$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json) Hash identifier: La41i+4/gqlVyQ9anZ0Z+o6ClhBtPQYZj1+rfvgDCOc= Subject key identifier: 66:7E:3B:8E:D4:2B:FD:56:A6:DA:CE:C2:BE:D1:6B:B2:71:FF:9D:72 Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft Manifest number: 0362 Signing time: Mon 03 Nov 2025 00:53:24 +0000 Manifest this update: Mon 03 Nov 2025 00:53:24 +0000 Manifest next update: Mon 10 Nov 2025 00:53:24 +0000 Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: Gw6T5T+gNdAx9NqWemn/23bSIDVIhpPPJYCWHw7pWeY=) 2: 57883938B4E411F0AEF0381FC4F9AE02.roa (hash: R/0WxMD8Q6vIMFXXnsYNu7dECptwTIT57sR8jvzLLpQ=) 3: 58699F5EB4E411F0AEF0381FC4F9AE02.roa (hash: h2ID8hdDjbhE6AZgWr8n/8IjjT8UJR98H8a09uyii/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Validity Not Before: Nov 3 00:53:24 2025 GMT Not After : Nov 10 00:53:24 2025 GMT Subject: CN=6907fd04-c207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:73:74:ee:f1:f4:01:99:70:c6:4a:92:52:18: 5a:d3:45:2a:f6:83:46:70:b3:81:8a:a2:e1:6c:33: 58:7d:33:fa:9b:62:27:6b:cd:e4:71:84:81:c4:1d: 3f:70:0a:1e:57:ac:b0:d5:31:d4:e3:11:a0:c7:e8: 46:ad:53:14:b7:aa:ab:fe:b1:98:f1:99:5b:f5:02: 41:9c:b2:cb:58:e5:ac:43:7a:62:cc:b9:47:da:ec: 77:38:10:9d:6a:2d:17:1e:ff:02:a6:d5:af:7c:a4: e9:af:96:e7:45:bf:f8:8c:f7:83:bf:c2:ba:46:48: d5:eb:44:b9:ca:7a:f7:49:ce:c4:71:0d:38:77:5c: 3e:21:cd:7d:5d:57:b5:01:19:94:72:80:9b:d0:f9: 3e:47:64:fe:0e:08:17:79:72:82:20:ee:31:b6:3a: f8:54:3c:9f:19:bd:b6:0f:06:0d:3e:1f:ad:50:bc: e5:1d:4c:4c:41:36:59:41:28:4e:8b:e6:2f:48:9a: 14:d0:eb:5a:78:90:6d:0e:1e:6c:53:90:a9:13:90: 7e:d5:37:91:13:f2:6f:84:cf:57:03:fb:3c:73:c5: 64:53:50:91:68:7e:69:9c:79:1a:28:8c:12:73:33: 0c:a1:81:06:78:51:c5:d7:67:40:d7:14:7e:24:6d: b5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7E:3B:8E:D4:2B:FD:56:A6:DA:CE:C2:BE:D1:6B:B2:71:FF:9D:72 X509v3 Authority Key Identifier: keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:a7:ff:74:11:be:fe:98:86:b5:80:c1:38:cb:8a:c3:04:d3: de:ca:58:d3:ad:a3:dc:be:49:dd:b0:d0:26:69:1e:02:aa:25: cd:bf:53:c9:80:12:be:d5:13:bb:85:e8:0c:0a:0d:2a:a7:8e: 6c:fc:7f:d3:04:49:37:52:4e:3f:10:79:f3:71:8a:29:3a:bc: 48:42:d4:08:09:70:36:d7:8e:9c:d9:0f:fc:f1:e9:a1:e8:8f: 18:bf:ac:75:3a:e6:29:d1:68:29:68:56:e8:b8:ca:cd:81:a7: 71:30:c7:06:57:2e:eb:45:48:46:99:ff:f8:db:8e:52:86:6a: db:f2:e3:d1:f4:32:df:ae:96:d8:a8:59:e4:a2:62:3d:37:e5: cf:7f:81:39:1d:0c:34:97:fe:5a:7f:31:f8:76:60:44:b7:dd: 31:f3:87:88:f5:d5:37:33:81:c1:7e:af:84:fa:97:a2:9d:4c: fc:01:91:12:9d:39:6a:0e:8b:46:07:d3:07:6d:a3:bd:9f:dd: 51:3d:ca:f9:27:72:c0:0b:fb:c8:d2:d0:e2:0a:6c:a2:46:d4: 61:cb:d9:34:30:e0:61:75:21:96:16:eb:d8:ff:ad:f7:41:bf: 71:6b:4a:3c:cc:94:6c:45:39:09:25:72:d8:c8:2c:0c:d6:0c: dd:53:96:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD RTc0RUVGQkIwHhcNMjUxMTAzMDA1MzI0WhcNMjUxMTEwMDA1MzI0WjAYMRYwFAYD VQQDEw02OTA3ZmQwNC1jMjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63N07vH0AZlwxkqSUhha00Uq9oNGcLOBiqLhbDNYfTP6m2Ina83kcYSBxB0/ cAoeV6yw1THU4xGgx+hGrVMUt6qr/rGY8Zlb9QJBnLLLWOWsQ3pizLlH2ux3OBCd ai0XHv8CptWvfKTpr5bnRb/4jPeDv8K6RkjV60S5ynr3Sc7EcQ04d1w+Ic19XVe1 ARmUcoCb0Pk+R2T+DggXeXKCIO4xtjr4VDyfGb22DwYNPh+tULzlHUxMQTZZQShO i+YvSJoU0OtaeJBtDh5sU5CpE5B+1TeRE/JvhM9XA/s8c8VkU1CRaH5pnHkaKIwS czMMoYEGeFHF12dA1xR+JG21KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZ+O47U K/1WptrOwr7Ra7Jx/51yMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjI0Qy9CQjUwRDlEMEQwNkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlf RUc1aGtOdy1MdWZPZE83N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7p/90Eb7+mIa1gME4y4rDBNPeyljTraPcvkndsNAmaR4CqiXNv1PJ gBK+1RO7hegMCg0qp45s/H/TBEk3Uk4/EHnzcYopOrxIQtQICXA2146c2Q/88emh 6I8Yv6x1OuYp0WgpaFbouMrNgadxMMcGVy7rRUhGmf/4245Shmrb8uPR9DLfrpbY qFnkomI9N+XPf4E5HQw0l/5afzH4dmBEt90x84eI9dU3M4HBfq+E+peinUz8AZES nTlqDotGB9MHbaO9n91RPcr5J3LAC/vI0tDiCmyiRtRhy9k0MOBhdSGWFuvY/633 Qb9xa0o8zJRsRTkJJXLYyCwM1gzdU5bL -----END CERTIFICATE-----Generated at Tue Nov 4 12:19:50 2025 by rpki-client