$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft File: BYl-c1406PZYdVSprzc0CCziidk.mft (raw, json) Hash identifier: BMjkI13KigqDbyXutYzQwmjXUUxNS1wU/814L2VMv18= Subject key identifier: AC:66:DC:26:EF:31:64:B1:11:FA:AE:2E:11:D7:27:6B:34:F9:D2:78 Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9 Certificate issuer: /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft Manifest number: 4A Signing time: Mon 03 Nov 2025 07:21:31 +0000 Manifest this update: Mon 03 Nov 2025 07:21:30 +0000 Manifest next update: Mon 10 Nov 2025 07:21:30 +0000 Files and hashes: 1: BYl-c1406PZYdVSprzc0CCziidk.crl (hash: z/OJo2b0GpRoaBHEmJkm9UABnI+dRggcGAIjRmEVAvA=) 2: 2C3D8AAA50B511F09288303CC4F9AE02.roa (hash: BRO70xst4iX7U+BsAkMQkxP1DSIFJqspyvz/A47AIrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9 Validity Not Before: Nov 3 07:21:30 2025 GMT Not After : Nov 10 07:21:30 2025 GMT Subject: CN=690857fa-3105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c1:1b:ae:4a:0d:56:18:07:8e:a3:68:d6:b1: f0:a3:2e:d8:ce:a1:a9:5d:f4:89:86:ed:4c:c6:fc: 55:04:d3:1d:e8:71:9a:b2:93:e0:54:48:9e:3d:70: 55:55:a6:67:c5:1c:52:5e:a6:e8:0e:64:5e:86:9e: 9d:f2:55:16:a1:d7:56:1f:0e:81:d6:30:6c:46:99: d3:3f:2e:71:f6:68:42:6f:ae:01:39:74:2e:a4:e3: e9:5a:f6:c3:1a:19:7d:e5:42:3c:5c:b4:29:82:ac: 9d:01:2d:96:0b:1c:2c:bd:72:ce:63:47:de:57:3f: d2:a1:a0:15:ea:13:bc:c2:07:9f:52:d3:cb:f9:ea: 59:eb:88:c3:27:2a:80:06:b2:b8:bc:62:d6:45:46: 2c:1d:df:bf:41:7e:81:60:1d:1b:1e:33:40:fb:6b: 4f:7c:2d:ec:82:38:e1:2e:4a:63:a8:ed:be:15:7f: da:d0:96:7d:f7:a1:f3:b9:2a:9b:dd:fa:3a:80:50: 1f:43:5e:08:00:dd:b9:75:4d:75:b1:85:56:17:e7: 73:92:0a:e5:0d:fc:14:51:14:6b:90:bd:81:8d:6a: a8:1c:dc:db:f8:34:01:9d:23:37:03:87:6a:d1:76: 71:74:ed:dd:f4:f4:7c:30:53:a4:36:78:73:e0:ec: b0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:66:DC:26:EF:31:64:B1:11:FA:AE:2E:11:D7:27:6B:34:F9:D2:78 X509v3 Authority Key Identifier: keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:43:20:b5:63:48:15:81:53:0b:06:ff:fb:f1:55:60:b6:40: 2d:05:c2:cb:78:52:fb:c4:fc:27:fa:c6:a0:af:0e:f0:4b:94: df:f5:20:dc:fa:3e:f8:4f:f4:5b:a2:5f:d6:92:20:30:91:34: db:bf:14:1c:09:a5:7e:15:f0:f5:24:db:9e:06:a9:49:6f:1a: e3:cb:38:e8:fc:40:ba:3f:97:89:cd:91:b0:4f:83:95:13:ec: ef:b6:1e:82:52:07:9e:5d:54:83:aa:46:12:49:dc:6b:75:f9: 1b:53:1b:29:8f:83:00:1b:d6:38:2b:d6:a2:bf:26:42:3c:c2: 6c:58:59:32:5b:58:30:0a:4a:22:55:83:8a:83:c4:fa:c7:50: e6:66:76:20:c9:33:15:99:f2:33:b2:72:50:01:2a:18:03:4e: 22:5b:d5:be:c7:e6:ba:97:64:dd:ba:d7:3a:ff:2e:30:56:9e: c7:12:3e:ef:4f:6a:57:c5:22:77:d2:a4:2b:b4:70:c1:ce:14: 44:0b:88:07:f1:c7:4c:6b:42:14:5f:5a:c3:3c:53:3f:c1:7a: e8:ae:81:d3:67:61:5c:2c:b7:bb:78:24:78:71:52:a3:56:6c: 3e:19:4f:70:15:c2:8e:40:73:bb:cb:7f:e0:f1:4c:f4:fe:e9: 4f:b3:ea:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODlFNzExMC8GA1UEBRMoMDU4OTdFNzM1RTM0RThGNjU4NzU1NEE5QUYzNzM0MDgy Q0UyODlEOTAeFw0yNTExMDMwNzIxMzBaFw0yNTExMTAwNzIxMzBaMBgxFjAUBgNV BAMTDTY5MDg1N2ZhLTMxMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvwRuuSg1WGAeOo2jWsfCjLtjOoald9ImG7UzG/FUE0x3ocZqyk+BUSJ49cFVV pmfFHFJepugOZF6Gnp3yVRah11YfDoHWMGxGmdM/LnH2aEJvrgE5dC6k4+la9sMa GX3lQjxctCmCrJ0BLZYLHCy9cs5jR95XP9KhoBXqE7zCB59S08v56lnriMMnKoAG sri8YtZFRiwd379BfoFgHRseM0D7a098LeyCOOEuSmOo7b4Vf9rQln33ofO5Kpvd +jqAUB9DXggA3bl1TXWxhVYX53OSCuUN/BRRFGuQvYGNaqgc3Nv4NAGdIzcDh2rR dnF07d309HwwU6Q2eHPg7LATAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrGbcJu8x ZLER+q4uEdcnazT50ngwHwYDVR0jBBgwFoAUBYl+c1406PZYdVSprzc0CCziidkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OUU3Lzk5RDI4QzlDNEMw OTExRjA5RjM4QjYyOEM0RjlBRTAyL0JZbC1jMTQwNlBaWWRWU3ByemMwQ0N6aWlk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQllsLWMxNDA2UFpZZFZTcHJ6YzBDQ3ppaWRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 OUU3Lzk5RDI4QzlDNEMwOTExRjA5RjM4QjYyOEM0RjlBRTAyL0JZbC1jMTQwNlBa WWRWU3ByemMwQ0N6aWlkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACJDILVjSBWBUwsG//vxVWC2QC0Fwst4UvvE/Cf6xqCvDvBLlN/1INz6 PvhP9FuiX9aSIDCRNNu/FBwJpX4V8PUk254GqUlvGuPLOOj8QLo/l4nNkbBPg5UT 7O+2HoJSB55dVIOqRhJJ3Gt1+RtTGymPgwAb1jgr1qK/JkI8wmxYWTJbWDAKSiJV g4qDxPrHUOZmdiDJMxWZ8jOyclABKhgDTiJb1b7H5rqXZN261zr/LjBWnscSPu9P alfFInfSpCu0cMHOFEQLiAfxx0xrQhRfWsM8Uz/BeuiugdNnYVwst7t4JHhxUqNW bD4ZT3AVwo5Ac7vLf+DxTPT+6U+z6sU= -----END CERTIFICATE-----Generated at Wed Nov 5 03:37:17 2025 by rpki-client