$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft File: BYl-c1406PZYdVSprzc0CCziidk.mft (raw, json) Hash identifier: Vj47IquIvuWDVR13DEPl5yYSM6f7XHzOsEKIIU91X+U= Subject key identifier: A8:FA:4F:C0:32:44:FE:04:82:4E:8B:07:9F:94:15:68:F7:A0:6E:AA Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9 Certificate issuer: /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft Manifest number: 2D Signing time: Fri 05 Sep 2025 08:14:55 +0000 Manifest this update: Fri 05 Sep 2025 08:14:55 +0000 Manifest next update: Fri 12 Sep 2025 08:14:55 +0000 Files and hashes: 1: BYl-c1406PZYdVSprzc0CCziidk.crl (hash: WSe+kMQMWLztTXxJZ/EVqpY8xeleIFT3yimBDa2mFIM=) 2: 2C3D8AAA50B511F09288303CC4F9AE02.roa (hash: BRO70xst4iX7U+BsAkMQkxP1DSIFJqspyvz/A47AIrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9 Validity Not Before: Sep 5 08:14:55 2025 GMT Not After : Sep 12 08:14:55 2025 GMT Subject: CN=68ba9bff-6f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:91:a2:5f:31:cd:1b:13:ef:56:01:65:d2: 00:e4:49:38:ff:2a:b2:e9:c1:95:15:55:b4:3c:fb: df:51:26:a0:4a:16:e3:48:5e:d6:d8:0e:41:f3:41: 83:ff:b6:6b:d9:7e:24:e9:02:f7:b3:3d:8c:b8:6b: 0d:91:3d:37:43:2c:de:6c:c1:16:5a:9d:7d:34:92: 9c:f8:56:79:76:f4:c3:90:40:61:c0:c7:40:c2:03: cd:fb:c3:a8:e7:6c:37:07:34:66:7d:28:21:6b:69: 2f:9d:b3:75:91:ac:4b:93:25:95:0e:04:66:0c:74: 83:8a:cb:8d:49:41:cb:f6:d0:88:2c:2d:e4:29:11: 34:62:a1:53:f3:96:49:bd:2b:9a:f0:c5:c2:d6:d2: f8:2c:e7:d2:47:d1:1b:b6:2b:86:20:d6:a1:c8:4e: 93:ce:6e:e5:82:b8:c4:a5:f6:a3:1b:f4:94:81:93: cc:33:7b:9e:35:a3:6a:58:6d:ea:c1:76:c3:16:04: 76:50:26:68:ab:47:03:34:f3:b3:00:7a:d1:54:c7: 1d:75:62:26:8b:c2:ed:2c:74:4f:45:38:8f:9c:af: 6d:7f:22:0e:c1:ac:42:60:bb:e7:62:7b:2a:5f:29: 53:41:ed:81:4c:9c:c4:4e:9c:fc:5d:16:f2:6b:12: 6e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FA:4F:C0:32:44:FE:04:82:4E:8B:07:9F:94:15:68:F7:A0:6E:AA X509v3 Authority Key Identifier: keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:4c:58:76:96:68:91:a8:de:7f:0e:8f:5b:ae:70:f3:ad:d4: 3c:78:1a:a3:1a:a8:c2:70:07:89:cb:63:9d:53:f2:de:6d:68: 8c:23:f1:88:0d:76:9d:85:b5:67:65:98:06:00:19:12:29:96: 2e:c2:69:f4:2a:a3:98:f7:31:dd:69:39:f0:f2:11:f6:d4:b2: df:33:36:4b:a3:42:25:b7:46:1d:c5:b9:4e:c8:78:6c:4a:65: 07:98:86:ea:8d:2a:05:1b:95:a1:03:7c:e9:45:f3:92:9d:00: 22:8c:d6:e4:f5:3e:a3:b8:76:3d:87:54:6b:c9:eb:40:02:d1: 3e:50:3f:f2:86:05:7a:c9:20:ce:f2:48:94:1a:28:73:88:a3: cf:8f:a5:7b:9b:56:80:16:bd:b0:4e:d7:30:7b:4b:e9:90:6b: 05:ab:43:02:5f:21:02:b3:e2:c3:58:64:57:42:66:0d:cf:33: 1d:f0:01:1b:fa:b8:dd:6a:aa:ce:36:fe:05:83:4c:3f:de:c8: 28:19:a5:29:6e:9a:1c:e3:82:58:58:a4:d3:b5:09:8d:c2:07: bc:9c:3d:c6:0c:44:ca:1c:3e:e3:65:c4:bd:63:c4:9d:a4:e3: e6:dc:95:88:f4:c0:7f:3f:01:be:a9:b3:39:1d:c8:71:ca:4f: 73:29:f2:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODlFNzExMC8GA1UEBRMoMDU4OTdFNzM1RTM0RThGNjU4NzU1NEE5QUYzNzM0MDgy Q0UyODlEOTAeFw0yNTA5MDUwODE0NTVaFw0yNTA5MTIwODE0NTVaMBgxFjAUBgNV BAMTDTY4YmE5YmZmLTZmMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuopGiXzHNGxPvVgFl0gDkSTj/KrLpwZUVVbQ8+99RJqBKFuNIXtbYDkHzQYP/ tmvZfiTpAvezPYy4aw2RPTdDLN5swRZanX00kpz4Vnl29MOQQGHAx0DCA837w6jn bDcHNGZ9KCFraS+ds3WRrEuTJZUOBGYMdIOKy41JQcv20IgsLeQpETRioVPzlkm9 K5rwxcLW0vgs59JH0Ru2K4Yg1qHITpPObuWCuMSl9qMb9JSBk8wze541o2pYberB dsMWBHZQJmirRwM087MAetFUxx11YiaLwu0sdE9FOI+cr21/Ig7BrEJgu+dieypf KVNB7YFMnMROnPxdFvJrEm7RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqPpPwDJE /gSCTosHn5QVaPegbqowHwYDVR0jBBgwFoAUBYl+c1406PZYdVSprzc0CCziidkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OUU3Lzk5RDI4QzlDNEMw OTExRjA5RjM4QjYyOEM0RjlBRTAyL0JZbC1jMTQwNlBaWWRWU3ByemMwQ0N6aWlk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQllsLWMxNDA2UFpZZFZTcHJ6YzBDQ3ppaWRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 OUU3Lzk5RDI4QzlDNEMwOTExRjA5RjM4QjYyOEM0RjlBRTAyL0JZbC1jMTQwNlBa WWRWU3ByemMwQ0N6aWlkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEdMWHaWaJGo3n8Oj1uucPOt1Dx4GqMaqMJwB4nLY51T8t5taIwj8YgN dp2FtWdlmAYAGRIpli7CafQqo5j3Md1pOfDyEfbUst8zNkujQiW3Rh3FuU7IeGxK ZQeYhuqNKgUblaEDfOlF85KdACKM1uT1PqO4dj2HVGvJ60AC0T5QP/KGBXrJIM7y SJQaKHOIo8+PpXubVoAWvbBO1zB7S+mQawWrQwJfIQKz4sNYZFdCZg3PMx3wARv6 uN1qqs42/gWDTD/eyCgZpSlumhzjglhYpNO1CY3CB7ycPcYMRMocPuNlxL1jxJ2k 4+bclYj0wH8/Ab6pszkdyHHKT3Mp8j4= -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:17 2025 by rpki-client