$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft File: bgopAGEwM5uDbSj3ABgC9xpaTkI.mft (raw, json) Hash identifier: 8rZ9KGY4Xrt/EHxjubQapvTQznQ5I0bJigw6GeBYBpo= Subject key identifier: 94:47:3A:04:A3:1B:41:CF:BD:C2:F9:87:72:0B:C1:CA:50:D3:ED:A3 Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 Certificate issuer: /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Certificate serial: 032F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft Manifest number: 032B Signing time: Mon 03 Nov 2025 01:01:47 +0000 Manifest this update: Mon 03 Nov 2025 01:01:47 +0000 Manifest next update: Mon 10 Nov 2025 01:01:47 +0000 Files and hashes: 1: bgopAGEwM5uDbSj3ABgC9xpaTkI.crl (hash: vK7w0rhrvZPj+MiXo8pMy6nj3/w6kZi8HHiY6ivnRmI=) 2: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (hash: rY7SQuVKgC/AxWbpxkoT7pJkBb/Nudv0kRr7++VnHvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 815 (0x32f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166D1, serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Validity Not Before: Nov 3 01:01:47 2025 GMT Not After : Nov 10 01:01:47 2025 GMT Subject: CN=6907fefb-9ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:d3:58:1c:a2:21:29:ea:7b:07:9c:ea:24: 2d:a1:65:e4:f1:ea:b1:bb:9a:07:59:0d:69:3a:6f: 84:04:40:6b:00:ec:e9:89:88:03:e6:4b:d3:3f:2b: 90:58:cd:5f:46:dc:25:42:78:cc:35:e4:83:2d:31: 84:c4:a7:29:53:e6:dd:20:ae:82:31:72:22:29:d3: 6c:ee:d0:7a:d5:e3:6d:ef:7c:34:3c:7b:52:b3:7b: ec:76:01:3a:c2:7c:5e:4a:3a:1f:14:5d:37:64:29: bf:de:d6:a1:7a:a3:aa:0c:0e:95:fb:3b:d5:ce:b0: bd:14:21:e4:ad:c6:63:b2:b6:bc:9a:19:de:b2:c0: e6:c8:3b:e2:b2:5d:78:c9:95:42:db:5b:b8:2f:56: 68:d3:14:89:0e:a4:45:92:97:d4:f0:4f:31:c5:9b: 75:d7:cd:c5:a9:bf:8d:32:2e:8e:f3:ce:4c:c4:93: 79:40:ff:09:65:ee:41:49:b2:81:3c:60:44:57:36: d4:03:38:91:23:8a:2b:99:ad:b6:85:56:90:19:17: 94:fc:56:e9:79:37:ed:6f:8d:08:72:49:3d:37:b0: fc:91:5c:76:d5:b9:0b:f0:77:dc:d6:ca:96:0d:00: d4:d1:8d:e7:ae:39:6c:21:f3:b0:a9:b3:6a:5c:f7: 88:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:47:3A:04:A3:1B:41:CF:BD:C2:F9:87:72:0B:C1:CA:50:D3:ED:A3 X509v3 Authority Key Identifier: keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:21:cc:2c:fe:87:3c:5c:1b:dc:a0:e7:fb:0c:91:c6:ac:38: c0:a8:a5:b5:5d:bd:bb:ed:eb:6d:51:d4:2f:ed:4a:2c:08:f0: 13:04:19:6b:f1:a0:40:0a:86:b0:d5:2d:e7:45:78:8f:7d:43: 39:04:06:30:b3:04:b8:68:be:05:99:78:6f:90:6f:fd:fc:b8: 7f:bc:ff:a7:eb:83:bf:f3:5c:54:b9:0b:79:09:d3:f6:2e:78: e7:3f:4f:b1:a5:a7:b0:79:34:e0:7d:d5:83:4e:a0:ef:d6:07: 43:57:29:55:c9:bf:25:62:18:4d:70:92:9a:93:d7:14:af:11: e6:90:32:04:92:5c:ad:07:fe:ca:e0:45:72:49:5c:6e:25:8c: 19:b7:fe:d1:90:e0:54:57:6c:f2:23:2a:0c:ce:d7:e0:70:a7: 58:ac:8d:5d:ec:5e:58:99:42:6b:2b:cc:7e:70:ee:26:f9:d9: cc:08:71:fe:6d:98:ca:17:ef:d0:14:e1:17:39:35:70:c1:a6: c3:c5:72:49:0f:7b:d5:d1:35:ca:d9:d4:f4:88:5e:89:e2:7c: 3a:b9:5d:49:a3:78:3b:21:88:e1:5a:76:26:f4:da:ef:e3:18: e9:60:0d:38:46:4f:39:9e:b5:01:aa:60:6f:78:dc:55:53:a0: 86:96:bf:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RDExMTAvBgNVBAUTKDZFMEEyOTAwNjEzMDMzOUI4MzZEMjhGNzAwMTgwMkY3 MUE1QTRFNDIwHhcNMjUxMTAzMDEwMTQ3WhcNMjUxMTEwMDEwMTQ3WjAYMRYwFAYD VQQDEw02OTA3ZmVmYi05ZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwbTWByiISnqewec6iQtoWXk8eqxu5oHWQ1pOm+EBEBrAOzpiYgD5kvTPyuQ WM1fRtwlQnjMNeSDLTGExKcpU+bdIK6CMXIiKdNs7tB61eNt73w0PHtSs3vsdgE6 wnxeSjofFF03ZCm/3taheqOqDA6V+zvVzrC9FCHkrcZjsra8mhnessDmyDvisl14 yZVC21u4L1Zo0xSJDqRFkpfU8E8xxZt1183Fqb+NMi6O885MxJN5QP8JZe5BSbKB PGBEVzbUAziRI4orma22hVaQGReU/FbpeTftb40Ickk9N7D8kVx21bkL8Hfc1sqW DQDU0Y3nrjlsIfOwqbNqXPeI0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRHOgSj G0HPvcL5h3ILwcpQ0+2jMB8GA1UdIwQYMBaAFG4KKQBhMDObg20o9wAYAvcaWk5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZEMS9BQkRBNTE0MkU3 MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001dURiU2ozQUJnQzl4cGFU a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Jnb3BBR0V3TTV1RGJTajNBQmdDOXhwYVRrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZEMS9BQkRBNTE0MkU3MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001 dURiU2ozQUJnQzl4cGFUa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHIcws/oc8XBvcoOf7DJHGrDjAqKW1Xb277ettUdQv7UosCPATBBlr 8aBACoaw1S3nRXiPfUM5BAYwswS4aL4FmXhvkG/9/Lh/vP+n64O/81xUuQt5CdP2 LnjnP0+xpaeweTTgfdWDTqDv1gdDVylVyb8lYhhNcJKak9cUrxHmkDIEklytB/7K 4EVySVxuJYwZt/7RkOBUV2zyIyoMztfgcKdYrI1d7F5YmUJrK8x+cO4m+dnMCHH+ bZjKF+/QFOEXOTVwwabDxXJJD3vV0TXK2dT0iF6J4nw6uV1Jo3g7IYjhWnYm9Nrv 4xjpYA04Rk85nrUBqmBveNxVU6CGlr9u -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:44 2025 by rpki-client