$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft File: ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft (raw, json) Hash identifier: taRFRY0A1qeTF58Ei2Yib6gD/4bPf3PrWJka+AhDOpw= Subject key identifier: 8B:5A:68:80:D4:1E:A2:52:E5:5B:13:F6:B6:C4:7B:66:62:67:9E:CB Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7 Certificate issuer: /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7 Certificate serial: 0822 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft Manifest number: 07F5 Signing time: Fri 04 Apr 2025 21:07:49 +0000 Manifest this update: Fri 04 Apr 2025 21:07:48 +0000 Manifest next update: Fri 11 Apr 2025 21:07:48 +0000 Files and hashes: 1: ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl (hash: U6I2BtLZ0ZFJeYGPQT7A8nWo0zyWbsna4sMt5+Th/Dk=) 2: 653B503C5C3C11ED9B4FAB0BC4F9AE02.roa (hash: SInZwIRUSrNT+CGA00TI2vqQuV3tnVzc8lQJz4X0YUc=) 3: 1D2381425E5F11EC870D9676C4F9AE02.roa (hash: 88IU+2Ja1d4/dQh6mRfej15suDOs6ZRH0Uer5MyRJcg=) 4: 67591AB22FC911EBA360EC1CC4F9AE02.roa (hash: c7dCnzX4vSfHzae3VT9hTyrZuNvGtsxsos8ykfv0aKI=) 5: 9EA66A9E737D11ECA0A3A018C4F9AE02.roa (hash: 351c1xDCKrPS/Zgdm9IuCdTBAtSfPFKtcdL0Nkv+aac=) 6: E1582B782A6011EB8DEF2641C4F9AE02.roa (hash: n+8MQXL+G8sezVLVJ9IEhD17NUtbdnBGxBHHBcIhqHI=) 7: E1E4F9902A6011EB8DEF2641C4F9AE02.roa (hash: TIn3DaLBv0q5rYMtlQ1SpPtEBdTq2Jlnj4Km/ZSeUtw=) 8: E0A4E5182A6011EB8DEF2641C4F9AE02.roa (hash: uvrXUI36mYaQ6mDjIl+DyfYIIOHZCGtz8aRylqne0OI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B Validity Not Before: Apr 4 21:07:48 2025 GMT Not After : Apr 11 21:07:48 2025 GMT Subject: CN=67f04a25-6e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:a8:9c:a4:18:42:7f:46:e4:79:9c:60:f4: 49:fd:02:74:3e:3e:b5:fb:9c:27:2b:d2:74:40:1e: 69:9d:79:6f:e5:c1:39:06:90:64:c9:a9:0d:28:9a: 54:af:35:1a:40:de:3d:49:2f:ae:ed:11:89:4b:f8: 51:79:cf:dc:ef:30:68:88:de:fa:d3:1c:3c:28:fc: 38:de:15:50:2a:4b:2d:c2:d5:47:dc:41:a0:a3:de: 62:05:22:56:e5:ab:05:cb:ed:e7:f5:43:eb:39:74: f4:7b:2a:71:40:f5:d1:d7:2b:d5:1d:f5:3a:80:26: 96:4b:47:4a:c6:82:cd:d5:99:b6:57:a4:41:31:a0: 4a:2a:82:81:32:b1:4a:b5:60:c9:25:77:46:3a:ff: 13:89:ab:89:e2:fe:84:52:e3:fe:e8:4f:23:97:a3: d1:ec:4e:db:2e:37:fc:d5:ca:b6:75:87:dd:ae:49: 60:ce:7a:d4:81:96:70:21:09:f2:e9:ae:c6:f7:b3: 5f:05:a9:a6:05:a8:2a:18:c9:b0:2c:f2:a9:7b:c4: ba:df:fd:8b:2f:b2:66:87:5a:12:1a:3c:69:de:d4: 62:58:0d:e8:a3:e4:fa:c8:da:34:0e:84:08:16:49: 03:bf:54:40:09:71:70:24:99:85:10:be:3b:6e:89: a3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5A:68:80:D4:1E:A2:52:E5:5B:13:F6:B6:C4:7B:66:62:67:9E:CB X509v3 Authority Key Identifier: keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:77:8d:a7:49:a6:45:4e:73:7e:88:15:68:bc:40:1b:02:b8: 3b:5b:df:b8:9b:90:3b:b2:90:2c:fb:d8:2a:6a:e7:92:68:c7: d9:26:b6:80:3a:60:c0:0c:73:ac:39:29:49:75:a6:3b:41:98: 02:02:b5:cb:55:af:dc:8b:bb:12:e4:d0:36:b0:ba:a3:8b:09: be:af:9d:40:9b:09:10:05:59:7e:82:fd:1b:2b:46:10:54:1f: de:23:b4:4b:8f:ee:8e:38:72:aa:8f:00:67:27:a3:e1:78:39: 8a:b2:ed:e6:26:30:48:7d:6d:99:e7:02:bf:bb:71:1f:00:cb: 15:8c:a9:50:b4:d7:d2:08:82:f1:10:e0:bb:38:c2:0b:ca:df: 03:8b:92:84:49:e9:3b:c9:c0:46:00:5b:df:59:85:ff:3f:fc: 07:15:8b:52:d3:45:50:3d:a1:a4:1e:58:2d:0c:51:35:a3:91: 4b:d9:d2:3b:ca:c9:d8:70:9e:4c:45:ee:07:2b:df:46:cc:24: 37:2f:26:a7:d8:e9:91:9d:a5:66:75:7c:6f:fb:cb:30:fa:60: b0:39:78:ef:e3:1c:1f:3b:bb:78:70:92:99:f1:c9:9d:cf:59: 9c:41:20:4b:ef:b1:18:2e:68:79:bc:6b:dd:35:6d:7f:e4:e5: 05:d4:c2:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDA3MjdBQUM1QjhDRjdGRTY4Q0NENkRFNzdGNkM4QjQ2 RDU3NEZBQTcwHhcNMjUwNDA0MjEwNzQ4WhcNMjUwNDExMjEwNzQ4WjAYMRYwFAYD VQQDEw02N2YwNGEyNS02ZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyN2onKQYQn9G5HmcYPRJ/QJ0Pj61+5wnK9J0QB5pnXlv5cE5BpBkyakNKJpU rzUaQN49SS+u7RGJS/hRec/c7zBoiN760xw8KPw43hVQKkstwtVH3EGgo95iBSJW 5asFy+3n9UPrOXT0eypxQPXR1yvVHfU6gCaWS0dKxoLN1Zm2V6RBMaBKKoKBMrFK tWDJJXdGOv8TiauJ4v6EUuP+6E8jl6PR7E7bLjf81cq2dYfdrklgznrUgZZwIQny 6a7G97NfBammBagqGMmwLPKpe8S63/2LL7Jmh1oSGjxp3tRiWA3oo+T6yNo0DoQI FkkDv1RACXFwJJmFEL47bomj0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItaaIDU HqJS5VsT9rbEe2ZiZ57LMB8GA1UdIwQYMBaAFAcnqsW4z3/mjM1t539si0bVdPqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GNEJENTAwOEUw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYtYU16VzNuZjJ5TFJ0VjAt cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J5ZXF4YmpQZi1hTXpXM25mMnlMUnRWMC1xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GNEJENTAwOEUwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYt YU16VzNuZjJ5TFJ0VjAtcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBed42nSaZFTnN+iBVovEAbArg7W9+4m5A7spAs+9gqaueSaMfZJraA OmDADHOsOSlJdaY7QZgCArXLVa/ci7sS5NA2sLqjiwm+r51AmwkQBVl+gv0bK0YQ VB/eI7RLj+6OOHKqjwBnJ6PheDmKsu3mJjBIfW2Z5wK/u3EfAMsVjKlQtNfSCILx EOC7OMILyt8Di5KESek7ycBGAFvfWYX/P/wHFYtS00VQPaGkHlgtDFE1o5FL2dI7 ysnYcJ5MRe4HK99GzCQ3Lyan2OmRnaVmdXxv+8sw+mCwOXjv4xwfO7t4cJKZ8cmd z1mcQSBL77EYLmh5vGvdNW1/5OUF1MLY -----END CERTIFICATE-----Generated at Sun Apr 6 14:21:42 2025 by rpki-client