$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json) Hash identifier: aZI6HEkhuaobjTPYGNcgAtRVz0SZu/+9DMd7Jc4nzdg= Subject key identifier: 80:B7:D5:C4:13:11:71:FB:23:40:56:5A:47:F2:67:25:01:4C:AD:F1 Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Certificate serial: 0302 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft Manifest number: 02FF Signing time: Fri 25 Apr 2025 01:00:59 +0000 Manifest this update: Fri 25 Apr 2025 01:00:58 +0000 Manifest next update: Fri 02 May 2025 01:00:58 +0000 Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: Yp4Gb2lAtyzCWY1TQbRnXniZl0O5GmJFu5EWrirLiDA=) 2: 52801AD8D07111ECAF21A75DC4F9AE02.roa (hash: qF7Z9bCq6Bb/CjCCcxi/i5YpMx2Ig2rtU2KcJKtS8jU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 770 (0x302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Validity Not Before: Apr 25 01:00:58 2025 GMT Not After : May 2 01:00:58 2025 GMT Subject: CN=680adecb-156c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:fb:f7:5f:90:e4:b0:84:e8:3e:09:e3:70:5c: 86:68:df:14:e8:02:3e:11:aa:7a:04:16:5a:8f:67: cf:21:33:9c:13:5c:e6:e9:e1:89:78:72:e2:c5:db: 52:77:7e:7f:55:5d:7d:d5:b8:c7:18:2f:0f:a7:d2: d0:c9:85:ed:44:b4:7f:6a:b0:fa:01:f8:2a:7e:19: 7f:65:b9:a1:13:78:6d:b8:c7:e0:84:49:bc:6b:52: 6b:25:7c:b1:a2:27:a4:4b:41:17:47:71:d7:f7:e4: e4:54:09:18:46:4a:61:87:15:c7:87:1f:32:a4:a3: 18:a8:15:81:15:ae:d1:18:92:b9:df:e2:82:d0:05: 94:0e:5f:fb:d9:66:a2:18:37:ed:27:82:4f:fc:cf: 1e:4f:c5:e3:f2:bf:b7:63:e3:db:cf:97:d0:73:5a: 0d:aa:84:6e:53:12:30:16:e9:98:da:00:60:c8:07: b0:d1:4d:d6:0d:f8:1b:6f:d8:e4:b7:68:71:25:bc: 2b:b3:8f:08:fc:ec:b2:37:94:7c:71:de:00:57:2d: 27:1e:e3:ec:54:8e:8d:46:4f:05:13:39:e5:2f:63: f0:f5:93:18:54:d8:8b:cd:4e:a3:94:97:07:8e:55: a8:8b:0a:cc:99:f1:42:b7:eb:54:d5:f0:b3:00:fe: 8d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B7:D5:C4:13:11:71:FB:23:40:56:5A:47:F2:67:25:01:4C:AD:F1 X509v3 Authority Key Identifier: keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:2d:68:57:13:1b:34:97:80:f9:93:0b:1b:b2:1e:2f:9a:44: 3a:70:71:d5:1f:d3:12:4c:29:cf:09:a4:38:4c:be:b0:35:55: 1c:3f:35:7a:9a:7e:ae:2b:4f:94:71:91:cb:34:31:72:14:a2: f9:00:68:a3:d0:f9:3a:17:80:5c:a8:33:f8:d2:be:af:43:ac: f5:41:7f:8c:6d:c1:56:7f:b9:d5:4a:63:e0:47:5b:aa:a0:3d: 30:fe:2d:74:95:53:a6:70:bc:3a:93:a5:4c:ad:f7:e3:ad:a3: 8b:0a:dc:a6:ca:e0:5f:fd:65:eb:e5:bd:bb:77:3e:0d:8a:95: 2a:c4:2c:b8:37:d1:ea:46:35:85:14:d6:93:82:6a:bc:2f:cc: 45:35:79:b5:34:8e:a5:c9:85:a9:1b:49:31:25:b6:3d:31:39: 5a:2f:cb:90:48:b9:7a:5d:16:c0:07:e3:66:05:b8:5c:a6:64: 90:ad:34:32:58:3f:41:0e:57:1a:fd:df:8e:a2:8d:e8:81:a1: 49:18:16:64:fa:dc:b9:d7:bc:11:af:d8:3a:df:36:4e:73:c3: 39:fa:04:0d:3f:f7:56:15:b0:85:2b:0d:83:4d:2f:48:8b:38: 3e:50:b6:a4:72:4d:54:be:b6:f7:2e:89:c4:c8:5c:c1:10:23: 0c:eb:0b:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD RTc0RUVGQkIwHhcNMjUwNDI1MDEwMDU4WhcNMjUwNTAyMDEwMDU4WjAYMRYwFAYD VQQDEw02ODBhZGVjYi0xNTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Pv3X5DksIToPgnjcFyGaN8U6AI+Eap6BBZaj2fPITOcE1zm6eGJeHLixdtS d35/VV191bjHGC8Pp9LQyYXtRLR/arD6Afgqfhl/ZbmhE3htuMfghEm8a1JrJXyx oiekS0EXR3HX9+TkVAkYRkphhxXHhx8ypKMYqBWBFa7RGJK53+KC0AWUDl/72Wai GDftJ4JP/M8eT8Xj8r+3Y+Pbz5fQc1oNqoRuUxIwFumY2gBgyAew0U3WDfgbb9jk t2hxJbwrs48I/OyyN5R8cd4AVy0nHuPsVI6NRk8FEznlL2Pw9ZMYVNiLzU6jlJcH jlWoiwrMmfFCt+tU1fCzAP6NXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIC31cQT EXH7I0BWWkfyZyUBTK3xMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjI0Qy9CQjUwRDlEMEQwNkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlf RUc1aGtOdy1MdWZPZE83N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKLWhXExs0l4D5kwsbsh4vmkQ6cHHVH9MSTCnPCaQ4TL6wNVUcPzV6 mn6uK0+UcZHLNDFyFKL5AGij0Pk6F4BcqDP40r6vQ6z1QX+MbcFWf7nVSmPgR1uq oD0w/i10lVOmcLw6k6VMrffjraOLCtymyuBf/WXr5b27dz4NipUqxCy4N9HqRjWF FNaTgmq8L8xFNXm1NI6lyYWpG0kxJbY9MTlaL8uQSLl6XRbAB+NmBbhcpmSQrTQy WD9BDlca/d+Ooo3ogaFJGBZk+ty517wRr9g63zZOc8M5+gQNP/dWFbCFKw2DTS9I izg+ULakck1Uvrb3LonEyFzBECMM6wta -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:02 2025 by rpki-client