$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json) Hash identifier: RJJ3FFeMAtcJvmI6ryHktzZYS3w5m9kzx6XuBCtpPrA= Subject key identifier: B3:13:D6:76:29:AD:3D:21:A2:7D:BE:A2:34:4B:89:C7:AC:01:E8:D2 Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft Manifest number: 033D Signing time: Sat 23 Aug 2025 01:18:49 +0000 Manifest this update: Sat 23 Aug 2025 01:18:49 +0000 Manifest next update: Sat 30 Aug 2025 01:18:49 +0000 Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: LbM94BnB8Oko9P1rCaDtJCdZgT8TyLCYWZS6JuXnQl4=) 2: 52801AD8D07111ECAF21A75DC4F9AE02.roa (hash: LqXeoNf4rZXMYr+S4C+rSHRCOdc5ivPe/GH6EvrlUBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Validity Not Before: Aug 23 01:18:49 2025 GMT Not After : Aug 30 01:18:49 2025 GMT Subject: CN=68a916f9-2f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2a:93:ac:9a:45:08:cf:ef:a9:5a:84:d2:2f: a8:49:6f:f9:04:e6:b3:d2:57:90:26:dc:52:cb:00: ef:8a:57:26:5e:e5:8f:65:4a:5f:b5:eb:2d:51:2c: 20:c2:0e:58:b3:67:7a:cd:1c:3e:d4:3a:0f:b9:72: 51:65:9d:68:9c:1c:88:63:71:ce:ab:e8:fb:27:ad: b1:06:2c:da:10:33:82:a2:b8:78:0d:66:0b:bf:e2: bd:84:4b:11:aa:a6:78:bb:0e:8b:44:8e:16:17:cb: 53:91:6d:48:17:f3:e9:d6:b1:88:98:06:12:c0:46: 87:27:b5:30:7f:cf:a1:20:f8:3f:01:96:4a:3e:5e: d7:0c:cb:10:a7:ec:dc:bb:b8:45:f1:ca:6a:cb:03: 61:b3:69:44:4b:13:48:23:38:fe:28:03:5b:cc:3e: b3:d4:40:55:a8:e2:54:1f:3b:af:93:a7:16:70:4c: 8a:0c:2a:6f:64:8c:4b:d9:82:21:98:05:c8:19:02: 62:95:72:26:39:85:00:bd:cf:e9:da:9e:d6:94:b0: 12:79:d8:dd:65:c9:34:dd:2c:ed:0a:ad:05:36:33: f7:74:c3:05:ff:e3:d0:c5:be:fa:72:eb:df:c3:f1: de:cb:2d:42:36:e8:77:df:09:7a:71:ef:8a:1e:b8: 4f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:13:D6:76:29:AD:3D:21:A2:7D:BE:A2:34:4B:89:C7:AC:01:E8:D2 X509v3 Authority Key Identifier: keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:6c:8a:21:5e:b2:76:33:c5:03:3d:41:d6:99:2a:17:55:ce: 3f:7f:10:75:ce:5f:4a:9d:02:03:44:61:a2:5b:81:11:17:13: a6:99:fb:b5:77:d9:69:f9:6e:b5:74:95:ee:1c:9c:9f:90:0d: 59:a1:a9:b0:93:40:eb:fa:55:28:fe:16:61:cc:37:37:b5:e0: 6b:68:c1:88:03:53:f9:e9:34:2c:33:5e:44:89:6f:8f:c8:48: d0:f6:cf:5d:5a:29:19:4f:8d:b8:50:11:58:ea:33:b4:23:95: 2f:d3:59:be:ae:54:3e:bc:63:a5:bf:e9:78:de:fa:35:7e:d1: 9d:0c:ce:f9:c1:6a:a7:ee:36:a6:24:07:a0:54:25:7f:11:a3: 6c:99:b9:2c:56:e6:2e:7a:09:42:7a:dd:2d:4d:73:54:cf:9c: df:67:8c:d5:84:47:3f:df:8a:7b:e5:f8:f4:fa:c5:8a:51:b4: 89:99:48:4b:76:ec:dd:15:95:67:ee:da:a1:13:8b:70:c9:70: de:16:33:b2:e1:8b:55:a1:6b:26:90:61:11:47:5c:a3:b8:e9: ce:89:83:1c:23:16:9b:92:b9:6a:45:fc:ac:e5:07:58:8c:9c: ab:34:c0:f8:f1:44:c5:4c:0d:cd:bd:e2:c2:16:ff:24:0a:dc: 04:74:1b:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD RTc0RUVGQkIwHhcNMjUwODIzMDExODQ5WhcNMjUwODMwMDExODQ5WjAYMRYwFAYD VQQDEw02OGE5MTZmOS0yZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iqTrJpFCM/vqVqE0i+oSW/5BOaz0leQJtxSywDvilcmXuWPZUpftestUSwg wg5Ys2d6zRw+1DoPuXJRZZ1onByIY3HOq+j7J62xBizaEDOCorh4DWYLv+K9hEsR qqZ4uw6LRI4WF8tTkW1IF/Pp1rGImAYSwEaHJ7Uwf8+hIPg/AZZKPl7XDMsQp+zc u7hF8cpqywNhs2lESxNIIzj+KANbzD6z1EBVqOJUHzuvk6cWcEyKDCpvZIxL2YIh mAXIGQJilXImOYUAvc/p2p7WlLASedjdZck03SztCq0FNjP3dMMF/+PQxb76cuvf w/Heyy1CNuh33wl6ce+KHrhPMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMT1nYp rT0hon2+ojRLicesAejSMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjI0Qy9CQjUwRDlEMEQwNkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlf RUc1aGtOdy1MdWZPZE83N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAbIohXrJ2M8UDPUHWmSoXVc4/fxB1zl9KnQIDRGGiW4ERFxOmmfu1 d9lp+W61dJXuHJyfkA1Zoamwk0Dr+lUo/hZhzDc3teBraMGIA1P56TQsM15EiW+P yEjQ9s9dWikZT424UBFY6jO0I5Uv01m+rlQ+vGOlv+l43vo1ftGdDM75wWqn7jam JAegVCV/EaNsmbksVuYueglCet0tTXNUz5zfZ4zVhEc/34p75fj0+sWKUbSJmUhL duzdFZVn7tqhE4twyXDeFjOy4YtVoWsmkGERR1yjuOnOiYMcIxabkrlqRfys5QdY jJyrNMD48UTFTA3NveLCFv8kCtwEdBuV -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:07 2025 by rpki-client