$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft File: byZ-RWYIP-sjaiw5I7cDlgC955Q.mft (raw, json) Hash identifier: 2CDO2yP0WZShm8JGPpxwUK1tyB36wXYGz+LLP1dzWFs= Subject key identifier: 54:AC:D3:B3:EB:AB:53:45:FC:0F:B6:B7:8B:0A:2C:6B:6C:FD:BF:D3 Authority key identifier: 6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94 Certificate issuer: /CN=A91E0C24/serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794 Certificate serial: 0B4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft Manifest number: 0B34 Signing time: Fri 22 Aug 2025 19:23:38 +0000 Manifest this update: Fri 22 Aug 2025 19:23:38 +0000 Manifest next update: Fri 29 Aug 2025 19:23:38 +0000 Files and hashes: 1: byZ-RWYIP-sjaiw5I7cDlgC955Q.crl (hash: igc2twHI28Mo4Q3H5Mg9g+GzZVDZu7Jdin8t6Q99GzI=) 2: A86EF6C8C9AF11EAA26C015FC4F9AE02.roa (hash: zTAfwveIPTRwXSl7hQHDO93OE6PzSAULcilI97W7uGU=) 3: 40569A6AC9AE11EAA7F2915BC4F9AE02.roa (hash: w5Xib41tLpZBqTFHg11KbjSl/uzEpQNvFqS2fLAocwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C24, serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794 Validity Not Before: Aug 22 19:23:38 2025 GMT Not After : Aug 29 19:23:38 2025 GMT Subject: CN=68a8c3ba-2aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:48:56:ec:ab:0e:ff:bd:c9:01:a7:cf:b6:8a: 89:b7:3b:e4:78:46:7a:50:60:7f:07:5e:1d:17:19: 87:bd:8a:aa:a0:bf:61:0e:af:61:d6:f6:74:b7:50: 52:7e:7d:69:86:ea:5e:62:33:ed:14:10:3a:5e:71: d4:42:4a:f8:d9:01:a1:9e:7e:23:fb:08:c5:26:79: a0:21:47:18:a4:fe:28:1c:58:e9:f3:15:d6:be:be: 5f:5f:47:8c:67:f4:ee:13:1f:4a:71:05:59:b0:7f: 11:69:d6:66:ac:b0:a7:1f:39:dc:7d:da:c4:0e:79: 75:39:91:d0:95:c1:6f:3f:b7:85:f0:f8:66:ee:55: d1:d2:cf:7c:bc:24:f9:fd:4f:c4:f7:db:5f:42:90: 17:ff:86:d0:0d:7b:4e:1c:66:20:30:6b:9a:a3:33: 18:f2:85:ee:4e:14:57:c1:fc:b7:c0:ef:b5:0a:32: b6:3d:55:f1:02:bc:02:ad:62:02:72:de:32:61:57: 2a:60:be:95:76:17:ee:3d:46:4b:24:01:1f:dc:6a: d0:33:0b:f1:fd:88:75:bf:70:e0:09:67:80:26:8a: 4a:23:44:a5:5c:51:86:9f:3b:32:0d:71:18:63:d6: 44:e4:bd:40:c5:54:a1:f4:5a:97:8b:12:0a:ef:18: 75:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AC:D3:B3:EB:AB:53:45:FC:0F:B6:B7:8B:0A:2C:6B:6C:FD:BF:D3 X509v3 Authority Key Identifier: keyid:6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:7c:d7:45:22:a5:7b:4a:91:bd:6c:3f:9d:11:40:56:fa:c4: 04:91:1a:a0:21:4a:36:f4:43:b5:5f:0f:f3:aa:2f:24:42:c6: 80:9b:49:e7:5c:03:9d:1b:45:24:99:52:a9:8b:d0:b4:2a:fc: 7d:15:e4:e2:b5:53:14:6b:77:2a:bc:5c:37:cc:8c:34:7c:45: bb:e6:04:59:5e:a0:dd:e4:12:d4:e1:a0:22:96:c3:c2:b3:d5: a1:a8:03:c3:92:3f:f6:39:cf:2c:93:ac:f0:4f:f3:9c:06:86: 80:e0:be:aa:48:94:b0:d7:b5:00:ae:ff:1d:63:37:76:8f:1a: e4:3c:9d:2e:7f:aa:7d:d9:26:39:f3:ec:36:76:10:c3:9f:93: 9a:4f:eb:a1:26:46:d2:3d:a6:a8:bb:3c:e2:b1:85:8d:ba:b9: ee:89:d7:82:4c:37:32:88:e1:28:25:e9:6c:0b:d1:8f:53:23: 66:3b:c0:ab:db:5e:94:30:02:60:09:9e:80:94:a5:14:ed:d9: 1b:a1:43:3a:c5:5b:1d:f6:fc:9b:66:0a:d7:33:bd:4e:26:23: b2:e3:29:67:bb:49:76:29:ad:b0:84:97:63:b0:fc:e1:e7:56: e8:6f:6e:bd:7e:e5:9c:0c:e1:28:32:9a:e4:d6:c3:22:66:1d: ef:c6:73:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDMjQxMTAvBgNVBAUTKDZGMjY3RTQ1NjYwODNGRUIyMzZBMkMzOTIzQjcwMzk2 MDBCREU3OTQwHhcNMjUwODIyMTkyMzM4WhcNMjUwODI5MTkyMzM4WjAYMRYwFAYD VQQDEw02OGE4YzNiYS0yYWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7UhW7KsO/73JAafPtoqJtzvkeEZ6UGB/B14dFxmHvYqqoL9hDq9h1vZ0t1BS fn1phupeYjPtFBA6XnHUQkr42QGhnn4j+wjFJnmgIUcYpP4oHFjp8xXWvr5fX0eM Z/TuEx9KcQVZsH8RadZmrLCnHzncfdrEDnl1OZHQlcFvP7eF8Phm7lXR0s98vCT5 /U/E99tfQpAX/4bQDXtOHGYgMGuaozMY8oXuThRXwfy3wO+1CjK2PVXxArwCrWIC ct4yYVcqYL6VdhfuPUZLJAEf3GrQMwvx/Yh1v3DgCWeAJopKI0SlXFGGnzsyDXEY Y9ZE5L1AxVSh9FqXixIK7xh1kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSs07Pr q1NF/A+2t4sKLGts/b/TMB8GA1UdIwQYMBaAFG8mfkVmCD/rI2osOSO3A5YAveeU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMyNC8xOEM4QjY5MjQ0 MzIxMUVBOUNBREZEMUNDNEY5QUUwMi9ieVotUldZSVAtc2phaXc1STdjRGxnQzk1 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5Wi1SV1lJUC1zamFpdzVJN2NEbGdDOTU1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEMyNC8xOEM4QjY5MjQ0MzIxMUVBOUNBREZEMUNDNEY5QUUwMi9ieVotUldZSVAt c2phaXc1STdjRGxnQzk1NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqfNdFIqV7SpG9bD+dEUBW+sQEkRqgIUo29EO1Xw/zqi8kQsaAm0nn XAOdG0UkmVKpi9C0Kvx9FeTitVMUa3cqvFw3zIw0fEW75gRZXqDd5BLU4aAilsPC s9WhqAPDkj/2Oc8sk6zwT/OcBoaA4L6qSJSw17UArv8dYzd2jxrkPJ0uf6p92SY5 8+w2dhDDn5OaT+uhJkbSPaaouzzisYWNurnuideCTDcyiOEoJelsC9GPUyNmO8Cr 216UMAJgCZ6AlKUU7dkboUM6xVsd9vybZgrXM71OJiOy4ylnu0l2Ka2whJdjsPzh 51bob269fuWcDOEoMprk1sMiZh3vxnOt -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:09 2025 by rpki-client