$ rpki-client -vvf rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft File: BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft (raw, json) Hash identifier: X4VixE5X50OiI0Ocy6PPF7Ak5uFke+8tlP1b+pNCvPg= Subject key identifier: 74:1E:BB:60:ED:3D:10:CA:10:BB:45:53:D0:9E:BB:EF:0D:44:A9:08 Authority key identifier: 05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4 Certificate issuer: /CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft Manifest number: 017C Signing time: Sat 19 Jul 2025 04:03:07 +0000 Manifest this update: Sat 19 Jul 2025 04:03:07 +0000 Manifest next update: Sat 26 Jul 2025 04:03:06 +0000 Files and hashes: 1: BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl (hash: dgswR2fwWsHBJ0X9n5RDbUGKxyXbzht9VMQRtKF+osI=) 2: EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa (hash: MjUC58Jbut/RLQz7tFdLQRZzKyQ/nZJ7CMULIIsNiZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BFAB, serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4 Validity Not Before: Jul 19 04:03:07 2025 GMT Not After : Jul 26 04:03:06 2025 GMT Subject: CN=687b18fb-3e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:aa:00:4d:3e:22:e3:07:c5:d6:d1:4f:47:c5: 14:69:b6:20:fb:49:9b:68:d1:5f:70:a2:75:34:fb: db:42:e7:5c:01:1e:a5:10:9d:96:5e:6f:82:59:e8: 3c:26:16:4a:18:4d:c0:79:21:b6:c0:84:0c:72:dc: bb:e1:78:f5:de:38:0b:10:77:59:35:2a:ee:40:cc: a9:f2:26:71:49:d4:42:3c:0b:65:e4:36:9a:74:bd: ea:f4:22:ef:7c:a6:1a:32:ec:46:4f:9a:0e:3c:7c: da:a9:42:e9:2b:a4:da:5f:ae:5d:8f:0a:c0:1e:9d: bb:f9:2a:32:f9:b0:03:b3:27:4c:1a:c3:6c:76:73: 88:60:97:70:65:6e:fe:e3:d4:b6:36:d4:74:ec:10: 59:16:8a:23:8b:96:46:44:0d:83:6a:6b:c6:2b:5a: f4:87:36:17:1f:e0:87:aa:65:ec:84:a0:0a:a5:32: 2d:e3:a2:29:2b:24:cb:47:3a:35:39:21:3f:34:6e: e9:f7:68:72:76:3d:43:9c:9f:9f:c6:0f:a9:9c:6a: b5:14:2b:65:26:c9:81:d7:a9:3b:27:d3:78:a2:16: f2:39:cb:5e:2f:e3:f6:b8:8a:50:fa:b3:45:9e:8f: 98:ec:e6:90:f0:c3:ec:d5:d5:7b:1e:89:cc:d7:7a: 19:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1E:BB:60:ED:3D:10:CA:10:BB:45:53:D0:9E:BB:EF:0D:44:A9:08 X509v3 Authority Key Identifier: keyid:05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:8d:8b:c5:86:c0:28:6b:ed:ea:68:a2:a7:9c:f7:e9:6c:f9: 9c:41:b6:0f:1d:63:61:f1:e2:2c:45:ce:ad:46:17:4b:f6:16: a3:16:04:92:fb:22:6e:a9:f3:7f:44:ad:72:a4:4a:31:83:f7: 3a:1c:f8:31:9c:fa:a5:77:24:aa:4e:3a:c7:dc:94:ee:72:ab: d7:2b:49:11:a5:b1:af:b4:1c:93:03:3c:b7:53:23:af:18:5a: fd:33:44:e5:a0:2c:7b:f9:b6:b1:b7:a0:54:ee:d4:e1:42:08: e3:26:65:90:e2:a9:b5:8c:64:4a:1c:05:cb:50:4e:ab:46:b2: 1e:16:03:13:ec:8e:bb:b8:6a:75:ca:e5:00:ba:9d:2f:1f:53: 1b:63:91:51:b1:dd:b3:1c:16:4f:2e:7e:50:09:44:ff:01:8e: 1b:ef:bf:01:79:b2:f9:60:55:fa:33:24:32:6f:50:b3:1e:42: 0b:dc:1f:a3:dc:20:d0:6f:8d:11:5b:27:97:1d:ca:fe:9c:63: 75:cc:18:3c:32:2c:53:76:5e:66:84:fd:e4:75:6a:a2:c6:24: 1f:20:19:08:65:36:39:74:6d:69:49:cd:75:c9:4f:df:93:5b: 36:c9:2c:7c:68:8b:65:ae:d8:06:b8:c8:f8:98:e9:db:49:b5: 05:f8:da:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJGQUIxMTAvBgNVBAUTKDA1ODNBODVGRTMxM0ZDMEQ2MzY2RTIyQzQ0NjZCMjkz RUFENDVBRTQwHhcNMjUwNzE5MDQwMzA3WhcNMjUwNzI2MDQwMzA2WjAYMRYwFAYD VQQDEw02ODdiMThmYi0zZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqoATT4i4wfF1tFPR8UUabYg+0mbaNFfcKJ1NPvbQudcAR6lEJ2WXm+CWeg8 JhZKGE3AeSG2wIQMcty74Xj13jgLEHdZNSruQMyp8iZxSdRCPAtl5DaadL3q9CLv fKYaMuxGT5oOPHzaqULpK6TaX65djwrAHp27+Soy+bADsydMGsNsdnOIYJdwZW7+ 49S2NtR07BBZFooji5ZGRA2DamvGK1r0hzYXH+CHqmXshKAKpTIt46IpKyTLRzo1 OSE/NG7p92hydj1DnJ+fxg+pnGq1FCtlJsmB16k7J9N4ohbyOcteL+P2uIpQ+rNF no+Y7OaQ8MPs1dV7HonM13oZIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQeu2Dt PRDKELtFU9Ceu+8NRKkIMB8GA1UdIwQYMBaAFAWDqF/jE/wNY2biLERmspPq1Frk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkZBQi8zM0E5Q0M5QzM2 ODQxMUVFQTkyN0Y5NDhDNEY5QUUwMi9CWU9vWC1NVF9BMWpadUlzUkdheWstclVX dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZT29YLU1UX0Exalp1SXNSR2F5ay1yVVd1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkZBQi8zM0E5Q0M5QzM2ODQxMUVFQTkyN0Y5NDhDNEY5QUUwMi9CWU9vWC1NVF9B MWpadUlzUkdheWstclVXdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBijYvFhsAoa+3qaKKnnPfpbPmcQbYPHWNh8eIsRc6tRhdL9hajFgSS +yJuqfN/RK1ypEoxg/c6HPgxnPqldySqTjrH3JTucqvXK0kRpbGvtByTAzy3UyOv GFr9M0TloCx7+baxt6BU7tThQgjjJmWQ4qm1jGRKHAXLUE6rRrIeFgMT7I67uGp1 yuUAup0vH1MbY5FRsd2zHBZPLn5QCUT/AY4b778BebL5YFX6MyQyb1CzHkIL3B+j 3CDQb40RWyeXHcr+nGN1zBg8MixTdl5mhP3kdWqixiQfIBkIZTY5dG1pSc11yU/f k1s2ySx8aItlrtgGuMj4mOnbSbUF+Nps -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:58 2025 by rpki-client