$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft File: ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft (raw, json) Hash identifier: o4Hi/OpuF37dVxp/tBWr19A/35zc2Uscj3PRJXkog/0= Subject key identifier: F4:5A:74:9C:94:A2:66:9D:15:B9:55:9D:68:A8:74:70:31:07:DA:77 Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7 Certificate issuer: /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7 Certificate serial: 088F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft Manifest number: 085B Signing time: Mon 20 Oct 2025 21:38:14 +0000 Manifest this update: Mon 20 Oct 2025 21:38:13 +0000 Manifest next update: Mon 27 Oct 2025 21:38:13 +0000 Files and hashes: 1: ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl (hash: bbUB1gY7J3Iry/46r8QpE85vKdpWw+Czpu+vXmPksA4=) 2: 653B503C5C3C11ED9B4FAB0BC4F9AE02.roa (hash: 1mD7CDJ8DRk+lM8vtNVrHgkyHQbdyBW6ydIVEiLBivE=) 3: 1D2381425E5F11EC870D9676C4F9AE02.roa (hash: ZUd4QbCdB3E4EQBK+nU5VmSSyQaDu0ItsbLfbY5xMOQ=) 4: 67591AB22FC911EBA360EC1CC4F9AE02.roa (hash: esocmtJlq7HlcotlDHp6Mez+z9Rl0fTX+KzbKTLXFms=) 5: 9EA66A9E737D11ECA0A3A018C4F9AE02.roa (hash: 6MugAT5WUA7wa54QdXsUcpbkyeNKtczQJ8hnMQYoyDw=) 6: E1582B782A6011EB8DEF2641C4F9AE02.roa (hash: g9vu6FJuOGiHVWjvlUrnr/lO98Du1rwPNicgo4vRrvk=) 7: E1E4F9902A6011EB8DEF2641C4F9AE02.roa (hash: GxNJ1GJyLCfG1wd+tTkjUWqW3q5g76ObJBXzG7SEDaI=) 8: E0A4E5182A6011EB8DEF2641C4F9AE02.roa (hash: LmiT/78vJYPXtCg/vYC5cyA6e51c5z/fGkAk3TxGErM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7 Validity Not Before: Oct 20 21:38:13 2025 GMT Not After : Oct 27 21:38:13 2025 GMT Subject: CN=68f6abc5-4ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f6:c8:e7:bc:00:7d:1f:b1:ae:a1:ab:6e:44: 04:d7:7e:13:6a:a9:b9:42:08:26:ad:24:2a:49:d5: 90:9b:c5:26:86:03:b7:17:54:47:62:10:fd:f0:a9: 5a:b7:2c:12:30:4c:f9:ca:ff:6f:89:5a:63:18:0c: d4:0d:e2:b2:d3:3a:b9:49:9a:58:29:05:67:7f:1a: 9b:05:7a:0d:3b:28:53:9e:4c:43:1f:35:83:6c:97: bd:54:17:0a:66:52:8a:24:62:a8:ae:90:1e:e6:87: ca:1b:3d:27:8e:da:16:69:1b:aa:64:a1:2c:39:d1: 05:c5:29:44:95:99:4d:7b:4f:59:ca:60:91:06:aa: 1f:17:4c:ff:49:4c:da:d9:4d:e5:aa:28:71:8b:f2: 38:36:79:e2:b0:57:81:e0:92:5f:04:e2:a3:13:96: c7:ad:0b:1c:33:a0:b1:7e:63:da:9d:55:b4:b5:cf: 76:d6:1c:49:85:f2:a2:f9:4f:7d:fe:5a:8b:e7:ff: fe:5c:79:fa:eb:03:e1:8b:55:01:1d:6f:b5:49:09: 83:1f:d6:d0:29:7f:a8:4f:03:ac:57:9b:51:e3:35: ad:bb:41:b5:ab:92:2f:8f:7f:47:97:cf:21:27:7f: cd:87:e2:3c:72:f8:2c:ed:8c:a3:af:b8:2b:c6:0e: ff:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5A:74:9C:94:A2:66:9D:15:B9:55:9D:68:A8:74:70:31:07:DA:77 X509v3 Authority Key Identifier: keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:24:7b:a7:62:28:dc:0e:68:22:35:2f:2a:10:ef:78:a9:e1: fc:4a:b3:fa:1b:56:0b:b5:c7:c0:d2:6f:7e:80:5f:e6:c3:e9: 53:a6:b3:da:ac:f7:c3:1d:48:6f:64:fe:07:26:ad:f5:fe:e1: 8a:d3:e4:84:3e:c3:a8:f2:6a:0d:8c:09:1f:92:c0:dd:91:a9: 72:f5:94:cb:2b:8f:59:64:b6:67:a5:4f:55:2d:1d:85:b8:9e: af:12:0a:c4:45:9a:9c:d3:17:89:69:83:1d:13:da:15:6f:1a: 95:b5:da:7d:f1:1f:0c:5d:45:76:21:ce:88:79:72:6a:99:56: a5:d3:8b:6a:6f:0d:cf:ea:c0:fc:2d:92:05:94:7b:09:cd:59: 2c:52:7a:06:e3:f9:aa:11:bf:a9:ef:e6:b4:5e:1b:0f:ab:53: 14:70:79:6b:bf:73:ac:c7:39:a3:0e:0a:e2:b8:55:d6:97:4b: 2f:2e:58:49:43:5b:59:b5:e5:02:48:92:5c:37:5b:f1:c6:f9: 99:22:74:e4:97:e9:e8:d5:da:51:72:1d:05:64:0a:25:f0:7b: 00:4e:d3:aa:e9:6b:d1:b9:9a:98:1c:98:78:58:a2:91:00:c2: a1:6e:6e:4c:e2:e5:a4:cc:a4:e5:0f:5f:0a:93:e0:29:f1:12: fd:30:e8:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDA3MjdBQUM1QjhDRjdGRTY4Q0NENkRFNzdGNkM4QjQ2 RDU3NEZBQTcwHhcNMjUxMDIwMjEzODEzWhcNMjUxMDI3MjEzODEzWjAYMRYwFAYD VQQDEw02OGY2YWJjNS00ZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fbI57wAfR+xrqGrbkQE134Taqm5QggmrSQqSdWQm8UmhgO3F1RHYhD98Kla tywSMEz5yv9viVpjGAzUDeKy0zq5SZpYKQVnfxqbBXoNOyhTnkxDHzWDbJe9VBcK ZlKKJGKorpAe5ofKGz0njtoWaRuqZKEsOdEFxSlElZlNe09ZymCRBqofF0z/SUza 2U3lqihxi/I4NnnisFeB4JJfBOKjE5bHrQscM6CxfmPanVW0tc921hxJhfKi+U99 /lqL5//+XHn66wPhi1UBHW+1SQmDH9bQKX+oTwOsV5tR4zWtu0G1q5Ivj39Hl88h J3/Nh+I8cvgs7Yyjr7grxg7/fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRadJyU omadFblVnWiodHAxB9p3MB8GA1UdIwQYMBaAFAcnqsW4z3/mjM1t539si0bVdPqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GNEJENTAwOEUw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYtYU16VzNuZjJ5TFJ0VjAt cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J5ZXF4YmpQZi1hTXpXM25mMnlMUnRWMC1xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GNEJENTAwOEUwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYt YU16VzNuZjJ5TFJ0VjAtcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyJHunYijcDmgiNS8qEO94qeH8SrP6G1YLtcfA0m9+gF/mw+lTprPa rPfDHUhvZP4HJq31/uGK0+SEPsOo8moNjAkfksDdkaly9ZTLK49ZZLZnpU9VLR2F uJ6vEgrERZqc0xeJaYMdE9oVbxqVtdp98R8MXUV2Ic6IeXJqmVal04tqbw3P6sD8 LZIFlHsJzVksUnoG4/mqEb+p7+a0XhsPq1MUcHlrv3OsxzmjDgriuFXWl0svLlhJ Q1tZteUCSJJcN1vxxvmZInTkl+no1dpRch0FZAol8HsATtOq6WvRuZqYHJh4WKKR AMKhbm5M4uWkzKTlD18Kk+Ap8RL9MOjQ -----END CERTIFICATE-----Generated at Tue Oct 21 02:01:32 2025 by rpki-client