$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft File: bath0S4_GW9RaThyPIAnWZxddVI.mft (raw, json) Hash identifier: gTrBmet0ajlQ0p+MEqAExu/Aw+sEWUI7vnLjKeKiQl4= Subject key identifier: F7:47:7F:90:63:5B:58:EB:CF:FB:1F:D4:88:BB:E1:7F:2C:AC:B4:06 Authority key identifier: 6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52 Certificate issuer: /CN=A91CEBCC/serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft Manifest number: B7 Signing time: Sat 31 May 2025 05:32:40 +0000 Manifest this update: Sat 31 May 2025 05:32:40 +0000 Manifest next update: Sat 07 Jun 2025 05:32:40 +0000 Files and hashes: 1: bath0S4_GW9RaThyPIAnWZxddVI.crl (hash: 89UarRyVlZaNrKK8S9MclmyOFFKQ8lDprB2luc1wRYY=) 2: F2022074272711EF91A40124C4F9AE02.roa (hash: xhUsDiNlcxZBUBnV9JFR4AclyG5SZwCFLfalTWcGiyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCC, serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552 Validity Not Before: May 31 05:32:40 2025 GMT Not After : Jun 7 05:32:40 2025 GMT Subject: CN=683a9478-4d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:31:2f:44:38:85:6c:2c:77:1c:27:1f:46:98: 09:d7:bd:7a:1a:99:54:b9:54:6f:4b:4c:ac:2c:97: 73:22:cf:25:3c:dd:03:30:5b:4e:c9:57:e9:ee:90: 32:8d:c0:1d:e6:ae:1d:67:a6:19:79:6c:54:e1:e5: 35:5a:9d:ae:ef:da:8d:81:68:32:78:ea:dd:99:8d: 9a:6f:13:f0:99:e3:41:7c:59:18:3b:0c:07:d8:bf: 0a:c4:4e:de:a7:8d:bd:6b:b2:2a:7e:9f:b3:38:49: bd:f4:65:bf:88:78:38:8c:51:d9:d4:8d:c3:0a:b6: 87:38:89:b6:40:bf:45:91:53:6b:2c:c1:7a:4d:97: aa:66:4b:89:6d:8c:fd:63:c1:75:67:16:8d:b7:8d: b7:1f:be:29:10:da:f9:65:94:74:f3:ff:de:47:0e: 3b:27:bc:0b:f3:8f:c6:3b:7d:53:00:00:fc:61:a8: 74:f5:c3:55:4c:76:4f:d2:9d:78:9b:24:8d:bf:09: ad:2e:63:34:f3:44:01:33:7e:57:59:95:52:75:b3: 0a:a0:90:43:15:72:b1:85:71:36:ff:48:6e:4d:6f: 25:81:00:15:db:14:57:a9:23:1d:eb:60:c6:be:a5: 84:06:ac:ec:54:8d:ec:cd:43:73:7d:ca:ec:24:82: 60:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:47:7F:90:63:5B:58:EB:CF:FB:1F:D4:88:BB:E1:7F:2C:AC:B4:06 X509v3 Authority Key Identifier: keyid:6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:79:56:e7:88:20:7b:36:30:83:c6:d0:f8:90:33:04:a4:39: ff:05:1f:d8:06:6c:97:9b:37:81:9a:51:28:f5:f1:4c:ef:c8: 29:c7:02:75:4d:be:07:46:11:44:d2:7d:77:8f:b6:ff:d7:1e: 41:13:55:91:7f:eb:04:92:f1:a4:d9:d1:31:1e:40:54:46:ba: 09:23:34:7f:51:60:86:ca:41:eb:ea:e2:82:a9:1b:2a:27:2c: da:48:d1:68:a8:0a:87:12:8a:0f:cd:81:bb:ac:bf:d3:23:c7: e3:0a:66:5f:c3:35:30:28:88:c4:46:b1:14:88:ca:9e:ee:ff: 7f:78:85:0e:4d:c3:e7:61:dd:51:22:e5:07:eb:90:41:12:fc: 3b:64:80:e4:df:e1:0d:3b:01:14:3c:25:96:83:cc:36:67:60: f5:ee:18:67:4a:58:a8:bc:7b:94:9f:03:b2:63:3c:7e:00:9a: 70:ec:91:dd:0e:4a:9e:0d:28:e7:3d:26:b7:c5:e9:15:a4:0e: ed:33:fe:48:e7:59:b5:58:94:cf:46:92:c2:54:e7:62:7e:83: 46:28:0e:7c:cb:05:ec:1b:8d:12:6f:ce:c9:ae:b2:34:e0:d6: 9e:da:76:a0:fd:a5:a7:e1:e3:a6:0e:98:fc:d6:76:a6:92:70: b3:51:16:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0MxMTAvBgNVBAUTKDZEQUI2MUQxMkUzRjE5NkY1MTY5Mzg3MjNDODAyNzU5 OUM1RDc1NTIwHhcNMjUwNTMxMDUzMjQwWhcNMjUwNjA3MDUzMjQwWjAYMRYwFAYD VQQDEw02ODNhOTQ3OC00ZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DEvRDiFbCx3HCcfRpgJ1716GplUuVRvS0ysLJdzIs8lPN0DMFtOyVfp7pAy jcAd5q4dZ6YZeWxU4eU1Wp2u79qNgWgyeOrdmY2abxPwmeNBfFkYOwwH2L8KxE7e p429a7Iqfp+zOEm99GW/iHg4jFHZ1I3DCraHOIm2QL9FkVNrLMF6TZeqZkuJbYz9 Y8F1ZxaNt423H74pENr5ZZR08//eRw47J7wL84/GO31TAAD8Yah09cNVTHZP0p14 mySNvwmtLmM080QBM35XWZVSdbMKoJBDFXKxhXE2/0huTW8lgQAV2xRXqSMd62DG vqWEBqzsVI3szUNzfcrsJIJgdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdHf5Bj W1jrz/sf1Ii74X8srLQGMB8GA1UdIwQYMBaAFG2rYdEuPxlvUWk4cjyAJ1mcXXVS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQy8yQUU4OTgxQTI3 MjcxMUVGOTE0M0U2MjJDNEY5QUUwMi9iYXRoMFM0X0dXOVJhVGh5UElBbldaeGRk VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhdGgwUzRfR1c5UmFUaHlQSUFuV1p4ZGRWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQy8yQUU4OTgxQTI3MjcxMUVGOTE0M0U2MjJDNEY5QUUwMi9iYXRoMFM0X0dX OVJhVGh5UElBbldaeGRkVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeeVbniCB7NjCDxtD4kDMEpDn/BR/YBmyXmzeBmlEo9fFM78gpxwJ1 Tb4HRhFE0n13j7b/1x5BE1WRf+sEkvGk2dExHkBURroJIzR/UWCGykHr6uKCqRsq JyzaSNFoqAqHEooPzYG7rL/TI8fjCmZfwzUwKIjERrEUiMqe7v9/eIUOTcPnYd1R IuUH65BBEvw7ZIDk3+ENOwEUPCWWg8w2Z2D17hhnSliovHuUnwOyYzx+AJpw7JHd DkqeDSjnPSa3xekVpA7tM/5I51m1WJTPRpLCVOdifoNGKA58ywXsG40Sb87JrrI0 4Nae2nag/aWn4eOmDpj81namknCzURaz -----END CERTIFICATE-----Generated at Sat May 31 16:53:38 2025 by rpki-client