$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft File: Bats53QFyQRH8nu2EgCypDHeStw.mft (raw, json) Hash identifier: ZtplWhcmXuJbJpOGYytrmjfP0xd2GDbfqXTf07uvFK8= Subject key identifier: A1:AE:35:A7:8B:15:5A:E6:00:94:C2:C4:1A:3A:63:C3:97:6A:A1:17 Authority key identifier: 05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC Certificate issuer: /CN=A9131589/serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft Manifest number: 0287 Signing time: Tue 01 Jul 2025 02:19:10 +0000 Manifest this update: Tue 01 Jul 2025 02:19:09 +0000 Manifest next update: Tue 08 Jul 2025 02:19:09 +0000 Files and hashes: 1: Bats53QFyQRH8nu2EgCypDHeStw.crl (hash: YYtngN9M89MzMhvsWf0trS5gWVVgp0B0yEulT2N21ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC Validity Not Before: Jul 1 02:19:09 2025 GMT Not After : Jul 8 02:19:09 2025 GMT Subject: CN=6863459e-ebe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:5d:84:3f:6c:5c:be:bc:01:ad:c6:a5:3d: d5:fd:43:00:34:c0:75:49:f2:aa:25:c1:5d:1b:18: 2b:3d:1a:7c:fa:13:16:1c:15:c0:b7:d2:1d:7b:5b: e6:21:89:d0:d8:27:db:35:d6:83:3f:b8:e2:bc:90: b6:23:cc:98:5b:5f:4e:a5:06:1a:67:81:8c:99:59: 65:88:95:cb:fd:75:93:e6:50:21:54:24:a7:ef:c8: d2:a6:8e:46:ab:98:36:85:9e:1c:b8:2e:43:01:ca: 04:97:67:44:e5:96:fc:a0:e2:f1:54:11:9d:b9:b7: f1:bc:03:61:df:83:96:ae:7e:20:0f:8e:2f:cf:5a: 9d:0a:2b:04:57:11:cb:f5:67:c2:51:9d:48:60:e4: 3e:cc:83:be:c4:dc:28:dc:b0:fe:e4:6d:47:20:35: a3:b1:92:b7:69:01:4f:01:43:2a:c9:07:4f:41:fd: ec:3f:3a:04:b5:86:7d:4a:ed:7f:7e:af:11:99:a4: 14:e7:9f:a8:23:d8:ec:39:a1:4e:ec:e4:53:e4:16: c5:3a:a1:96:9e:9d:0b:d9:cb:f7:17:67:9f:ec:ed: 85:5d:84:6c:07:55:d8:78:18:0e:a7:ac:0b:f4:fc: 0b:f7:d9:d2:5d:39:da:ac:48:09:10:83:f6:8d:78: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AE:35:A7:8B:15:5A:E6:00:94:C2:C4:1A:3A:63:C3:97:6A:A1:17 X509v3 Authority Key Identifier: keyid:05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:4d:a7:27:3a:ab:ae:64:7a:a6:a0:1e:f2:06:92:9d:82:30: 7e:c7:80:e3:65:54:90:c6:43:23:ee:29:43:d9:ec:40:f3:4c: a6:61:22:72:fa:bb:dc:db:16:21:e9:ec:43:5f:91:55:aa:83: a9:ba:57:1f:75:6e:5b:39:b6:0f:88:10:e7:db:fe:30:80:9d: 8e:3d:e6:eb:0e:b4:cf:b0:b3:2f:b4:d0:d8:e5:64:fa:cc:24: e1:c0:90:b3:cf:8b:29:8d:59:f3:73:5e:8b:04:94:75:e2:58: 7c:ca:54:a0:f1:04:10:49:a8:e1:d1:61:c7:4b:42:00:9b:e2: a8:5c:45:40:c4:bf:5f:26:6e:1f:25:c5:4c:78:49:91:b0:1e: 29:e4:c4:db:2f:ce:4e:72:3a:f1:72:7e:27:8e:ac:ed:a3:6d: aa:ff:7c:a3:62:82:07:3c:50:e5:eb:cf:18:d5:ba:69:a1:2a: cc:cb:09:7d:97:ed:5f:9e:d4:50:cd:19:08:52:49:fa:c4:2e: 21:8f:c2:75:17:cb:aa:df:4a:b5:72:28:ef:08:9b:5c:50:13: af:ed:51:65:07:ab:1d:2e:d1:1b:cf:7b:a1:45:30:87:e3:b2: 75:c8:da:0c:f1:0f:fa:1f:e5:24:34:00:aa:4a:ce:4f:99:c1: dc:5b:61:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKDA1QUI2Q0U3NzQwNUM5MDQ0N0YyN0JCNjEyMDBCMkE0 MzFERTRBREMwHhcNMjUwNzAxMDIxOTA5WhcNMjUwNzA4MDIxOTA5WjAYMRYwFAYD VQQDEw02ODYzNDU5ZS1lYmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBhdhD9sXL68Aa3GpT3V/UMANMB1SfKqJcFdGxgrPRp8+hMWHBXAt9Ide1vm IYnQ2CfbNdaDP7jivJC2I8yYW19OpQYaZ4GMmVlliJXL/XWT5lAhVCSn78jSpo5G q5g2hZ4cuC5DAcoEl2dE5Zb8oOLxVBGdubfxvANh34OWrn4gD44vz1qdCisEVxHL 9WfCUZ1IYOQ+zIO+xNwo3LD+5G1HIDWjsZK3aQFPAUMqyQdPQf3sPzoEtYZ9Su1/ fq8RmaQU55+oI9jsOaFO7ORT5BbFOqGWnp0L2cv3F2ef7O2FXYRsB1XYeBgOp6wL 9PwL99nSXTnarEgJEIP2jXiNKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGuNaeL FVrmAJTCxBo6Y8OXaqEXMB8GA1UdIwQYMBaAFAWrbOd0BckER/J7thIAsqQx3krc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS80MTU4NDYzQTBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi9CYXRzNTNRRnlRUkg4bnUyRWdDeXBESGVT dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhdHM1M1FGeVFSSDhudTJFZ0N5cERIZVN0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS80MTU4NDYzQTBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi9CYXRzNTNRRnlR Ukg4bnUyRWdDeXBESGVTdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATTacnOquuZHqmoB7yBpKdgjB+x4DjZVSQxkMj7ilD2exA80ymYSJy +rvc2xYh6exDX5FVqoOpulcfdW5bObYPiBDn2/4wgJ2OPebrDrTPsLMvtNDY5WT6 zCThwJCzz4spjVnzc16LBJR14lh8ylSg8QQQSajh0WHHS0IAm+KoXEVAxL9fJm4f JcVMeEmRsB4p5MTbL85Ocjrxcn4njqzto22q/3yjYoIHPFDl688Y1bppoSrMywl9 l+1fntRQzRkIUkn6xC4hj8J1F8uq30q1cijvCJtcUBOv7VFlB6sdLtEbz3uhRTCH 47J1yNoM8Q/6H+UkNACqSs5PmcHcW2F0 -----END CERTIFICATE-----Generated at Thu Jul 3 01:55:16 2025 by rpki-client