$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft File: Bats53QFyQRH8nu2EgCypDHeStw.mft (raw, json) Hash identifier: eiAr8UndjCM1Mv2T2V4HfEbCv6pw+NXlYFKYyxmyLYQ= Subject key identifier: 3B:8B:E2:F9:35:0D:98:9E:46:72:97:3B:FD:F7:53:60:11:95:98:A6 Authority key identifier: 05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC Certificate issuer: /CN=A9131589/serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC Certificate serial: 0291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft Manifest number: 0291 Signing time: Mon 21 Jul 2025 01:54:30 +0000 Manifest this update: Mon 21 Jul 2025 01:54:29 +0000 Manifest next update: Mon 28 Jul 2025 01:54:29 +0000 Files and hashes: 1: Bats53QFyQRH8nu2EgCypDHeStw.crl (hash: 5SGAKsKtPvZdvYTDKKNMWAfC6Q9RP7omaqpMInX7Hok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC Validity Not Before: Jul 21 01:54:29 2025 GMT Not After : Jul 28 01:54:29 2025 GMT Subject: CN=687d9dd5-6fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:b3:b1:13:2f:e8:1b:9e:92:32:74:ef:c0: 77:4a:2d:f4:c1:c6:33:5f:bc:39:b1:ea:ff:f0:27: 8e:dc:8e:ed:ab:d4:9f:dd:38:a4:9a:67:13:99:d6: 4d:fb:90:74:1f:8e:be:1d:44:80:a8:33:d4:e9:ef: 6e:62:ab:99:9e:b6:d8:02:8f:15:da:72:6d:7e:59: 09:28:a4:16:fd:62:57:cf:2c:9a:21:a2:0e:86:3d: e5:a8:a2:78:5a:ae:65:7a:a1:3c:83:aa:94:d9:5f: 2e:99:d3:37:b6:a0:34:17:02:b9:14:09:d5:7e:38: ab:6f:64:d7:85:47:6c:bf:b1:84:62:60:8e:be:70: df:40:aa:3b:8b:29:70:f2:ac:96:40:3c:cb:69:66: af:04:90:46:3d:75:d6:c3:9c:5c:8e:e7:b8:3b:f5: 6e:e2:4a:8e:cf:fc:b1:88:5c:4b:85:7e:20:40:66: 6f:8e:7e:3d:43:64:aa:f3:07:da:68:f9:63:63:af: c0:f1:a1:41:0a:e4:0d:4b:1b:c1:21:63:da:a0:75: 18:f0:c7:d6:a5:9b:58:56:c2:e5:45:80:ac:f3:4f: 7e:8b:e7:b2:b3:b3:c9:9d:de:48:23:b3:8a:23:a5: 19:05:7f:0c:2a:0f:85:52:09:3d:59:be:84:76:6f: ce:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8B:E2:F9:35:0D:98:9E:46:72:97:3B:FD:F7:53:60:11:95:98:A6 X509v3 Authority Key Identifier: keyid:05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:b5:d6:f4:9e:36:8d:6d:7e:d6:68:8a:ba:64:55:86:52:c1: ce:fa:1a:d6:08:82:21:c9:3b:67:0e:e0:ee:bb:47:fe:de:b9: a5:ce:c4:bd:eb:40:9d:55:af:64:b3:78:13:51:13:b6:35:9c: 93:44:b2:ad:4a:81:c8:3e:4c:47:17:50:e7:c8:5e:9e:67:5d: 25:24:01:06:6b:24:00:87:bd:39:50:37:b5:5b:20:f3:62:60: c0:a3:76:17:80:09:d2:49:32:62:bc:1d:1e:4f:37:ac:af:39: ef:a6:73:03:69:56:43:78:43:9e:f2:d2:a5:dd:b0:c4:3d:43: 60:34:d1:ac:67:4b:e7:41:65:5f:73:f0:74:06:b7:24:fd:51: 85:04:83:16:cc:9b:4c:b4:ac:fe:52:d7:40:9c:e8:a0:2e:7c: 85:08:fe:bd:17:79:f4:8f:d2:bb:96:1c:7c:87:0a:b1:d2:59: 71:30:20:3a:ae:ff:7c:a5:00:55:12:e2:42:02:36:ae:91:14: 29:ac:6e:5d:75:76:05:bc:8a:d4:3d:82:33:4b:d9:39:96:e2: 90:67:14:d8:5c:51:49:ad:87:bc:5f:44:21:a5:fd:35:c2:2e: 1a:8d:4a:06:60:1a:69:00:f9:b3:d5:70:fa:37:a8:da:ec:42: c3:91:db:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKDA1QUI2Q0U3NzQwNUM5MDQ0N0YyN0JCNjEyMDBCMkE0 MzFERTRBREMwHhcNMjUwNzIxMDE1NDI5WhcNMjUwNzI4MDE1NDI5WjAYMRYwFAYD VQQDEw02ODdkOWRkNS02ZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM2zsRMv6BuekjJ078B3Si30wcYzX7w5ser/8CeO3I7tq9Sf3TikmmcTmdZN +5B0H46+HUSAqDPU6e9uYquZnrbYAo8V2nJtflkJKKQW/WJXzyyaIaIOhj3lqKJ4 Wq5leqE8g6qU2V8umdM3tqA0FwK5FAnVfjirb2TXhUdsv7GEYmCOvnDfQKo7iylw 8qyWQDzLaWavBJBGPXXWw5xcjue4O/Vu4kqOz/yxiFxLhX4gQGZvjn49Q2Sq8wfa aPljY6/A8aFBCuQNSxvBIWPaoHUY8MfWpZtYVsLlRYCs809+i+eys7PJnd5II7OK I6UZBX8MKg+FUgk9Wb6Edm/OLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuL4vk1 DZieRnKXO/33U2ARlZimMB8GA1UdIwQYMBaAFAWrbOd0BckER/J7thIAsqQx3krc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS80MTU4NDYzQTBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi9CYXRzNTNRRnlRUkg4bnUyRWdDeXBESGVT dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhdHM1M1FGeVFSSDhudTJFZ0N5cERIZVN0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS80MTU4NDYzQTBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi9CYXRzNTNRRnlR Ukg4bnUyRWdDeXBESGVTdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwtdb0njaNbX7WaIq6ZFWGUsHO+hrWCIIhyTtnDuDuu0f+3rmlzsS9 60CdVa9ks3gTURO2NZyTRLKtSoHIPkxHF1DnyF6eZ10lJAEGayQAh705UDe1WyDz YmDAo3YXgAnSSTJivB0eTzesrznvpnMDaVZDeEOe8tKl3bDEPUNgNNGsZ0vnQWVf c/B0Brck/VGFBIMWzJtMtKz+UtdAnOigLnyFCP69F3n0j9K7lhx8hwqx0llxMCA6 rv98pQBVEuJCAjaukRQprG5ddXYFvIrUPYIzS9k5luKQZxTYXFFJrYe8X0Qhpf01 wi4ajUoGYBppAPmz1XD6N6ja7ELDkdvr -----END CERTIFICATE-----Generated at Wed Jul 23 02:31:17 2025 by rpki-client