$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft File: bMOGDamHeDpQBVpRk5gw980cgms.mft (raw, json) Hash identifier: AfSlEe+2db8FonjG/HuA26l8lMEcFX/UaRuYbw9Qotk= Subject key identifier: B5:D3:CC:19:93:96:F7:7E:44:B6:C8:E4:86:4E:79:7E:33:97:88:6C Authority key identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B Certificate issuer: /CN=A91EA623/serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft Manifest number: 0509 Signing time: Thu 24 Apr 2025 23:26:54 +0000 Manifest this update: Thu 24 Apr 2025 23:26:54 +0000 Manifest next update: Thu 01 May 2025 23:26:54 +0000 Files and hashes: 1: bMOGDamHeDpQBVpRk5gw980cgms.crl (hash: lJ6GsTypuoc0rVJUcHvRLVkMdbNTfMjmnMPLYrHkUng=) 2: A6C3D8721A9711EC88A50A2CC4F9AE02.roa (hash: V99zGIESWxaCWwIsK3BcjNwowjB6iy3p26jrLpwkePQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA623, serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B Validity Not Before: Apr 24 23:26:54 2025 GMT Not After : May 1 23:26:54 2025 GMT Subject: CN=680ac8be-26eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:9e:34:7e:71:92:84:3d:5f:f8:52:68:d4: 08:12:f0:1b:c9:2e:52:b3:4c:77:25:08:5f:8e:ee: 8d:5b:9c:4b:07:df:88:93:d3:cf:b6:b0:d2:2e:d6: 0e:47:a6:12:7a:db:de:4c:d1:d2:c0:7e:78:e3:d5: 50:e9:66:53:e1:e6:b0:2e:bb:c1:f7:dc:ad:f7:5d: 87:41:fc:d1:29:d7:aa:7d:b5:15:21:db:c4:39:54: 21:98:ca:53:7f:61:44:97:ff:77:42:45:de:26:fe: be:8b:ce:84:f4:6a:60:19:9e:54:dc:0a:99:e7:a9: 64:7d:e3:1f:79:88:9a:35:37:27:95:4d:69:e1:34: 96:8f:dc:ef:f3:bf:05:e5:6b:ea:9a:c4:a4:4c:0f: 2b:30:e9:91:1c:90:60:18:9a:49:67:af:e9:88:22: 22:a3:b9:8a:4a:80:8e:09:00:fa:67:ff:8c:b7:f5: 9e:48:06:59:5a:b8:28:1b:7f:44:6c:21:4e:0c:84: 14:fb:a6:33:8e:6d:0b:8d:39:26:8e:7c:b4:e2:fd: 23:8a:37:97:62:b9:b4:b5:b1:bd:9d:6e:ad:7e:5a: f7:12:78:e7:86:76:9b:8d:0d:f5:fc:33:aa:9d:cd: b9:85:62:de:c1:25:11:37:81:0f:64:1f:ed:e1:ce: 4a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D3:CC:19:93:96:F7:7E:44:B6:C8:E4:86:4E:79:7E:33:97:88:6C X509v3 Authority Key Identifier: keyid:6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:1d:23:24:d4:d6:e6:9d:60:10:91:cd:5a:93:d5:c4:e1:a5: fa:bd:b8:fc:48:cc:b5:49:63:76:87:71:eb:23:e9:9b:09:0a: 4a:34:4c:59:65:3f:0d:8e:29:ff:2e:0a:ab:82:da:7c:7f:84: a3:3b:94:15:60:1e:d9:c1:fc:6f:0f:1f:f6:e9:a8:30:c4:4f: 2d:2e:86:d8:51:8f:61:e9:72:58:d8:7b:19:12:b5:62:8a:2f: e0:d1:cc:be:a0:b2:f2:7b:c1:8c:9e:b5:91:39:6b:cb:c5:68: 9b:ea:7b:5c:c9:b7:61:df:25:5c:67:66:4e:21:fe:a2:cc:51: de:2c:a8:70:f5:53:83:ee:2c:7a:35:2b:5f:0c:0d:0b:79:7b: 47:62:1a:bd:a3:4f:95:70:1d:8e:4c:69:0c:13:02:6e:fa:33: 96:27:80:1f:10:15:5c:bc:24:49:04:f7:55:35:04:b3:bc:14: 13:17:95:17:e7:b4:74:22:13:ba:03:83:49:e3:51:74:12:bf: 36:37:f0:b5:ce:66:49:91:c4:86:ca:ae:1b:cf:c5:47:20:c2: b5:96:6b:a4:14:eb:01:97:0d:63:df:a4:8b:16:80:ef:82:b8: 94:19:c0:27:d9:19:66:ee:69:4e:b2:5e:0b:63:67:47:72:43: 87:97:c6:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2MjMxMTAvBgNVBAUTKDZDQzM4NjBEQTk4Nzc4M0E1MDA1NUE1MTkzOTgzMEY3 Q0QxQzgyNkIwHhcNMjUwNDI0MjMyNjU0WhcNMjUwNTAxMjMyNjU0WjAYMRYwFAYD VQQDEw02ODBhYzhiZS0yNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTWeNH5xkoQ9X/hSaNQIEvAbyS5Ss0x3JQhfju6NW5xLB9+Ik9PPtrDSLtYO R6YSetveTNHSwH5449VQ6WZT4eawLrvB99yt912HQfzRKdeqfbUVIdvEOVQhmMpT f2FEl/93QkXeJv6+i86E9GpgGZ5U3AqZ56lkfeMfeYiaNTcnlU1p4TSWj9zv878F 5WvqmsSkTA8rMOmRHJBgGJpJZ6/piCIio7mKSoCOCQD6Z/+Mt/WeSAZZWrgoG39E bCFODIQU+6Yzjm0LjTkmjny04v0jijeXYrm0tbG9nW6tflr3EnjnhnabjQ31/DOq nc25hWLewSURN4EPZB/t4c5KWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXTzBmT lvd+RLbI5IZOeX4zl4hsMB8GA1UdIwQYMBaAFGzDhg2ph3g6UAVaUZOYMPfNHIJr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTYyMy9ERDZCNzUyODA2 MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFtSGVEcFFCVnBSazVndzk4MGNn bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JNT0dEYW1IZURwUUJWcFJrNWd3OTgwY2dtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTYyMy9ERDZCNzUyODA2MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFtSGVE cFFCVnBSazVndzk4MGNnbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFHSMk1NbmnWAQkc1ak9XE4aX6vbj8SMy1SWN2h3HrI+mbCQpKNExZ ZT8Njin/Lgqrgtp8f4SjO5QVYB7ZwfxvDx/26agwxE8tLobYUY9h6XJY2HsZErVi ii/g0cy+oLLye8GMnrWROWvLxWib6ntcybdh3yVcZ2ZOIf6izFHeLKhw9VOD7ix6 NStfDA0LeXtHYhq9o0+VcB2OTGkMEwJu+jOWJ4AfEBVcvCRJBPdVNQSzvBQTF5UX 57R0IhO6A4NJ41F0Er82N/C1zmZJkcSGyq4bz8VHIMK1lmukFOsBlw1j36SLFoDv griUGcAn2Rlm7mlOsl4LY2dHckOHl8ZD -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:34 2025 by rpki-client