$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft File: BYl-c1406PZYdVSprzc0CCziidk.mft (raw, json) Hash identifier: lCDP3uJ2EDca6mhy0Fj3H1Gfq4t7i3fNv8tM9iVRKUE= Subject key identifier: E5:AD:F7:CA:CD:6C:43:05:DF:B4:51:A1:E7:23:98:5F:23:1E:5E:DE Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9 Certificate issuer: /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft Manifest number: 87 Signing time: Sun 01 Mar 2026 08:57:03 +0000 Manifest this update: Sun 01 Mar 2026 08:57:02 +0000 Manifest next update: Sun 08 Mar 2026 08:57:02 +0000 Files and hashes: 1: BYl-c1406PZYdVSprzc0CCziidk.crl (hash: 9/q4Sa0S8+TEkT02DiR9wf0UdO6WDGrmKOCi6HFp9p0=) 2: 2C3D8AAA50B511F09288303CC4F9AE02.roa (hash: 6W/VukXB5c5TI5sHg/exLjmPP5EzgCxNCDZkTAkJ9NI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9 Validity Not Before: Mar 1 08:57:02 2026 GMT Not After : Mar 8 08:57:02 2026 GMT Subject: CN=69a3ff5f-b2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:77:a7:c4:5a:d5:d7:46:e3:30:a1:ae:04:e2: 9a:fd:6a:71:5a:22:ac:d4:66:b3:bc:3d:6f:d6:09: 5a:83:f9:36:c1:64:cc:e0:42:e2:18:2f:09:8a:6a: 6a:f7:b1:63:f2:5f:a4:75:d9:7d:f8:f1:78:ab:eb: ad:7e:e5:0a:6a:b1:28:64:b4:68:ad:13:26:62:24: 50:7e:c5:30:cf:f5:b4:1c:0e:71:70:e9:9b:cd:2c: 8e:cc:d9:2c:34:d0:fc:ff:37:36:b7:90:d6:d1:13: 54:cf:27:6d:c4:bf:92:f6:75:14:45:f0:1b:17:f6: 29:13:a7:46:55:68:50:74:a2:0b:f3:4f:ca:f6:4b: 73:21:1d:51:e0:5e:a6:65:be:17:7f:2c:c1:ee:5e: 76:60:f2:f8:98:e9:07:be:22:9e:75:81:95:2f:af: 1b:61:72:e7:d3:25:c1:d2:c9:20:e2:1e:0c:d4:10: 20:ca:a5:ce:e7:b2:84:cd:fe:8e:d5:76:3b:11:76: a6:30:65:50:71:03:2f:92:51:c0:07:81:ee:c8:15: 2f:21:85:e1:3f:b5:01:35:d0:4a:21:ff:16:a3:b8: 23:27:ba:e7:93:e9:79:1a:bc:f3:b1:67:04:b1:02: ac:37:87:a3:f7:3c:01:c3:16:18:cc:f0:2e:99:1f: 2e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AD:F7:CA:CD:6C:43:05:DF:B4:51:A1:E7:23:98:5F:23:1E:5E:DE X509v3 Authority Key Identifier: keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:72:24:4d:a3:ea:20:7d:ac:6f:0c:83:d4:94:0f:ec:d0:b8: 3c:83:5c:c7:7c:d5:47:64:2d:4b:4b:ab:83:d5:97:a4:52:e6: 4f:73:68:27:d6:3e:02:58:4a:5a:79:83:a5:d3:40:cb:6e:97: 9b:e6:ba:f2:51:1f:07:7d:9b:d7:c3:1a:0d:61:d9:55:72:3c: 23:d1:a4:0e:53:6b:de:02:6a:d4:19:e9:a6:0d:59:be:20:05: a4:48:0f:22:4b:3b:30:c5:5b:6c:50:34:cf:90:5c:b1:4a:fc: b8:45:fc:6d:ad:af:1a:14:67:d7:a3:79:ab:06:e5:15:d2:73: ac:6d:d0:97:b9:2b:46:1f:b3:f4:55:58:e7:21:9e:0e:1f:1f: 30:03:d4:77:fa:90:b6:67:56:64:d2:33:bd:dd:a0:7d:24:4e: c4:a6:bc:ce:15:c5:96:24:a8:42:91:54:a7:26:3a:f6:ec:c8: 88:9f:e0:c6:08:41:f2:02:3e:4a:40:81:28:90:58:b8:99:f9: 61:6c:c8:b4:0c:93:17:36:27:33:39:7a:a2:7a:ab:e4:39:64: f7:7f:08:13:dd:6b:66:ee:95:af:00:0e:4d:75:80:ef:a9:1e: b6:f2:ad:ab:f0:62:80:9a:7c:da:b8:7a:3f:38:7a:ed:57:09: 2f:b3:06:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg5RTcxMTAvBgNVBAUTKDA1ODk3RTczNUUzNEU4RjY1ODc1NTRBOUFGMzczNDA4 MkNFMjg5RDkwHhcNMjYwMzAxMDg1NzAyWhcNMjYwMzA4MDg1NzAyWjAYMRYwFAYD VQQDEw02OWEzZmY1Zi1iMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73enxFrV10bjMKGuBOKa/WpxWiKs1GazvD1v1glag/k2wWTM4ELiGC8Jimpq 97Fj8l+kddl9+PF4q+utfuUKarEoZLRorRMmYiRQfsUwz/W0HA5xcOmbzSyOzNks NND8/zc2t5DW0RNUzydtxL+S9nUURfAbF/YpE6dGVWhQdKIL80/K9ktzIR1R4F6m Zb4XfyzB7l52YPL4mOkHviKedYGVL68bYXLn0yXB0skg4h4M1BAgyqXO57KEzf6O 1XY7EXamMGVQcQMvklHAB4HuyBUvIYXhP7UBNdBKIf8Wo7gjJ7rnk+l5GrzzsWcE sQKsN4ej9zwBwxYYzPAumR8u/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWt98rN bEMF37RRoecjmF8jHl7eMB8GA1UdIwQYMBaAFAWJfnNeNOj2WHVUqa83NAgs4onZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODlFNy85OUQyOEM5QzRD MDkxMUYwOUYzOEI2MjhDNEY5QUUwMi9CWWwtYzE0MDZQWllkVlNwcnpjMENDemlp ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JZbC1jMTQwNlBaWWRWU3ByemMwQ0N6aWlkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODlFNy85OUQyOEM5QzRDMDkxMUYwOUYzOEI2MjhDNEY5QUUwMi9CWWwtYzE0MDZQ WllkVlNwcnpjMENDemlpZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmXIkTaPqIH2sbwyD1JQP7NC4PINcx3zVR2QtS0urg9WXpFLmT3NoJ9Y+AlhK WnmDpdNAy26Xm+a68lEfB32b18MaDWHZVXI8I9GkDlNr3gJq1Bnppg1ZviAFpEgP Iks7MMVbbFA0z5BcsUr8uEX8ba2vGhRn16N5qwblFdJzrG3Ql7krRh+z9FVY5yGe Dh8fMAPUd/qQtmdWZNIzvd2gfSROxKa8zhXFliSoQpFUpyY69uzIiJ/gxghB8gI+ SkCBKJBYuJn5YWzItAyTFzYnMzl6onqr5Dlk938IE91rZu6VrwAOTXWA76ketvKt q/BigJp82rh6Pzh67VcJL7MGPQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:21:42 2026 by rpki-client