$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json) Hash identifier: V75LKlEBSJe2NMJfrj1pO9uE2H1vjqC1xjRlzYWcrTk= Subject key identifier: B8:E8:EC:53:90:13:43:C6:09:72:D2:08:BE:FA:68:81:D5:55:49:5F Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Certificate serial: 0313 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft Manifest number: 0310 Signing time: Sat 31 May 2025 01:23:31 +0000 Manifest this update: Sat 31 May 2025 01:23:31 +0000 Manifest next update: Sat 07 Jun 2025 01:23:31 +0000 Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: TidPe1HiR1raVPbLOmbGuwvZ9ju5KPl9rJ5nNHVVflU=) 2: 52801AD8D07111ECAF21A75DC4F9AE02.roa (hash: qF7Z9bCq6Bb/CjCCcxi/i5YpMx2Ig2rtU2KcJKtS8jU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 787 (0x313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Validity Not Before: May 31 01:23:31 2025 GMT Not After : Jun 7 01:23:31 2025 GMT Subject: CN=683a5a13-d6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4a:ab:ea:04:27:18:ab:fc:b6:3f:53:ff:60: 58:ca:20:3e:22:5e:f9:ef:85:07:5b:2d:93:08:df: 9f:61:e2:61:eb:14:33:2c:dc:a8:89:3d:ba:61:1a: bb:2c:b2:cb:72:a1:71:35:e3:94:93:99:7f:c7:45: d2:72:c3:31:af:45:9e:29:31:8e:57:eb:6d:a6:3f: fb:04:4f:51:23:36:7b:5e:c2:0d:29:12:c4:d4:77: e3:a1:0a:4c:59:3e:d3:3c:38:79:ec:55:c4:67:a9: a0:8c:3e:7b:95:99:17:dc:6b:00:11:c3:84:ec:6f: aa:8c:62:34:af:e3:bb:54:55:b8:5e:85:8a:65:25: 00:f6:ce:6c:ed:d5:34:cf:11:3b:74:ce:e4:53:ce: ca:f5:f8:f4:00:6e:9c:e7:50:28:67:0c:9e:ca:db: d4:11:69:4f:4b:47:0e:b2:5e:6c:e3:df:98:07:7e: 49:17:a2:6f:6c:33:68:a2:4a:90:4f:2c:e0:b6:69: 7f:9b:e5:98:1f:63:5e:09:33:79:eb:f2:dc:4a:fd: f2:a4:17:f1:bb:de:86:08:7c:c7:a8:c3:0c:82:03: 8a:fe:45:4e:6a:55:3f:7f:62:2b:e7:da:38:e8:a6: 98:79:91:ef:91:15:e2:7a:f4:50:cd:c1:90:5d:62: 49:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E8:EC:53:90:13:43:C6:09:72:D2:08:BE:FA:68:81:D5:55:49:5F X509v3 Authority Key Identifier: keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:86:08:09:85:1b:03:1d:b0:f6:38:d6:dd:36:fd:cf:2e:68: ed:f2:21:2a:ac:42:1a:52:a4:4b:2d:e6:d4:94:4b:8c:32:b8: 97:65:21:a0:0b:73:81:6f:ad:64:91:b4:9c:97:af:4b:fd:3b: c7:d3:71:34:7d:69:3b:b1:9e:da:4e:14:03:6f:3c:c8:8c:10: 35:ee:38:c7:3f:e2:67:af:ac:04:4a:58:93:98:5b:26:ec:b6: 5d:0c:37:6f:c5:ea:24:c4:21:c9:bf:65:b7:66:76:f8:c5:2b: da:91:92:80:3f:db:b5:dc:c2:37:7a:c7:f2:ae:de:ff:23:37: 5b:15:f8:f1:9c:a7:cf:85:c1:72:00:e8:94:6b:db:34:1a:8a: 6f:df:dc:4f:91:16:ef:b9:6a:aa:8f:38:ee:fa:bd:19:ed:b3: 9f:0d:ca:0c:98:51:8b:3a:b2:6c:85:9f:a6:dc:b3:4e:8c:34: ee:83:3a:56:a9:48:9b:49:1e:32:03:c7:32:fa:7f:c4:59:0c: c0:32:78:5d:db:2e:c2:f8:88:ee:f4:6c:25:9b:2f:38:87:92: ba:c5:2f:3b:e5:83:a1:c2:68:4a:21:75:84:6d:e9:44:4c:95: 82:2e:fc:73:52:c2:99:9f:6c:b4:44:56:d6:54:93:a7:3d:85: 17:33:14:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD RTc0RUVGQkIwHhcNMjUwNTMxMDEyMzMxWhcNMjUwNjA3MDEyMzMxWjAYMRYwFAYD VQQDEw02ODNhNWExMy1kNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Uqr6gQnGKv8tj9T/2BYyiA+Il7574UHWy2TCN+fYeJh6xQzLNyoiT26YRq7 LLLLcqFxNeOUk5l/x0XScsMxr0WeKTGOV+ttpj/7BE9RIzZ7XsINKRLE1HfjoQpM WT7TPDh57FXEZ6mgjD57lZkX3GsAEcOE7G+qjGI0r+O7VFW4XoWKZSUA9s5s7dU0 zxE7dM7kU87K9fj0AG6c51AoZwyeytvUEWlPS0cOsl5s49+YB35JF6JvbDNookqQ Tyzgtml/m+WYH2NeCTN56/LcSv3ypBfxu96GCHzHqMMMggOK/kVOalU/f2Ir59o4 6KaYeZHvkRXievRQzcGQXWJJ/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjo7FOQ E0PGCXLSCL76aIHVVUlfMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjI0Qy9CQjUwRDlEMEQwNkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlf RUc1aGtOdy1MdWZPZE83N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQhggJhRsDHbD2ONbdNv3PLmjt8iEqrEIaUqRLLebUlEuMMriXZSGg C3OBb61kkbScl69L/TvH03E0fWk7sZ7aThQDbzzIjBA17jjHP+Jnr6wESliTmFsm 7LZdDDdvxeokxCHJv2W3Znb4xSvakZKAP9u13MI3esfyrt7/IzdbFfjxnKfPhcFy AOiUa9s0Gopv39xPkRbvuWqqjzju+r0Z7bOfDcoMmFGLOrJshZ+m3LNOjDTugzpW qUibSR4yA8cy+n/EWQzAMnhd2y7C+Iju9Gwlmy84h5K6xS875YOhwmhKIXWEbelE TJWCLvxzUsKZn2y0RFbWVJOnPYUXMxSS -----END CERTIFICATE-----Generated at Sat May 31 17:13:02 2025 by rpki-client