$ rpki-client -vvf rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft File: bailJkp9xvzYjT1M3PSGecJi9w4.mft (raw, json) Hash identifier: x5OnOPNOsbRW8unlHJWLCaEYDMhjZCb5fxHGL/iE2Hc= Subject key identifier: 1D:7E:22:5E:AC:AF:A0:08:70:F5:1E:C5:BF:B9:C0:ED:3E:05:9F:E6 Authority key identifier: 6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E Certificate issuer: /CN=A916F536/serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft Manifest number: 03CF Signing time: Sun 15 Jun 2025 00:19:47 +0000 Manifest this update: Sun 15 Jun 2025 00:19:47 +0000 Manifest next update: Sun 22 Jun 2025 00:19:47 +0000 Files and hashes: 1: bailJkp9xvzYjT1M3PSGecJi9w4.crl (hash: 1YVgxJZ/dYsMFzjyqsF4qTt15De2ltccBels4ZqN2W0=) 2: 07C387B6898E11EC9543A60FC4F9AE02.roa (hash: Z8nOZSdO25Utl4pPDw4ubtfpNujKkQIc0psO5bVfVdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F536, serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Validity Not Before: Jun 15 00:19:47 2025 GMT Not After : Jun 22 00:19:47 2025 GMT Subject: CN=684e11a3-fd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b3:43:ed:a6:db:d2:0f:f4:a7:32:45:cb:44: d0:8d:cc:65:07:ca:cf:5f:92:53:ff:50:1b:8f:e9: 96:15:52:c6:f4:7a:9b:e8:06:ec:cf:35:b6:e1:00: 2b:36:ce:7d:2f:a8:77:29:f7:f1:9f:96:ce:e7:bf: f3:08:8f:00:e7:ae:47:ee:cb:05:0e:e9:9e:ef:0e: e7:a1:08:55:8e:03:fa:7b:84:7a:38:e2:47:ff:ab: 88:4c:41:ec:d1:00:bd:f4:2e:2a:03:c8:5c:6c:4d: 40:11:b0:6a:6d:a3:4c:bd:e0:81:40:44:6b:f7:f1: 3c:95:c3:2c:65:80:c0:f3:e5:17:13:2b:68:fa:55: 55:fb:85:f3:44:90:c9:47:ec:a3:86:e7:fd:c2:28: 22:0f:6e:90:ad:19:61:d3:0a:86:64:a6:74:8c:4c: 5a:7c:ab:9b:b7:67:28:b4:ff:01:54:f2:2e:bd:c0: 5e:10:98:f4:0a:3e:63:22:da:08:92:bd:80:cf:15: ef:02:1f:29:99:56:f5:6c:62:d9:64:11:4d:fe:5e: 4d:99:08:ef:82:1b:38:69:fc:be:bc:6c:e9:bb:01: 07:c7:f3:d2:81:11:bd:c8:92:77:34:01:54:5d:1b: 92:d1:91:67:b9:8d:ca:96:ac:3c:f1:a9:c0:2f:7e: 0b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7E:22:5E:AC:AF:A0:08:70:F5:1E:C5:BF:B9:C0:ED:3E:05:9F:E6 X509v3 Authority Key Identifier: keyid:6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:26:25:c1:a7:9e:8f:d6:db:94:94:1b:d9:33:6d:58:4d:df: 5d:ba:b4:fd:63:b1:11:69:e8:33:97:9c:db:49:dc:fd:24:59: 8c:7d:f1:ca:19:d4:31:da:eb:93:c4:a0:47:45:cb:23:31:59: 2f:cd:ec:16:e8:08:f6:9c:2b:03:59:e9:5d:a8:87:54:32:b8: 23:7a:18:f7:70:3f:2b:3b:31:e3:fd:fc:3b:82:11:1d:39:e4: 26:02:b6:7b:ab:9a:cd:1e:80:89:99:93:22:79:a5:98:6d:88: a7:68:ac:bf:55:aa:d6:bc:08:eb:a7:36:65:d3:50:f1:49:d7: f3:17:01:90:cb:67:5d:2c:fa:b3:38:e6:8e:8f:ca:6e:ec:1e: a0:ae:21:6e:6f:da:f1:17:c0:2c:89:92:26:95:dd:8e:f7:e8: 7f:ae:c4:12:71:cc:ac:0b:de:e5:98:38:fc:6f:1a:48:7e:09: e9:e4:8e:90:7f:6f:60:4d:25:1a:07:54:99:04:da:9d:14:cb: e8:7b:6e:8c:47:5d:49:59:21:e0:37:11:66:9e:2a:82:36:4f: 5b:6a:5f:ef:e8:d6:6a:69:23:a3:71:7d:8e:59:f7:8a:13:4e: 79:8d:3f:7d:e0:10:f6:5b:e3:a0:33:10:09:d0:f5:76:a9:4d: 26:09:8b:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY1MzYxMTAvBgNVBAUTKDZEQThBNTI2NEE3REM2RkNEODhEM0Q0Q0RDRjQ4Njc5 QzI2MkY3MEUwHhcNMjUwNjE1MDAxOTQ3WhcNMjUwNjIyMDAxOTQ3WjAYMRYwFAYD VQQDEw02ODRlMTFhMy1mZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rND7abb0g/0pzJFy0TQjcxlB8rPX5JT/1Abj+mWFVLG9Hqb6AbszzW24QAr Ns59L6h3Kffxn5bO57/zCI8A565H7ssFDume7w7noQhVjgP6e4R6OOJH/6uITEHs 0QC99C4qA8hcbE1AEbBqbaNMveCBQERr9/E8lcMsZYDA8+UXEyto+lVV+4XzRJDJ R+yjhuf9wigiD26QrRlh0wqGZKZ0jExafKubt2cotP8BVPIuvcBeEJj0Cj5jItoI kr2AzxXvAh8pmVb1bGLZZBFN/l5NmQjvghs4afy+vGzpuwEHx/PSgRG9yJJ3NAFU XRuS0ZFnuY3Klqw88anAL34LCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1+Il6s r6AIcPUexb+5wO0+BZ/mMB8GA1UdIwQYMBaAFG2opSZKfcb82I09TNz0hnnCYvcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjUzNi9FQUFFREVEMDg5 OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2ellqVDFNM1BTR2VjSmk5 dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhaWxKa3A5eHZ6WWpUMU0zUFNHZWNKaTl3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjUzNi9FQUFFREVEMDg5OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2 ellqVDFNM1BTR2VjSmk5dzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnJiXBp56P1tuUlBvZM21YTd9durT9Y7ERaegzl5zbSdz9JFmMffHK GdQx2uuTxKBHRcsjMVkvzewW6Aj2nCsDWeldqIdUMrgjehj3cD8rOzHj/fw7ghEd OeQmArZ7q5rNHoCJmZMieaWYbYinaKy/VarWvAjrpzZl01DxSdfzFwGQy2ddLPqz OOaOj8pu7B6griFub9rxF8AsiZImld2O9+h/rsQSccysC97lmDj8bxpIfgnp5I6Q f29gTSUaB1SZBNqdFMvoe26MR11JWSHgNxFmniqCNk9bal/v6NZqaSOjcX2OWfeK E055jT994BD2W+OgMxAJ0PV2qU0mCYtf -----END CERTIFICATE-----Generated at Sun Jun 15 09:58:27 2025 by rpki-client