$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: 6ru31xjrJbCTdbDqB20N8P6MgHF8MMBdeed7ffaKAco= Subject key identifier: A3:68:52:EE:5C:EC:94:E9:12:8D:72:B2:C2:66:BD:8B:72:F7:32:85 Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 090A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 08FF Signing time: Mon 06 May 2024 21:23:36 +0000 Manifest this update: Mon 06 May 2024 21:23:35 +0000 Manifest next update: Mon 13 May 2024 21:23:35 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: IrJGlXM1ip6VVGT9+euvYcMINE9m7GRZpv1TklPMTiA=) 2: E35939C2261711EC9990A750C4F9AE02.roa (hash: DzSac6j8MZfa9oP61oFslZ4Gy+B8YE6Crs7TqBZ64po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2314 (0x90a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: May 6 21:23:35 2024 GMT Not After : May 13 21:23:35 2024 GMT Subject: CN=66394a57-a349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:06:aa:de:7c:94:ac:06:ce:19:2d:b1:e0:f6: 4c:06:54:0c:b3:75:89:56:c3:62:88:8d:f2:07:6f: 5b:f9:f1:46:8d:19:0a:17:d1:87:04:f3:8d:53:35: 3e:5f:f3:10:ba:68:ae:aa:11:d4:7b:3d:d8:31:88: 53:a2:29:cf:17:b5:f7:9e:f3:5a:7a:2f:b0:32:02: 2d:47:4f:ff:93:c7:5d:31:ef:37:b3:f3:85:13:1b: 51:d7:8c:33:69:06:5f:4e:af:37:50:5a:9e:77:81: 53:ca:e3:97:f4:a1:7b:a2:b4:67:ed:6e:4b:b5:62: f4:fe:c0:b1:77:b6:94:a2:e5:9f:98:a7:a1:6b:a9: 45:db:bb:6f:b9:ae:73:91:01:09:53:c1:3f:a2:09: 6b:7e:1b:14:1b:ce:fd:48:b7:70:4d:1d:ef:b3:83: 61:35:8f:5f:aa:3e:bf:37:e5:ba:16:b9:11:5e:98: 68:6a:d3:6c:30:0e:da:10:ec:8c:4d:ff:39:96:38: a7:d8:51:95:e0:6b:1d:d3:a1:0a:75:79:53:c3:aa: 48:bc:6d:bb:34:26:9d:a9:1b:b0:42:1f:f3:7e:80: 52:7d:30:86:78:ad:28:46:ab:78:d1:15:12:aa:a5: 03:50:1c:dd:23:d2:76:de:1e:16:f2:39:f0:0c:88: 16:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:68:52:EE:5C:EC:94:E9:12:8D:72:B2:C2:66:BD:8B:72:F7:32:85 X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:75:0b:1f:82:7a:77:25:39:c3:b4:4c:92:87:00:b9:54:4a: b0:38:ca:15:7a:48:38:af:76:33:6f:bb:f6:b1:cd:bc:70:90: 2d:74:3a:19:10:59:bf:bd:ab:6c:2f:b6:a9:ff:30:1f:a0:24: 6f:75:e3:d8:35:f8:03:22:72:4d:e7:b5:14:a7:61:77:5f:e4: 21:47:26:ae:21:2f:15:9b:7b:40:c0:9e:16:b6:b0:7d:c4:a4: df:78:ca:50:05:5b:9f:4e:46:a8:49:d9:b2:cf:88:87:8d:e3: 1c:aa:5c:4c:36:c4:55:5d:f6:22:f5:29:30:c6:05:bc:e2:c2: 39:b7:76:9d:a6:b7:f9:cc:34:27:37:50:21:fc:47:31:50:98: 47:96:57:e8:16:36:f4:1e:09:02:a7:e2:c0:e2:0d:78:29:b1: f7:27:aa:c3:f7:f8:fc:80:09:99:00:81:29:b7:d1:0f:92:ba: 14:7e:29:2f:f2:b6:67:ce:a8:49:d0:0e:54:80:80:8d:4d:1a: 50:d2:3e:a2:cc:86:f8:0b:47:f2:64:80:fb:b2:e6:7a:87:1e: 17:dc:56:8c:3d:d8:4b:a1:81:a0:63:4c:6c:79:f2:53:ae:7d: 77:68:91:82:bc:2e:a1:a6:a6:cb:71:d4:01:40:aa:2f:98:55: 4d:5e:04:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjQwNTA2MjEyMzM1WhcNMjQwNTEzMjEyMzM1WjAYMRYwFAYD VQQDEw02NjM5NGE1Ny1hMzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlgaq3nyUrAbOGS2x4PZMBlQMs3WJVsNiiI3yB29b+fFGjRkKF9GHBPONUzU+ X/MQumiuqhHUez3YMYhToinPF7X3nvNaei+wMgItR0//k8ddMe83s/OFExtR14wz aQZfTq83UFqed4FTyuOX9KF7orRn7W5LtWL0/sCxd7aUouWfmKeha6lF27tvua5z kQEJU8E/oglrfhsUG879SLdwTR3vs4NhNY9fqj6/N+W6FrkRXphoatNsMA7aEOyM Tf85ljin2FGV4Gsd06EKdXlTw6pIvG27NCadqRuwQh/zfoBSfTCGeK0oRqt40RUS qqUDUBzdI9J23h4W8jnwDIgWPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNoUu5c 7JTpEo1yssJmvYty9zKFMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUdQsfgnp3JTnDtEyShwC5VEqwOMoVekg4r3Yzb7v2sc28cJAtdDoZ EFm/vatsL7ap/zAfoCRvdePYNfgDInJN57UUp2F3X+QhRyauIS8Vm3tAwJ4WtrB9 xKTfeMpQBVufTkaoSdmyz4iHjeMcqlxMNsRVXfYi9SkwxgW84sI5t3adprf5zDQn N1Ah/EcxUJhHllfoFjb0HgkCp+LA4g14KbH3J6rD9/j8gAmZAIEpt9EPkroUfikv 8rZnzqhJ0A5UgICNTRpQ0j6izIb4C0fyZID7suZ6hx4X3FaMPdhLoYGgY0xsefJT rn13aJGCvC6hpqbLcdQBQKovmFVNXgSL -----END CERTIFICATE-----Generated at Mon May 6 22:40:52 2024 by rpki-client on console-ams.rpki-client.org