$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft File: ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft (raw, json) Hash identifier: YL63hLmmC4EghuwNBC1PEdSxGeNVmI8tg4+Bu83pt/4= Subject key identifier: 60:A2:DA:95:5E:50:7C:B8:FB:25:F7:24:42:83:73:65:AF:B5:A8:6E Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7 Certificate issuer: /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7 Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft Manifest number: 0837 Signing time: Sun 10 Aug 2025 20:49:52 +0000 Manifest this update: Sun 10 Aug 2025 20:49:52 +0000 Manifest next update: Sun 17 Aug 2025 20:49:52 +0000 Files and hashes: 1: ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl (hash: 30KASgQwuDMOp2xH4n11TpR+2xWqX8tiQVOmVSCI2bk=) 2: 653B503C5C3C11ED9B4FAB0BC4F9AE02.roa (hash: 1mD7CDJ8DRk+lM8vtNVrHgkyHQbdyBW6ydIVEiLBivE=) 3: 1D2381425E5F11EC870D9676C4F9AE02.roa (hash: ZUd4QbCdB3E4EQBK+nU5VmSSyQaDu0ItsbLfbY5xMOQ=) 4: 67591AB22FC911EBA360EC1CC4F9AE02.roa (hash: esocmtJlq7HlcotlDHp6Mez+z9Rl0fTX+KzbKTLXFms=) 5: 9EA66A9E737D11ECA0A3A018C4F9AE02.roa (hash: 6MugAT5WUA7wa54QdXsUcpbkyeNKtczQJ8hnMQYoyDw=) 6: E1582B782A6011EB8DEF2641C4F9AE02.roa (hash: g9vu6FJuOGiHVWjvlUrnr/lO98Du1rwPNicgo4vRrvk=) 7: E1E4F9902A6011EB8DEF2641C4F9AE02.roa (hash: GxNJ1GJyLCfG1wd+tTkjUWqW3q5g76ObJBXzG7SEDaI=) 8: E0A4E5182A6011EB8DEF2641C4F9AE02.roa (hash: LmiT/78vJYPXtCg/vYC5cyA6e51c5z/fGkAk3TxGErM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7 Validity Not Before: Aug 10 20:49:52 2025 GMT Not After : Aug 17 20:49:52 2025 GMT Subject: CN=689905f0-594a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:40:24:33:5b:e7:9f:49:ce:b1:2a:5e:22: b7:0e:04:44:19:14:3e:ed:00:77:38:b8:96:06:84: 81:91:ec:30:2b:9b:5b:52:3f:11:8b:3c:dd:d1:4c: 35:ef:2b:89:fc:03:ad:e6:f9:69:89:34:20:f4:b0: 50:e4:bc:bd:0e:71:a2:0c:9d:bc:e8:89:df:56:83: 46:33:53:9e:58:1b:63:35:1a:ff:6f:1c:f3:50:a8: 2e:1b:44:0d:76:c5:82:76:a8:d0:66:e9:0e:77:61: d9:9c:b1:03:fb:c4:54:57:66:5d:3e:e0:d6:4e:68: ae:c2:e7:dc:ec:1d:52:a0:fa:61:a7:4f:8d:a6:aa: 02:26:0c:82:b4:76:a2:f5:e8:39:26:16:5e:94:b2: 8d:99:b6:39:9d:6a:69:e1:48:c0:1e:0d:be:17:b6: 99:fd:17:c3:9c:59:7d:f6:1d:b0:e7:21:6c:7b:a5: 79:15:d9:03:f6:60:43:06:38:1b:ba:ef:b8:f8:e9: 4c:ca:77:d6:4f:d5:b4:37:40:a1:45:6e:26:67:8c: 05:f3:de:70:10:ad:20:34:0b:00:14:ca:ed:cc:30: 71:1a:cb:51:cd:8e:dd:b3:d1:1f:ab:44:e7:45:a0: c7:64:b2:d2:39:b1:5f:79:dd:4b:8c:77:f0:f0:0c: b0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A2:DA:95:5E:50:7C:B8:FB:25:F7:24:42:83:73:65:AF:B5:A8:6E X509v3 Authority Key Identifier: keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:7c:5a:02:43:22:d5:af:c6:ff:5a:59:42:77:d4:25:33:5f: 26:e3:fc:ea:6f:8f:79:47:6c:d8:d9:56:3f:1d:5f:e7:ac:bf: dc:8b:18:9e:4a:5d:00:45:0a:d3:8c:4d:4d:2d:31:5d:0b:67: 0d:e9:a1:34:9c:08:c9:53:23:05:fc:60:f9:52:70:ed:3f:15: ad:f7:5e:c2:bc:33:55:37:9f:49:d5:69:d6:40:04:56:51:93: 2b:05:4a:c6:3b:64:47:60:4e:0a:5f:64:de:25:b0:3b:a5:72: c2:7f:25:97:83:d4:13:d8:c2:3c:34:88:57:f6:bc:2c:28:0d: fb:0b:84:8a:18:e4:8e:67:c9:ac:cb:f5:04:90:39:a3:c7:bf: f1:07:23:50:7b:37:ed:9e:ef:81:d7:01:09:0e:a4:23:80:5e: 01:7d:6b:7f:7d:77:0f:27:8e:89:9e:5f:eb:2b:01:0c:03:c7: 54:14:2a:a7:33:35:6c:9a:ed:58:18:6c:1f:d8:4f:92:37:10: 22:67:ea:69:19:e0:ca:2b:df:b7:d5:41:21:f9:d1:d4:95:c0: cf:02:2b:e1:a0:b8:f5:1f:05:d3:82:7d:5d:1b:a4:0b:da:b9: ad:29:80:fd:ee:bc:62:7c:92:f6:fe:9f:94:6a:7b:30:37:de: bf:43:08:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDA3MjdBQUM1QjhDRjdGRTY4Q0NENkRFNzdGNkM4QjQ2 RDU3NEZBQTcwHhcNMjUwODEwMjA0OTUyWhcNMjUwODE3MjA0OTUyWjAYMRYwFAYD VQQDEw02ODk5MDVmMC01OTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVZAJDNb559JzrEqXiK3DgREGRQ+7QB3OLiWBoSBkewwK5tbUj8Rizzd0Uw1 7yuJ/AOt5vlpiTQg9LBQ5Ly9DnGiDJ286InfVoNGM1OeWBtjNRr/bxzzUKguG0QN dsWCdqjQZukOd2HZnLED+8RUV2ZdPuDWTmiuwufc7B1SoPphp0+NpqoCJgyCtHai 9eg5JhZelLKNmbY5nWpp4UjAHg2+F7aZ/RfDnFl99h2w5yFse6V5FdkD9mBDBjgb uu+4+OlMynfWT9W0N0ChRW4mZ4wF895wEK0gNAsAFMrtzDBxGstRzY7ds9Efq0Tn RaDHZLLSObFfed1LjHfw8AywvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCi2pVe UHy4+yX3JEKDc2WvtahuMB8GA1UdIwQYMBaAFAcnqsW4z3/mjM1t539si0bVdPqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GNEJENTAwOEUw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYtYU16VzNuZjJ5TFJ0VjAt cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J5ZXF4YmpQZi1hTXpXM25mMnlMUnRWMC1xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GNEJENTAwOEUwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYt YU16VzNuZjJ5TFJ0VjAtcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLfFoCQyLVr8b/WllCd9QlM18m4/zqb495R2zY2VY/HV/nrL/cixie Sl0ARQrTjE1NLTFdC2cN6aE0nAjJUyMF/GD5UnDtPxWt917CvDNVN59J1WnWQARW UZMrBUrGO2RHYE4KX2TeJbA7pXLCfyWXg9QT2MI8NIhX9rwsKA37C4SKGOSOZ8ms y/UEkDmjx7/xByNQezftnu+B1wEJDqQjgF4BfWt/fXcPJ46Jnl/rKwEMA8dUFCqn MzVsmu1YGGwf2E+SNxAiZ+ppGeDKK9+31UEh+dHUlcDPAivhoLj1HwXTgn1dG6QL 2rmtKYD97rxifJL2/p+UanswN96/Qwhi -----END CERTIFICATE-----Generated at Mon Aug 11 04:30:43 2025 by rpki-client