$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: tQLMjMNxu8H+VISCisd5VHiRbwD+bVIZQ6lGv8psPoE= Subject key identifier: 33:BD:6E:7F:23:C3:0B:43:36:7C:E1:24:F0:E9:C2:06:E3:96:B5:3B Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 0A00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 09F3 Signing time: Fri 22 Aug 2025 20:01:51 +0000 Manifest this update: Fri 22 Aug 2025 20:01:50 +0000 Manifest next update: Fri 29 Aug 2025 20:01:50 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: QChxaWfxcJTkq05XiXSEmx1YxG8QwDeYhAKf19J/qW0=) 2: C9F37B86584111F09E8EC450C4F9AE02.roa (hash: KrEmXnI7T+V4fJrByDl+yUXAqLDUTHQO1G1OMCM+LiE=) 3: E35939C2261711EC9990A750C4F9AE02.roa (hash: EKL344c874zXObfFghZmauIp/iQl7AGjIR7DSSwVyAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2560 (0xa00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Aug 22 20:01:50 2025 GMT Not After : Aug 29 20:01:50 2025 GMT Subject: CN=68a8ccae-07e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:b4:f8:01:98:53:c3:c7:5b:5a:ed:22:67: 79:af:c3:ef:5e:82:a1:1a:5c:2c:c2:b2:7a:27:5b: 36:75:5b:39:49:b8:ea:15:71:da:a0:4f:f8:34:34: 05:41:c4:66:c2:b7:2b:94:c2:15:31:06:cc:7e:df: 44:5c:0e:90:5d:b3:33:ee:a5:ef:6c:61:d0:7e:c0: c3:81:dd:72:48:b8:09:09:fc:ca:68:52:57:e0:6a: 71:2b:8b:1d:1d:cd:2b:6c:07:f9:65:17:06:55:6c: 8a:fd:1d:d6:9a:54:82:bc:49:0d:25:8b:ae:8b:10: 93:67:54:dc:a2:7b:c2:b3:97:fb:c8:47:15:8f:1c: 4f:5a:9c:56:ca:42:7e:38:2d:f3:60:d1:fe:b2:19: 21:ff:1f:2a:ac:85:ea:62:3d:43:81:a0:45:f2:f9: 85:42:e9:6d:4c:dc:ad:4e:96:8c:82:ad:a7:e9:3e: 7e:66:eb:aa:33:a8:ae:58:97:1e:77:c5:f2:61:44: 5e:5a:a3:d7:e3:9c:4f:8b:6b:09:02:58:d3:ee:c2: b2:73:92:46:17:15:12:4c:42:d8:03:aa:ac:3a:74: de:84:10:55:cf:08:40:0f:7e:61:c8:75:61:0a:bf: ff:ec:6c:e7:85:87:7e:f3:dc:91:fa:87:56:3b:89: b2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BD:6E:7F:23:C3:0B:43:36:7C:E1:24:F0:E9:C2:06:E3:96:B5:3B X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:11:7e:87:20:ef:15:30:43:01:6c:34:45:c0:31:5a:a1:b4: f5:1b:60:b3:aa:34:c4:7c:06:ad:c1:c7:64:09:46:11:34:53: c4:1c:0b:5e:6d:22:5a:43:32:15:d3:5f:d1:00:36:b5:18:75: 10:e1:25:67:f1:90:35:45:57:20:ee:cc:59:9a:cd:fd:d9:6d: d1:be:4a:bb:7c:eb:3d:0b:d2:d7:de:fe:69:e3:3a:32:16:db: ab:65:45:41:47:83:cb:93:27:f2:32:88:22:5f:45:96:a6:c3: c1:82:5b:36:5c:43:6b:f5:84:6d:da:e3:e1:f3:dc:f4:77:7f: 37:f9:b6:d9:39:52:a1:59:29:6c:3a:13:f6:88:3d:41:6a:bc: cb:91:58:d3:50:f1:17:51:bf:df:e3:2f:c2:4b:3f:c3:30:a3: 00:e4:c6:5d:da:0f:ca:09:9b:9d:b1:5e:29:33:99:27:fc:ff: 54:e9:7f:58:6d:7d:28:58:2f:25:7c:32:84:a7:a0:22:0a:cf: a2:1e:78:e1:b7:bc:7d:24:b6:99:58:0f:7e:62:56:44:40:0d: 31:da:29:06:6b:52:91:a2:2f:c5:e8:af:46:7e:de:b7:dc:ba: 3a:98:0a:bc:1d:eb:9c:31:79:95:dc:22:e3:47:65:b0:cf:64: 8f:16:35:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjUwODIyMjAwMTUwWhcNMjUwODI5MjAwMTUwWjAYMRYwFAYD VQQDEw02OGE4Y2NhZS0wN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiC0+AGYU8PHW1rtImd5r8PvXoKhGlwswrJ6J1s2dVs5SbjqFXHaoE/4NDQF QcRmwrcrlMIVMQbMft9EXA6QXbMz7qXvbGHQfsDDgd1ySLgJCfzKaFJX4GpxK4sd Hc0rbAf5ZRcGVWyK/R3WmlSCvEkNJYuuixCTZ1TconvCs5f7yEcVjxxPWpxWykJ+ OC3zYNH+shkh/x8qrIXqYj1DgaBF8vmFQultTNytTpaMgq2n6T5+ZuuqM6iuWJce d8XyYUReWqPX45xPi2sJAljT7sKyc5JGFxUSTELYA6qsOnTehBBVzwhAD35hyHVh Cr//7GznhYd+89yR+odWO4myqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDO9bn8j wwtDNnzhJPDpwgbjlrU7MB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBEX6HIO8VMEMBbDRFwDFaobT1G2CzqjTEfAatwcdkCUYRNFPEHAte bSJaQzIV01/RADa1GHUQ4SVn8ZA1RVcg7sxZms392W3Rvkq7fOs9C9LX3v5p4zoy FturZUVBR4PLkyfyMogiX0WWpsPBgls2XENr9YRt2uPh89z0d383+bbZOVKhWSls OhP2iD1BarzLkVjTUPEXUb/f4y/CSz/DMKMA5MZd2g/KCZudsV4pM5kn/P9U6X9Y bX0oWC8lfDKEp6AiCs+iHnjht7x9JLaZWA9+YlZEQA0x2ikGa1KRoi/F6K9Gft63 3Lo6mAq8HeucMXmV3CLjR2Wwz2SPFjUx -----END CERTIFICATE-----Generated at Sat Aug 23 13:42:59 2025 by rpki-client