$ rpki-client -vvf rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.mft File: ByjuraGOzeT7fFAuuEu2kD1lMvE.mft (raw, json) Hash identifier: KGmPh9ic82D1w8AOn1x1nPKlfu0PLxEFv+FKjiTGbsY= Subject key identifier: E7:57:6A:46:DC:12:9F:4B:05:55:CD:03:5B:99:56:45:9B:AB:D0:7B Authority key identifier: 07:28:EE:AD:A1:8E:CD:E4:FB:7C:50:2E:B8:4B:B6:90:3D:65:32:F1 Certificate issuer: /CN=A912E82F/serialNumber=0728EEADA18ECDE4FB7C502EB84BB6903D6532F1 Certificate serial: 097E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByjuraGOzeT7fFAuuEu2kD1lMvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.mft Manifest number: 0978 Signing time: Fri 28 Mar 2025 20:24:46 +0000 Manifest this update: Fri 28 Mar 2025 20:24:45 +0000 Manifest next update: Fri 04 Apr 2025 20:24:45 +0000 Files and hashes: 1: ByjuraGOzeT7fFAuuEu2kD1lMvE.crl (hash: NQ4eX0YVSfcT4tdzXTa9lRe5zL3NYYtmes/4ITrEbOE=) 2: B1E17EB08A1C11EAA328EB41C4F9AE02.roa (hash: obmE008LLIhjC+37VzTi0eM/jm/7H77XFXtUrjLHgRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.crl rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByjuraGOzeT7fFAuuEu2kD1lMvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2430 (0x97e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E82F Validity Not Before: Mar 28 20:24:45 2025 GMT Not After : Apr 4 20:24:45 2025 GMT Subject: CN=67e7058d-ec9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b3:38:98:5e:6b:a4:a2:08:5a:96:01:e7:27: 3b:89:14:77:2e:2f:8b:82:b5:a2:d2:42:5e:78:5a: ad:64:5a:78:9b:91:47:83:c9:26:16:0f:3c:9b:2b: fd:bf:96:b8:8d:cb:10:ca:97:e4:7e:58:ba:3f:b3: 2d:39:1f:9c:9f:5a:f8:a3:7c:0e:19:51:e6:ef:3b: 54:bc:fa:1a:b6:b4:ad:93:46:19:22:b7:18:3b:b5: cf:68:b0:4d:dd:0a:20:2d:d2:7d:fd:1f:65:27:c0: de:e9:77:a6:46:e1:4c:66:42:af:e4:6c:46:46:54: 7a:55:d8:63:d8:08:43:f6:da:de:76:1a:28:03:17: 26:ec:39:cd:31:b3:8c:54:c6:b5:a5:f2:93:02:c5: 07:06:94:36:47:85:37:ee:a8:3d:b8:bb:84:48:24: db:95:36:27:49:60:b2:6f:6a:44:9c:38:56:eb:18: 3b:9a:87:e4:13:fc:eb:7a:d7:80:31:7f:a4:58:e4: 8f:a1:9b:a0:61:0a:8c:b7:2d:b0:02:4b:cc:6b:d7: e2:86:da:18:fc:8e:28:86:40:b1:ef:e6:74:38:18: 37:3e:5f:b2:0e:28:5d:57:7b:fb:04:77:35:07:3d: 6b:ca:12:3d:01:16:5f:40:6f:2d:c1:e5:2e:11:ed: 83:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:57:6A:46:DC:12:9F:4B:05:55:CD:03:5B:99:56:45:9B:AB:D0:7B X509v3 Authority Key Identifier: keyid:07:28:EE:AD:A1:8E:CD:E4:FB:7C:50:2E:B8:4B:B6:90:3D:65:32:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByjuraGOzeT7fFAuuEu2kD1lMvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:21:c9:7f:a6:bb:64:a9:a1:e8:0e:6b:70:58:c0:f9:e5:35: 82:6e:80:c4:35:23:bc:cc:06:49:88:70:58:1d:f4:26:26:7a: bd:50:9f:96:4f:bb:6b:76:b7:4b:ed:ad:bf:3f:51:8f:d1:ce: 04:ad:aa:42:d0:e4:b4:8a:51:16:e4:0e:b5:18:45:81:46:8c: 23:e2:ed:49:79:ad:b9:1e:37:a6:ba:03:82:e1:8e:e2:db:5b: 4a:32:88:15:86:06:80:52:77:08:e0:cf:a0:f2:22:7c:fa:fb: af:b4:d7:d0:cd:e0:48:8f:a9:29:44:dc:32:fc:1d:06:93:f4: 74:64:52:d7:df:0c:5c:ed:a7:f2:50:e6:84:5f:98:48:e1:62: 0a:7e:49:82:5f:1a:c1:fd:8e:af:0e:43:77:5f:f1:b6:ac:2d: 82:0f:cd:d0:46:05:6b:40:d9:01:74:4f:e2:74:4a:d0:9c:24: e3:f2:39:73:ab:f3:2e:72:e5:38:49:79:20:bb:36:c7:4d:36: 7e:c6:1d:08:8b:9d:a4:a4:03:f1:1d:1b:0b:cb:2f:df:71:af: ba:7b:bf:02:27:13:23:ca:b5:b8:30:0c:2b:bf:f2:33:d3:ca: 17:23:d2:36:a2:e0:3e:d2:77:65:b6:94:15:d3:ca:a8:51:7b: b8:8a:67:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4MkYxMTAvBgNVBAUTKDA3MjhFRUFEQTE4RUNERTRGQjdDNTAyRUI4NEJCNjkw M0Q2NTMyRjEwHhcNMjUwMzI4MjAyNDQ1WhcNMjUwNDA0MjAyNDQ1WjAYMRYwFAYD VQQDEw02N2U3MDU4ZC1lYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rM4mF5rpKIIWpYB5yc7iRR3Li+LgrWi0kJeeFqtZFp4m5FHg8kmFg88myv9 v5a4jcsQypfkfli6P7MtOR+cn1r4o3wOGVHm7ztUvPoatrStk0YZIrcYO7XPaLBN 3QogLdJ9/R9lJ8De6XemRuFMZkKv5GxGRlR6Vdhj2AhD9tredhooAxcm7DnNMbOM VMa1pfKTAsUHBpQ2R4U37qg9uLuESCTblTYnSWCyb2pEnDhW6xg7mofkE/zreteA MX+kWOSPoZugYQqMty2wAkvMa9fihtoY/I4ohkCx7+Z0OBg3Pl+yDihdV3v7BHc1 Bz1ryhI9ARZfQG8tweUuEe2DDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdXakbc Ep9LBVXNA1uZVkWbq9B7MB8GA1UdIwQYMBaAFAco7q2hjs3k+3xQLrhLtpA9ZTLx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgyRi9FOUUwRDY3QzhB MUIxMUVBOURDODQzNDFDNEY5QUUwMi9CeWp1cmFHT3plVDdmRkF1dUV1MmtEMWxN dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J5anVyYUdPemVUN2ZGQXV1RXUya0QxbE12RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTgyRi9FOUUwRDY3QzhBMUIxMUVBOURDODQzNDFDNEY5QUUwMi9CeWp1cmFHT3pl VDdmRkF1dUV1MmtEMWxNdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMIcl/prtkqaHoDmtwWMD55TWCboDENSO8zAZJiHBYHfQmJnq9UJ+W T7trdrdL7a2/P1GP0c4ErapC0OS0ilEW5A61GEWBRowj4u1Jea25HjemugOC4Y7i 21tKMogVhgaAUncI4M+g8iJ8+vuvtNfQzeBIj6kpRNwy/B0Gk/R0ZFLX3wxc7afy UOaEX5hI4WIKfkmCXxrB/Y6vDkN3X/G2rC2CD83QRgVrQNkBdE/idErQnCTj8jlz q/MucuU4SXkguzbHTTZ+xh0Ii52kpAPxHRsLyy/fca+6e78CJxMjyrW4MAwrv/Iz 08oXI9I2ouA+0ndltpQV08qoUXu4imc/ -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:21 2025 by rpki-client