$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json) Hash identifier: 0HgqyG66IJZPsyUibkQEQoW8SZBwaoJYSU1bfqDIoYA= Subject key identifier: DF:D6:67:FE:A8:E2:03:BE:2D:7E:10:EF:90:DA:5E:7C:8E:4B:60:80 Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Certificate serial: 03CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft Manifest number: 03C5 Signing time: Wed 13 May 2026 00:44:53 +0000 Manifest this update: Wed 13 May 2026 00:44:52 +0000 Manifest next update: Wed 20 May 2026 00:44:52 +0000 Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: gmA5RddDX5vp++1DbZMqsSWuCL2gg21BTmQpFB763b8=) 2: 57883938B4E411F0AEF0381FC4F9AE02.roa (hash: tRVxcIftzJMb6hfa4ByEW74xsmKnvcvfoDwWiT9x6XQ=) 3: 58699F5EB4E411F0AEF0381FC4F9AE02.roa (hash: SjCwwc0/l3mFASjbgIcuYJLD81TjGrpnKmBVX4rmehQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Validity Not Before: May 13 00:44:52 2026 GMT Not After : May 20 00:44:52 2026 GMT Subject: CN=6a03c985-7692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2d:c9:2d:08:2c:84:ef:c6:a2:20:db:5c:2f: 3c:ed:5e:88:b3:b0:e0:e7:ed:d8:a4:4e:6c:c3:63: 5b:85:c0:1f:c7:c1:f0:b4:3a:ed:28:3e:7c:97:6f: ed:77:39:08:9e:37:6e:d7:35:ce:5d:e8:ca:48:b5: dd:0c:d2:2e:dd:89:33:63:01:ae:9a:65:dc:91:14: cb:ee:0e:da:59:72:60:43:bb:96:d2:33:77:22:75: 66:2f:e2:a1:e5:11:a8:7b:cf:3b:1d:aa:a8:3f:fe: 00:59:36:74:99:52:6d:d4:6c:58:79:05:17:13:e5: b8:97:8b:7c:fb:8e:bd:a3:53:b2:a0:63:e6:65:ac: 23:da:f8:a7:b0:fe:4c:ed:8f:d2:af:b0:84:f7:15: aa:57:6c:a6:da:d1:e4:77:9a:e8:94:59:ef:21:fe: 6e:ec:b4:9d:3c:e8:48:3e:f5:29:fa:9c:64:da:d6: 24:aa:fa:b1:48:1f:82:59:6b:91:1d:1c:f4:d9:b4: 5b:65:09:0f:f2:be:ef:fa:8f:08:5b:cc:12:1d:df: c2:95:b8:ff:59:e9:4f:8b:a5:18:e2:18:91:7b:8f: be:10:af:07:8d:7c:88:9e:63:39:32:78:ca:13:3a: 0d:99:97:86:7f:cd:19:59:eb:fc:aa:f6:ba:ca:4a: 96:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D6:67:FE:A8:E2:03:BE:2D:7E:10:EF:90:DA:5E:7C:8E:4B:60:80 X509v3 Authority Key Identifier: keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:b4:25:63:37:a7:86:a0:60:67:c8:72:0b:14:76:7d:a3:f3: 25:fb:22:50:a8:d8:33:11:0f:48:5d:77:e1:24:82:7f:03:a3: 68:5f:d8:9b:f7:3d:37:3c:a7:9c:cc:75:bc:29:4e:d2:34:ae: af:42:1f:ea:70:84:2b:10:97:2e:0d:54:33:39:d3:de:e0:40: dc:fd:5b:44:78:5d:cf:d9:cb:00:a6:e2:75:d0:a8:da:43:4a: 27:25:18:15:c5:b1:db:7f:b3:f5:35:a1:c2:b0:8e:22:25:fa: 41:07:a0:9f:9b:90:58:85:c8:62:52:4a:fc:f5:33:ed:20:ab: 6e:13:1e:f9:4a:e5:08:92:5e:de:8d:44:6c:7f:26:b7:81:c1: 8d:20:fd:f7:07:91:aa:97:bf:da:de:f0:06:7d:ff:0a:fd:e7: 50:b7:aa:26:ee:2e:72:07:38:3d:c7:1b:ac:b7:df:60:e9:36: a6:4d:30:d0:f0:39:75:a3:a7:e3:65:5f:79:bb:1d:55:b4:76: b4:46:aa:b9:96:4d:09:d6:5a:4e:89:9b:29:9e:7b:e1:4c:3e: 50:72:70:2b:50:d0:83:3a:3c:92:81:84:a5:64:d9:11:3a:ec: 6b:a2:07:9a:e4:cb:c8:60:64:49:76:a2:76:e5:91:00:49:15: 75:1b:e1:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD RTc0RUVGQkIwHhcNMjYwNTEzMDA0NDUyWhcNMjYwNTIwMDA0NDUyWjAYMRYwFAYD VQQDEw02YTAzYzk4NS03NjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0y3JLQgshO/GoiDbXC887V6Is7Dg5+3YpE5sw2NbhcAfx8HwtDrtKD58l2/t dzkInjdu1zXOXejKSLXdDNIu3YkzYwGummXckRTL7g7aWXJgQ7uW0jN3InVmL+Kh 5RGoe887HaqoP/4AWTZ0mVJt1GxYeQUXE+W4l4t8+469o1OyoGPmZawj2vinsP5M 7Y/Sr7CE9xWqV2ym2tHkd5rolFnvIf5u7LSdPOhIPvUp+pxk2tYkqvqxSB+CWWuR HRz02bRbZQkP8r7v+o8IW8wSHd/Clbj/WelPi6UY4hiRe4++EK8HjXyInmM5MnjK EzoNmZeGf80ZWev8qva6ykqW1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/WZ/6o 4gO+LX4Q75DaXnyOS2CAMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjI0Qy9CQjUwRDlEMEQwNkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlf RUc1aGtOdy1MdWZPZE83N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAbQlYzenhqBgZ8hyCxR2faPzJfsiUKjYMxEPSF134SSCfwOjaF/Ym/c9Nzyn nMx1vClO0jSur0If6nCEKxCXLg1UMznT3uBA3P1bRHhdz9nLAKbiddCo2kNKJyUY FcWx23+z9TWhwrCOIiX6QQegn5uQWIXIYlJK/PUz7SCrbhMe+UrlCJJe3o1EbH8m t4HBjSD99weRqpe/2t7wBn3/Cv3nULeqJu4ucgc4PccbrLffYOk2pk0w0PA5daOn 42VfebsdVbR2tEaquZZNCdZaTombKZ574Uw+UHJwK1DQgzo8koGEpWTZETrsa6IH muTLyGBkSXaiduWRAEkVdRvhyQ== -----END CERTIFICATE-----Generated at Wed May 13 09:20:06 2026 by rpki-client