$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft File: bath0S4_GW9RaThyPIAnWZxddVI.mft (raw, json) Hash identifier: uC0DDR2fmbziacZNAfEz80TTSCMWlmZUtIydgRa40+o= Subject key identifier: 45:7F:E0:7F:CB:31:88:BC:3D:5B:11:47:D1:FE:40:36:BC:AF:47:CE Authority key identifier: 6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52 Certificate issuer: /CN=A91CEBCC/serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft Manifest number: E2 Signing time: Sat 23 Aug 2025 05:36:09 +0000 Manifest this update: Sat 23 Aug 2025 05:36:08 +0000 Manifest next update: Sat 30 Aug 2025 05:36:08 +0000 Files and hashes: 1: bath0S4_GW9RaThyPIAnWZxddVI.crl (hash: UPUSZi7luAw4X/HIaZ4PM9jzWIGsus8RcmeJLnozlrY=) 2: F2022074272711EF91A40124C4F9AE02.roa (hash: xhUsDiNlcxZBUBnV9JFR4AclyG5SZwCFLfalTWcGiyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCC, serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552 Validity Not Before: Aug 23 05:36:08 2025 GMT Not After : Aug 30 05:36:08 2025 GMT Subject: CN=68a95348-a35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:56:d1:c7:80:b6:98:4c:d9:1c:85:cb:a3:c9: aa:2e:42:06:5d:d0:d4:a6:c1:e6:98:5b:0d:d2:aa: 29:33:8e:df:cc:a3:39:49:9b:65:7f:92:5c:e2:02: c8:97:58:42:3a:bf:09:ef:f9:01:fe:a1:fa:5e:fd: e7:de:8c:ad:b4:e7:10:f3:91:54:d7:eb:d1:3e:7f: 93:f2:eb:df:ee:c1:77:b7:55:b3:5f:23:b8:3a:9d: fa:ac:92:24:36:9e:8b:86:ed:a7:ea:5e:8e:5d:4a: 2f:35:1f:c3:90:c7:34:1d:1e:97:ee:27:cb:5c:5b: 5e:dc:ad:fd:2c:99:eb:3a:c5:7d:32:43:9a:ad:12: cc:94:58:2f:2f:9e:27:47:5d:c1:7c:3f:49:b8:15: ed:a4:e0:7b:6e:2f:ad:32:c0:77:b6:0e:52:58:a9: 11:56:8b:de:36:b5:57:ba:6a:2c:8d:12:67:8c:ba: 44:62:43:c6:d3:10:9d:24:18:c6:06:73:91:d9:8a: ea:25:07:c3:ca:1e:38:96:7c:e1:46:bc:28:87:b7: 06:5b:aa:9c:23:b7:e3:5e:26:03:21:21:a1:b1:fe: 75:7d:7b:62:1f:5b:86:2e:23:de:7b:50:55:6d:9e: 32:78:3c:5c:a9:75:aa:14:e6:09:f1:70:44:5d:5c: 5d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7F:E0:7F:CB:31:88:BC:3D:5B:11:47:D1:FE:40:36:BC:AF:47:CE X509v3 Authority Key Identifier: keyid:6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:59:cb:df:e7:fe:6d:5c:33:ee:ee:f8:88:f3:0d:89:94:c3: 86:47:29:ba:b7:eb:99:37:09:8e:1c:0a:cc:5a:95:37:ef:47: d5:b0:29:1e:cf:70:ad:a1:34:fe:7c:4b:e0:4c:9e:33:bb:c1: 0a:a9:fd:b0:30:95:7e:36:d7:a6:19:77:36:3d:db:0b:de:41: 58:d3:74:60:21:d9:36:85:4e:a1:4c:41:9b:18:52:6d:e0:48: 83:d0:55:31:13:f9:0e:56:06:b2:46:7e:d3:fb:09:92:4c:b7: af:95:bf:dc:8c:97:4f:b8:90:df:03:95:84:80:5a:30:15:4d: 00:6a:c2:66:25:64:1d:d3:fa:17:c9:52:89:3f:f9:7f:6c:b3: 1c:c5:61:0c:e6:b0:7d:54:13:d1:22:7f:ca:d8:65:39:71:c7: fd:8e:5c:81:8b:54:27:59:58:9a:49:2d:09:81:ee:99:42:5c: ac:6a:ed:a2:40:72:41:19:9f:83:21:9c:99:23:81:17:06:2d: cd:e3:4e:8a:9e:35:a5:08:94:92:42:c9:a4:f1:5b:e0:5b:81: 78:19:cd:6e:14:f0:a2:6b:39:8b:b0:46:31:c8:a8:df:39:28: 00:60:fd:1b:cb:ac:6f:5c:df:b8:04:6c:2e:23:f0:51:c2:b2: 97:f8:bd:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0MxMTAvBgNVBAUTKDZEQUI2MUQxMkUzRjE5NkY1MTY5Mzg3MjNDODAyNzU5 OUM1RDc1NTIwHhcNMjUwODIzMDUzNjA4WhcNMjUwODMwMDUzNjA4WjAYMRYwFAYD VQQDEw02OGE5NTM0OC1hMzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFbRx4C2mEzZHIXLo8mqLkIGXdDUpsHmmFsN0qopM47fzKM5SZtlf5Jc4gLI l1hCOr8J7/kB/qH6Xv3n3oyttOcQ85FU1+vRPn+T8uvf7sF3t1WzXyO4Op36rJIk Np6Lhu2n6l6OXUovNR/DkMc0HR6X7ifLXFte3K39LJnrOsV9MkOarRLMlFgvL54n R13BfD9JuBXtpOB7bi+tMsB3tg5SWKkRVoveNrVXumosjRJnjLpEYkPG0xCdJBjG BnOR2YrqJQfDyh44lnzhRrwoh7cGW6qcI7fjXiYDISGhsf51fXtiH1uGLiPee1BV bZ4yeDxcqXWqFOYJ8XBEXVxd0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEV/4H/L MYi8PVsRR9H+QDa8r0fOMB8GA1UdIwQYMBaAFG2rYdEuPxlvUWk4cjyAJ1mcXXVS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQy8yQUU4OTgxQTI3 MjcxMUVGOTE0M0U2MjJDNEY5QUUwMi9iYXRoMFM0X0dXOVJhVGh5UElBbldaeGRk VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhdGgwUzRfR1c5UmFUaHlQSUFuV1p4ZGRWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQy8yQUU4OTgxQTI3MjcxMUVGOTE0M0U2MjJDNEY5QUUwMi9iYXRoMFM0X0dX OVJhVGh5UElBbldaeGRkVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEWcvf5/5tXDPu7viI8w2JlMOGRym6t+uZNwmOHArMWpU370fVsCke z3CtoTT+fEvgTJ4zu8EKqf2wMJV+NtemGXc2PdsL3kFY03RgIdk2hU6hTEGbGFJt 4EiD0FUxE/kOVgayRn7T+wmSTLevlb/cjJdPuJDfA5WEgFowFU0AasJmJWQd0/oX yVKJP/l/bLMcxWEM5rB9VBPRIn/K2GU5ccf9jlyBi1QnWViaSS0Jge6ZQlysau2i QHJBGZ+DIZyZI4EXBi3N406KnjWlCJSSQsmk8VvgW4F4Gc1uFPCiazmLsEYxyKjf OSgAYP0by6xvXN+4BGwuI/BRwrKX+L1o -----END CERTIFICATE-----Generated at Sat Aug 23 17:13:34 2025 by rpki-client