$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json) Hash identifier: c9EgBjPV969Gh6W4Wf4JIL60j7IFsyGAoLd4yg6Y780= Subject key identifier: 7D:4E:40:12:15:30:D4:AE:8D:DA:60:E3:87:D1:A1:32:30:2F:EB:A2 Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Certificate serial: 035E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft Manifest number: 035A Signing time: Sun 19 Oct 2025 03:00:07 +0000 Manifest this update: Sun 19 Oct 2025 03:00:06 +0000 Manifest next update: Sun 26 Oct 2025 03:00:06 +0000 Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: QgzoHROlIKE0pLD56TatNBSOUcf/krXgIU9JZeZnnm8=) 2: 52801AD8D07111ECAF21A75DC4F9AE02.roa (hash: LqXeoNf4rZXMYr+S4C+rSHRCOdc5ivPe/GH6EvrlUBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 862 (0x35e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Validity Not Before: Oct 19 03:00:06 2025 GMT Not After : Oct 26 03:00:06 2025 GMT Subject: CN=68f45436-6d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:34:16:39:15:00:10:1b:b4:38:89:b2:06: bc:74:51:26:0b:fa:d7:11:33:56:3a:bd:c8:b0:fe: 07:e3:fe:f2:75:fe:56:3f:e4:08:25:85:31:21:87: da:ff:f2:32:d6:f6:22:67:7f:98:26:3c:56:37:e9: 04:ad:0c:a6:0c:66:fb:81:f6:46:4b:6f:b4:50:4b: 34:d4:2f:60:54:1c:79:71:f2:d0:cb:23:f5:4b:b5: 22:e5:57:43:be:38:92:21:25:03:5f:c2:a2:7d:8f: 35:e2:28:7f:b3:c5:f5:1a:0c:f2:c2:32:ee:6a:7c: 97:3e:ba:b4:9f:73:a3:20:4f:cd:c2:fe:e9:13:89: 29:e7:e9:b9:b3:54:c6:c9:bb:0b:0d:1a:a6:81:b8: 5d:a1:6b:9d:44:1d:c9:0c:8b:a7:5a:cb:45:40:62: eb:59:1d:a2:82:f1:6e:da:09:62:f2:84:0c:ed:a0: 85:12:c7:34:95:1e:48:59:f7:d5:a5:22:f7:f3:4f: 1d:bf:88:9f:4a:69:d9:85:84:fe:e9:d8:78:30:fb: 90:4e:15:84:db:1f:5f:f2:e4:8c:3e:08:95:d6:61: 5f:e4:10:02:4a:f2:53:db:6a:ff:31:c7:dd:15:e9: 17:69:91:91:f1:47:e4:85:97:91:30:b9:36:53:46: 3a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4E:40:12:15:30:D4:AE:8D:DA:60:E3:87:D1:A1:32:30:2F:EB:A2 X509v3 Authority Key Identifier: keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d9:9e:b0:1e:db:07:f9:04:fe:34:88:25:2a:a7:d6:04:b5: a9:c1:47:bb:b3:93:00:cb:2c:e1:66:67:ec:94:64:f8:c5:1f: 60:44:95:2f:76:b8:3c:6e:5e:f6:1d:6e:12:74:0b:29:0e:28: c9:85:0a:c9:9f:5d:a5:57:37:73:c6:d3:70:aa:24:d5:78:96: 87:f0:b0:a2:ba:bb:44:67:b3:32:44:3e:b3:a8:5c:cc:b6:30: 9a:b4:f7:00:63:d7:20:dc:77:f6:c3:d3:47:5e:a6:c7:bf:3a: db:51:67:e3:fa:bd:5d:01:f8:75:a3:26:c1:e2:a3:89:be:c8: 40:bb:53:15:52:29:c2:5b:35:40:32:82:c4:6a:0f:ca:e4:5d: 47:72:38:a6:9f:31:7a:3b:20:91:a8:4e:c2:1a:81:d2:cd:2c: 3e:77:65:e2:07:dd:62:89:4c:08:f3:cb:70:8a:78:fc:0c:40: 46:6f:41:47:15:ac:45:d5:f1:7f:a8:c0:b3:b9:9e:35:e4:3e: 37:5b:f7:f4:f6:c7:de:37:d2:44:05:ea:d7:33:8d:14:9a:44: 43:9f:c2:ae:f6:f2:dc:6b:cf:02:34:fb:5e:02:6f:8e:f7:c1: de:4b:20:75:1e:3e:97:56:1f:d4:2d:7f:fe:1e:39:db:0a:22: 47:01:56:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD RTc0RUVGQkIwHhcNMjUxMDE5MDMwMDA2WhcNMjUxMDI2MDMwMDA2WjAYMRYwFAYD VQQDEw02OGY0NTQzNi02ZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCs0FjkVABAbtDiJsga8dFEmC/rXETNWOr3IsP4H4/7ydf5WP+QIJYUxIYfa //Iy1vYiZ3+YJjxWN+kErQymDGb7gfZGS2+0UEs01C9gVBx5cfLQyyP1S7Ui5VdD vjiSISUDX8KifY814ih/s8X1GgzywjLuanyXPrq0n3OjIE/Nwv7pE4kp5+m5s1TG ybsLDRqmgbhdoWudRB3JDIunWstFQGLrWR2igvFu2gli8oQM7aCFEsc0lR5IWffV pSL3808dv4ifSmnZhYT+6dh4MPuQThWE2x9f8uSMPgiV1mFf5BACSvJT22r/Mcfd FekXaZGR8UfkhZeRMLk2U0Y6QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1OQBIV MNSujdpg44fRoTIwL+uiMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjI0Qy9CQjUwRDlEMEQwNkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlf RUc1aGtOdy1MdWZPZE83N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK2Z6wHtsH+QT+NIglKqfWBLWpwUe7s5MAyyzhZmfslGT4xR9gRJUv drg8bl72HW4SdAspDijJhQrJn12lVzdzxtNwqiTVeJaH8LCiurtEZ7MyRD6zqFzM tjCatPcAY9cg3Hf2w9NHXqbHvzrbUWfj+r1dAfh1oybB4qOJvshAu1MVUinCWzVA MoLEag/K5F1HcjimnzF6OyCRqE7CGoHSzSw+d2XiB91iiUwI88twinj8DEBGb0FH FaxF1fF/qMCzuZ415D43W/f09sfeN9JEBerXM40UmkRDn8Ku9vLca88CNPteAm+O 98HeSyB1Hj6XVh/ULX/+HjnbCiJHAVZ8 -----END CERTIFICATE-----Generated at Mon Oct 20 12:43:43 2025 by rpki-client