$ rpki-client -vvf rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft File: BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft (raw, json) Hash identifier: jJS9rraLFfxa5wRHfCJS/aSznC9S2Icdc/oVz1X64Ws= Subject key identifier: 33:11:10:35:EC:02:D2:04:CF:66:CF:40:5C:27:ED:7B:40:4D:5E:F5 Authority key identifier: 05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4 Certificate issuer: /CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft Manifest number: 01AC Signing time: Thu 23 Oct 2025 05:00:12 +0000 Manifest this update: Thu 23 Oct 2025 05:00:12 +0000 Manifest next update: Thu 30 Oct 2025 05:00:12 +0000 Files and hashes: 1: BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl (hash: N0Y5+2Y1CMddfiM6PU1v6/9Xs2wKQT8AAwZjMfdxanw=) 2: EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa (hash: MjUC58Jbut/RLQz7tFdLQRZzKyQ/nZJ7CMULIIsNiZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 05:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BFAB, serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4 Validity Not Before: Oct 23 05:00:12 2025 GMT Not After : Oct 30 05:00:12 2025 GMT Subject: CN=68f9b65c-4700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ac:69:72:a5:1e:62:f4:9d:fe:b7:2e:12:4a: d3:39:cb:5f:09:82:e9:64:28:0e:f7:f0:6e:99:25: c4:c9:28:8e:50:ff:04:54:0a:42:40:e7:32:c5:f5: a5:04:3d:b1:3f:e7:73:88:3a:66:ac:b3:41:de:dc: 3b:42:d5:f2:1c:22:1e:da:93:12:25:35:4f:e6:98: cf:77:89:d6:f8:d5:92:84:3d:18:3c:41:68:fb:2e: bd:e0:16:c8:48:90:c6:0f:22:77:fa:a7:cf:d4:49: 5d:d6:ec:4b:5d:4b:8c:9d:29:24:1e:1d:75:17:02: 2a:2a:bf:a9:c7:7a:0f:da:d6:86:a2:46:c8:89:90: 42:e9:ff:a1:fd:ab:24:30:e1:aa:40:5b:c3:a6:0f: b9:54:be:8e:99:22:6e:51:ff:65:27:c2:32:40:13: a7:e6:e7:66:0c:31:22:86:92:a9:35:ec:2a:91:2d: b7:b3:cb:11:bc:05:e1:bf:37:e5:96:92:46:08:60: 60:6a:7c:68:e4:ed:80:9f:a4:9a:a1:cf:8e:7c:8d: 7e:2f:34:d0:50:19:20:62:51:fe:bd:51:0b:51:e1: 12:ef:3c:3a:21:b2:e1:01:39:ca:1d:46:46:d4:88: 41:3d:f9:b0:00:a3:cd:6d:75:02:42:44:05:78:af: 86:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:11:10:35:EC:02:D2:04:CF:66:CF:40:5C:27:ED:7B:40:4D:5E:F5 X509v3 Authority Key Identifier: keyid:05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c4:e2:c3:f5:4e:1d:31:a2:07:7c:5e:8d:b9:0b:6f:40:7a: bf:ce:98:9b:9a:d4:15:03:83:c2:58:d3:62:7b:69:c0:65:7e: 2c:bb:8a:f2:2a:c1:59:b0:f8:c7:1b:91:60:d6:4a:62:3a:65: bd:28:5d:b5:a5:a7:4b:0b:7b:91:b3:18:78:e0:77:c5:4a:da: 21:16:6b:97:9a:1e:4c:9a:de:fc:b5:62:6e:8b:b7:ca:c2:7a: 7a:9a:46:87:09:ce:28:2b:cc:ae:5d:e3:96:a1:3a:3c:ae:76: c5:01:d6:12:9d:b4:2f:2c:fd:95:89:dc:b4:c3:26:d8:27:90: 3b:23:6e:a7:6c:52:08:43:50:da:b4:a8:8d:5e:b6:e3:d9:9a: 9b:43:a4:1e:1e:00:68:2c:c7:60:7b:fd:c3:30:51:c5:cd:64: f0:13:45:e0:17:e2:6c:66:dd:9a:cb:3f:6e:e1:c9:d3:2b:89: 18:34:b7:e9:97:cf:5b:f2:a7:bd:09:3d:75:25:35:61:90:89: e2:4a:c1:a7:be:36:05:7b:6f:ad:6e:20:aa:db:d9:7f:b0:4e: f0:87:b1:38:b8:5d:cd:19:80:9a:f0:20:77:7a:79:fb:35:c8: ab:3d:4b:b3:f1:57:eb:75:7e:5b:5e:8f:ba:84:09:66:bf:29: a1:54:b3:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJGQUIxMTAvBgNVBAUTKDA1ODNBODVGRTMxM0ZDMEQ2MzY2RTIyQzQ0NjZCMjkz RUFENDVBRTQwHhcNMjUxMDIzMDUwMDEyWhcNMjUxMDMwMDUwMDEyWjAYMRYwFAYD VQQDEw02OGY5YjY1Yy00NzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKxpcqUeYvSd/rcuEkrTOctfCYLpZCgO9/BumSXEySiOUP8EVApCQOcyxfWl BD2xP+dziDpmrLNB3tw7QtXyHCIe2pMSJTVP5pjPd4nW+NWShD0YPEFo+y694BbI SJDGDyJ3+qfP1Eld1uxLXUuMnSkkHh11FwIqKr+px3oP2taGokbIiZBC6f+h/ask MOGqQFvDpg+5VL6OmSJuUf9lJ8IyQBOn5udmDDEihpKpNewqkS23s8sRvAXhvzfl lpJGCGBganxo5O2An6Saoc+OfI1+LzTQUBkgYlH+vVELUeES7zw6IbLhATnKHUZG 1IhBPfmwAKPNbXUCQkQFeK+GiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMREDXs AtIEz2bPQFwn7XtATV71MB8GA1UdIwQYMBaAFAWDqF/jE/wNY2biLERmspPq1Frk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkZBQi8zM0E5Q0M5QzM2 ODQxMUVFQTkyN0Y5NDhDNEY5QUUwMi9CWU9vWC1NVF9BMWpadUlzUkdheWstclVX dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZT29YLU1UX0Exalp1SXNSR2F5ay1yVVd1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkZBQi8zM0E5Q0M5QzM2ODQxMUVFQTkyN0Y5NDhDNEY5QUUwMi9CWU9vWC1NVF9B MWpadUlzUkdheWstclVXdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhxOLD9U4dMaIHfF6NuQtvQHq/zpibmtQVA4PCWNNie2nAZX4su4ry KsFZsPjHG5Fg1kpiOmW9KF21padLC3uRsxh44HfFStohFmuXmh5Mmt78tWJui7fK wnp6mkaHCc4oK8yuXeOWoTo8rnbFAdYSnbQvLP2Vidy0wybYJ5A7I26nbFIIQ1Da tKiNXrbj2ZqbQ6QeHgBoLMdge/3DMFHFzWTwE0XgF+JsZt2ayz9u4cnTK4kYNLfp l89b8qe9CT11JTVhkIniSsGnvjYFe2+tbiCq29l/sE7wh7E4uF3NGYCa8CB3enn7 NcirPUuz8VfrdX5bXo+6hAlmvymhVLNa -----END CERTIFICATE-----Generated at Thu Oct 23 10:07:50 2025 by rpki-client