$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft File: bgopAGEwM5uDbSj3ABgC9xpaTkI.mft (raw, json) Hash identifier: xDGzGcWot2wsXPVVW140h7YLIY7u0UCCIpO7OZuwRmQ= Subject key identifier: 7D:F8:71:66:FF:A5:2C:D4:F2:38:CE:9E:60:7A:3C:DD:41:FE:8E:10 Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 Certificate issuer: /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Certificate serial: 02DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft Manifest number: 02DB Signing time: Sat 31 May 2025 01:32:19 +0000 Manifest this update: Sat 31 May 2025 01:32:19 +0000 Manifest next update: Sat 07 Jun 2025 01:32:19 +0000 Files and hashes: 1: bgopAGEwM5uDbSj3ABgC9xpaTkI.crl (hash: p0ITBqzy+/xhLXC6U/LN+56KLsIZUx0emsl98tEEi9g=) 2: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (hash: rY7SQuVKgC/AxWbpxkoT7pJkBb/Nudv0kRr7++VnHvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166D1, serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Validity Not Before: May 31 01:32:19 2025 GMT Not After : Jun 7 01:32:19 2025 GMT Subject: CN=683a5c23-8e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6a:23:a4:a6:b9:4f:e4:ab:78:bf:61:e4:b3: 56:3e:f2:5e:50:6c:b1:c5:25:ef:5f:64:54:08:5c: 5b:dd:49:90:16:99:f1:ff:53:ca:d3:f0:67:7f:ce: c6:20:fc:39:48:f5:db:7f:18:e7:b2:fe:9d:27:40: 1b:8a:75:28:21:14:b1:2d:fb:3b:ca:cf:8b:dc:7e: 73:b2:7d:74:e4:13:c6:34:80:bc:e2:50:db:96:8a: 7b:ea:86:2e:be:0a:9e:29:f8:4f:89:ff:fe:19:58: 24:cb:ed:04:04:1d:7a:79:9f:4b:32:7a:43:30:7d: e1:f5:df:67:69:82:6a:e6:51:d7:41:cb:02:57:c4: 4e:eb:01:a4:91:94:69:64:ef:23:92:be:b3:f9:63: 42:1d:16:92:0a:a9:b9:19:17:18:bb:69:fa:02:8d: e8:fc:b2:f2:e9:53:60:6e:44:ea:da:50:fe:48:87: df:3c:53:5f:90:38:70:49:7b:50:6b:5b:cf:e0:6a: 90:24:63:c8:07:ed:e0:88:d9:ec:43:6d:1c:12:f6: a6:4d:64:ea:80:7c:62:66:68:25:12:0e:51:b9:25: d2:60:95:0e:e3:b2:9b:af:7e:8c:21:49:0f:61:4b: 29:20:0f:44:e9:71:b6:a1:bb:06:5c:22:11:a7:6b: 3d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F8:71:66:FF:A5:2C:D4:F2:38:CE:9E:60:7A:3C:DD:41:FE:8E:10 X509v3 Authority Key Identifier: keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:52:08:32:32:dd:96:75:e9:cd:8d:14:29:11:cf:0f:d8:50: f0:86:f5:2c:22:d7:b0:af:45:2a:47:f3:a0:e7:fc:5c:9f:5f: 36:d7:72:9a:16:f2:64:f5:7e:79:e2:60:7b:c4:50:45:86:b5: c3:26:80:cb:60:cb:16:99:d5:28:8a:cb:07:14:e4:bc:54:94: 8a:12:5b:03:a7:08:d8:42:be:3e:04:e2:93:ad:76:7c:92:ea: 89:f1:93:38:dc:45:6c:66:ce:fb:4a:bd:bd:7a:f6:71:d7:8b: 66:0d:39:c6:bc:e7:af:91:58:85:ac:eb:b6:34:b9:84:16:e4: 69:ec:f3:d7:79:64:fb:d7:8f:45:0e:dd:46:50:d0:bf:fa:17: c0:81:9c:21:a6:e2:c5:dc:15:f1:fe:88:ab:f0:3a:eb:b1:26: bb:7f:19:0d:9e:1f:f5:12:7d:15:a3:b8:3d:45:e9:b3:2d:de: 0e:c2:b0:a6:1d:be:7c:cb:a0:16:70:c9:51:5e:10:a5:83:b2: 38:07:81:3f:f9:6c:65:2e:6d:4b:41:ee:7c:af:aa:e5:04:ca: 6f:34:72:d0:d9:03:15:c4:ae:8d:0c:90:b4:51:24:31:51:0b: 90:b7:ea:df:85:ff:2d:32:23:0d:48:ff:cf:81:47:a4:08:54: 5b:c3:ba:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RDExMTAvBgNVBAUTKDZFMEEyOTAwNjEzMDMzOUI4MzZEMjhGNzAwMTgwMkY3 MUE1QTRFNDIwHhcNMjUwNTMxMDEzMjE5WhcNMjUwNjA3MDEzMjE5WjAYMRYwFAYD VQQDEw02ODNhNWMyMy04ZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmojpKa5T+SreL9h5LNWPvJeUGyxxSXvX2RUCFxb3UmQFpnx/1PK0/Bnf87G IPw5SPXbfxjnsv6dJ0AbinUoIRSxLfs7ys+L3H5zsn105BPGNIC84lDblop76oYu vgqeKfhPif/+GVgky+0EBB16eZ9LMnpDMH3h9d9naYJq5lHXQcsCV8RO6wGkkZRp ZO8jkr6z+WNCHRaSCqm5GRcYu2n6Ao3o/LLy6VNgbkTq2lD+SIffPFNfkDhwSXtQ a1vP4GqQJGPIB+3giNnsQ20cEvamTWTqgHxiZmglEg5RuSXSYJUO47Kbr36MIUkP YUspIA9E6XG2obsGXCIRp2s9EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH34cWb/ pSzU8jjOnmB6PN1B/o4QMB8GA1UdIwQYMBaAFG4KKQBhMDObg20o9wAYAvcaWk5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZEMS9BQkRBNTE0MkU3 MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001dURiU2ozQUJnQzl4cGFU a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Jnb3BBR0V3TTV1RGJTajNBQmdDOXhwYVRrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZEMS9BQkRBNTE0MkU3MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001 dURiU2ozQUJnQzl4cGFUa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDUggyMt2WdenNjRQpEc8P2FDwhvUsItewr0UqR/Og5/xcn18213Ka FvJk9X554mB7xFBFhrXDJoDLYMsWmdUoissHFOS8VJSKElsDpwjYQr4+BOKTrXZ8 kuqJ8ZM43EVsZs77Sr29evZx14tmDTnGvOevkViFrOu2NLmEFuRp7PPXeWT7149F Dt1GUNC/+hfAgZwhpuLF3BXx/oir8DrrsSa7fxkNnh/1En0Vo7g9RemzLd4OwrCm Hb58y6AWcMlRXhClg7I4B4E/+WxlLm1LQe58r6rlBMpvNHLQ2QMVxK6NDJC0USQx UQuQt+rfhf8tMiMNSP/PgUekCFRbw7pj -----END CERTIFICATE-----Generated at Sat May 31 16:38:07 2025 by rpki-client