$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft File: bMOGDamHeDpQBVpRk5gw980cgms.mft (raw, json) Hash identifier: ZVUuVX5jQ2ABs2KOU4Ec0HFa+hI2HLP+Kn+LlQ2e4vk= Subject key identifier: 42:F7:38:CC:BD:F1:7E:09:AE:EF:78:81:07:1B:0B:C7:A4:3A:75:9C Authority key identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B Certificate issuer: /CN=A91EA623/serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft Manifest number: 0533 Signing time: Fri 18 Jul 2025 23:53:41 +0000 Manifest this update: Fri 18 Jul 2025 23:53:40 +0000 Manifest next update: Fri 25 Jul 2025 23:53:40 +0000 Files and hashes: 1: bMOGDamHeDpQBVpRk5gw980cgms.crl (hash: 0Oa2oqNIvF5r025vgWhSxg9llOBogAMqIeO/jWRTXNE=) 2: A6C3D8721A9711EC88A50A2CC4F9AE02.roa (hash: V99zGIESWxaCWwIsK3BcjNwowjB6iy3p26jrLpwkePQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA623, serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B Validity Not Before: Jul 18 23:53:40 2025 GMT Not After : Jul 25 23:53:40 2025 GMT Subject: CN=687ade84-8e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:ad:5d:55:44:b9:a3:37:57:9f:3b:73:7e: 26:2f:ad:3a:bb:fe:73:8b:d1:11:92:24:b5:b1:55: c5:bf:fe:13:2c:57:52:6d:16:60:08:cf:85:52:e6: 31:b6:08:31:f5:5f:aa:d1:28:3f:c5:ff:da:18:91: 79:03:63:bb:5d:15:d7:e1:bb:af:b1:81:08:b1:1c: af:59:e0:00:a3:02:d6:2b:b6:3f:07:48:62:03:35: 3a:aa:9e:f4:1b:6e:3b:6b:94:de:02:94:11:a4:ce: 3a:22:88:31:b1:7e:fc:8e:27:63:b6:e8:73:3c:f3: 27:bf:b3:7f:44:a9:19:8d:12:f5:12:df:76:b8:8a: 3e:3c:75:a9:eb:53:85:64:21:11:74:aa:3c:8b:bd: d3:f4:fa:81:ee:a1:52:66:d3:16:74:12:a5:46:f0: 52:b1:c5:11:7a:97:e3:5c:b1:20:83:db:8d:4f:b7: 21:2a:f4:f2:39:5e:d2:af:f0:b6:fa:e4:29:f8:a8: f7:9d:22:25:7e:2e:46:46:81:82:9b:3b:f4:c0:85: 87:d2:94:3e:8f:bb:11:58:91:d5:6d:75:f2:5f:ce: 7a:b8:57:aa:21:f1:39:e3:3e:ec:64:d5:5b:55:a0: fd:31:fb:2f:f1:34:0c:ff:0a:31:47:55:5b:fa:f1: e6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F7:38:CC:BD:F1:7E:09:AE:EF:78:81:07:1B:0B:C7:A4:3A:75:9C X509v3 Authority Key Identifier: keyid:6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:84:ab:e0:00:24:a0:42:be:67:db:a2:cf:5a:6e:9f:bb:57: 59:54:39:93:af:11:84:6a:8c:15:6c:27:cb:f6:2a:4c:41:6a: eb:99:70:61:8b:00:01:24:93:bb:eb:97:8b:2b:e5:1d:6a:b6: ff:0c:8c:39:47:1e:05:a4:5e:af:35:b7:40:df:34:b6:30:47: 5f:d4:a8:6f:87:fe:ce:d9:75:58:8b:04:c6:34:59:45:58:66: 55:92:6d:9c:b4:75:02:62:17:c7:73:3a:76:07:15:b9:a5:94: c8:05:a3:f8:94:9b:2e:bf:83:e9:c3:a5:a9:ce:07:d4:85:6a: 4d:08:9c:80:be:36:5b:22:01:30:eb:36:68:47:a7:b8:e2:57: c5:23:0d:83:9e:75:d6:29:a4:0b:b3:53:a5:d2:ef:f4:4e:df: 8f:c8:2a:92:3f:3d:7c:11:6b:c8:2a:c9:d1:bc:36:79:34:6d: a9:16:e2:7e:62:8f:e6:9b:09:72:dd:c0:da:62:42:52:e2:7c: 12:7d:28:49:0f:f9:39:66:4f:b5:5e:d1:f6:4e:16:de:9f:e4: b4:4b:ad:91:13:66:69:eb:4c:1b:03:19:28:29:19:50:4b:34: 49:4d:76:59:48:72:f3:63:ea:a3:0a:75:dd:fc:4e:1a:cb:0b: 98:13:40:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2MjMxMTAvBgNVBAUTKDZDQzM4NjBEQTk4Nzc4M0E1MDA1NUE1MTkzOTgzMEY3 Q0QxQzgyNkIwHhcNMjUwNzE4MjM1MzQwWhcNMjUwNzI1MjM1MzQwWjAYMRYwFAYD VQQDEw02ODdhZGU4NC04ZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApa6tXVVEuaM3V587c34mL606u/5zi9ERkiS1sVXFv/4TLFdSbRZgCM+FUuYx tggx9V+q0Sg/xf/aGJF5A2O7XRXX4buvsYEIsRyvWeAAowLWK7Y/B0hiAzU6qp70 G247a5TeApQRpM46IogxsX78jidjtuhzPPMnv7N/RKkZjRL1Et92uIo+PHWp61OF ZCERdKo8i73T9PqB7qFSZtMWdBKlRvBSscURepfjXLEgg9uNT7chKvTyOV7Sr/C2 +uQp+Kj3nSIlfi5GRoGCmzv0wIWH0pQ+j7sRWJHVbXXyX856uFeqIfE54z7sZNVb VaD9Mfsv8TQM/woxR1Vb+vHm1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEL3OMy9 8X4Jru94gQcbC8ekOnWcMB8GA1UdIwQYMBaAFGzDhg2ph3g6UAVaUZOYMPfNHIJr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTYyMy9ERDZCNzUyODA2 MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFtSGVEcFFCVnBSazVndzk4MGNn bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JNT0dEYW1IZURwUUJWcFJrNWd3OTgwY2dtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTYyMy9ERDZCNzUyODA2MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFtSGVE cFFCVnBSazVndzk4MGNnbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqhKvgACSgQr5n26LPWm6fu1dZVDmTrxGEaowVbCfL9ipMQWrrmXBh iwABJJO765eLK+Udarb/DIw5Rx4FpF6vNbdA3zS2MEdf1Khvh/7O2XVYiwTGNFlF WGZVkm2ctHUCYhfHczp2BxW5pZTIBaP4lJsuv4Ppw6WpzgfUhWpNCJyAvjZbIgEw 6zZoR6e44lfFIw2DnnXWKaQLs1Ol0u/0Tt+PyCqSPz18EWvIKsnRvDZ5NG2pFuJ+ Yo/mmwly3cDaYkJS4nwSfShJD/k5Zk+1XtH2Thben+S0S62RE2Zp60wbAxkoKRlQ SzRJTXZZSHLzY+qjCnXd/E4aywuYE0A+ -----END CERTIFICATE-----Generated at Sun Jul 20 06:18:36 2025 by rpki-client