$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft File: byZ-RWYIP-sjaiw5I7cDlgC955Q.mft (raw, json) Hash identifier: ZtSVlgBhsRmKYVKCD1bBopcRmJK+oC09X8mjuc6YIMo= Subject key identifier: 80:EB:99:70:BD:49:AF:26:83:AF:97:92:BE:A0:1D:4D:A3:06:F2:BA Authority key identifier: 6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94 Certificate issuer: /CN=A91E0C24/serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794 Certificate serial: 0B18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft Manifest number: 0B01 Signing time: Mon 12 May 2025 19:12:16 +0000 Manifest this update: Mon 12 May 2025 19:12:16 +0000 Manifest next update: Mon 19 May 2025 19:12:16 +0000 Files and hashes: 1: byZ-RWYIP-sjaiw5I7cDlgC955Q.crl (hash: 3miPlv/tFmg8psDc5IXsLZBVKSahzVS6BlpMFfMsHLs=) 2: A86EF6C8C9AF11EAA26C015FC4F9AE02.roa (hash: zTAfwveIPTRwXSl7hQHDO93OE6PzSAULcilI97W7uGU=) 3: 40569A6AC9AE11EAA7F2915BC4F9AE02.roa (hash: w5Xib41tLpZBqTFHg11KbjSl/uzEpQNvFqS2fLAocwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2840 (0xb18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C24, serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794 Validity Not Before: May 12 19:12:16 2025 GMT Not After : May 19 19:12:16 2025 GMT Subject: CN=68224810-cdd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:9b:83:26:14:14:83:40:e2:a8:1c:dc:59: a7:71:95:ae:5f:6c:b9:6f:c8:d7:1d:03:d1:3a:00: ca:d6:cb:b5:4b:bf:c2:52:7b:1f:a8:7a:ab:13:86: 88:28:e7:ec:be:81:0d:d6:0e:1c:a8:02:44:f8:55: ce:d9:0d:9e:21:e5:67:5a:39:f7:19:08:37:9d:e0: 06:5d:ba:c9:38:5e:55:59:f9:77:46:63:30:f2:ca: ff:31:ad:2c:81:66:07:2b:50:76:f6:c9:bd:d6:35: 65:0b:48:84:1d:0e:f6:83:8b:29:d5:ad:6a:94:69: 01:f2:15:76:79:08:93:68:1e:26:1c:2a:d3:b5:b0: bc:39:10:b4:82:ad:a2:10:b5:6f:98:dc:c6:9d:4e: 95:9e:83:b1:a4:01:74:e0:f5:ae:9b:64:37:00:3c: 13:ad:f7:ac:2b:ee:12:19:20:66:4b:00:8c:83:ab: 0a:f8:ee:51:d8:c2:ec:dd:7d:73:ea:f8:01:aa:7d: cb:df:a6:93:ab:e9:1b:46:c5:94:e1:05:10:91:48: 94:ed:c7:16:a0:09:b1:de:f8:9c:c5:5d:ae:d0:ba: c8:fd:d2:4f:c3:18:44:bc:e2:dd:3a:44:07:cd:34: b0:c4:df:67:f8:1c:de:71:8d:d0:83:d7:c6:74:aa: 19:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EB:99:70:BD:49:AF:26:83:AF:97:92:BE:A0:1D:4D:A3:06:F2:BA X509v3 Authority Key Identifier: keyid:6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:6e:9d:28:59:b3:86:18:ec:39:6b:d5:4f:ce:ff:9f:63:8b: bb:8e:b4:c9:73:0d:1b:04:e4:74:fe:bb:73:ac:21:1d:2f:51: 94:e3:65:e5:6d:eb:5c:a4:c3:71:68:50:0c:e0:e1:03:dc:84: d0:a6:57:c5:94:66:7b:3d:50:42:1a:6f:2b:8a:e4:28:0f:cf: 8e:e3:9a:31:ac:25:af:1d:c6:d7:1a:a3:db:77:d4:c3:a4:b8: 09:73:07:16:ec:e2:2d:d2:8f:cf:ee:b6:33:1e:fe:6f:b7:44: 31:73:d4:b3:00:77:93:9b:11:41:f7:1f:8c:3c:d9:dc:34:26: 58:f7:26:47:dd:aa:9a:5c:73:f0:58:b7:b7:5d:4d:c9:29:62: b5:3a:ab:29:3b:25:6c:37:96:eb:bb:f1:d5:cb:22:4e:04:6e: 22:12:a6:26:34:b8:8e:75:e5:bf:f2:31:9a:f6:c8:fd:2b:28: fb:a1:08:04:d1:30:0e:4f:bd:08:1a:f5:1a:92:ef:56:fc:11: 38:a5:bd:4b:77:df:3d:56:d7:11:6e:1d:45:ac:b0:e3:37:45: c7:3d:6c:a1:bd:c3:13:08:5a:55:af:91:d1:fa:5b:2a:5f:ee: b6:f0:9c:4e:05:13:6e:78:34:a4:f8:ae:23:94:55:0a:d1:26: 28:49:c1:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDMjQxMTAvBgNVBAUTKDZGMjY3RTQ1NjYwODNGRUIyMzZBMkMzOTIzQjcwMzk2 MDBCREU3OTQwHhcNMjUwNTEyMTkxMjE2WhcNMjUwNTE5MTkxMjE2WjAYMRYwFAYD VQQDEw02ODIyNDgxMC1jZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqGbgyYUFINA4qgc3FmncZWuX2y5b8jXHQPROgDK1su1S7/CUnsfqHqrE4aI KOfsvoEN1g4cqAJE+FXO2Q2eIeVnWjn3GQg3neAGXbrJOF5VWfl3RmMw8sr/Ma0s gWYHK1B29sm91jVlC0iEHQ72g4sp1a1qlGkB8hV2eQiTaB4mHCrTtbC8ORC0gq2i ELVvmNzGnU6VnoOxpAF04PWum2Q3ADwTrfesK+4SGSBmSwCMg6sK+O5R2MLs3X1z 6vgBqn3L36aTq+kbRsWU4QUQkUiU7ccWoAmx3vicxV2u0LrI/dJPwxhEvOLdOkQH zTSwxN9n+BzecY3Qg9fGdKoZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDrmXC9 Sa8mg6+Xkr6gHU2jBvK6MB8GA1UdIwQYMBaAFG8mfkVmCD/rI2osOSO3A5YAveeU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMyNC8xOEM4QjY5MjQ0 MzIxMUVBOUNBREZEMUNDNEY5QUUwMi9ieVotUldZSVAtc2phaXc1STdjRGxnQzk1 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5Wi1SV1lJUC1zamFpdzVJN2NEbGdDOTU1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEMyNC8xOEM4QjY5MjQ0MzIxMUVBOUNBREZEMUNDNEY5QUUwMi9ieVotUldZSVAt c2phaXc1STdjRGxnQzk1NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4bp0oWbOGGOw5a9VPzv+fY4u7jrTJcw0bBOR0/rtzrCEdL1GU42Xl betcpMNxaFAM4OED3ITQplfFlGZ7PVBCGm8riuQoD8+O45oxrCWvHcbXGqPbd9TD pLgJcwcW7OIt0o/P7rYzHv5vt0Qxc9SzAHeTmxFB9x+MPNncNCZY9yZH3aqaXHPw WLe3XU3JKWK1OqspOyVsN5bru/HVyyJOBG4iEqYmNLiOdeW/8jGa9sj9Kyj7oQgE 0TAOT70IGvUaku9W/BE4pb1Ld989VtcRbh1FrLDjN0XHPWyhvcMTCFpVr5HR+lsq X+628JxOBRNueDSk+K4jlFUK0SYoScEX -----END CERTIFICATE-----Generated at Wed May 14 19:58:52 2025 by rpki-client