$ rpki-client -vvf rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.mft File: ByjuraGOzeT7fFAuuEu2kD1lMvE.mft (raw, json) Hash identifier: o0LfMxRsxl5NhY4i/+XdhFAmh0Re0FxDp3T9dQ+HIN0= Subject key identifier: C9:03:90:D7:F1:72:B7:0D:10:2F:C7:99:84:76:5C:E6:A9:7A:39:26 Authority key identifier: 07:28:EE:AD:A1:8E:CD:E4:FB:7C:50:2E:B8:4B:B6:90:3D:65:32:F1 Certificate issuer: /CN=A912E82F/serialNumber=0728EEADA18ECDE4FB7C502EB84BB6903D6532F1 Certificate serial: 09F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByjuraGOzeT7fFAuuEu2kD1lMvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.mft Manifest number: 09EC Signing time: Tue 04 Nov 2025 19:59:43 +0000 Manifest this update: Tue 04 Nov 2025 19:59:42 +0000 Manifest next update: Tue 11 Nov 2025 19:59:42 +0000 Files and hashes: 1: ByjuraGOzeT7fFAuuEu2kD1lMvE.crl (hash: i/1Xe0sejsdCa2ieyjqRRhMqUZHJuadzS7gurcSwUvM=) 2: B1E17EB08A1C11EAA328EB41C4F9AE02.roa (hash: H7FNcnGytiJ1b8lqQF/vjIDhag6o2/tMiNRQMdS8LlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.crl rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByjuraGOzeT7fFAuuEu2kD1lMvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2547 (0x9f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E82F, serialNumber=0728EEADA18ECDE4FB7C502EB84BB6903D6532F1 Validity Not Before: Nov 4 19:59:42 2025 GMT Not After : Nov 11 19:59:42 2025 GMT Subject: CN=690a5b2f-40ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0a:2e:73:dd:34:5e:d3:b7:45:da:c3:50:6a: 0d:58:fc:ec:af:40:5c:53:0b:8e:cd:e7:f5:3a:28: 52:a7:ff:78:17:ea:e5:4d:ca:11:c9:f2:19:10:c4: 3a:35:bf:d6:2d:21:6a:3d:cc:59:fd:ed:9d:8d:62: a6:7f:f6:97:05:61:87:26:64:5f:9c:73:40:f9:e2: 9b:65:41:28:93:b9:d9:a3:0d:94:bc:4e:fe:21:b3: 7e:a6:36:19:ef:af:bc:b2:75:b3:90:7d:c9:33:08: 01:b7:4d:e8:a2:9a:eb:c2:d3:c3:4d:18:58:da:32: 2d:1c:92:76:8e:9d:03:c4:1f:ba:9b:4c:2d:cb:66: 58:66:6a:8d:7c:09:3d:7b:20:c4:bb:31:ef:e5:3c: 3f:d3:e1:3b:47:8a:71:bd:ce:85:20:c4:2c:a0:95: f5:c2:c3:a1:6f:bc:df:0c:d9:e8:6e:60:2c:3f:36: fa:bf:5e:b0:2c:01:e1:f0:65:db:d2:5c:a5:da:33: fc:f1:e0:ee:a5:4d:f9:de:93:51:50:8f:10:c4:02: 75:c5:d8:1d:5a:9a:b2:13:d3:3d:01:7e:60:8d:b6: af:de:e9:e6:bb:89:a3:ad:81:f0:2c:1a:c9:f4:2a: e3:de:a8:84:e0:fb:2b:e4:ed:f9:ad:31:2a:e4:22: d5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:03:90:D7:F1:72:B7:0D:10:2F:C7:99:84:76:5C:E6:A9:7A:39:26 X509v3 Authority Key Identifier: keyid:07:28:EE:AD:A1:8E:CD:E4:FB:7C:50:2E:B8:4B:B6:90:3D:65:32:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByjuraGOzeT7fFAuuEu2kD1lMvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c2:cf:19:c0:17:6b:82:1f:f4:ec:c2:74:ce:7a:43:f6:f1: 6a:1d:23:9e:d1:e6:3d:44:04:13:62:06:35:f6:4c:91:7e:52: f6:dc:43:4a:35:26:dc:8f:f1:05:60:4e:d9:b2:84:d5:c1:e1: 3f:ee:42:96:8a:e7:4f:79:d0:a5:86:3c:2d:84:37:44:bb:18: 90:3b:28:54:fc:9c:5b:e8:f6:5c:b4:6c:17:1a:a9:05:cf:38: ce:84:eb:f0:d9:25:a4:77:ff:88:f2:90:ee:7a:f4:a5:c3:2d: cc:25:87:bb:d2:b9:44:3c:42:0f:1b:cc:66:52:74:8f:44:6c: b9:bc:89:14:1b:2a:50:a3:20:34:48:30:e5:fd:87:a7:bf:85: 42:1c:c4:0d:82:9b:54:20:1f:f3:cf:6d:c3:3f:24:70:58:4a: fa:48:d7:99:f8:58:93:a6:09:e9:92:00:96:fd:a2:df:c2:ab: 74:4a:42:ba:74:50:a7:a2:82:8c:e4:bb:39:b0:a0:04:8b:40: 97:9d:a0:f9:8a:06:4a:a5:06:c9:df:86:17:95:e4:d2:a7:4c: 31:df:cb:35:81:6d:55:0e:f1:ef:a6:79:90:94:bb:ae:ac:82: f9:47:7e:8f:ab:c0:0a:3a:65:00:da:5a:66:6d:45:42:b8:9a: 77:d5:48:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4MkYxMTAvBgNVBAUTKDA3MjhFRUFEQTE4RUNERTRGQjdDNTAyRUI4NEJCNjkw M0Q2NTMyRjEwHhcNMjUxMTA0MTk1OTQyWhcNMjUxMTExMTk1OTQyWjAYMRYwFAYD VQQDEw02OTBhNWIyZi00MGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Qouc900XtO3RdrDUGoNWPzsr0BcUwuOzef1OihSp/94F+rlTcoRyfIZEMQ6 Nb/WLSFqPcxZ/e2djWKmf/aXBWGHJmRfnHNA+eKbZUEok7nZow2UvE7+IbN+pjYZ 76+8snWzkH3JMwgBt03ooprrwtPDTRhY2jItHJJ2jp0DxB+6m0wty2ZYZmqNfAk9 eyDEuzHv5Tw/0+E7R4pxvc6FIMQsoJX1wsOhb7zfDNnobmAsPzb6v16wLAHh8GXb 0lyl2jP88eDupU353pNRUI8QxAJ1xdgdWpqyE9M9AX5gjbav3unmu4mjrYHwLBrJ 9Crj3qiE4Psr5O35rTEq5CLVcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkDkNfx crcNEC/HmYR2XOapejkmMB8GA1UdIwQYMBaAFAco7q2hjs3k+3xQLrhLtpA9ZTLx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgyRi9FOUUwRDY3QzhB MUIxMUVBOURDODQzNDFDNEY5QUUwMi9CeWp1cmFHT3plVDdmRkF1dUV1MmtEMWxN dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J5anVyYUdPemVUN2ZGQXV1RXUya0QxbE12RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTgyRi9FOUUwRDY3QzhBMUIxMUVBOURDODQzNDFDNEY5QUUwMi9CeWp1cmFHT3pl VDdmRkF1dUV1MmtEMWxNdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFws8ZwBdrgh/07MJ0znpD9vFqHSOe0eY9RAQTYgY19kyRflL23ENK NSbcj/EFYE7ZsoTVweE/7kKWiudPedClhjwthDdEuxiQOyhU/Jxb6PZctGwXGqkF zzjOhOvw2SWkd/+I8pDuevSlwy3MJYe70rlEPEIPG8xmUnSPRGy5vIkUGypQoyA0 SDDl/Yenv4VCHMQNgptUIB/zz23DPyRwWEr6SNeZ+FiTpgnpkgCW/aLfwqt0SkK6 dFCnooKM5Ls5sKAEi0CXnaD5igZKpQbJ34YXleTSp0wx38s1gW1VDvHvpnmQlLuu rIL5R36Pq8AKOmUA2lpmbUVCuJp31Ui8 -----END CERTIFICATE-----Generated at Wed Nov 5 15:45:00 2025 by rpki-client