$ rpki-client -vvvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json) Hash identifier: qtfqsxAHNT0wNWxNKnoiwsYcJOPvFlfbM0899ZksDo4= Subject key identifier: 9E:4A:2A:76:65:87:43:B4:8B:D6:C8:C2:92:A9:A4:91:6A:2B:93:B1 Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft Manifest number: 0425 Signing time: Tue 03 Nov 2026 00:32:56 +0000 Manifest this update: Tue 03 Nov 2026 00:32:56 +0000 Manifest next update: Tue 10 Nov 2026 00:32:56 +0000 Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: 1VuSjt9ZIHeFCCnCVWXOfzeZzoGsa4qZty4k7NPlKb0=) 2: 58699F5EB4E411F0AEF0381FC4F9AE02.roa (hash: L/vmxqfg593SScOQfruYyTi5w3IbWEPucz1arAKQfq8=) 3: 40F3223E754911F1B8AAB69582A30FBC.roa (hash: g5HMRR+ePvVVDR9MH7expF0U96FPfQiasbKCMyFY5iU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 00:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Validity Not Before: Nov 3 00:32:56 2026 GMT Not After : Nov 10 00:32:56 2026 GMT Subject: CN=6ae92bb8-da82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:17:c5:25:f3:d3:f9:ff:4e:94:78:55:11:c8: 79:a5:a5:d5:9d:79:c4:51:c6:fa:c0:01:b9:85:bd: 31:20:95:e7:2c:99:6d:6a:9d:16:56:ea:a5:92:80: 1d:35:b8:64:c5:e6:e7:df:8c:ae:10:2e:89:dc:59: ad:41:b5:ed:2f:e6:d2:4a:b2:77:08:e5:57:9b:f2: dd:cf:9b:bd:ea:5a:06:61:67:5c:cb:1c:98:c9:76: 28:43:07:d4:8b:83:1e:3d:f6:1a:b8:94:b4:36:b8: 43:ed:09:f4:af:49:0f:e6:1a:b9:2b:fe:0f:d9:37: 2d:0d:ea:e5:76:cc:93:be:9e:98:bc:cf:bf:b4:21: 0a:57:78:fd:3d:5a:0f:b1:22:44:78:84:27:2e:77: dc:c5:1e:75:a3:66:90:50:98:65:b1:2e:98:e7:01: a9:22:a3:8a:35:3e:b8:79:5c:13:cb:88:b0:4f:b2: df:00:48:7f:7a:63:5a:a6:06:cf:40:60:44:8d:ad: 87:c2:52:2a:f3:ed:e2:af:b7:60:cf:de:90:c1:97: 18:ad:75:b6:b4:ec:90:9d:9f:fa:5f:58:a3:f4:6a: 7c:de:b6:ba:f4:4e:4b:57:ee:ba:b3:1e:44:8a:b1: e3:95:aa:5e:3d:f4:73:77:c5:f2:f6:af:16:10:82: 68:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4A:2A:76:65:87:43:B4:8B:D6:C8:C2:92:A9:A4:91:6A:2B:93:B1 X509v3 Authority Key Identifier: keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ef:e7:bb:a5:81:62:a5:1d:dd:50:20:28:51:f4:73:61:32: 7e:d9:a2:6e:cd:be:12:c0:95:4b:c6:25:99:e2:5f:7d:e1:8a: d3:49:85:4d:bf:18:48:37:0b:bd:99:d1:09:31:f8:9c:fa:6b: e1:65:54:35:5e:e8:c6:87:74:a6:45:b9:89:06:6e:b9:42:81: 5b:4a:ca:92:5c:18:9e:9d:c9:ac:56:5f:f8:ac:d1:31:e7:33: 80:ed:15:1a:9d:0a:fa:53:26:03:4a:4f:cb:8f:78:47:82:1d: 28:5c:c9:34:56:b2:21:50:a0:e9:80:4d:ff:09:be:b4:e7:b4: 42:75:f5:91:66:ec:c4:8d:8d:c3:2b:83:91:08:30:06:05:bb: cf:08:4b:4f:54:4d:16:a9:c4:6d:68:a0:88:79:82:eb:bd:3d: a0:c5:8c:53:76:a4:1a:99:2c:f3:78:b7:3d:ab:24:e7:64:61: 76:73:a2:13:e5:c2:9a:12:23:63:ac:8c:f3:75:7a:78:87:5f: 7f:c5:38:71:cf:b7:38:56:e2:fe:38:ee:a3:1d:31:af:11:7a: 75:1b:04:fb:3b:ce:d1:e2:96:e0:19:52:5c:0a:51:11:32:be: ff:d2:f0:80:9d:58:6d:84:27:7f:8d:6d:51:ff:08:bb:24:1a: 87:c6:a8:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD RTc0RUVGQkIwHhcNMjYxMTAzMDAzMjU2WhcNMjYxMTEwMDAzMjU2WjAYMRYwFAYD VQQDEw02YWU5MmJiOC1kYTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxfFJfPT+f9OlHhVEch5paXVnXnEUcb6wAG5hb0xIJXnLJltap0WVuqlkoAd Nbhkxebn34yuEC6J3FmtQbXtL+bSSrJ3COVXm/Ldz5u96loGYWdcyxyYyXYoQwfU i4MePfYauJS0NrhD7Qn0r0kP5hq5K/4P2TctDerldsyTvp6YvM+/tCEKV3j9PVoP sSJEeIQnLnfcxR51o2aQUJhlsS6Y5wGpIqOKNT64eVwTy4iwT7LfAEh/emNapgbP QGBEja2HwlIq8+3ir7dgz96QwZcYrXW2tOyQnZ/6X1ij9Gp83ra69E5LV+66sx5E irHjlapePfRzd8Xy9q8WEIJocwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5KKnZl h0O0i9bIwpKppJFqK5OxMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjI0Qy9CQjUwRDlEMEQwNkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlf RUc1aGtOdy1MdWZPZE83N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh+/nu6WBYqUd3VAgKFH0c2Eyftmibs2+EsCVS8YlmeJffeGK00mFTb8YSDcL vZnRCTH4nPpr4WVUNV7oxod0pkW5iQZuuUKBW0rKklwYnp3JrFZf+KzRMeczgO0V Gp0K+lMmA0pPy494R4IdKFzJNFayIVCg6YBN/wm+tOe0QnX1kWbsxI2NwyuDkQgw BgW7zwhLT1RNFqnEbWigiHmC6709oMWMU3akGpks83i3Pask52RhdnOiE+XCmhIj Y6yM83V6eIdff8U4cc+3OFbi/jjuox0xrxF6dRsE+zvO0eKW4BlSXApRETK+/9Lw gJ1YbYQnf41tUf8IuyQah8aomQ== -----END CERTIFICATE-----Generated at Tue Nov 3 08:23:38 2026 by rpki-client