$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: oGa4UtPASrP/CWyxoJFTQj6wkFyeC6jAeJskRADcKc8= Subject key identifier: 0C:40:B5:EC:F2:BC:33:0F:A2:DF:33:37:E6:B5:EA:0B:94:04:94:F7 Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 09C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 09BC Signing time: Sat 10 May 2025 19:44:18 +0000 Manifest this update: Sat 10 May 2025 19:44:17 +0000 Manifest next update: Sat 17 May 2025 19:44:17 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: NSu1DnriWFYYWWS/hyWNW7vjL1u0JvHtueLMbt3Kfmg=) 2: E35939C2261711EC9990A750C4F9AE02.roa (hash: EKL344c874zXObfFghZmauIp/iQl7AGjIR7DSSwVyAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2504 (0x9c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: May 10 19:44:17 2025 GMT Not After : May 17 19:44:17 2025 GMT Subject: CN=681fac91-c91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:42:05:7d:f0:d5:64:29:86:4d:05:4b:56:75: 68:40:a5:2a:e7:b1:5e:38:c2:61:04:76:b7:4c:1f: 37:de:13:16:d8:e9:c9:a5:ad:69:ee:34:a1:a8:0c: b3:5a:82:3e:f2:90:a3:48:07:03:e8:f8:82:0c:d1: ff:d5:bc:b1:06:21:fc:8f:f3:0d:d0:7a:bd:3b:2c: c9:09:1b:f4:a0:35:5b:25:8b:99:fa:e3:99:67:de: 13:31:14:a2:b8:d3:3b:9c:d8:77:2c:5b:aa:11:92: 01:c3:7a:bc:57:18:cd:3a:64:fa:dd:9b:dd:8b:af: fe:b7:24:ea:77:82:a7:9c:53:3e:fe:f5:ad:31:cb: 1a:a6:ae:d3:fb:96:fc:59:74:95:72:25:09:1c:2f: 53:81:4f:96:43:d3:68:b0:87:2c:fa:f2:44:86:8d: e2:dc:be:1d:cc:7d:1d:dd:b6:d7:24:5b:4f:25:66: f1:48:a7:6e:ae:b1:1e:71:69:06:32:c0:39:cb:8e: 7c:eb:f8:fa:fd:94:e9:85:b8:1d:e2:0d:95:6e:8e: 36:a3:b1:2b:70:e4:86:b6:ec:f5:1b:a5:ba:ec:b2: 8f:14:9e:2d:ca:ef:a3:f7:6e:a3:9e:61:e6:39:49: 12:6d:07:83:d6:90:37:6e:c7:b0:1b:14:22:78:0c: 01:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:40:B5:EC:F2:BC:33:0F:A2:DF:33:37:E6:B5:EA:0B:94:04:94:F7 X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ca:ab:c2:4c:f8:7a:8d:5b:8c:36:c2:b6:4d:e7:cf:55:c4: 7a:c9:55:50:94:b1:f9:3e:57:45:4a:33:72:f0:55:98:30:eb: de:90:63:82:6e:e6:ca:06:57:55:db:a8:81:5a:0d:9b:c1:e9: 5b:11:41:4c:2a:d6:32:37:a1:91:ba:94:0d:b2:9d:f2:8e:5d: 02:52:b5:cb:44:08:a7:f8:51:1e:7c:04:32:5c:51:e3:68:64: cc:c1:7f:b4:c6:42:17:c2:04:5f:66:6d:ee:c7:0a:b3:99:52: 96:50:52:0f:7a:03:b2:71:60:7b:05:a0:b8:d0:10:06:d4:fe: 56:90:7b:0d:66:3b:69:86:c7:9b:54:93:ba:46:fb:ae:cf:90: 92:3c:ed:71:a0:94:79:37:40:88:49:07:7a:8c:78:3e:26:dd: 08:62:fe:cc:a0:86:ad:3d:4c:95:b0:66:4c:b1:c0:a6:74:4f: e7:e1:41:4e:83:2a:92:73:71:f5:06:c4:f7:c7:f7:48:4f:2b: f3:ae:a9:3b:8a:7c:ef:b5:5c:da:a1:a5:46:12:55:4e:a2:cd: 2c:0d:41:be:1d:e9:24:5b:07:d2:ab:8d:da:3e:9c:cc:2a:f8: 87:8e:62:25:a1:0b:65:14:d5:d4:4c:40:86:00:5e:f7:c3:57: 24:a7:23:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjUwNTEwMTk0NDE3WhcNMjUwNTE3MTk0NDE3WjAYMRYwFAYD VQQDEw02ODFmYWM5MS1jOTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEIFffDVZCmGTQVLVnVoQKUq57FeOMJhBHa3TB833hMW2OnJpa1p7jShqAyz WoI+8pCjSAcD6PiCDNH/1byxBiH8j/MN0Hq9OyzJCRv0oDVbJYuZ+uOZZ94TMRSi uNM7nNh3LFuqEZIBw3q8VxjNOmT63Zvdi6/+tyTqd4KnnFM+/vWtMcsapq7T+5b8 WXSVciUJHC9TgU+WQ9NosIcs+vJEho3i3L4dzH0d3bbXJFtPJWbxSKdurrEecWkG MsA5y4586/j6/ZTphbgd4g2Vbo42o7ErcOSGtuz1G6W67LKPFJ4tyu+j926jnmHm OUkSbQeD1pA3bsewGxQieAwBDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxAtezy vDMPot8zN+a16guUBJT3MB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRyqvCTPh6jVuMNsK2TefPVcR6yVVQlLH5PldFSjNy8FWYMOvekGOC bubKBldV26iBWg2bwelbEUFMKtYyN6GRupQNsp3yjl0CUrXLRAin+FEefAQyXFHj aGTMwX+0xkIXwgRfZm3uxwqzmVKWUFIPegOycWB7BaC40BAG1P5WkHsNZjtphseb VJO6Rvuuz5CSPO1xoJR5N0CISQd6jHg+Jt0IYv7MoIatPUyVsGZMscCmdE/n4UFO gyqSc3H1BsT3x/dITyvzrqk7inzvtVzaoaVGElVOos0sDUG+HekkWwfSq43aPpzM KviHjmIloQtlFNXUTECGAF73w1ckpyMD -----END CERTIFICATE-----Generated at Sun May 11 11:40:01 2025 by rpki-client