$ rpki-client -vvf rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft File: bailJkp9xvzYjT1M3PSGecJi9w4.mft (raw, json) Hash identifier: GEHsqSantboPVVkpYtonOvNGtvvbZjZSVG67Vn5/wm8= Subject key identifier: 03:83:55:E3:95:F7:01:F4:FA:47:A9:26:9A:A4:50:8F:E8:93:F6:32 Authority key identifier: 6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E Certificate issuer: /CN=A916F536/serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Certificate serial: 03E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft Manifest number: 03E0 Signing time: Sat 19 Jul 2025 00:57:55 +0000 Manifest this update: Sat 19 Jul 2025 00:57:55 +0000 Manifest next update: Sat 26 Jul 2025 00:57:55 +0000 Files and hashes: 1: bailJkp9xvzYjT1M3PSGecJi9w4.crl (hash: fGlZZ2uDCUw7vjwhjGMfmTV7yfqTE8NlnXu5ibcOMKQ=) 2: 07C387B6898E11EC9543A60FC4F9AE02.roa (hash: Z8nOZSdO25Utl4pPDw4ubtfpNujKkQIc0psO5bVfVdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 996 (0x3e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F536, serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Validity Not Before: Jul 19 00:57:55 2025 GMT Not After : Jul 26 00:57:55 2025 GMT Subject: CN=687aed93-8d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:27:4e:e7:77:c0:ed:a6:9e:bd:94:c9:ed:c4: 75:53:ef:b1:be:6b:9b:4d:f8:a8:97:fc:82:24:ac: 77:b6:71:e2:25:4d:fb:8b:96:4b:02:31:3c:81:e7: 49:d3:c2:08:76:9e:fc:81:2b:42:be:5c:22:86:b5: a6:57:b7:e0:9c:07:ce:d0:9e:75:f2:09:8b:d0:44: f6:67:5e:94:4b:25:b3:e6:ea:b6:4c:05:f9:ea:d7: 85:ec:44:cd:4d:f8:7a:47:fa:ff:59:e4:2e:4b:f5: 92:ad:09:9b:b9:83:92:ab:fe:a0:76:eb:ca:93:f2: b5:1b:36:4b:4a:27:41:68:6e:6f:2d:d7:7b:2c:07: c9:07:a0:98:c2:53:9c:82:db:c7:de:06:f4:53:66: b2:17:e9:7b:83:22:3a:24:61:4a:f5:83:97:bf:6f: d4:cd:45:85:10:93:b9:1d:b4:60:08:d7:12:5a:e4: 9e:91:27:33:97:f3:24:eb:d4:13:aa:72:db:c8:60: 1d:6d:c6:1e:e4:cb:f4:92:c8:0b:49:3c:22:81:ad: f4:cc:90:6e:69:9f:c2:84:f3:ef:c2:a4:c3:6b:73: 2a:b9:99:36:d7:6c:c7:83:65:f8:16:95:46:cf:49: 54:a5:c9:52:9f:26:db:21:45:6a:4b:44:c8:c1:50: c1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:83:55:E3:95:F7:01:F4:FA:47:A9:26:9A:A4:50:8F:E8:93:F6:32 X509v3 Authority Key Identifier: keyid:6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:6a:d6:6a:31:38:c7:80:52:26:08:2f:d2:b7:92:dc:fb:96: 4d:55:2d:99:61:d7:e2:db:8e:ae:1a:80:36:6c:e7:f6:97:82: d4:61:09:bc:8c:9a:69:e3:ed:02:03:b7:ce:5b:66:62:d5:72: 59:a6:cc:fc:cd:9d:c9:46:08:fe:91:41:84:e8:66:76:d4:ad: 79:27:f5:f9:ba:1c:1c:90:b7:7a:e0:d6:00:8f:1a:f9:db:63: 68:4d:b6:c6:bf:07:c6:06:3f:53:cd:48:e1:34:91:3b:4e:58: e3:4b:66:d9:6d:66:10:eb:42:73:58:5a:18:2c:4d:c5:93:21: 35:17:47:fa:2c:40:c0:85:c9:c8:ce:44:36:81:d4:ae:b2:44: e5:65:ce:01:f9:b4:a6:db:6a:07:34:a1:1e:75:e3:ae:84:20: 35:d5:a4:46:3d:9a:a3:f7:25:a2:c9:2f:18:4b:b6:e3:95:85: 1b:f9:8e:5d:b7:1a:f3:9f:3c:8a:fe:8e:8e:96:62:a0:f1:a4: 98:37:c0:43:ac:5b:1f:77:0c:86:34:cd:f4:e2:9c:e0:b4:1d: aa:22:41:21:59:e0:ff:8f:c4:f3:6b:d1:2f:cc:ec:69:40:93: 77:da:eb:39:c1:04:63:84:6f:bb:df:a0:87:29:c8:7f:c5:aa: 92:4f:d9:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY1MzYxMTAvBgNVBAUTKDZEQThBNTI2NEE3REM2RkNEODhEM0Q0Q0RDRjQ4Njc5 QzI2MkY3MEUwHhcNMjUwNzE5MDA1NzU1WhcNMjUwNzI2MDA1NzU1WjAYMRYwFAYD VQQDEw02ODdhZWQ5My04ZDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ydO53fA7aaevZTJ7cR1U++xvmubTfiol/yCJKx3tnHiJU37i5ZLAjE8gedJ 08IIdp78gStCvlwihrWmV7fgnAfO0J518gmL0ET2Z16USyWz5uq2TAX56teF7ETN Tfh6R/r/WeQuS/WSrQmbuYOSq/6gduvKk/K1GzZLSidBaG5vLdd7LAfJB6CYwlOc gtvH3gb0U2ayF+l7gyI6JGFK9YOXv2/UzUWFEJO5HbRgCNcSWuSekSczl/Mk69QT qnLbyGAdbcYe5Mv0ksgLSTwiga30zJBuaZ/ChPPvwqTDa3MquZk212zHg2X4FpVG z0lUpclSnybbIUVqS0TIwVDBnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAODVeOV 9wH0+kepJpqkUI/ok/YyMB8GA1UdIwQYMBaAFG2opSZKfcb82I09TNz0hnnCYvcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjUzNi9FQUFFREVEMDg5 OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2ellqVDFNM1BTR2VjSmk5 dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhaWxKa3A5eHZ6WWpUMU0zUFNHZWNKaTl3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjUzNi9FQUFFREVEMDg5OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2 ellqVDFNM1BTR2VjSmk5dzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGatZqMTjHgFImCC/St5Lc+5ZNVS2ZYdfi246uGoA2bOf2l4LUYQm8 jJpp4+0CA7fOW2Zi1XJZpsz8zZ3JRgj+kUGE6GZ21K15J/X5uhwckLd64NYAjxr5 22NoTbbGvwfGBj9TzUjhNJE7TljjS2bZbWYQ60JzWFoYLE3FkyE1F0f6LEDAhcnI zkQ2gdSuskTlZc4B+bSm22oHNKEedeOuhCA11aRGPZqj9yWiyS8YS7bjlYUb+Y5d txrznzyK/o6OlmKg8aSYN8BDrFsfdwyGNM304pzgtB2qIkEhWeD/j8Tza9EvzOxp QJN32us5wQRjhG+736CHKch/xaqST9mE -----END CERTIFICATE-----Generated at Sun Jul 20 15:08:52 2025 by rpki-client