$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft File: bgopAGEwM5uDbSj3ABgC9xpaTkI.mft (raw, json) Hash identifier: Yw2ZJByc8TjMewB3Ta3FHl6p4qPBms9f3f3dnF9rP/I= Subject key identifier: 8E:67:0A:3A:00:4F:FD:3A:DC:DD:BF:6B:23:B2:C1:A3:04:54:FA:9E Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 Certificate issuer: /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Certificate serial: 030A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft Manifest number: 0306 Signing time: Sat 23 Aug 2025 01:27:43 +0000 Manifest this update: Sat 23 Aug 2025 01:27:43 +0000 Manifest next update: Sat 30 Aug 2025 01:27:43 +0000 Files and hashes: 1: bgopAGEwM5uDbSj3ABgC9xpaTkI.crl (hash: nZ5neRoRkEw3y9hKJdAdcoSb1oxkBEOmbqwoDqWzxT8=) 2: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (hash: rY7SQuVKgC/AxWbpxkoT7pJkBb/Nudv0kRr7++VnHvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 778 (0x30a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166D1, serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Validity Not Before: Aug 23 01:27:43 2025 GMT Not After : Aug 30 01:27:43 2025 GMT Subject: CN=68a9190f-52b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:4d:a8:e0:3b:41:fa:bb:c6:bc:94:1f:3d: 82:13:ab:37:d1:43:91:63:b5:24:f4:13:4a:66:e7: 18:1f:28:b3:55:c8:a9:0d:56:43:0e:b6:41:0f:c7: 83:1c:db:9d:a6:52:28:01:56:ed:be:5a:f1:f2:db: 83:41:f5:6b:6a:ee:25:48:b9:33:f7:fa:31:5c:07: 1b:14:11:2b:8c:3f:1a:0a:c2:dc:0f:5b:3f:dd:8b: 2c:0b:23:ad:76:56:c6:2b:52:a0:3f:e0:e5:c2:cb: 03:d6:ef:7b:d1:92:00:cb:03:fd:c4:15:86:c1:4d: 41:b4:b8:00:6b:26:83:97:51:1d:91:7c:f9:90:32: 95:b9:6f:73:05:2c:06:40:3c:40:e4:12:7e:b4:32: 5b:09:73:06:78:76:19:b7:2b:b4:a2:8f:4e:29:a0: f4:f6:6d:64:de:9e:c5:47:76:49:ec:7a:6a:68:4c: 1d:ec:a2:43:d4:52:f5:8f:5c:0b:a0:9f:01:5a:fa: d5:0a:36:1a:13:86:db:0f:48:92:c5:1f:68:00:54: f1:64:46:fe:6c:c5:f0:e4:d3:e9:2f:a4:d9:c6:45: fc:16:1b:63:29:45:05:10:77:43:1a:c0:cc:2e:c6: 51:8b:b4:8f:70:1e:7a:03:05:96:30:09:02:af:15: 20:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:67:0A:3A:00:4F:FD:3A:DC:DD:BF:6B:23:B2:C1:A3:04:54:FA:9E X509v3 Authority Key Identifier: keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2b:b6:ca:b3:f9:f4:a7:82:a6:f5:71:f1:f2:ca:7f:4d:42: 3c:93:83:b3:d3:28:87:f8:16:01:ea:ad:4f:7e:b6:f9:42:0c: 28:25:73:08:63:c3:12:59:93:b9:72:94:56:e3:05:55:76:b2: eb:ac:4f:c7:64:39:7b:23:f7:1c:74:d3:1e:4b:6a:6a:b3:64: 0f:2a:cf:20:7f:7c:f0:13:5b:60:27:12:e9:9f:78:3e:57:bf: 9b:81:60:4d:c3:5a:31:a3:25:b2:b6:e4:14:3d:e8:52:ab:3b: 56:aa:0a:e8:38:b5:bd:7a:cb:94:20:f8:4c:04:85:4a:c0:c4: 28:f9:aa:8d:04:fc:58:fb:3a:ac:57:dd:7a:eb:e2:fe:1f:9a: 85:9e:31:8c:a2:8e:16:16:a0:18:28:b4:36:ed:a7:1b:ac:ca: ef:26:92:1d:80:1a:0a:a9:36:14:d5:3a:f5:0a:8f:28:4f:8b: ef:62:99:c8:18:3a:e4:94:e1:c3:b4:a8:13:de:e7:92:78:ad: d2:87:e2:8f:62:f5:76:c1:3a:04:6d:69:fb:f3:72:a3:6e:74: 97:14:43:74:17:98:5d:88:33:25:fd:d6:75:0e:84:f1:95:90: 62:2f:d0:a9:f6:51:a0:4d:7b:52:1a:93:ad:3d:f9:8f:f0:19: 7e:09:d4:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RDExMTAvBgNVBAUTKDZFMEEyOTAwNjEzMDMzOUI4MzZEMjhGNzAwMTgwMkY3 MUE1QTRFNDIwHhcNMjUwODIzMDEyNzQzWhcNMjUwODMwMDEyNzQzWjAYMRYwFAYD VQQDEw02OGE5MTkwZi01MmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJtNqOA7Qfq7xryUHz2CE6s30UORY7Uk9BNKZucYHyizVcipDVZDDrZBD8eD HNudplIoAVbtvlrx8tuDQfVrau4lSLkz9/oxXAcbFBErjD8aCsLcD1s/3YssCyOt dlbGK1KgP+DlwssD1u970ZIAywP9xBWGwU1BtLgAayaDl1EdkXz5kDKVuW9zBSwG QDxA5BJ+tDJbCXMGeHYZtyu0oo9OKaD09m1k3p7FR3ZJ7HpqaEwd7KJD1FL1j1wL oJ8BWvrVCjYaE4bbD0iSxR9oAFTxZEb+bMXw5NPpL6TZxkX8FhtjKUUFEHdDGsDM LsZRi7SPcB56AwWWMAkCrxUgawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5nCjoA T/063N2/ayOywaMEVPqeMB8GA1UdIwQYMBaAFG4KKQBhMDObg20o9wAYAvcaWk5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZEMS9BQkRBNTE0MkU3 MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001dURiU2ozQUJnQzl4cGFU a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Jnb3BBR0V3TTV1RGJTajNBQmdDOXhwYVRrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZEMS9BQkRBNTE0MkU3MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001 dURiU2ozQUJnQzl4cGFUa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOK7bKs/n0p4Km9XHx8sp/TUI8k4Oz0yiH+BYB6q1Pfrb5QgwoJXMI Y8MSWZO5cpRW4wVVdrLrrE/HZDl7I/ccdNMeS2pqs2QPKs8gf3zwE1tgJxLpn3g+ V7+bgWBNw1oxoyWytuQUPehSqztWqgroOLW9esuUIPhMBIVKwMQo+aqNBPxY+zqs V9166+L+H5qFnjGMoo4WFqAYKLQ27acbrMrvJpIdgBoKqTYU1Tr1Co8oT4vvYpnI GDrklOHDtKgT3ueSeK3Sh+KPYvV2wToEbWn783KjbnSXFEN0F5hdiDMl/dZ1DoTx lZBiL9Cp9lGgTXtSGpOtPfmP8Bl+CdQm -----END CERTIFICATE-----Generated at Sat Aug 23 21:05:16 2025 by rpki-client