$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft File: ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft (raw, json) Hash identifier: sal3VWO0SrFZKipHNuT/EqkpkKw+fVPivsfjg/YQElM= Subject key identifier: 78:B1:33:0B:04:80:22:D6:20:4E:05:15:23:09:5F:69:DD:34:29:B4 Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7 Certificate issuer: /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7 Certificate serial: 0857 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft Manifest number: 0823 Signing time: Wed 02 Jul 2025 21:08:11 +0000 Manifest this update: Wed 02 Jul 2025 21:08:10 +0000 Manifest next update: Wed 09 Jul 2025 21:08:10 +0000 Files and hashes: 1: ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl (hash: R5NyAWfKc1aFtDrhKZuGw8S0ubwq2UFj3vQrMU+dTJI=) 2: 653B503C5C3C11ED9B4FAB0BC4F9AE02.roa (hash: 1mD7CDJ8DRk+lM8vtNVrHgkyHQbdyBW6ydIVEiLBivE=) 3: 1D2381425E5F11EC870D9676C4F9AE02.roa (hash: ZUd4QbCdB3E4EQBK+nU5VmSSyQaDu0ItsbLfbY5xMOQ=) 4: 67591AB22FC911EBA360EC1CC4F9AE02.roa (hash: esocmtJlq7HlcotlDHp6Mez+z9Rl0fTX+KzbKTLXFms=) 5: 9EA66A9E737D11ECA0A3A018C4F9AE02.roa (hash: 6MugAT5WUA7wa54QdXsUcpbkyeNKtczQJ8hnMQYoyDw=) 6: E1582B782A6011EB8DEF2641C4F9AE02.roa (hash: g9vu6FJuOGiHVWjvlUrnr/lO98Du1rwPNicgo4vRrvk=) 7: E1E4F9902A6011EB8DEF2641C4F9AE02.roa (hash: GxNJ1GJyLCfG1wd+tTkjUWqW3q5g76ObJBXzG7SEDaI=) 8: E0A4E5182A6011EB8DEF2641C4F9AE02.roa (hash: LmiT/78vJYPXtCg/vYC5cyA6e51c5z/fGkAk3TxGErM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2135 (0x857) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7 Validity Not Before: Jul 2 21:08:10 2025 GMT Not After : Jul 9 21:08:10 2025 GMT Subject: CN=68659fbb-1180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5b:1b:6d:5e:79:b0:00:04:47:bd:cf:b2:73: 19:d5:25:3f:25:f4:a1:11:49:4b:51:d9:20:de:a4: e1:1c:53:53:7a:e7:04:d1:00:58:63:15:67:81:0b: ec:18:43:48:90:64:bc:ea:72:0a:2d:87:0f:cb:01: 9b:52:aa:91:b9:c7:91:76:db:cb:3b:15:00:06:29: b9:4a:c0:d7:e2:30:df:80:08:cd:96:b1:0d:b9:6a: 75:22:60:d0:c5:fc:76:43:4c:69:94:4d:ad:5f:ef: b5:98:5c:25:51:d9:ea:c8:1c:c8:6b:3d:78:5e:f4: 32:25:93:9e:23:fa:ee:ce:f7:11:e6:45:88:9e:77: 0d:4b:c3:95:a8:c6:a0:38:44:0b:fa:5e:08:51:74: ae:34:49:7a:6e:f8:ec:88:bb:88:bd:7b:61:57:84: 58:28:c1:65:d8:fe:67:67:fb:c7:ab:96:4f:11:e5: dc:85:12:55:fe:11:a9:68:16:1e:60:87:cd:66:09: d8:a0:ae:dd:3c:a8:fd:87:c1:62:a8:8f:fb:44:38: 9d:6b:5b:a1:cb:7d:6d:99:3a:da:23:8f:78:02:38: 1c:14:1c:a5:20:36:d4:c0:44:d9:f3:a0:ba:df:23: cf:88:a0:cc:40:49:47:fe:be:15:40:ea:0f:a6:92: 96:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B1:33:0B:04:80:22:D6:20:4E:05:15:23:09:5F:69:DD:34:29:B4 X509v3 Authority Key Identifier: keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d7:82:56:34:88:03:2b:43:a6:e4:0a:17:1b:95:6a:5c:b0: 41:ad:f6:32:d8:b5:15:e6:b6:c9:e3:16:1a:8a:ce:64:5d:75: 2f:3d:75:c8:25:d0:a3:f3:87:68:ea:33:a2:41:56:6d:e6:ba: ae:88:28:6c:77:bf:f3:0e:ad:3c:bd:7f:7e:6e:4a:71:07:77: 5a:32:ff:1c:45:2b:93:c3:34:18:b6:f9:6d:6a:0d:55:cf:e8: 6a:7e:00:ba:0b:c2:dd:d7:ad:17:d0:0e:82:bc:f8:e9:64:bd: d6:69:33:be:8f:1a:9f:e6:06:2a:1c:b8:7a:c9:5b:50:66:17: 7a:be:6e:47:b8:f6:55:67:57:2a:02:3c:04:34:f0:e0:ab:3a: 4b:6f:45:b1:73:b8:0d:2b:89:c8:19:50:b2:d2:39:49:03:4e: 54:d4:25:1a:0a:f8:98:0a:0c:bc:92:d4:a1:bc:97:83:2f:b7: b2:95:de:c4:2b:fa:c7:21:f0:27:83:56:be:58:67:5f:3d:c9: 26:b3:59:9e:22:a5:40:81:93:7d:01:d5:79:33:b9:be:bd:66: 7f:72:2e:75:5f:34:88:02:e4:9b:c0:d9:e6:62:52:79:c9:ec: d6:fb:8e:e1:c5:ad:69:6d:31:09:df:19:88:e2:63:ff:2c:52: 70:22:68:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDA3MjdBQUM1QjhDRjdGRTY4Q0NENkRFNzdGNkM4QjQ2 RDU3NEZBQTcwHhcNMjUwNzAyMjEwODEwWhcNMjUwNzA5MjEwODEwWjAYMRYwFAYD VQQDEw02ODY1OWZiYi0xMTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51sbbV55sAAER73PsnMZ1SU/JfShEUlLUdkg3qThHFNTeucE0QBYYxVngQvs GENIkGS86nIKLYcPywGbUqqRuceRdtvLOxUABim5SsDX4jDfgAjNlrENuWp1ImDQ xfx2Q0xplE2tX++1mFwlUdnqyBzIaz14XvQyJZOeI/ruzvcR5kWInncNS8OVqMag OEQL+l4IUXSuNEl6bvjsiLuIvXthV4RYKMFl2P5nZ/vHq5ZPEeXchRJV/hGpaBYe YIfNZgnYoK7dPKj9h8FiqI/7RDida1uhy31tmTraI494AjgcFBylIDbUwETZ86C6 3yPPiKDMQElH/r4VQOoPppKWjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHixMwsE gCLWIE4FFSMJX2ndNCm0MB8GA1UdIwQYMBaAFAcnqsW4z3/mjM1t539si0bVdPqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GNEJENTAwOEUw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYtYU16VzNuZjJ5TFJ0VjAt cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J5ZXF4YmpQZi1hTXpXM25mMnlMUnRWMC1xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GNEJENTAwOEUwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYt YU16VzNuZjJ5TFJ0VjAtcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk14JWNIgDK0Om5AoXG5VqXLBBrfYy2LUV5rbJ4xYais5kXXUvPXXI JdCj84do6jOiQVZt5rquiChsd7/zDq08vX9+bkpxB3daMv8cRSuTwzQYtvltag1V z+hqfgC6C8Ld160X0A6CvPjpZL3WaTO+jxqf5gYqHLh6yVtQZhd6vm5HuPZVZ1cq AjwENPDgqzpLb0Wxc7gNK4nIGVCy0jlJA05U1CUaCviYCgy8ktShvJeDL7eyld7E K/rHIfAng1a+WGdfPckms1meIqVAgZN9AdV5M7m+vWZ/ci51XzSIAuSbwNnmYlJ5 yezW+47hxa1pbTEJ3xmI4mP/LFJwImhB -----END CERTIFICATE-----Generated at Thu Jul 3 21:47:37 2025 by rpki-client