$ rpki-client -vvf rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft File: bailJkp9xvzYjT1M3PSGecJi9w4.mft (raw, json) Hash identifier: HeGldY56WZn80TLWdkRiIq5vWjroKC+EN/UV9E4RQHw= Subject key identifier: 7E:81:5E:30:90:01:B0:5B:D2:F9:47:B5:C3:57:1E:CF:83:E3:8B:2C Authority key identifier: 6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E Certificate issuer: /CN=A916F536/serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Certificate serial: 0401 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft Manifest number: 03FC Signing time: Sun 07 Sep 2025 00:52:08 +0000 Manifest this update: Sun 07 Sep 2025 00:52:08 +0000 Manifest next update: Sun 14 Sep 2025 00:52:08 +0000 Files and hashes: 1: bailJkp9xvzYjT1M3PSGecJi9w4.crl (hash: lOdJN6F7mliHftA2lthgfW2bcSMpOjvUpnmAe49NSLk=) 2: 07C387B6898E11EC9543A60FC4F9AE02.roa (hash: wmX3QKZrSQQ7FG7PQhgo2nOfqEWOBLWRdVunA8VWCRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1025 (0x401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F536, serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Validity Not Before: Sep 7 00:52:08 2025 GMT Not After : Sep 14 00:52:08 2025 GMT Subject: CN=68bcd738-8c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:aa:bd:c6:1c:9b:a9:53:a9:05:a0:59:c0: de:96:a7:9f:44:1c:a4:2c:11:91:2d:6c:18:49:1f: 77:ef:bc:75:55:3e:36:28:4f:0d:df:45:2b:16:46: d7:de:c5:f3:20:a3:ef:9e:7c:79:c1:45:25:33:74: 76:88:71:ca:bd:af:f3:ba:e2:7f:ff:b2:00:48:66: 88:82:b9:48:1f:ca:d1:ca:18:16:df:88:a5:38:02: ff:20:00:35:f8:a8:ee:74:48:2b:37:a6:e4:77:59: 9e:8d:23:63:92:39:37:17:4a:c0:b3:79:77:06:f2: 48:23:2a:c2:d7:8e:00:97:b7:41:9a:22:f6:57:eb: 65:8b:85:ab:7e:10:ab:8a:94:87:b5:27:d7:1a:33: c6:69:03:5c:5a:21:2d:a0:83:33:a1:70:af:3c:6d: 2e:6c:09:a1:a9:5a:e2:49:fa:44:7c:6d:4d:96:a0: f0:e5:09:e0:8d:da:22:8b:8a:2e:02:f4:83:f1:f9: f3:c6:ea:96:32:d1:3f:87:52:d8:7e:05:46:69:a9: 5f:ff:c5:61:0d:56:37:93:4e:da:31:42:9e:f9:16: 58:26:e0:7b:f7:f9:d3:5a:83:0b:2f:ab:6b:6d:36: 08:17:4b:da:8a:da:50:77:14:80:b8:e4:7e:fb:b3: df:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:81:5E:30:90:01:B0:5B:D2:F9:47:B5:C3:57:1E:CF:83:E3:8B:2C X509v3 Authority Key Identifier: keyid:6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fb:1c:34:30:4a:07:5f:98:3e:5f:eb:0e:ec:1b:56:48:cd: 27:cc:64:45:3b:9d:68:69:63:89:9c:55:60:7c:d1:1e:82:7c: fb:e1:a5:48:6c:c7:7d:e8:ab:42:fd:6e:b3:cd:e2:27:fc:a6: f1:de:8a:53:f1:ae:77:b6:07:11:30:1e:df:a9:25:0f:cb:6c: 32:b4:86:2f:2e:98:e6:74:53:53:39:f5:90:8a:c6:54:7f:ca: 5a:3f:39:5f:5e:59:85:a0:bb:e9:31:89:b5:71:42:fd:94:f9: 2c:37:59:cc:11:d5:50:29:12:34:2b:94:48:1a:05:71:2f:41: 14:a7:72:8f:ed:2a:4d:c6:79:97:c1:d2:37:88:b5:a9:20:a1: d4:60:02:d1:f2:6a:07:19:93:d8:68:59:bd:34:31:65:bd:65: 69:cd:e3:62:4d:86:fd:7f:27:3c:0f:c4:57:5c:27:50:43:f1: ca:51:96:67:04:d4:07:7f:8a:be:e1:02:a8:fe:88:09:6b:8e: 9e:71:9e:92:13:7a:b3:71:b6:a3:c2:de:39:d4:49:ed:63:46: 04:ae:03:0f:7a:ff:00:4e:e6:fe:f3:bb:d8:bc:78:9c:bb:84: 1f:14:a4:b2:b9:f1:7f:2b:36:78:d8:f4:3c:3f:d1:f5:98:d8: f0:75:ea:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY1MzYxMTAvBgNVBAUTKDZEQThBNTI2NEE3REM2RkNEODhEM0Q0Q0RDRjQ4Njc5 QzI2MkY3MEUwHhcNMjUwOTA3MDA1MjA4WhcNMjUwOTE0MDA1MjA4WjAYMRYwFAYD VQQDEw02OGJjZDczOC04YzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva2qvcYcm6lTqQWgWcDelqefRBykLBGRLWwYSR9377x1VT42KE8N30UrFkbX 3sXzIKPvnnx5wUUlM3R2iHHKva/zuuJ//7IASGaIgrlIH8rRyhgW34ilOAL/IAA1 +KjudEgrN6bkd1mejSNjkjk3F0rAs3l3BvJIIyrC144Al7dBmiL2V+tli4WrfhCr ipSHtSfXGjPGaQNcWiEtoIMzoXCvPG0ubAmhqVriSfpEfG1NlqDw5Qngjdoii4ou AvSD8fnzxuqWMtE/h1LYfgVGaalf/8VhDVY3k07aMUKe+RZYJuB79/nTWoMLL6tr bTYIF0vaitpQdxSAuOR++7PfNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6BXjCQ AbBb0vlHtcNXHs+D44ssMB8GA1UdIwQYMBaAFG2opSZKfcb82I09TNz0hnnCYvcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjUzNi9FQUFFREVEMDg5 OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2ellqVDFNM1BTR2VjSmk5 dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhaWxKa3A5eHZ6WWpUMU0zUFNHZWNKaTl3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjUzNi9FQUFFREVEMDg5OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2 ellqVDFNM1BTR2VjSmk5dzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc+xw0MEoHX5g+X+sO7BtWSM0nzGRFO51oaWOJnFVgfNEegnz74aVI bMd96KtC/W6zzeIn/Kbx3opT8a53tgcRMB7fqSUPy2wytIYvLpjmdFNTOfWQisZU f8paPzlfXlmFoLvpMYm1cUL9lPksN1nMEdVQKRI0K5RIGgVxL0EUp3KP7SpNxnmX wdI3iLWpIKHUYALR8moHGZPYaFm9NDFlvWVpzeNiTYb9fyc8D8RXXCdQQ/HKUZZn BNQHf4q+4QKo/ogJa46ecZ6SE3qzcbajwt451EntY0YErgMPev8ATub+87vYvHic u4QfFKSyufF/KzZ42PQ8P9H1mNjwdeoF -----END CERTIFICATE-----Generated at Sun Sep 7 14:39:52 2025 by rpki-client