$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft File: ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft (raw, json) Hash identifier: /98WfJoTyCopTb0cOEs4DQz7ItDmnV3Ujl/em+o8cfo= Subject key identifier: CC:91:B6:BF:82:57:DE:F8:89:C9:38:83:36:65:8A:B7:63:5B:B8:F5 Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7 Certificate issuer: /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7 Certificate serial: 0847 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft Manifest number: 0813 Signing time: Sat 31 May 2025 20:58:46 +0000 Manifest this update: Sat 31 May 2025 20:58:46 +0000 Manifest next update: Sat 07 Jun 2025 20:58:46 +0000 Files and hashes: 1: ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl (hash: 2UBAXNRz68wM3OVAEJw8kcEo3iisL63LGyRqqF6tFsg=) 2: 653B503C5C3C11ED9B4FAB0BC4F9AE02.roa (hash: 1mD7CDJ8DRk+lM8vtNVrHgkyHQbdyBW6ydIVEiLBivE=) 3: 1D2381425E5F11EC870D9676C4F9AE02.roa (hash: ZUd4QbCdB3E4EQBK+nU5VmSSyQaDu0ItsbLfbY5xMOQ=) 4: 67591AB22FC911EBA360EC1CC4F9AE02.roa (hash: esocmtJlq7HlcotlDHp6Mez+z9Rl0fTX+KzbKTLXFms=) 5: 9EA66A9E737D11ECA0A3A018C4F9AE02.roa (hash: 6MugAT5WUA7wa54QdXsUcpbkyeNKtczQJ8hnMQYoyDw=) 6: E1582B782A6011EB8DEF2641C4F9AE02.roa (hash: g9vu6FJuOGiHVWjvlUrnr/lO98Du1rwPNicgo4vRrvk=) 7: E1E4F9902A6011EB8DEF2641C4F9AE02.roa (hash: GxNJ1GJyLCfG1wd+tTkjUWqW3q5g76ObJBXzG7SEDaI=) 8: E0A4E5182A6011EB8DEF2641C4F9AE02.roa (hash: LmiT/78vJYPXtCg/vYC5cyA6e51c5z/fGkAk3TxGErM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2119 (0x847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7 Validity Not Before: May 31 20:58:46 2025 GMT Not After : Jun 7 20:58:46 2025 GMT Subject: CN=683b6d86-8597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:b8:eb:77:c2:e8:25:1c:14:68:66:7d:92: e2:d6:3d:e3:7a:07:f0:a6:90:b4:98:d8:6a:eb:88: 64:3c:a3:2c:3d:6b:9f:99:53:e0:20:78:86:8e:dc: 57:3a:ec:bd:a7:e5:49:7b:33:ae:a8:81:bb:c3:1c: fc:69:26:a8:91:b1:3f:27:4a:39:42:88:af:82:aa: fa:6c:ee:3f:07:0f:32:52:54:77:20:5d:83:0a:98: e8:41:be:07:3e:cd:e3:91:6b:e4:83:e7:f0:84:c9: d9:8a:eb:5b:c9:53:18:6e:af:1c:41:98:a0:03:28: 82:98:ca:aa:b7:4e:6f:b2:4e:18:f4:3a:8a:65:5b: 0c:47:21:73:e5:59:2c:8f:57:04:dd:11:40:1e:54: 94:f4:32:eb:e3:cb:e5:83:15:c8:19:ff:a9:39:11: 64:4c:21:82:6f:64:83:fc:47:6a:26:dd:e6:b7:62: 79:3c:ed:8c:7c:2b:7e:9b:59:80:f6:14:e6:02:f6: 2c:d6:eb:87:42:f6:e1:b7:55:7a:6d:5f:f8:5a:bc: 0c:94:f6:35:17:e9:73:43:1d:eb:2a:24:93:45:b0: 48:d5:1a:3b:26:b4:f8:59:c5:47:6d:e6:37:6b:63: 97:e2:08:d7:90:db:8a:90:c1:b0:33:f9:d5:77:c0: b5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:91:B6:BF:82:57:DE:F8:89:C9:38:83:36:65:8A:B7:63:5B:B8:F5 X509v3 Authority Key Identifier: keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:30:72:9d:40:6f:32:26:ee:6b:fd:51:49:dc:86:e6:3a:f7: 25:98:97:22:c6:ce:75:d3:56:03:9f:35:20:ab:e5:1f:af:5d: ec:0b:b1:78:02:32:33:a1:10:b6:cd:a4:a5:6b:44:af:52:73: b4:92:f4:fc:81:b4:0e:3d:54:cc:30:73:a3:5d:b9:43:26:6b: 15:7e:87:10:db:b8:83:ab:0b:d3:83:d2:e8:c1:be:88:39:e9: 4c:6c:e0:56:28:33:2c:07:fe:07:8f:ab:d0:e1:3a:68:b7:e4: cd:34:6f:01:94:5d:57:5c:1e:b6:14:02:8d:fb:35:ac:51:6a: d7:58:a6:e9:0e:20:3b:64:f6:2e:e3:cd:59:61:3e:23:37:be: 33:1f:42:7b:a3:a7:98:a8:44:05:e3:dc:d6:37:e4:c8:55:a5: 88:68:2f:a8:ba:00:26:d8:3c:45:ef:5a:b1:1d:2a:9d:1c:fc: 05:93:cc:25:45:90:d5:de:b1:6f:de:3e:3a:37:61:1b:01:fd: 4c:19:dd:09:f0:34:ce:0e:88:06:bd:8b:b9:b6:85:75:70:b0: 8c:e3:70:57:21:62:be:ee:39:19:eb:5e:6b:00:11:4f:68:ea: bc:82:83:3c:40:ba:6a:60:ce:78:a0:56:4e:b3:54:79:0c:e4: ac:7d:3b:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDA3MjdBQUM1QjhDRjdGRTY4Q0NENkRFNzdGNkM4QjQ2 RDU3NEZBQTcwHhcNMjUwNTMxMjA1ODQ2WhcNMjUwNjA3MjA1ODQ2WjAYMRYwFAYD VQQDEw02ODNiNmQ4Ni04NTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGS463fC6CUcFGhmfZLi1j3jegfwppC0mNhq64hkPKMsPWufmVPgIHiGjtxX Ouy9p+VJezOuqIG7wxz8aSaokbE/J0o5Qoivgqr6bO4/Bw8yUlR3IF2DCpjoQb4H Ps3jkWvkg+fwhMnZiutbyVMYbq8cQZigAyiCmMqqt05vsk4Y9DqKZVsMRyFz5Vks j1cE3RFAHlSU9DLr48vlgxXIGf+pORFkTCGCb2SD/EdqJt3mt2J5PO2MfCt+m1mA 9hTmAvYs1uuHQvbht1V6bV/4WrwMlPY1F+lzQx3rKiSTRbBI1Ro7JrT4WcVHbeY3 a2OX4gjXkNuKkMGwM/nVd8C1tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyRtr+C V974ick4gzZlirdjW7j1MB8GA1UdIwQYMBaAFAcnqsW4z3/mjM1t539si0bVdPqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GNEJENTAwOEUw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYtYU16VzNuZjJ5TFJ0VjAt cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J5ZXF4YmpQZi1hTXpXM25mMnlMUnRWMC1xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GNEJENTAwOEUwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYt YU16VzNuZjJ5TFJ0VjAtcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpMHKdQG8yJu5r/VFJ3IbmOvclmJcixs5101YDnzUgq+Ufr13sC7F4 AjIzoRC2zaSla0SvUnO0kvT8gbQOPVTMMHOjXblDJmsVfocQ27iDqwvTg9Lowb6I OelMbOBWKDMsB/4Hj6vQ4Tpot+TNNG8BlF1XXB62FAKN+zWsUWrXWKbpDiA7ZPYu 481ZYT4jN74zH0J7o6eYqEQF49zWN+TIVaWIaC+ougAm2DxF71qxHSqdHPwFk8wl RZDV3rFv3j46N2EbAf1MGd0J8DTODogGvYu5toV1cLCM43BXIWK+7jkZ615rABFP aOq8goM8QLpqYM54oFZOs1R5DOSsfTv9 -----END CERTIFICATE-----Generated at Mon Jun 2 21:06:18 2025 by rpki-client