$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft File: bgopAGEwM5uDbSj3ABgC9xpaTkI.mft (raw, json) Hash identifier: GWzLa/XB9aCbZ4HuVjJODMXAvJlJ46JLhpSZX27IO54= Subject key identifier: 04:82:FD:56:22:25:47:F5:F0:36:44:41:1D:25:86:6B:ED:89:4A:E1 Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 Certificate issuer: /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Certificate serial: 0318 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft Manifest number: 0314 Signing time: Fri 19 Sep 2025 01:35:08 +0000 Manifest this update: Fri 19 Sep 2025 01:35:08 +0000 Manifest next update: Fri 26 Sep 2025 01:35:08 +0000 Files and hashes: 1: bgopAGEwM5uDbSj3ABgC9xpaTkI.crl (hash: G2ZGoaa+qcj32PbvNAcinp1Xd8QgIMK9xu9bN0wGxH0=) 2: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (hash: rY7SQuVKgC/AxWbpxkoT7pJkBb/Nudv0kRr7++VnHvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 792 (0x318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166D1, serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Validity Not Before: Sep 19 01:35:08 2025 GMT Not After : Sep 26 01:35:08 2025 GMT Subject: CN=68ccb34c-a5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:22:ef:6b:65:5b:fd:1a:45:7e:90:e5:ee:85: 7b:43:33:f8:dd:f5:77:2b:38:6b:56:38:83:c0:62: e6:ed:56:e3:2a:ca:12:1a:20:e5:85:1f:da:0d:2f: 18:d8:ba:d3:e9:c6:be:9e:2d:48:66:ed:bc:02:5d: d6:6f:34:eb:f3:de:a7:b8:b9:f7:f3:ad:a2:33:ea: db:81:5e:2b:64:e4:a2:9b:e8:09:9e:01:8e:fc:21: 6e:cf:15:cd:74:f6:32:2b:67:3b:b3:2a:c6:3c:23: 82:af:89:5a:a4:02:c8:20:99:1a:ab:82:bb:d8:9a: d5:2f:ce:fe:01:56:e6:26:15:9d:97:49:60:e0:6b: 70:3f:44:a2:15:32:d9:17:06:10:04:4b:9e:fb:8f: bb:a7:a1:07:b7:32:95:28:cc:cb:40:68:cc:2e:6a: 3c:5e:9b:f7:2b:44:79:6a:4d:45:f2:61:60:81:eb: 7c:10:34:74:52:86:9a:eb:ac:90:ad:bb:a1:e7:91: 05:63:da:ed:d1:08:b9:31:76:c6:0e:51:b5:dd:b8: 60:db:c5:1c:7f:7d:37:53:1b:6f:05:26:8f:84:ea: 16:a7:0e:fd:13:59:11:bf:77:55:8b:2e:87:73:d6: 84:e4:6f:2e:3a:43:77:18:94:8b:60:94:15:93:b5: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:82:FD:56:22:25:47:F5:F0:36:44:41:1D:25:86:6B:ED:89:4A:E1 X509v3 Authority Key Identifier: keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:2a:d3:e1:14:b6:7e:c4:e1:63:cc:5f:04:04:76:57:fc:77: 7c:a9:51:57:66:8b:50:f8:de:dd:1b:a3:73:ee:4c:bc:df:c1: 75:6c:fa:a5:a5:c6:6e:28:0c:a6:3e:24:57:ef:6b:17:db:db: b6:36:ed:43:99:e7:00:10:25:c9:a7:f2:76:6d:62:25:ec:30: 1d:1c:55:d9:5e:d0:33:56:be:98:b6:de:86:0e:16:d5:3c:4b: a5:f1:3b:3c:b8:8d:ba:42:c2:e7:44:f4:a9:fe:38:22:84:7e: 66:e8:ef:86:2e:80:44:87:b3:87:77:14:cb:1a:2d:44:82:43: 66:d4:d9:13:bf:19:3b:dd:ec:89:51:c4:35:94:71:f5:c6:4f: 47:fb:af:52:4d:e1:20:c4:b0:b2:c7:99:e6:d4:9b:e0:09:d1: 39:94:20:9d:0f:72:40:b8:55:a2:eb:64:89:f2:0c:4c:02:31: 64:6a:1a:3f:17:e9:65:49:14:df:90:b8:8a:d8:22:40:13:32: 95:ac:03:8c:ad:04:1c:cf:79:e7:ce:13:22:ce:a6:42:f3:34: 15:68:a3:c7:1d:60:8d:15:a3:3d:b9:85:5f:22:df:e6:3d:a3: 1b:bb:51:91:fc:71:45:88:ed:2e:f7:c1:b2:85:60:40:1b:33: 52:70:09:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RDExMTAvBgNVBAUTKDZFMEEyOTAwNjEzMDMzOUI4MzZEMjhGNzAwMTgwMkY3 MUE1QTRFNDIwHhcNMjUwOTE5MDEzNTA4WhcNMjUwOTI2MDEzNTA4WjAYMRYwFAYD VQQDEw02OGNjYjM0Yy1hNWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCLva2Vb/RpFfpDl7oV7QzP43fV3KzhrVjiDwGLm7VbjKsoSGiDlhR/aDS8Y 2LrT6ca+ni1IZu28Al3WbzTr896nuLn3862iM+rbgV4rZOSim+gJngGO/CFuzxXN dPYyK2c7syrGPCOCr4lapALIIJkaq4K72JrVL87+AVbmJhWdl0lg4GtwP0SiFTLZ FwYQBEue+4+7p6EHtzKVKMzLQGjMLmo8Xpv3K0R5ak1F8mFgget8EDR0Uoaa66yQ rbuh55EFY9rt0Qi5MXbGDlG13bhg28Ucf303UxtvBSaPhOoWpw79E1kRv3dViy6H c9aE5G8uOkN3GJSLYJQVk7VXFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASC/VYi JUf18DZEQR0lhmvtiUrhMB8GA1UdIwQYMBaAFG4KKQBhMDObg20o9wAYAvcaWk5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZEMS9BQkRBNTE0MkU3 MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001dURiU2ozQUJnQzl4cGFU a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Jnb3BBR0V3TTV1RGJTajNBQmdDOXhwYVRrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZEMS9BQkRBNTE0MkU3MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001 dURiU2ozQUJnQzl4cGFUa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDKtPhFLZ+xOFjzF8EBHZX/Hd8qVFXZotQ+N7dG6Nz7ky838F1bPql pcZuKAymPiRX72sX29u2Nu1DmecAECXJp/J2bWIl7DAdHFXZXtAzVr6Ytt6GDhbV PEul8Ts8uI26QsLnRPSp/jgihH5m6O+GLoBEh7OHdxTLGi1EgkNm1NkTvxk73eyJ UcQ1lHH1xk9H+69STeEgxLCyx5nm1JvgCdE5lCCdD3JAuFWi62SJ8gxMAjFkaho/ F+llSRTfkLiK2CJAEzKVrAOMrQQcz3nnzhMizqZC8zQVaKPHHWCNFaM9uYVfIt/m PaMbu1GR/HFFiO0u98GyhWBAGzNScAm+ -----END CERTIFICATE-----Generated at Fri Sep 19 03:56:56 2025 by rpki-client