$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft File: bgopAGEwM5uDbSj3ABgC9xpaTkI.mft (raw, json) Hash identifier: j3ppw8RNhPfs10yzDO83HVgIjMzQ1ngt0ZuNqa6HcnU= Subject key identifier: 39:AE:AB:1D:4C:93:21:A4:EC:F0:8E:20:60:4F:25:BE:A9:39:FF:8A Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 Certificate issuer: /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Certificate serial: 02D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft Manifest number: 02D2 Signing time: Thu 15 May 2025 01:22:54 +0000 Manifest this update: Thu 15 May 2025 01:22:53 +0000 Manifest next update: Thu 22 May 2025 01:22:53 +0000 Files and hashes: 1: bgopAGEwM5uDbSj3ABgC9xpaTkI.crl (hash: b3wy4w8Bz/YZIxU9V6Z4sSpExzyLT8QWihgKE9/5Y84=) 2: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (hash: mDMM1HWL4v8E6URAbVQH/swVIK5fppcG8TmZuHg6PMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166D1, serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Validity Not Before: May 15 01:22:53 2025 GMT Not After : May 22 01:22:53 2025 GMT Subject: CN=682541ee-b1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:0b:d6:c3:ec:67:da:5d:e1:21:51:c3:1a: cd:66:df:2e:06:fb:ae:e4:a7:e7:45:29:8d:11:5f: ef:96:76:6b:86:b1:13:69:74:44:f1:92:ce:e9:09: 9a:31:32:68:88:f8:19:77:bf:26:97:a0:49:6f:81: 22:5a:56:f1:43:ab:b9:ee:a9:7a:9f:59:8f:8a:b1: fc:66:03:cc:48:c4:97:46:37:35:98:bc:f7:a1:4d: 6d:1c:b5:8f:26:a3:1d:7f:50:5e:0f:cd:54:72:d3: d3:c2:2c:3b:72:4b:03:86:9a:87:37:86:20:79:3b: 6a:71:00:49:12:01:1d:71:57:db:8d:c0:ef:36:67: 4c:5d:58:28:00:04:98:54:bc:c0:7c:c5:1d:c4:54: e4:7e:60:ee:9e:e4:88:c5:27:e0:6d:dc:86:be:e2: 56:a4:e8:3b:f4:6b:4b:f8:23:b8:f3:6f:e2:80:a2: 84:41:53:59:33:b8:d1:dd:1a:fd:05:5d:60:18:61: 29:c0:d6:83:79:73:d3:f4:1a:57:9d:2a:77:77:b1: bf:32:4f:ab:38:61:ab:30:1e:6a:b1:cb:05:a8:e1: 8a:50:5c:d5:cf:0a:5f:b0:b8:4e:56:b2:64:ab:60: 66:53:e0:35:5b:fb:3b:19:7e:a3:c7:2f:40:43:29: 53:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AE:AB:1D:4C:93:21:A4:EC:F0:8E:20:60:4F:25:BE:A9:39:FF:8A X509v3 Authority Key Identifier: keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:32:89:11:81:48:c0:eb:5a:56:66:bb:39:36:9b:81:18:b3: 84:6c:7b:b9:7d:dd:b5:84:b9:b1:f5:03:78:0b:9c:84:e3:49: 37:d0:b2:7b:9d:b4:4d:83:eb:0d:8b:30:40:0e:fa:73:b4:04: 1d:82:e0:29:ba:2a:2f:d0:ac:39:45:df:46:96:35:8e:74:7a: 17:1a:0a:d3:d8:aa:67:03:23:97:5c:76:19:9d:2d:a9:cf:00: f8:79:d8:6b:5b:f3:b1:79:f1:ba:92:7a:8e:20:20:10:1f:45: 8e:c8:4f:86:89:2b:c0:04:d3:58:02:16:83:07:82:c9:56:12: 96:75:6d:dc:db:cf:51:94:ee:fe:67:20:02:06:fe:be:54:97: b5:d3:a4:c8:42:e3:12:7c:e3:b4:af:18:59:7f:30:fd:08:5c: 7d:66:ab:07:86:38:48:75:61:e0:a3:ce:e5:bc:ae:4d:48:f9: 29:31:b6:49:0e:de:c1:24:cd:c8:14:17:0e:cf:74:e2:94:c5: ab:ec:55:12:09:44:da:44:35:68:fd:b6:69:b9:5c:d0:f4:d5: ec:ba:b8:a5:f8:9a:15:a7:8b:11:f3:a5:70:c3:0c:7b:04:c5: ac:4b:da:73:ee:98:67:5a:a6:75:2c:29:0d:7f:c9:1b:df:8a: 7e:1e:66:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RDExMTAvBgNVBAUTKDZFMEEyOTAwNjEzMDMzOUI4MzZEMjhGNzAwMTgwMkY3 MUE1QTRFNDIwHhcNMjUwNTE1MDEyMjUzWhcNMjUwNTIyMDEyMjUzWjAYMRYwFAYD VQQDEw02ODI1NDFlZS1iMWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgoL1sPsZ9pd4SFRwxrNZt8uBvuu5KfnRSmNEV/vlnZrhrETaXRE8ZLO6Qma MTJoiPgZd78ml6BJb4EiWlbxQ6u57ql6n1mPirH8ZgPMSMSXRjc1mLz3oU1tHLWP JqMdf1BeD81UctPTwiw7cksDhpqHN4YgeTtqcQBJEgEdcVfbjcDvNmdMXVgoAASY VLzAfMUdxFTkfmDunuSIxSfgbdyGvuJWpOg79GtL+CO482/igKKEQVNZM7jR3Rr9 BV1gGGEpwNaDeXPT9BpXnSp3d7G/Mk+rOGGrMB5qscsFqOGKUFzVzwpfsLhOVrJk q2BmU+A1W/s7GX6jxy9AQylTzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmuqx1M kyGk7PCOIGBPJb6pOf+KMB8GA1UdIwQYMBaAFG4KKQBhMDObg20o9wAYAvcaWk5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZEMS9BQkRBNTE0MkU3 MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001dURiU2ozQUJnQzl4cGFU a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Jnb3BBR0V3TTV1RGJTajNBQmdDOXhwYVRrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZEMS9BQkRBNTE0MkU3MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001 dURiU2ozQUJnQzl4cGFUa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPMokRgUjA61pWZrs5NpuBGLOEbHu5fd21hLmx9QN4C5yE40k30LJ7 nbRNg+sNizBADvpztAQdguApuiov0Kw5Rd9GljWOdHoXGgrT2KpnAyOXXHYZnS2p zwD4edhrW/OxefG6knqOICAQH0WOyE+GiSvABNNYAhaDB4LJVhKWdW3c289RlO7+ ZyACBv6+VJe106TIQuMSfOO0rxhZfzD9CFx9ZqsHhjhIdWHgo87lvK5NSPkpMbZJ Dt7BJM3IFBcOz3TilMWr7FUSCUTaRDVo/bZpuVzQ9NXsuril+JoVp4sR86Vwwwx7 BMWsS9pz7phnWqZ1LCkNf8kb34p+Hma1 -----END CERTIFICATE-----Generated at Thu May 15 08:03:20 2025 by rpki-client