$ rpki-client -vvf rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft File: bailJkp9xvzYjT1M3PSGecJi9w4.mft (raw, json) Hash identifier: /+plWR6grf/m47D6KRVzl9Ik/kzyOj0nsrYbUZfmoSQ= Subject key identifier: 08:39:C9:7E:40:04:54:54:28:A9:6E:0D:C4:F5:53:EC:CE:00:5B:C2 Authority key identifier: 6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E Certificate issuer: /CN=A916F536/serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Certificate serial: 041D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft Manifest number: 0418 Signing time: Mon 03 Nov 2025 00:20:50 +0000 Manifest this update: Mon 03 Nov 2025 00:20:49 +0000 Manifest next update: Mon 10 Nov 2025 00:20:49 +0000 Files and hashes: 1: bailJkp9xvzYjT1M3PSGecJi9w4.crl (hash: t8mmmh6OweAW5hYCQG/pCFQVBikpf+f5S9ASA5lQboI=) 2: 07C387B6898E11EC9543A60FC4F9AE02.roa (hash: wmX3QKZrSQQ7FG7PQhgo2nOfqEWOBLWRdVunA8VWCRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1053 (0x41d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F536, serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Validity Not Before: Nov 3 00:20:49 2025 GMT Not After : Nov 10 00:20:49 2025 GMT Subject: CN=6907f561-89ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ea:47:dd:e6:bd:d2:ff:6e:47:e2:06:1e:5c: 5e:c6:97:aa:ae:db:82:59:64:c0:95:37:6e:d6:b6: 60:82:86:85:44:b0:86:26:b0:04:b3:f1:44:9f:a0: 7f:e2:53:8c:ba:eb:06:4b:69:99:b9:07:ab:87:31: a3:be:8f:c4:96:b6:57:57:02:19:ec:31:b8:a6:0b: 06:26:cd:0d:44:5d:ad:c4:f7:c2:7a:19:93:43:7a: 69:63:bb:fb:a3:bf:f0:44:68:ef:f3:42:91:b7:71: a4:c3:db:72:26:5a:dd:a8:97:2b:8c:5d:46:04:5b: 01:c8:f7:c2:97:fb:c3:e1:c5:54:ae:33:f1:37:46: 64:dd:f4:00:bb:d2:5d:80:13:0d:6e:8a:b7:81:d8: 03:0b:2c:1f:9b:51:3f:e6:30:bf:54:f8:9e:40:db: c6:72:66:b6:db:77:9f:7d:f5:a9:e9:35:cb:4c:31: 88:3e:14:50:77:8d:39:bf:5f:85:a8:a7:59:68:a6: 7e:6c:b1:04:32:e1:49:ea:e6:13:ca:01:e6:88:fc: d1:ae:7b:8e:87:83:44:a8:6d:bd:f7:49:7a:ce:a2: 01:0f:cf:4c:a1:2f:ed:c5:cd:6e:eb:a0:4f:d0:4e: d7:61:39:c4:76:53:b1:ed:fa:c7:be:1c:83:4c:47: 3f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:39:C9:7E:40:04:54:54:28:A9:6E:0D:C4:F5:53:EC:CE:00:5B:C2 X509v3 Authority Key Identifier: keyid:6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:2f:99:6f:45:13:89:9b:ce:ad:04:04:50:c4:fd:ec:71:31: 53:20:c8:2b:db:bf:c3:ba:92:00:64:19:d4:61:7a:2e:d1:d8: 7a:5f:1a:53:3f:8d:a3:7f:52:01:9b:0b:6e:67:12:86:6c:fd: 1a:76:9c:09:f5:3a:e9:c2:9f:9d:a7:83:b4:57:62:ff:16:3e: d8:b4:0a:05:9d:ac:7e:03:c1:25:59:81:c9:ea:d3:2c:8b:81: d6:0b:b1:56:49:73:48:e4:76:4a:15:b1:d6:a6:bd:2d:db:59: 62:b5:81:ae:b8:63:a2:95:60:be:ea:9a:ea:28:e4:36:e6:82: fb:04:d8:f9:d7:92:98:72:05:1a:5d:d6:8e:38:0f:2d:b1:7c: da:9c:8d:34:c2:42:04:32:aa:6a:e6:08:5a:25:e8:f6:80:11: c6:c0:9c:80:19:63:6c:19:48:51:bd:c4:1b:57:6a:b1:90:23: 29:cd:02:80:a6:e5:e8:91:31:1f:d7:b2:cf:a6:ee:9a:f0:0c: 65:33:44:75:ce:97:1a:75:fc:d8:5f:dc:7e:af:77:14:f7:97: 2a:5b:49:30:58:73:ce:46:bd:83:75:fa:68:77:d9:0b:85:c6: 10:d0:a1:d7:ed:dc:31:86:3b:5d:1e:15:db:3b:7d:61:65:ed: f1:3f:db:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY1MzYxMTAvBgNVBAUTKDZEQThBNTI2NEE3REM2RkNEODhEM0Q0Q0RDRjQ4Njc5 QzI2MkY3MEUwHhcNMjUxMTAzMDAyMDQ5WhcNMjUxMTEwMDAyMDQ5WjAYMRYwFAYD VQQDEw02OTA3ZjU2MS04OWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+pH3ea90v9uR+IGHlxexpeqrtuCWWTAlTdu1rZggoaFRLCGJrAEs/FEn6B/ 4lOMuusGS2mZuQerhzGjvo/ElrZXVwIZ7DG4pgsGJs0NRF2txPfCehmTQ3ppY7v7 o7/wRGjv80KRt3Gkw9tyJlrdqJcrjF1GBFsByPfCl/vD4cVUrjPxN0Zk3fQAu9Jd gBMNboq3gdgDCywfm1E/5jC/VPieQNvGcma223efffWp6TXLTDGIPhRQd405v1+F qKdZaKZ+bLEEMuFJ6uYTygHmiPzRrnuOh4NEqG2990l6zqIBD89MoS/txc1u66BP 0E7XYTnEdlOx7frHvhyDTEc/vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAg5yX5A BFRUKKluDcT1U+zOAFvCMB8GA1UdIwQYMBaAFG2opSZKfcb82I09TNz0hnnCYvcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjUzNi9FQUFFREVEMDg5 OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2ellqVDFNM1BTR2VjSmk5 dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhaWxKa3A5eHZ6WWpUMU0zUFNHZWNKaTl3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjUzNi9FQUFFREVEMDg5OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2 ellqVDFNM1BTR2VjSmk5dzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzL5lvRROJm86tBARQxP3scTFTIMgr27/DupIAZBnUYXou0dh6XxpT P42jf1IBmwtuZxKGbP0adpwJ9Trpwp+dp4O0V2L/Fj7YtAoFnax+A8ElWYHJ6tMs i4HWC7FWSXNI5HZKFbHWpr0t21litYGuuGOilWC+6prqKOQ25oL7BNj515KYcgUa XdaOOA8tsXzanI00wkIEMqpq5ghaJej2gBHGwJyAGWNsGUhRvcQbV2qxkCMpzQKA puXokTEf17LPpu6a8AxlM0R1zpcadfzYX9x+r3cU95cqW0kwWHPORr2Ddfpod9kL hcYQ0KHX7dwxhjtdHhXbO31hZe3xP9s9 -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:53 2025 by rpki-client