$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft File: bgopAGEwM5uDbSj3ABgC9xpaTkI.mft (raw, json) Hash identifier: mlSVY55FdJsvaW30N2MOuFu075PvrwNNmFR4NKvV4vc= Subject key identifier: 5C:56:3E:A3:9E:6F:BC:3E:DA:C9:30:6B:05:F9:44:22:01:0A:FC:19 Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 Certificate issuer: /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Certificate serial: 02F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft Manifest number: 02ED Signing time: Sat 05 Jul 2025 01:50:37 +0000 Manifest this update: Sat 05 Jul 2025 01:50:36 +0000 Manifest next update: Sat 12 Jul 2025 01:50:36 +0000 Files and hashes: 1: bgopAGEwM5uDbSj3ABgC9xpaTkI.crl (hash: MXkRrDz20QFciuRYgYmJcgACjgikQA7WZFQ9O5kfYP8=) 2: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (hash: rY7SQuVKgC/AxWbpxkoT7pJkBb/Nudv0kRr7++VnHvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166D1, serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Validity Not Before: Jul 5 01:50:36 2025 GMT Not After : Jul 12 01:50:36 2025 GMT Subject: CN=686884ec-c4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:68:9b:0d:f0:08:10:ce:65:78:53:3e:91: 0d:41:1d:c8:ff:3e:79:cb:44:25:09:84:67:31:6f: ef:0e:45:84:9f:72:c1:75:16:75:40:b0:bf:d8:78: 98:cd:d0:69:c7:af:ad:0f:e9:ff:5d:ab:52:e0:7b: ae:33:84:e0:35:d6:bc:91:27:ab:b6:d5:f7:2a:8b: 1b:42:c1:c2:11:c7:1c:85:13:1b:71:2f:6f:3a:4a: 32:4d:e2:c9:28:31:51:1b:10:ea:8d:42:4e:44:39: 2f:ae:cf:36:14:e2:de:db:ea:54:64:0e:d0:c4:29: fe:0e:9e:ba:48:59:26:5a:e4:31:c0:9d:77:b2:d8: d5:15:4f:90:98:79:6a:a0:40:71:d6:65:41:94:4a: db:16:12:ee:25:af:0f:35:00:a8:c2:77:65:9e:af: 7a:25:53:0c:a0:36:e5:52:71:0a:2f:4c:28:0c:10: ea:01:a9:31:4f:0e:eb:11:ab:cf:2c:9b:df:0b:ab: 22:9f:a6:c4:41:88:54:72:10:31:5d:78:ee:06:7e: 6c:b0:f1:6d:1f:3e:77:d5:30:11:51:1f:7d:e5:78: a9:c6:29:5a:e5:26:a2:a5:e9:f7:f3:0e:73:c0:21: dc:9a:c2:43:05:f5:10:db:90:a6:ac:31:80:8b:ee: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:56:3E:A3:9E:6F:BC:3E:DA:C9:30:6B:05:F9:44:22:01:0A:FC:19 X509v3 Authority Key Identifier: keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:06:a1:70:ae:78:ba:8c:c2:04:cc:bc:67:76:f2:98:5c:f2: 02:ad:5d:64:37:cd:7f:69:4f:ba:4b:a0:a0:24:c2:12:5e:1a: 47:cd:73:b5:25:27:f4:20:2a:3d:61:c8:2e:00:cf:c0:59:7b: eb:f9:e3:eb:bb:a0:03:19:b2:6c:62:c7:e9:dc:aa:e9:86:0e: 3b:02:87:a9:8e:81:8b:81:3a:20:eb:23:5e:9e:36:e0:23:4d: 63:0f:7f:f6:5a:65:4f:33:21:f5:42:ad:5d:8c:6a:eb:11:98: 58:ad:33:a0:33:db:65:84:7a:50:57:80:60:55:cc:6d:1d:1a: 96:64:f3:d1:2d:54:91:9d:78:43:d4:e4:78:fe:e6:bf:03:cd: 0e:6a:28:ee:a6:03:2f:45:c5:fb:54:09:bd:ac:62:38:70:de: 17:25:08:af:aa:1f:97:9a:e2:5e:60:c5:8f:b8:c0:0a:d6:94: 59:f8:05:37:8e:5c:ce:f6:69:60:f2:ae:b6:04:73:04:79:09: c0:fc:00:eb:ff:b6:b8:f0:0f:08:e5:2c:18:3e:80:8d:60:99: 27:07:2f:78:c3:99:c8:cc:4d:47:ee:f5:9f:91:1e:7b:6c:ae: 5f:9e:73:78:4a:3c:c4:e8:58:10:3e:bd:81:b5:0f:ff:8c:8a: 74:74:63:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RDExMTAvBgNVBAUTKDZFMEEyOTAwNjEzMDMzOUI4MzZEMjhGNzAwMTgwMkY3 MUE1QTRFNDIwHhcNMjUwNzA1MDE1MDM2WhcNMjUwNzEyMDE1MDM2WjAYMRYwFAYD VQQDEw02ODY4ODRlYy1jNGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4pomw3wCBDOZXhTPpENQR3I/z55y0QlCYRnMW/vDkWEn3LBdRZ1QLC/2HiY zdBpx6+tD+n/XatS4HuuM4TgNda8kSerttX3KosbQsHCEccchRMbcS9vOkoyTeLJ KDFRGxDqjUJORDkvrs82FOLe2+pUZA7QxCn+Dp66SFkmWuQxwJ13stjVFU+QmHlq oEBx1mVBlErbFhLuJa8PNQCowndlnq96JVMMoDblUnEKL0woDBDqAakxTw7rEavP LJvfC6sin6bEQYhUchAxXXjuBn5ssPFtHz531TARUR995Xipxila5Saipen38w5z wCHcmsJDBfUQ25CmrDGAi+5EeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxWPqOe b7w+2skwawX5RCIBCvwZMB8GA1UdIwQYMBaAFG4KKQBhMDObg20o9wAYAvcaWk5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZEMS9BQkRBNTE0MkU3 MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001dURiU2ozQUJnQzl4cGFU a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Jnb3BBR0V3TTV1RGJTajNBQmdDOXhwYVRrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZEMS9BQkRBNTE0MkU3MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001 dURiU2ozQUJnQzl4cGFUa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRBqFwrni6jMIEzLxndvKYXPICrV1kN81/aU+6S6CgJMISXhpHzXO1 JSf0ICo9YcguAM/AWXvr+ePru6ADGbJsYsfp3Krphg47AoepjoGLgTog6yNenjbg I01jD3/2WmVPMyH1Qq1djGrrEZhYrTOgM9tlhHpQV4BgVcxtHRqWZPPRLVSRnXhD 1OR4/ua/A80OaijupgMvRcX7VAm9rGI4cN4XJQivqh+XmuJeYMWPuMAK1pRZ+AU3 jlzO9mlg8q62BHMEeQnA/ADr/7a48A8I5SwYPoCNYJknBy94w5nIzE1H7vWfkR57 bK5fnnN4SjzE6FgQPr2BtQ//jIp0dGNl -----END CERTIFICATE-----Generated at Sat Jul 5 14:20:28 2025 by rpki-client