$ rpki-client -vvf rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft File: bailJkp9xvzYjT1M3PSGecJi9w4.mft (raw, json) Hash identifier: pUIyUVClCWoER5s6YRFkgm9TxkPvXt5JC081u9s1Xk8= Subject key identifier: B5:E9:DC:62:36:C2:15:C0:F1:74:84:45:EA:F9:E1:A1:FA:E5:0F:73 Authority key identifier: 6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E Certificate issuer: /CN=A916F536/serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Certificate serial: 041E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft Manifest number: 0419 Signing time: Wed 05 Nov 2025 00:28:27 +0000 Manifest this update: Wed 05 Nov 2025 00:28:26 +0000 Manifest next update: Wed 12 Nov 2025 00:28:26 +0000 Files and hashes: 1: bailJkp9xvzYjT1M3PSGecJi9w4.crl (hash: aNm+p1C2FgFfOQgh0l1PKWQslSd9WHjUeWYQcBNO/Fw=) 2: 07C387B6898E11EC9543A60FC4F9AE02.roa (hash: wmX3QKZrSQQ7FG7PQhgo2nOfqEWOBLWRdVunA8VWCRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1054 (0x41e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F536, serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Validity Not Before: Nov 5 00:28:26 2025 GMT Not After : Nov 12 00:28:26 2025 GMT Subject: CN=690a9a2a-7c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:de:2c:64:c0:d4:82:7c:53:41:39:2a:80:36: 4b:54:22:6e:89:5e:e3:6a:68:69:ea:b7:b1:94:cc: 10:e7:6b:b0:f2:61:ea:cd:42:62:5f:3c:65:ad:0b: 0e:3f:dd:36:aa:98:a5:93:17:a7:87:72:d7:e1:4c: 12:3f:f4:4b:e0:39:92:7d:49:b5:52:9a:c8:40:f7: 20:59:87:7c:71:ef:96:70:49:16:90:9f:7c:1b:a4: 8e:02:27:3e:e9:cf:6a:c5:42:95:0c:92:94:36:6e: b2:88:92:d0:67:95:a0:22:89:9b:14:d2:15:61:0c: 01:62:b3:3c:ac:cf:bf:d2:de:37:ef:8c:3e:82:96: 70:1e:fd:27:3a:68:07:68:4d:6f:d1:9f:47:40:6d: 48:70:6e:f8:0f:f0:dc:ba:fc:10:fe:00:16:a1:7e: 60:3b:58:fb:dc:71:65:e4:ab:8a:52:53:c0:f5:ec: 43:00:cb:de:67:c9:80:65:0e:8b:38:2f:c6:26:7f: 0f:43:be:1a:4e:90:1f:cc:26:fa:91:0b:7f:ed:ee: d6:7c:d5:78:3c:84:7f:95:e8:0f:92:b4:5b:3b:85: a2:ab:cf:cf:53:a0:9d:45:fe:8f:0b:ce:e3:04:c8: c1:48:5c:9c:5c:d1:7c:08:bd:9b:e3:ad:96:74:70: 49:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E9:DC:62:36:C2:15:C0:F1:74:84:45:EA:F9:E1:A1:FA:E5:0F:73 X509v3 Authority Key Identifier: keyid:6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:dd:5f:9a:65:1b:b4:06:aa:71:ff:e3:8d:20:0f:b7:c7:74: 2e:94:47:10:91:c2:89:cd:09:e1:34:b6:f4:31:bf:6c:28:70: fe:f5:db:00:9d:d1:27:3f:c0:f3:2e:49:0d:dc:4f:6f:c3:27: 01:6c:29:f1:86:11:22:a4:fd:cc:20:de:fc:35:17:97:1d:2b: ae:7d:31:1c:db:9b:19:83:1a:0c:af:68:17:bb:69:12:cb:ec: 7c:b6:ea:7e:bb:53:e9:a7:6a:97:99:73:5b:19:8c:cb:04:4a: 34:4b:42:0f:de:6c:06:2b:93:0c:cf:1a:b3:de:ed:ab:fb:6e: f3:3e:f5:e3:77:c0:dc:08:28:44:19:b5:a7:d3:f1:d0:11:86: 7d:46:e7:0e:5d:65:e5:63:90:a0:a4:2c:6b:da:77:88:6b:f7: 8a:1c:55:17:14:d9:c4:68:84:a8:10:ca:f0:96:a6:ee:91:c8: 28:81:8e:43:c7:5b:a4:71:a1:ad:42:44:c5:07:03:55:e7:8e: 6a:7b:a8:dd:77:f0:9c:31:d0:12:29:a9:d4:74:a1:8e:64:51: a2:0f:40:cb:60:8b:af:f9:fe:ad:22:98:f1:80:0e:69:05:eb: 06:72:b2:b4:b5:a8:f9:88:59:fb:5c:3c:81:b6:6d:d2:9c:a9: 0f:12:b1:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY1MzYxMTAvBgNVBAUTKDZEQThBNTI2NEE3REM2RkNEODhEM0Q0Q0RDRjQ4Njc5 QzI2MkY3MEUwHhcNMjUxMTA1MDAyODI2WhcNMjUxMTEyMDAyODI2WjAYMRYwFAYD VQQDEw02OTBhOWEyYS03YzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzt4sZMDUgnxTQTkqgDZLVCJuiV7jamhp6rexlMwQ52uw8mHqzUJiXzxlrQsO P902qpilkxenh3LX4UwSP/RL4DmSfUm1UprIQPcgWYd8ce+WcEkWkJ98G6SOAic+ 6c9qxUKVDJKUNm6yiJLQZ5WgIombFNIVYQwBYrM8rM+/0t4374w+gpZwHv0nOmgH aE1v0Z9HQG1IcG74D/DcuvwQ/gAWoX5gO1j73HFl5KuKUlPA9exDAMveZ8mAZQ6L OC/GJn8PQ74aTpAfzCb6kQt/7e7WfNV4PIR/legPkrRbO4Wiq8/PU6CdRf6PC87j BMjBSFycXNF8CL2b462WdHBJUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXp3GI2 whXA8XSERer54aH65Q9zMB8GA1UdIwQYMBaAFG2opSZKfcb82I09TNz0hnnCYvcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjUzNi9FQUFFREVEMDg5 OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2ellqVDFNM1BTR2VjSmk5 dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhaWxKa3A5eHZ6WWpUMU0zUFNHZWNKaTl3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjUzNi9FQUFFREVEMDg5OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2 ellqVDFNM1BTR2VjSmk5dzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi3V+aZRu0Bqpx/+ONIA+3x3QulEcQkcKJzQnhNLb0Mb9sKHD+9dsA ndEnP8DzLkkN3E9vwycBbCnxhhEipP3MIN78NReXHSuufTEc25sZgxoMr2gXu2kS y+x8tup+u1Ppp2qXmXNbGYzLBEo0S0IP3mwGK5MMzxqz3u2r+27zPvXjd8DcCChE GbWn0/HQEYZ9RucOXWXlY5CgpCxr2neIa/eKHFUXFNnEaISoEMrwlqbukcgogY5D x1ukcaGtQkTFBwNV545qe6jdd/CcMdASKanUdKGOZFGiD0DLYIuv+f6tIpjxgA5p BesGcrK0taj5iFn7XDyBtm3SnKkPErHb -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:38 2025 by rpki-client