$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: j47yiE5iu/G21zEQ22ID4y2b1s09VNWQoJZoI7yluNo= Subject key identifier: 10:44:B0:2B:7D:65:25:9A:00:59:1D:1D:90:C2:D4:59:BF:82:C2:2D Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 09C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 09B5 Signing time: Sat 26 Apr 2025 19:47:47 +0000 Manifest this update: Sat 26 Apr 2025 19:47:47 +0000 Manifest next update: Sat 03 May 2025 19:47:47 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: TMBb/B1DOyhIGzCVAYSyYzj0L0ZAUx6t6ZlprITj8jc=) 2: E35939C2261711EC9990A750C4F9AE02.roa (hash: EKL344c874zXObfFghZmauIp/iQl7AGjIR7DSSwVyAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Apr 26 19:47:47 2025 GMT Not After : May 3 19:47:47 2025 GMT Subject: CN=680d3863-8d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:88:45:f7:3d:33:8b:03:1d:29:ca:6e:5f: c8:d5:ea:a8:ec:33:a4:86:0d:7a:8a:99:e1:ae:26: 9b:13:8d:54:3f:8b:e0:b2:20:2b:15:6a:57:87:03: 87:0d:5a:b4:e1:3b:6e:67:38:3a:08:9d:81:31:62: 3a:5f:38:5f:8c:e7:43:33:48:6a:3b:27:1c:27:97: 17:41:43:d3:7a:78:18:d3:24:af:22:34:76:f0:b6: cb:94:63:16:ef:05:5b:5b:7e:04:1e:21:4f:1c:bc: 1b:9b:90:5d:79:26:db:16:90:de:d7:21:7d:b5:57: ee:0a:c2:8a:7d:93:2e:16:98:c0:de:e0:d0:24:85: 16:08:26:bb:44:f2:9e:68:c7:c0:9a:da:8f:25:6d: bf:55:a5:57:61:53:ff:84:3c:d0:cd:9d:10:48:b1: 2d:ce:bc:67:d5:12:de:28:12:1e:0c:e1:86:3d:f7: cb:06:01:04:c9:1f:64:44:8d:07:2b:9f:db:0c:62: 72:ea:6b:60:a4:41:62:4a:ad:3c:6d:37:d4:d5:ce: d7:60:42:a0:93:23:aa:53:9a:0b:33:9b:c3:f9:ff: 31:d2:e3:a5:f0:9f:16:28:11:10:6a:87:c4:6c:16: 2c:cb:ed:e4:5a:11:06:64:1f:37:fe:55:80:87:85: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:44:B0:2B:7D:65:25:9A:00:59:1D:1D:90:C2:D4:59:BF:82:C2:2D X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:52:fe:07:41:4f:8f:75:f4:64:a4:12:04:86:90:d8:af:5b: 5c:f3:37:95:f8:66:20:62:2e:56:ae:fa:52:4b:01:07:f1:94: 0f:80:ac:70:56:aa:4d:ac:d0:8f:cc:71:e7:32:90:9b:f1:8a: 5a:b4:27:3d:6b:5a:57:ef:b8:34:a6:0c:b5:f6:80:16:1c:20: e3:39:0f:34:7c:04:93:ad:a9:8c:fb:eb:aa:a6:ae:b7:6b:df: 65:7b:d1:06:ed:a5:24:4a:e9:b4:08:ff:38:a8:d1:02:b0:b8: de:39:80:bb:b4:66:c2:e7:e9:44:b2:83:a2:2c:f8:5d:3c:b3: 24:c0:a6:9d:8e:69:a6:ae:ea:61:46:ee:d3:d6:86:64:4a:7d: 6f:9a:0e:ad:4d:73:bc:1f:e3:b1:f8:8c:3d:22:23:88:47:68: 53:23:a9:21:fc:dd:a3:8d:cd:f8:72:68:99:91:f6:f4:fe:f1: 39:49:1a:09:17:23:3d:05:68:d3:4e:69:3c:01:13:c2:ca:0f: 34:50:3b:80:96:79:2b:c2:57:f4:bb:b9:93:e1:24:53:fe:77: 37:a7:c7:94:3f:49:2c:52:07:d1:19:be:1e:18:4c:03:11:48: c9:61:b0:7b:27:f9:e6:68:53:91:85:c7:73:7b:40:68:61:e2: c8:e3:5a:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjUwNDI2MTk0NzQ3WhcNMjUwNTAzMTk0NzQ3WjAYMRYwFAYD VQQDEw02ODBkMzg2My04ZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB6IRfc9M4sDHSnKbl/I1eqo7DOkhg16ipnhriabE41UP4vgsiArFWpXhwOH DVq04TtuZzg6CJ2BMWI6XzhfjOdDM0hqOyccJ5cXQUPTengY0ySvIjR28LbLlGMW 7wVbW34EHiFPHLwbm5BdeSbbFpDe1yF9tVfuCsKKfZMuFpjA3uDQJIUWCCa7RPKe aMfAmtqPJW2/VaVXYVP/hDzQzZ0QSLEtzrxn1RLeKBIeDOGGPffLBgEEyR9kRI0H K5/bDGJy6mtgpEFiSq08bTfU1c7XYEKgkyOqU5oLM5vD+f8x0uOl8J8WKBEQaofE bBYsy+3kWhEGZB83/lWAh4VDcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBEsCt9 ZSWaAFkdHZDC1Fm/gsItMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaUv4HQU+PdfRkpBIEhpDYr1tc8zeV+GYgYi5WrvpSSwEH8ZQPgKxw VqpNrNCPzHHnMpCb8YpatCc9a1pX77g0pgy19oAWHCDjOQ80fASTramM++uqpq63 a99le9EG7aUkSum0CP84qNECsLjeOYC7tGbC5+lEsoOiLPhdPLMkwKadjmmmruph Ru7T1oZkSn1vmg6tTXO8H+Ox+Iw9IiOIR2hTI6kh/N2jjc34cmiZkfb0/vE5SRoJ FyM9BWjTTmk8ARPCyg80UDuAlnkrwlf0u7mT4SRT/nc3p8eUP0ksUgfRGb4eGEwD EUjJYbB7J/nmaFORhcdze0BoYeLI41pi -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:53 2025 by rpki-client on console.sobornost.net