7c:8d:ca:1d:d4:02:33:99:9e:65:9e:34:d5:f0:c0:ad: 29:3b:f4:b1:6e:bc:ec:09:3a:2b:9d:39:e3:17:7d:01:01:c6: 93:2c:98:46:48:05:91:24:7b:48:4e:80:2b:c5:2d:07:d1:9b: fc:24:3c:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjUwNjA0MTk1MzU1WhcNMjUwNjExMTk1MzU1WjAYMRYwFAYD VQQDEw02ODQwYTQ1My04OTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVc7waz+PdSQ7pJdwZFgdTB6S+1sod8S2B9GeDxXYrt51QsWHzWYLTE1qX0E WDMoMH5YzVLH2lP9TYATovuRHLdDt720YS2kMKznRlUzsJKYCx5Xa/ik/l+Nqnd3 sUfhvqNtJiafac+gW2kbIufpvo65695LEbvzo4kiYrf2xulA2AN6Tpzswb8cO9yO qtnfnr9rDOQbkaKQPzhBBXBC+iJnk6DCftXkZmHUjuHpAfqKyun4OYBH/1zedVx9 PCYU+a3lgObI0o3z0gUYWENui3K+MnQA1zeAw2m7hG1v2BnjzLNOSizqzGsUP5Zz 9S6naNocXR2tUyBNEudrhODNYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/7pI/N VNRra/Y4pTIcWXb63frJMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAydwrhzaTi4CnDPBDM1zulS1TqzDry6o0diu4It9ylZVjHCzHJS9u8 Jcg1RR1qpC1KGCE1w4BrKcOhzHCJR0xRD6W4mAlb0fyPGFtY9xvmgVuIOWx1fzwO KyXzL/M1iT0E6fYLCARP2P/GUskQQ7onEow5tWedcoKBCVaKUGRbwa+Ngiu1Uyll pwgpd7sCexEhTlWPgrJM+y7rMZpw7vo5IwnGMHxgnlzxJtqVC0CtzLneltTzCHFN AqM+xEmwZkAoZFqKSAT4NnyNyh3UAjOZnmWeNNXwwK0pO/SxbrzsCTornTnjF30B AcaTLJhGSAWRJHtIToArxS0H0Zv8JDwH -----END CERTIFICATE-----Generated at Fri Jun 6 16:49:07 2025 by rpki-client