$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json) Hash identifier: aMy9RveNcgHzna40oAtibnewvMfL8CJrLohLuySejb4= Subject key identifier: 0D:A0:51:A0:B4:28:CE:26:F1:5E:37:69:56:14:69:3B:E2:3A:89:89 Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Certificate serial: 031B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft Manifest number: 0318 Signing time: Sun 15 Jun 2025 00:52:52 +0000 Manifest this update: Sun 15 Jun 2025 00:52:52 +0000 Manifest next update: Sun 22 Jun 2025 00:52:52 +0000 Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: U40RxT0ePS7HjxxWXgW2CrjSyjMUoccDWUUmC7ckQMw=) 2: 52801AD8D07111ECAF21A75DC4F9AE02.roa (hash: qF7Z9bCq6Bb/CjCCcxi/i5YpMx2Ig2rtU2KcJKtS8jU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 795 (0x31b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Validity Not Before: Jun 15 00:52:52 2025 GMT Not After : Jun 22 00:52:52 2025 GMT Subject: CN=684e1964-4b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:60:8a:d1:f9:5c:85:3a:9c:59:31:b3:54:7f: e0:67:86:fb:bb:4d:7d:49:64:9c:e1:9b:c8:79:6c: 07:ee:bd:54:58:87:3a:65:fe:ee:d4:6c:a7:a4:f5: dc:79:ba:f9:97:fa:d8:6e:e7:30:0d:29:da:3e:31: 59:95:ab:e1:2b:7b:f1:3b:f2:a9:fd:ab:60:aa:3b: 4c:f8:c9:08:6e:35:b9:9d:de:d2:65:e9:52:c8:44: 29:73:84:18:f4:aa:18:38:6e:06:20:66:7c:d3:71: 04:46:8b:39:ee:cb:02:71:1f:c9:1a:e5:54:c9:d7: ef:56:70:db:7f:ff:b8:5e:09:bd:76:e8:ee:30:cd: 42:b8:4d:33:a1:9a:c4:b8:b7:2e:0d:a2:0a:82:49: c4:25:91:52:30:60:b5:13:66:04:3a:8a:ca:44:b6: 2f:30:57:9f:9f:42:82:8e:fc:e2:a1:23:7a:c9:26: 41:3f:55:94:4a:ea:ff:66:df:ea:91:cf:ed:4d:a4: b9:90:6c:5b:86:c7:66:d3:a9:a5:f4:b5:2a:88:85: f8:d8:76:91:55:dd:94:27:9d:0a:cd:bf:59:f5:6b: 3d:bd:ff:16:e1:da:f5:36:89:9b:78:ef:7f:c9:bc: 88:ef:3e:6c:eb:6e:b9:f7:e6:2c:9a:8d:bd:68:33: df:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A0:51:A0:B4:28:CE:26:F1:5E:37:69:56:14:69:3B:E2:3A:89:89 X509v3 Authority Key Identifier: keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:68:22:62:3e:3b:d1:ec:f0:16:aa:f5:0d:07:bb:e1:ce:0a: 4f:7a:cc:21:4c:d7:b1:54:1e:38:ce:16:b9:fc:8d:95:51:d7: 18:1f:e7:03:38:cc:90:ef:c7:64:70:7d:88:a3:81:30:35:91: 75:e3:42:51:1f:2d:e6:5d:05:30:20:1f:d8:7e:f1:66:47:32: 9d:c4:f1:a8:d1:e4:28:42:33:f8:74:da:ef:5a:42:c9:53:8b: 70:d0:59:70:f4:55:48:85:c4:ca:3f:2c:08:43:63:f5:d6:7f: 9a:18:a5:b8:9a:81:43:43:f1:1f:9d:4a:49:56:c5:ec:97:7e: 33:9c:9e:c4:e3:5e:02:98:eb:2f:c6:45:fa:16:87:d5:8c:e0: f8:9f:b5:70:9c:4b:ac:c8:13:bf:62:b5:d4:e0:f3:6e:47:fb: 03:71:c3:b1:cc:57:7b:6c:62:36:d1:71:9f:2d:a5:6c:e3:2d: 3d:39:0c:0b:67:4c:67:9c:70:09:13:3d:77:da:dd:0f:dd:08: 6a:18:37:0a:c8:a1:b2:80:a1:04:76:11:c7:1f:1b:e5:2b:c9: f4:d5:b6:2f:c5:67:c5:71:d6:52:73:ae:08:d6:81:ba:9e:e0: 38:23:a0:81:fd:17:7d:4f:d6:12:0d:c9:c8:5d:d0:7b:b0:b9: ee:62:52:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD RTc0RUVGQkIwHhcNMjUwNjE1MDA1MjUyWhcNMjUwNjIyMDA1MjUyWjAYMRYwFAYD VQQDEw02ODRlMTk2NC00YjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGCK0flchTqcWTGzVH/gZ4b7u019SWSc4ZvIeWwH7r1UWIc6Zf7u1GynpPXc ebr5l/rYbucwDSnaPjFZlavhK3vxO/Kp/atgqjtM+MkIbjW5nd7SZelSyEQpc4QY 9KoYOG4GIGZ803EERos57ssCcR/JGuVUydfvVnDbf/+4Xgm9dujuMM1CuE0zoZrE uLcuDaIKgknEJZFSMGC1E2YEOorKRLYvMFefn0KCjvzioSN6ySZBP1WUSur/Zt/q kc/tTaS5kGxbhsdm06ml9LUqiIX42HaRVd2UJ50Kzb9Z9Ws9vf8W4dr1NombeO9/ ybyI7z5s62659+Ysmo29aDPfeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2gUaC0 KM4m8V43aVYUaTviOomJMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjI0Qy9CQjUwRDlEMEQwNkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlf RUc1aGtOdy1MdWZPZE83N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzaCJiPjvR7PAWqvUNB7vhzgpPeswhTNexVB44zha5/I2VUdcYH+cD OMyQ78dkcH2Io4EwNZF140JRHy3mXQUwIB/YfvFmRzKdxPGo0eQoQjP4dNrvWkLJ U4tw0Flw9FVIhcTKPywIQ2P11n+aGKW4moFDQ/EfnUpJVsXsl34znJ7E414CmOsv xkX6FofVjOD4n7VwnEusyBO/YrXU4PNuR/sDccOxzFd7bGI20XGfLaVs4y09OQwL Z0xnnHAJEz132t0P3QhqGDcKyKGygKEEdhHHHxvlK8n01bYvxWfFcdZSc64I1oG6 nuA4I6CB/Rd9T9YSDcnIXdB7sLnuYlI3 -----END CERTIFICATE-----Generated at Sun Jun 15 08:52:32 2025 by rpki-client