$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: Jwmzsr67Ts/FuVlSoBbmOKz5euDGYQ73MBcsnmpVxs4= Subject key identifier: 4F:07:2A:8F:48:35:53:E0:34:12:49:39:3B:D5:97:7B:96:49:BB:5A Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 0A1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 0A10 Signing time: Sat 18 Oct 2025 20:50:27 +0000 Manifest this update: Sat 18 Oct 2025 20:50:26 +0000 Manifest next update: Sat 25 Oct 2025 20:50:26 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: h4t+N5m3BGO/TFQltPm0lOXjzXutt9ilR6IgV6Fn8nc=) 2: C9F37B86584111F09E8EC450C4F9AE02.roa (hash: KrEmXnI7T+V4fJrByDl+yUXAqLDUTHQO1G1OMCM+LiE=) 3: E35939C2261711EC9990A750C4F9AE02.roa (hash: EKL344c874zXObfFghZmauIp/iQl7AGjIR7DSSwVyAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2589 (0xa1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Oct 18 20:50:26 2025 GMT Not After : Oct 25 20:50:26 2025 GMT Subject: CN=68f3fd92-3908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:bc:dd:96:8b:26:43:14:aa:ef:8b:c8:51: f6:b6:49:f1:bb:da:ea:40:c2:dc:b0:bd:3d:7c:41: 9b:10:aa:e6:c3:75:22:29:be:ab:0b:cf:32:47:fb: 80:70:6b:61:9d:f6:2f:b7:06:f1:9a:96:4b:52:70: 6e:eb:83:a2:b4:f7:e4:fd:8a:25:68:63:28:3c:50: 03:3b:10:41:d9:c2:77:74:76:0e:41:a0:98:d0:2f: 66:26:34:52:8f:f7:f4:69:61:84:ab:d7:b5:98:47: 19:9e:a8:21:f7:6a:45:4b:10:42:52:28:5f:7e:d4: 69:48:e1:3a:a7:28:89:66:4e:95:30:4d:e0:3c:b9: 5d:9d:fb:5c:db:37:7f:4e:a5:0a:27:6e:f6:3e:d5: a3:d5:27:a0:d0:96:93:73:91:80:6a:ff:be:54:7e: 2b:11:98:ce:4d:ca:24:a2:82:9c:86:17:15:79:70: ad:b1:6b:29:aa:80:0b:fd:94:22:30:07:45:2c:f3: fb:67:87:96:aa:85:fa:91:74:c1:a2:14:d7:69:32: cb:3a:cb:31:c6:5a:4c:f5:4c:a7:f1:ac:8f:52:cb: 36:00:44:ce:38:dc:9d:26:1b:4b:b8:11:ff:d2:e9: 2a:9d:ed:24:ea:73:b4:81:f7:4e:af:a6:a1:b9:f0: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:07:2A:8F:48:35:53:E0:34:12:49:39:3B:D5:97:7B:96:49:BB:5A X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a0:ff:aa:5e:05:70:8d:13:48:54:b9:e7:f2:ca:c4:5e:37: 18:b8:5c:2a:2f:c6:52:d6:2c:b3:1e:a3:8e:60:2a:4a:8f:72: 0c:74:cc:68:b7:b6:13:2b:e2:a2:3e:f2:71:bb:74:c5:5a:31: 0a:d0:24:19:ac:af:27:36:0a:b6:27:35:50:c3:b5:6d:94:d8: 01:11:65:cd:da:57:bb:3a:40:dc:60:e6:e2:f0:4a:71:b6:de: f1:87:34:28:1b:d7:b8:7d:a1:d8:0e:a6:ee:4a:cf:5b:e8:ed: 29:a3:ff:6f:13:9d:b2:52:3d:8d:34:47:52:51:fa:71:74:46: 12:d7:d4:f6:02:33:a5:83:49:b5:0b:e2:97:19:e8:e1:e4:f2: d1:fa:d4:31:d0:1b:a4:e2:4a:52:ab:d3:8b:09:95:20:b7:20: 75:a3:22:6d:b7:b4:07:2f:44:6b:fc:50:c3:54:11:b2:27:c1: 37:9d:21:5b:46:8f:54:bc:6f:8d:99:07:88:a8:b3:1b:d5:41: a7:ab:be:e0:3d:5a:27:6c:49:c0:34:c7:0a:f9:dc:c1:f0:43: 40:8a:ee:f1:fb:de:3a:91:32:90:84:ea:76:99:2a:bb:55:63: 74:cc:fe:05:8f:0d:20:36:eb:18:10:68:c6:4e:c4:b8:91:39: ea:2a:cb:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjUxMDE4MjA1MDI2WhcNMjUxMDI1MjA1MDI2WjAYMRYwFAYD VQQDEw02OGYzZmQ5Mi0zOTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxy83ZaLJkMUqu+LyFH2tknxu9rqQMLcsL09fEGbEKrmw3UiKb6rC88yR/uA cGthnfYvtwbxmpZLUnBu64OitPfk/YolaGMoPFADOxBB2cJ3dHYOQaCY0C9mJjRS j/f0aWGEq9e1mEcZnqgh92pFSxBCUihfftRpSOE6pyiJZk6VME3gPLldnftc2zd/ TqUKJ272PtWj1Seg0JaTc5GAav++VH4rEZjOTcokooKchhcVeXCtsWspqoAL/ZQi MAdFLPP7Z4eWqoX6kXTBohTXaTLLOssxxlpM9Uyn8ayPUss2AETOONydJhtLuBH/ 0ukqne0k6nO0gfdOr6ahufADmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8HKo9I NVPgNBJJOTvVl3uWSbtaMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRoP+qXgVwjRNIVLnn8srEXjcYuFwqL8ZS1iyzHqOOYCpKj3IMdMxo t7YTK+KiPvJxu3TFWjEK0CQZrK8nNgq2JzVQw7VtlNgBEWXN2le7OkDcYObi8Epx tt7xhzQoG9e4faHYDqbuSs9b6O0po/9vE52yUj2NNEdSUfpxdEYS19T2AjOlg0m1 C+KXGejh5PLR+tQx0Buk4kpSq9OLCZUgtyB1oyJtt7QHL0Rr/FDDVBGyJ8E3nSFb Ro9UvG+NmQeIqLMb1UGnq77gPVonbEnANMcK+dzB8ENAiu7x+946kTKQhOp2mSq7 VWN0zP4Fjw0gNusYEGjGTsS4kTnqKstQ -----END CERTIFICATE-----Generated at Mon Oct 20 09:40:58 2025 by rpki-client