$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft File: bMOGDamHeDpQBVpRk5gw980cgms.mft (raw, json) Hash identifier: kzzd7gtueD0bgBA20Mrt8tK19m4xYhPfB2a5MpCYBZc= Subject key identifier: DD:19:DC:FB:7F:68:CC:09:45:82:14:CA:9F:48:0A:E1:C9:5C:B9:93 Authority key identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B Certificate issuer: /CN=A91EA623/serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B Certificate serial: 0462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft Manifest number: 045D Signing time: Fri 31 May 2024 02:26:25 +0000 Manifest this update: Fri 31 May 2024 02:26:24 +0000 Manifest next update: Fri 07 Jun 2024 02:26:24 +0000 Files and hashes: 1: bMOGDamHeDpQBVpRk5gw980cgms.crl (hash: pnlXSj6OegkchfDVpe8Z1cOvJCEj1W1759Gv07960wM=) 2: A6C3D8721A9711EC88A50A2CC4F9AE02.roa (hash: fZc9o03yVNykp/Mnk1OWBeWcJqnv+GW9pYxj1fG6RDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA623/serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B Validity Not Before: May 31 02:26:24 2024 GMT Not After : Jun 7 02:26:24 2024 GMT Subject: CN=66593550-9fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:48:00:a6:08:75:ff:94:b5:96:3e:4e:73: 3c:4f:ba:b0:94:2e:b6:5b:94:be:a1:12:40:53:4b: 0a:50:98:c1:af:40:aa:5f:6b:57:a3:3a:f9:32:53: dd:37:c5:4e:d1:2b:bd:7e:be:e6:61:db:c8:d7:1e: ec:87:ff:30:c7:a3:c3:af:a4:23:cb:d0:53:33:1c: 46:45:8f:71:0c:ce:75:8f:91:c0:ff:ae:bb:c8:fc: 67:d6:94:90:3e:37:6b:a7:69:98:af:d8:d6:a9:d7: a1:59:d6:67:fc:42:87:94:9d:cd:f2:49:34:fc:0a: 37:34:90:10:1d:f5:0a:72:60:9f:14:b5:a9:fa:ec: d2:b1:e4:ea:f9:52:da:8d:fa:b1:33:e3:63:8b:5d: 19:f8:cc:10:80:8b:21:6f:3b:7a:bf:83:d4:f6:b9: 62:0e:bb:18:e8:88:9f:87:92:ee:f2:0f:23:6a:94: 8d:bc:06:d9:7f:81:c1:3e:79:54:ba:e3:4d:f6:a2: 8b:cc:39:dc:81:4d:5e:af:80:8b:dd:b8:c1:80:84: cf:8c:f3:7b:e3:62:21:e3:61:bc:03:10:10:d9:21: 23:15:ad:42:59:fe:3e:94:e9:fa:25:a5:ca:6c:ec: 36:e7:b4:03:7a:a0:1b:25:65:d0:ac:b1:a8:f8:94: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:19:DC:FB:7F:68:CC:09:45:82:14:CA:9F:48:0A:E1:C9:5C:B9:93 X509v3 Authority Key Identifier: keyid:6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ba:2e:85:9e:fb:49:6b:5e:08:20:8c:25:32:de:56:c2:5f: 19:ac:d3:1c:7a:30:f6:b1:f0:2d:43:30:12:1f:d9:c3:74:3e: f9:47:49:11:10:01:d7:53:34:96:26:43:a5:98:0c:a2:0c:65: d5:d6:fb:4a:80:95:ea:42:1e:2d:b7:8e:c0:a4:62:9f:d0:03: cf:15:ac:e8:9e:e3:97:84:e6:6f:4e:1d:05:13:0d:29:06:67: 36:a0:7d:b7:7e:bb:f2:ff:7f:b6:a2:61:1b:9b:19:37:48:fb: 35:2b:3a:28:79:89:fb:d6:14:90:a1:a5:b9:f3:87:54:90:f1: 83:e8:da:d7:c9:f1:7f:80:48:cd:b5:8a:8b:54:3e:4b:7c:be: 97:35:a6:43:4d:8a:46:20:c2:cc:bc:f0:66:a3:56:09:da:88: b2:5f:60:f9:92:b3:7d:82:4b:56:54:bd:79:8a:4e:dc:50:57: 52:0e:61:26:06:e2:60:0b:ce:f6:d6:45:fa:dd:dc:0c:d5:c2: 3f:ae:48:d1:15:22:06:21:88:80:76:cc:13:0f:9d:88:ee:90: a8:65:ae:3c:78:5a:49:05:70:17:75:4b:42:61:4f:8c:70:ed: d1:30:45:b0:77:89:1f:0a:65:66:08:ab:bd:6f:bc:e3:c9:07: 99:69:97:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2MjMxMTAvBgNVBAUTKDZDQzM4NjBEQTk4Nzc4M0E1MDA1NUE1MTkzOTgzMEY3 Q0QxQzgyNkIwHhcNMjQwNTMxMDIyNjI0WhcNMjQwNjA3MDIyNjI0WjAYMRYwFAYD VQQDEw02NjU5MzU1MC05ZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8tIAKYIdf+UtZY+TnM8T7qwlC62W5S+oRJAU0sKUJjBr0CqX2tXozr5MlPd N8VO0Su9fr7mYdvI1x7sh/8wx6PDr6Qjy9BTMxxGRY9xDM51j5HA/667yPxn1pSQ Pjdrp2mYr9jWqdehWdZn/EKHlJ3N8kk0/Ao3NJAQHfUKcmCfFLWp+uzSseTq+VLa jfqxM+Nji10Z+MwQgIshbzt6v4PU9rliDrsY6Iifh5Lu8g8japSNvAbZf4HBPnlU uuNN9qKLzDncgU1er4CL3bjBgITPjPN742Ih42G8AxAQ2SEjFa1CWf4+lOn6JaXK bOw257QDeqAbJWXQrLGo+JS6/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0Z3Pt/ aMwJRYIUyp9ICuHJXLmTMB8GA1UdIwQYMBaAFGzDhg2ph3g6UAVaUZOYMPfNHIJr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTYyMy9ERDZCNzUyODA2 MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFtSGVEcFFCVnBSazVndzk4MGNn bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JNT0dEYW1IZURwUUJWcFJrNWd3OTgwY2dtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTYyMy9ERDZCNzUyODA2MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFtSGVE cFFCVnBSazVndzk4MGNnbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnui6FnvtJa14IIIwlMt5Wwl8ZrNMcejD2sfAtQzASH9nDdD75R0kR EAHXUzSWJkOlmAyiDGXV1vtKgJXqQh4tt47ApGKf0APPFazonuOXhOZvTh0FEw0p Bmc2oH23frvy/3+2omEbmxk3SPs1KzooeYn71hSQoaW584dUkPGD6NrXyfF/gEjN tYqLVD5LfL6XNaZDTYpGIMLMvPBmo1YJ2oiyX2D5krN9gktWVL15ik7cUFdSDmEm BuJgC8721kX63dwM1cI/rkjRFSIGIYiAdswTD52I7pCoZa48eFpJBXAXdUtCYU+M cO3RMEWwd4kfCmVmCKu9b7zjyQeZaZeZ -----END CERTIFICATE-----Generated at Fri May 31 04:54:04 2024 by rpki-client on console-fra.rpki-client.org