$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json) Hash identifier: WDscqnL7qLHG1Nz6cNee0RpC4wQOrOzxu3GwvMRzg/w= Subject key identifier: A9:6F:73:83:B1:B9:85:A5:9B:45:AE:AC:4D:DA:EB:15:E0:68:7A:AF Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Certificate serial: 033A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft Manifest number: 0336 Signing time: Sat 09 Aug 2025 01:37:22 +0000 Manifest this update: Sat 09 Aug 2025 01:37:22 +0000 Manifest next update: Sat 16 Aug 2025 01:37:22 +0000 Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: 4OOhTZbItXvKQyCGDgGXvEOv2rXZHAD8cuabCeBi810=) 2: 52801AD8D07111ECAF21A75DC4F9AE02.roa (hash: LqXeoNf4rZXMYr+S4C+rSHRCOdc5ivPe/GH6EvrlUBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Validity Not Before: Aug 9 01:37:22 2025 GMT Not After : Aug 16 01:37:22 2025 GMT Subject: CN=6896a652-8270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3c:56:78:40:a7:bb:41:49:86:c7:ef:6c:4f: 6b:38:6a:69:e5:90:ec:d4:7a:63:16:46:b6:db:44: e4:1b:6c:52:07:63:bc:3d:c7:b8:3a:16:15:2b:21: f8:42:48:72:d4:10:fc:b0:74:b8:11:0a:69:0f:7b: 07:28:53:aa:7d:86:1b:15:c3:53:a3:7d:b5:d6:cd: 19:82:32:a3:93:fc:8c:69:9c:42:b2:4e:95:3c:73: 43:71:54:fe:ad:9b:1b:ba:2a:1b:dd:6d:8d:2c:74: 5f:10:e3:5b:2d:bf:03:2e:f5:bb:7c:33:79:e2:32: d5:4c:0e:98:8d:f4:60:c5:11:5b:b6:5c:51:1e:f8: 29:0c:b6:89:4a:3c:eb:72:5b:63:17:59:c2:d4:16: c7:d9:72:92:46:03:f7:8b:5e:65:fb:7e:52:56:4a: 8a:5a:e3:ab:7f:db:85:6b:91:88:0e:ac:57:49:01: a6:76:6c:b6:d4:0a:53:3f:f0:c6:da:e9:7f:f9:c6: 8a:a9:e2:14:23:40:fc:f4:58:39:71:44:05:62:26: f6:f0:fc:01:59:9f:40:b5:b6:fa:14:00:8c:64:ff: 2e:ae:79:10:80:92:20:fc:61:02:55:80:e7:71:97: 35:a1:57:6b:fa:7a:2d:d4:a5:8a:9f:3b:5b:a5:60: 85:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6F:73:83:B1:B9:85:A5:9B:45:AE:AC:4D:DA:EB:15:E0:68:7A:AF X509v3 Authority Key Identifier: keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:51:b5:bb:d7:77:5e:a7:db:c2:2f:19:dd:5e:65:c8:55:e3: 08:ad:6c:00:65:d6:06:c1:91:2a:b0:1e:1c:7e:82:c4:e2:5d: 52:25:92:79:a9:24:50:40:47:7f:28:c9:76:dd:43:e7:9f:a3: ad:62:98:a5:d5:35:0d:6f:9b:ed:09:25:fb:c1:c2:9b:e2:38: b3:64:a1:dc:f3:d2:ab:6e:77:c7:75:ff:92:e2:6b:9f:5b:32: f7:2b:da:c5:15:9b:cc:66:5f:d5:6c:22:c4:26:70:7c:03:33: 4e:92:68:51:5a:bc:da:78:6a:8c:2c:4d:9b:5a:82:76:fe:5d: cf:92:75:57:44:de:7f:25:39:95:ed:0a:aa:52:c1:c8:c0:7b: 00:6b:ec:90:16:fb:e9:a0:34:06:7f:a0:0e:d6:fa:67:65:fc: 08:39:50:99:73:67:60:37:c4:c3:47:87:31:5b:e8:44:ce:1d: 02:3e:21:da:65:74:30:87:2b:54:0a:9d:d9:69:37:af:54:dc: 5a:5a:47:01:2e:1c:8b:45:bb:af:44:be:af:f6:98:ba:d8:18: 1d:9d:f1:fe:3f:96:56:32:fe:37:7f:43:21:6b:97:3d:31:3b: 62:3c:ad:fa:71:c5:54:72:b8:e3:6e:d5:7f:dc:d8:1a:b5:b3: dc:88:79:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD RTc0RUVGQkIwHhcNMjUwODA5MDEzNzIyWhcNMjUwODE2MDEzNzIyWjAYMRYwFAYD VQQDEw02ODk2YTY1Mi04MjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jxWeECnu0FJhsfvbE9rOGpp5ZDs1HpjFka220TkG2xSB2O8Pce4OhYVKyH4 Qkhy1BD8sHS4EQppD3sHKFOqfYYbFcNTo3211s0ZgjKjk/yMaZxCsk6VPHNDcVT+ rZsbuiob3W2NLHRfEONbLb8DLvW7fDN54jLVTA6YjfRgxRFbtlxRHvgpDLaJSjzr cltjF1nC1BbH2XKSRgP3i15l+35SVkqKWuOrf9uFa5GIDqxXSQGmdmy21ApTP/DG 2ul/+caKqeIUI0D89Fg5cUQFYib28PwBWZ9Atbb6FACMZP8urnkQgJIg/GECVYDn cZc1oVdr+not1KWKnztbpWCFHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlvc4Ox uYWlm0WurE3a6xXgaHqvMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjI0Qy9CQjUwRDlEMEQwNkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlf RUc1aGtOdy1MdWZPZE83N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnUbW713dep9vCLxndXmXIVeMIrWwAZdYGwZEqsB4cfoLE4l1SJZJ5 qSRQQEd/KMl23UPnn6OtYpil1TUNb5vtCSX7wcKb4jizZKHc89KrbnfHdf+S4muf WzL3K9rFFZvMZl/VbCLEJnB8AzNOkmhRWrzaeGqMLE2bWoJ2/l3PknVXRN5/JTmV 7QqqUsHIwHsAa+yQFvvpoDQGf6AO1vpnZfwIOVCZc2dgN8TDR4cxW+hEzh0CPiHa ZXQwhytUCp3ZaTevVNxaWkcBLhyLRbuvRL6v9pi62BgdnfH+P5ZWMv43f0Mha5c9 MTtiPK36ccVUcrjjbtV/3NgatbPciHmZ -----END CERTIFICATE-----Generated at Sun Aug 10 13:55:09 2025 by rpki-client