$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft File: Bats53QFyQRH8nu2EgCypDHeStw.mft (raw, json) Hash identifier: k09BAlyUlPo6RnPECMl8N2kvpc8or2Td8W5/WE69P+g= Subject key identifier: 8A:3A:DD:4C:2D:06:1C:FD:02:58:2D:C4:00:C8:A9:5F:C0:02:10:6F Authority key identifier: 05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC Certificate issuer: /CN=A9131589/serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft Manifest number: 02A2 Signing time: Sat 23 Aug 2025 01:47:49 +0000 Manifest this update: Sat 23 Aug 2025 01:47:48 +0000 Manifest next update: Sat 30 Aug 2025 01:47:48 +0000 Files and hashes: 1: Bats53QFyQRH8nu2EgCypDHeStw.crl (hash: z3e30r/CCUzmsbJqxesbLVlLljx2qJhXEPeuK7WApf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC Validity Not Before: Aug 23 01:47:48 2025 GMT Not After : Aug 30 01:47:48 2025 GMT Subject: CN=68a91dc5-a8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b6:1b:6e:cc:c3:d4:4d:f9:88:5b:f5:6b:27: 1d:2e:fc:20:38:90:87:95:bb:cd:eb:bf:b4:7d:76: d2:b5:23:e0:41:a4:44:af:df:35:05:43:f0:0e:a0: 5b:43:00:8a:0c:bd:b4:28:4c:2a:df:55:17:c7:65: c4:e2:e5:01:71:ef:f6:42:81:18:db:c2:9c:b8:2f: 23:85:69:18:c6:73:43:16:ae:cd:de:5c:ea:95:ab: f1:0d:3d:cf:d8:b7:79:05:71:bd:6f:27:ae:6e:5c: bd:72:bd:82:57:51:db:a0:62:7f:80:47:ca:c2:b5: db:5c:de:78:1b:47:5e:1f:4b:f2:dc:dc:64:ca:6f: 48:8e:f7:b6:a7:e3:cb:ac:69:02:e8:b4:2b:28:8e: 24:00:a9:a5:ae:cb:50:1d:bd:b9:d4:40:62:70:d1: 05:64:d6:9a:ce:cd:a6:ca:e1:30:b3:7a:0d:c7:61: 9e:b7:06:50:36:56:e6:67:84:90:9a:4f:cd:f2:84: 0a:e3:f1:9e:c9:6e:28:a5:04:c8:88:60:0d:df:89: 09:e2:08:33:eb:9d:19:16:06:f0:48:27:7f:91:08: 51:3b:43:95:f5:45:c7:e5:39:86:8a:ca:c9:13:de: ee:14:d3:40:82:ed:7e:74:00:d7:e3:21:b3:7b:e3: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3A:DD:4C:2D:06:1C:FD:02:58:2D:C4:00:C8:A9:5F:C0:02:10:6F X509v3 Authority Key Identifier: keyid:05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:cd:ab:6a:54:84:81:88:1c:53:96:63:36:2d:fa:29:77:b1: c8:50:13:8e:2e:b6:c3:a2:31:f9:ef:4d:79:04:f4:20:3b:dc: 3d:80:8a:74:41:4f:43:bf:77:c4:bb:53:85:cc:2b:97:1b:ac: 99:f2:6c:9e:59:1f:f0:68:12:5b:df:02:43:7e:38:c9:52:f5: 9a:ae:06:1e:59:75:90:ce:83:4f:f6:ce:b2:3d:b5:bb:ca:fe: 01:1a:a7:5b:9f:a7:cf:44:e3:c0:31:75:0e:ab:46:27:5a:d4: 80:1f:d4:be:1c:a7:18:60:93:e0:df:d9:7f:27:dc:1b:3e:39: 77:a2:9d:12:63:cb:27:f3:55:9e:c1:10:5d:25:f1:b9:42:d6: 28:14:04:55:11:8a:ad:f0:d1:34:ef:3e:3c:03:73:6e:8f:46: 2a:0c:5a:be:33:fd:11:c1:8c:f6:44:c5:cc:6f:50:58:74:13: ce:a8:83:b8:f7:81:6c:62:76:5d:6f:dd:50:61:3b:27:30:35: b1:da:6b:1e:ff:32:b4:9a:49:95:46:fa:14:7c:f6:2d:54:51: c1:bc:f6:e4:ad:81:8e:91:d4:38:65:5d:45:5f:2a:e5:a5:f0: 21:87:f9:05:5d:57:4e:03:4f:43:88:1c:0a:78:ed:c7:d3:f7: 50:ea:e6:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKDA1QUI2Q0U3NzQwNUM5MDQ0N0YyN0JCNjEyMDBCMkE0 MzFERTRBREMwHhcNMjUwODIzMDE0NzQ4WhcNMjUwODMwMDE0NzQ4WjAYMRYwFAYD VQQDEw02OGE5MWRjNS1hOGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLYbbszD1E35iFv1aycdLvwgOJCHlbvN67+0fXbStSPgQaREr981BUPwDqBb QwCKDL20KEwq31UXx2XE4uUBce/2QoEY28KcuC8jhWkYxnNDFq7N3lzqlavxDT3P 2Ld5BXG9byeubly9cr2CV1HboGJ/gEfKwrXbXN54G0deH0vy3Nxkym9Ijve2p+PL rGkC6LQrKI4kAKmlrstQHb251EBicNEFZNaazs2myuEws3oNx2GetwZQNlbmZ4SQ mk/N8oQK4/GeyW4opQTIiGAN34kJ4ggz650ZFgbwSCd/kQhRO0OV9UXH5TmGisrJ E97uFNNAgu1+dADX4yGze+NrMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIo63Uwt Bhz9AlgtxADIqV/AAhBvMB8GA1UdIwQYMBaAFAWrbOd0BckER/J7thIAsqQx3krc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS80MTU4NDYzQTBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi9CYXRzNTNRRnlRUkg4bnUyRWdDeXBESGVT dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhdHM1M1FGeVFSSDhudTJFZ0N5cERIZVN0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS80MTU4NDYzQTBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi9CYXRzNTNRRnlR Ukg4bnUyRWdDeXBESGVTdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChzatqVISBiBxTlmM2Lfopd7HIUBOOLrbDojH57015BPQgO9w9gIp0 QU9Dv3fEu1OFzCuXG6yZ8myeWR/waBJb3wJDfjjJUvWargYeWXWQzoNP9s6yPbW7 yv4BGqdbn6fPROPAMXUOq0YnWtSAH9S+HKcYYJPg39l/J9wbPjl3op0SY8sn81We wRBdJfG5QtYoFARVEYqt8NE07z48A3Nuj0YqDFq+M/0RwYz2RMXMb1BYdBPOqIO4 94FsYnZdb91QYTsnMDWx2mse/zK0mkmVRvoUfPYtVFHBvPbkrYGOkdQ4ZV1FXyrl pfAhh/kFXVdOA09DiBwKeO3H0/dQ6uZQ -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:45 2025 by rpki-client