$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft File: bath0S4_GW9RaThyPIAnWZxddVI.mft (raw, json) Hash identifier: rahY/QMSKNVUPZ+e4SSFlZefB5v8Y9wMrQuDDhdKgG8= Subject key identifier: 15:20:75:31:66:4D:4A:1C:C9:6F:E4:AF:E3:98:97:A3:91:B0:3C:25 Authority key identifier: 6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52 Certificate issuer: /CN=A91CEBCC/serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft Manifest number: C8 Signing time: Thu 03 Jul 2025 05:56:01 +0000 Manifest this update: Thu 03 Jul 2025 05:56:00 +0000 Manifest next update: Thu 10 Jul 2025 05:56:00 +0000 Files and hashes: 1: bath0S4_GW9RaThyPIAnWZxddVI.crl (hash: lRnqpwkb3CXtE4wrQp1pKngA4jgUcHNg00+XP9LkKYc=) 2: F2022074272711EF91A40124C4F9AE02.roa (hash: xhUsDiNlcxZBUBnV9JFR4AclyG5SZwCFLfalTWcGiyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCC, serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552 Validity Not Before: Jul 3 05:56:00 2025 GMT Not After : Jul 10 05:56:00 2025 GMT Subject: CN=68661b71-e390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d1:c9:c1:1f:f2:ff:5b:54:24:02:95:4d:88: 6c:62:6c:f9:e8:26:a7:c1:e0:37:aa:56:3e:4d:14: 59:4f:0b:e3:97:61:0f:1c:48:8d:c3:4c:54:f5:f0: 21:c2:71:bf:68:c4:8e:87:7e:30:bd:8c:9e:4a:9f: 0c:ea:ee:fb:4d:e3:86:28:33:f3:bb:8f:96:1f:e9: 1f:19:7b:d0:dd:54:b1:78:36:a5:ce:b5:10:12:49: 64:b8:71:a8:2c:89:0c:78:bc:3a:83:70:43:e0:4c: 1b:24:5a:21:5f:4d:72:d3:39:a5:04:af:06:02:1e: ea:91:66:b5:6f:65:35:6e:06:23:a4:bc:e0:d5:1c: 47:85:5f:d9:ae:4a:bd:1b:25:45:db:b0:8e:67:7d: 22:4e:15:89:d0:28:7c:42:91:1f:83:c5:25:87:ed: e3:49:f1:cc:81:30:3e:e8:59:f7:fd:b4:99:0b:66: 2a:33:c6:50:b1:f3:15:b1:41:a9:b4:42:8b:fd:17: a5:85:de:00:cd:e5:a9:97:29:8c:60:7c:4d:03:7e: 1b:37:c4:a8:b0:a9:d0:25:d1:18:30:85:1a:89:fa: 1f:df:56:ba:6b:34:ea:48:76:a2:dc:e4:01:5f:c2: f3:ab:64:64:b2:e8:4f:ac:f8:bc:aa:08:29:39:e8: a2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:20:75:31:66:4D:4A:1C:C9:6F:E4:AF:E3:98:97:A3:91:B0:3C:25 X509v3 Authority Key Identifier: keyid:6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:81:db:ac:ec:f7:20:19:b2:9f:f7:18:9e:75:04:2b:45:5f: c8:59:7c:60:1a:08:c6:04:60:4d:72:42:44:7e:b9:49:fa:d5: c1:ad:30:42:79:a0:87:17:29:90:46:89:75:1c:99:a0:10:42: 22:09:f4:cc:d5:e5:e1:0e:be:8b:33:53:6a:1a:ff:eb:70:e4: 5f:b1:d4:59:54:d8:c8:68:1a:43:77:72:c1:44:80:22:26:91: b1:49:d1:b6:48:43:b7:32:48:70:7c:36:91:06:43:c2:cf:14: 3f:c0:50:0e:da:97:a7:c2:f7:cd:2f:49:88:59:a8:68:8d:2b: ab:7f:41:84:2b:18:72:13:0e:5f:05:8c:a0:e2:43:02:3e:7e: 24:80:2f:fb:88:d6:ac:01:44:51:2e:41:6a:bf:2c:c4:87:c6: 52:1c:f7:d9:54:69:b6:34:28:f6:96:0a:0b:f7:b4:9c:d9:14: 06:85:5c:c8:62:6f:36:92:39:26:fd:be:f7:4a:d4:aa:aa:62: fa:c1:ed:b2:d2:3d:fd:8d:63:b9:93:e8:5a:8f:fd:21:a7:ab: 8c:33:83:49:dd:f4:dd:c4:bb:c3:ee:3d:38:20:27:77:36:40: 72:cb:2b:59:88:1b:ad:da:51:cd:0f:88:35:ca:ea:9c:19:fa: 89:c9:7d:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0MxMTAvBgNVBAUTKDZEQUI2MUQxMkUzRjE5NkY1MTY5Mzg3MjNDODAyNzU5 OUM1RDc1NTIwHhcNMjUwNzAzMDU1NjAwWhcNMjUwNzEwMDU1NjAwWjAYMRYwFAYD VQQDEw02ODY2MWI3MS1lMzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29HJwR/y/1tUJAKVTYhsYmz56CanweA3qlY+TRRZTwvjl2EPHEiNw0xU9fAh wnG/aMSOh34wvYyeSp8M6u77TeOGKDPzu4+WH+kfGXvQ3VSxeDalzrUQEklkuHGo LIkMeLw6g3BD4EwbJFohX01y0zmlBK8GAh7qkWa1b2U1bgYjpLzg1RxHhV/Zrkq9 GyVF27COZ30iThWJ0Ch8QpEfg8Ulh+3jSfHMgTA+6Fn3/bSZC2YqM8ZQsfMVsUGp tEKL/Relhd4AzeWplymMYHxNA34bN8SosKnQJdEYMIUaifof31a6azTqSHai3OQB X8Lzq2RksuhPrPi8qggpOeiiywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUgdTFm TUocyW/kr+OYl6ORsDwlMB8GA1UdIwQYMBaAFG2rYdEuPxlvUWk4cjyAJ1mcXXVS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQy8yQUU4OTgxQTI3 MjcxMUVGOTE0M0U2MjJDNEY5QUUwMi9iYXRoMFM0X0dXOVJhVGh5UElBbldaeGRk VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhdGgwUzRfR1c5UmFUaHlQSUFuV1p4ZGRWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQy8yQUU4OTgxQTI3MjcxMUVGOTE0M0U2MjJDNEY5QUUwMi9iYXRoMFM0X0dX OVJhVGh5UElBbldaeGRkVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkgdus7PcgGbKf9xiedQQrRV/IWXxgGgjGBGBNckJEfrlJ+tXBrTBC eaCHFymQRol1HJmgEEIiCfTM1eXhDr6LM1NqGv/rcORfsdRZVNjIaBpDd3LBRIAi JpGxSdG2SEO3MkhwfDaRBkPCzxQ/wFAO2penwvfNL0mIWahojSurf0GEKxhyEw5f BYyg4kMCPn4kgC/7iNasAURRLkFqvyzEh8ZSHPfZVGm2NCj2lgoL97Sc2RQGhVzI Ym82kjkm/b73StSqqmL6we2y0j39jWO5k+haj/0hp6uMM4NJ3fTdxLvD7j04ICd3 NkByyytZiBut2lHND4g1yuqcGfqJyX38 -----END CERTIFICATE-----Generated at Sat Jul 5 05:11:13 2025 by rpki-client