$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft File: bath0S4_GW9RaThyPIAnWZxddVI.mft (raw, json) Hash identifier: ZaFFhRzX4rAWrbHP4vaJOGoXDHKzLpkAlXMRtLnNvnU= Subject key identifier: D7:5B:21:19:BE:B3:EE:CD:14:D5:63:87:B0:F7:70:A9:04:A6:F9:E1 Authority key identifier: 6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52 Certificate issuer: /CN=A91CEBCC/serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft Manifest number: AE Signing time: Sun 11 May 2025 04:51:19 +0000 Manifest this update: Sun 11 May 2025 04:51:19 +0000 Manifest next update: Sun 18 May 2025 04:51:19 +0000 Files and hashes: 1: bath0S4_GW9RaThyPIAnWZxddVI.crl (hash: xvL9AGR2nDQ90iNAKj1ROqljlQIxO+UNHY/EKZ35XcI=) 2: F2022074272711EF91A40124C4F9AE02.roa (hash: xhUsDiNlcxZBUBnV9JFR4AclyG5SZwCFLfalTWcGiyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCC, serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552 Validity Not Before: May 11 04:51:19 2025 GMT Not After : May 18 04:51:19 2025 GMT Subject: CN=68202cc7-53bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e6:fc:cc:d8:95:70:56:a5:fc:d9:db:ec:29: 79:d3:ec:33:bf:4d:35:b4:ef:75:f9:27:72:e0:03: 5b:98:3c:b9:10:46:6b:e8:63:6b:19:a3:fc:51:76: 5b:31:16:c2:47:26:3d:1e:a7:21:86:da:9d:a8:75: 29:19:2c:9c:0e:12:b5:c7:17:6e:45:e3:e0:10:90: 24:96:58:8a:5e:90:de:a7:2a:fd:be:ec:96:ab:23: 5f:36:c0:5a:4c:da:9b:11:a8:3e:78:79:0e:de:2a: 45:46:6f:e0:f1:3e:bc:76:09:10:0c:33:81:2a:07: 41:4f:5a:89:2c:b0:05:30:ed:28:bc:1c:56:28:65: c4:91:7a:4c:bc:ec:36:d9:fd:c8:36:bc:c3:0f:f7: ee:66:d3:ad:1d:cc:32:ed:c4:fd:77:9b:c4:b8:ec: 1f:50:27:46:14:38:d4:cc:3c:db:c6:fb:c4:03:59: 8d:98:a0:56:41:50:56:76:5b:7b:ae:69:65:51:21: 4c:75:e9:cd:64:0e:13:ed:a4:f9:af:4e:fb:76:c0: e0:8c:ad:3a:f5:24:42:77:95:bc:4d:1b:55:a9:f4: 9a:d7:13:99:a1:89:2f:31:ff:ab:a8:05:55:45:a7: 9c:b8:45:53:f4:64:fc:05:46:bd:d7:ad:78:a0:2e: b7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5B:21:19:BE:B3:EE:CD:14:D5:63:87:B0:F7:70:A9:04:A6:F9:E1 X509v3 Authority Key Identifier: keyid:6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:96:e9:52:f6:d5:76:c7:3d:51:0b:81:f2:51:2c:19:64:03: 52:6a:53:51:ea:d2:fd:19:bc:95:c4:c4:01:79:36:18:5a:5b: ae:d0:44:26:18:3c:d8:15:ef:37:90:37:64:06:00:bf:08:b8: 25:85:c9:ae:50:7e:41:17:9f:8e:52:21:ca:ec:50:c1:24:59: 93:04:8b:7b:75:9e:79:1d:0a:91:e3:40:2f:2b:1a:8f:46:cf: 55:2f:80:e4:07:a3:f6:5e:38:cf:dd:cc:1c:ea:98:b4:e3:43: 26:e3:42:5a:04:38:1b:3c:16:08:ff:0b:76:b1:b1:41:15:9b: 54:52:e5:89:05:de:b7:92:28:1f:3a:f8:df:9e:1e:c4:99:e3: e7:83:67:ce:2b:df:91:79:f9:24:b6:be:62:30:9b:6c:a3:c9: 38:c5:9f:ee:c5:0f:e0:09:bb:b1:03:e3:25:2a:d1:0e:e1:9c: 32:57:04:e7:ff:f0:bc:fe:7b:31:b3:46:a1:c8:2c:47:64:d3: d5:c7:02:e8:36:88:63:51:10:8f:91:45:22:db:97:0d:2f:8e: c8:e9:7f:46:1d:e3:40:fc:ca:90:47:d7:d6:ba:58:b7:98:7b: 32:ad:35:76:0f:8a:c8:ad:6b:ce:c8:39:c7:81:37:7c:92:c1: 52:6f:be:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0MxMTAvBgNVBAUTKDZEQUI2MUQxMkUzRjE5NkY1MTY5Mzg3MjNDODAyNzU5 OUM1RDc1NTIwHhcNMjUwNTExMDQ1MTE5WhcNMjUwNTE4MDQ1MTE5WjAYMRYwFAYD VQQDEw02ODIwMmNjNy01M2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5eb8zNiVcFal/Nnb7Cl50+wzv001tO91+Sdy4ANbmDy5EEZr6GNrGaP8UXZb MRbCRyY9HqchhtqdqHUpGSycDhK1xxduRePgEJAklliKXpDepyr9vuyWqyNfNsBa TNqbEag+eHkO3ipFRm/g8T68dgkQDDOBKgdBT1qJLLAFMO0ovBxWKGXEkXpMvOw2 2f3INrzDD/fuZtOtHcwy7cT9d5vEuOwfUCdGFDjUzDzbxvvEA1mNmKBWQVBWdlt7 rmllUSFMdenNZA4T7aT5r077dsDgjK069SRCd5W8TRtVqfSa1xOZoYkvMf+rqAVV RaecuEVT9GT8BUa91614oC637wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdbIRm+ s+7NFNVjh7D3cKkEpvnhMB8GA1UdIwQYMBaAFG2rYdEuPxlvUWk4cjyAJ1mcXXVS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQy8yQUU4OTgxQTI3 MjcxMUVGOTE0M0U2MjJDNEY5QUUwMi9iYXRoMFM0X0dXOVJhVGh5UElBbldaeGRk VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhdGgwUzRfR1c5UmFUaHlQSUFuV1p4ZGRWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQy8yQUU4OTgxQTI3MjcxMUVGOTE0M0U2MjJDNEY5QUUwMi9iYXRoMFM0X0dX OVJhVGh5UElBbldaeGRkVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBylulS9tV2xz1RC4HyUSwZZANSalNR6tL9GbyVxMQBeTYYWluu0EQm GDzYFe83kDdkBgC/CLglhcmuUH5BF5+OUiHK7FDBJFmTBIt7dZ55HQqR40AvKxqP Rs9VL4DkB6P2XjjP3cwc6pi040Mm40JaBDgbPBYI/wt2sbFBFZtUUuWJBd63kigf Ovjfnh7EmePng2fOK9+Refkktr5iMJtso8k4xZ/uxQ/gCbuxA+MlKtEO4ZwyVwTn //C8/nsxs0ahyCxHZNPVxwLoNohjURCPkUUi25cNL47I6X9GHeNA/MqQR9fWuli3 mHsyrTV2D4rIrWvOyDnHgTd8ksFSb760 -----END CERTIFICATE-----Generated at Mon May 12 16:21:35 2025 by rpki-client