$ rpki-client -vvf rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft File: bailJkp9xvzYjT1M3PSGecJi9w4.mft (raw, json) Hash identifier: Sibptmm65xtWHRTmd0+XA8q8YaewBt39MLxgsi+XxXY= Subject key identifier: DF:CC:2A:4D:2A:FA:EF:8D:1C:2A:AF:19:75:20:30:E8:8F:1A:73:99 Authority key identifier: 6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E Certificate issuer: /CN=A916F536/serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Certificate serial: 03BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft Manifest number: 03B6 Signing time: Fri 25 Apr 2025 00:27:19 +0000 Manifest this update: Fri 25 Apr 2025 00:27:18 +0000 Manifest next update: Fri 02 May 2025 00:27:18 +0000 Files and hashes: 1: bailJkp9xvzYjT1M3PSGecJi9w4.crl (hash: 1jgt62aOepSt/MmCp+VHFlRYOqMo0opDXbkSxmP00h4=) 2: 07C387B6898E11EC9543A60FC4F9AE02.roa (hash: Z8nOZSdO25Utl4pPDw4ubtfpNujKkQIc0psO5bVfVdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 954 (0x3ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F536, serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Validity Not Before: Apr 25 00:27:18 2025 GMT Not After : May 2 00:27:18 2025 GMT Subject: CN=680ad6e7-0843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d6:40:6b:bb:45:ac:4b:a1:e1:38:17:28:e2: c5:64:be:1d:d2:46:b7:33:a6:ed:77:7e:80:df:27: 7e:80:48:30:ec:cb:7f:48:b4:de:81:12:c0:23:d7: 92:0c:76:83:04:86:aa:f7:cb:c7:7b:a4:ac:e1:6d: 2b:b4:d1:bd:a6:f4:67:f5:4c:48:59:c9:ca:f7:c2: b7:70:2d:16:29:96:fa:b5:74:4e:bb:38:48:17:83: 89:b1:ca:a5:7c:f0:7b:68:06:bc:d7:c2:da:fd:ae: 15:1e:80:82:cf:48:fe:78:a1:0c:0c:b4:82:4c:22: 03:09:63:7a:c0:41:3a:78:4f:32:72:68:28:e2:33: 7c:b6:f5:33:e1:56:7e:8c:e0:cb:9a:53:c9:ca:69: fa:b3:f5:c2:68:b7:0e:f7:82:da:4e:17:ed:ea:0b: b7:a8:3a:db:46:03:1f:27:1e:38:a4:fb:ee:f0:9e: 12:78:71:fe:56:35:5a:55:86:07:4d:77:86:1b:40: c0:21:39:1b:5e:8d:ff:08:46:ef:72:a5:9d:4f:b4: c5:41:c5:fd:9a:37:87:c8:fc:ba:6f:b3:d9:56:d9: cc:b9:5c:11:57:e1:bb:61:e7:3c:63:23:1a:91:3a: fe:49:40:01:4e:7d:37:80:f8:52:b0:7b:7a:5a:c2: eb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CC:2A:4D:2A:FA:EF:8D:1C:2A:AF:19:75:20:30:E8:8F:1A:73:99 X509v3 Authority Key Identifier: keyid:6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:23:0e:53:0c:cc:3b:2e:8e:f6:5a:ab:68:83:06:b8:2f:98: 34:f9:4c:5b:f7:1b:d5:8c:30:e4:db:5b:17:6f:c0:7b:02:55: 4a:d6:f5:2e:bb:56:9a:2b:04:6c:a8:c2:68:c3:1a:47:cd:66: d1:c0:38:dc:78:1e:2b:00:5c:6b:e2:be:d6:72:be:e3:12:48: 77:c8:e2:20:d3:97:71:60:49:bc:0d:3d:d9:38:53:03:92:44: 07:99:c7:b6:a6:72:b9:b9:27:b4:f9:eb:04:8b:d4:e1:fb:53: b0:7c:79:02:a1:3b:30:e2:b9:52:10:8c:be:fc:a1:78:43:fb: 88:ff:da:05:f6:a0:4a:3d:1b:eb:b5:49:11:d9:5c:ce:b7:4f: f4:2e:6d:e6:a3:c5:9c:5b:74:c8:75:64:f1:24:c6:c3:18:eb: ef:1d:86:a9:f1:54:a3:7c:71:16:a2:54:22:80:c7:db:69:39: 63:09:b9:f4:87:f6:a4:e3:82:d7:ff:37:07:eb:84:64:10:e1: 31:7a:d5:82:8a:39:3d:00:b0:52:a1:88:ce:e1:9f:b7:13:77: 53:08:a4:8c:27:fb:0f:5a:c3:87:4b:48:ba:a2:6b:64:fa:f4: 50:b1:6a:2e:a1:d6:87:10:94:b9:39:76:1d:c1:e5:d1:3f:3d: f8:00:0c:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY1MzYxMTAvBgNVBAUTKDZEQThBNTI2NEE3REM2RkNEODhEM0Q0Q0RDRjQ4Njc5 QzI2MkY3MEUwHhcNMjUwNDI1MDAyNzE4WhcNMjUwNTAyMDAyNzE4WjAYMRYwFAYD VQQDEw02ODBhZDZlNy0wODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tZAa7tFrEuh4TgXKOLFZL4d0ka3M6btd36A3yd+gEgw7Mt/SLTegRLAI9eS DHaDBIaq98vHe6Ss4W0rtNG9pvRn9UxIWcnK98K3cC0WKZb6tXROuzhIF4OJscql fPB7aAa818La/a4VHoCCz0j+eKEMDLSCTCIDCWN6wEE6eE8ycmgo4jN8tvUz4VZ+ jODLmlPJymn6s/XCaLcO94LaThft6gu3qDrbRgMfJx44pPvu8J4SeHH+VjVaVYYH TXeGG0DAITkbXo3/CEbvcqWdT7TFQcX9mjeHyPy6b7PZVtnMuVwRV+G7Yec8YyMa kTr+SUABTn03gPhSsHt6WsLrhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/MKk0q +u+NHCqvGXUgMOiPGnOZMB8GA1UdIwQYMBaAFG2opSZKfcb82I09TNz0hnnCYvcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjUzNi9FQUFFREVEMDg5 OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2ellqVDFNM1BTR2VjSmk5 dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhaWxKa3A5eHZ6WWpUMU0zUFNHZWNKaTl3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjUzNi9FQUFFREVEMDg5OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2 ellqVDFNM1BTR2VjSmk5dzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoIw5TDMw7Lo72Wqtogwa4L5g0+Uxb9xvVjDDk21sXb8B7AlVK1vUu u1aaKwRsqMJowxpHzWbRwDjceB4rAFxr4r7Wcr7jEkh3yOIg05dxYEm8DT3ZOFMD kkQHmce2pnK5uSe0+esEi9Th+1OwfHkCoTsw4rlSEIy+/KF4Q/uI/9oF9qBKPRvr tUkR2VzOt0/0Lm3mo8WcW3TIdWTxJMbDGOvvHYap8VSjfHEWolQigMfbaTljCbn0 h/ak44LX/zcH64RkEOExetWCijk9ALBSoYjO4Z+3E3dTCKSMJ/sPWsOHS0i6omtk +vRQsWouodaHEJS5OXYdweXRPz34AAyz -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:40 2025 by rpki-client