$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json) Hash identifier: 8nwDmmQ6if2fk3QprFJpBgyrzrEnf84rVZ66wH4SYbo= Subject key identifier: 17:83:FA:05:83:72:6C:09:92:CB:B3:D2:52:9F:AA:F2:FA:E9:93:21 Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Certificate serial: 03BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft Manifest number: 03B2 Signing time: Sun 05 Apr 2026 00:27:17 +0000 Manifest this update: Sun 05 Apr 2026 00:27:16 +0000 Manifest next update: Sun 12 Apr 2026 00:27:16 +0000 Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: 9rQeD/0sCpbL5Nn6AASrGz6cHQP9FdUrvoOVesym0Gc=) 2: 57883938B4E411F0AEF0381FC4F9AE02.roa (hash: tRVxcIftzJMb6hfa4ByEW74xsmKnvcvfoDwWiT9x6XQ=) 3: 58699F5EB4E411F0AEF0381FC4F9AE02.roa (hash: SjCwwc0/l3mFASjbgIcuYJLD81TjGrpnKmBVX4rmehQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 954 (0x3ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Validity Not Before: Apr 5 00:27:16 2026 GMT Not After : Apr 12 00:27:16 2026 GMT Subject: CN=69d1ac65-4355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f6:8b:a5:3e:db:e4:ab:41:77:61:37:23:d9: f9:bd:7f:3a:4c:47:67:12:e6:02:ec:29:69:f2:ae: 65:5a:4e:f3:68:19:4d:e0:3e:b5:67:6c:71:53:ce: a4:a8:19:2e:b7:95:9d:64:ef:0f:e4:0b:12:64:f2: 34:81:ae:5b:b6:0c:32:9a:1c:3d:d9:5c:12:bc:45: 97:a4:4f:dc:38:57:f0:3c:56:12:42:c2:93:44:0d: 53:d2:cb:3e:df:16:96:bd:c0:58:35:58:6b:bd:1f: a5:14:62:79:aa:0a:1a:91:20:d9:e2:59:f3:6d:23: 15:de:cf:26:1c:09:47:fc:8a:29:9d:bd:ba:8d:0b: ce:00:5f:ed:ec:cf:ae:f6:b6:16:4d:e3:bb:de:2b: b3:5d:82:4d:3a:d8:14:00:fe:9e:8f:00:17:05:d9: 74:6d:54:36:e3:6a:92:5b:a5:02:37:26:e3:c7:0f: 9a:57:a2:e1:59:9e:65:29:f8:47:77:32:b3:4f:16: 47:29:81:57:cc:d5:89:40:72:f8:31:23:82:05:4f: cc:26:9c:7d:02:cd:17:e2:6a:04:41:d1:97:c7:0a: 05:28:fe:ab:c0:db:a7:a7:ce:34:34:f3:0a:b3:80: 4a:de:7b:fc:8a:5a:b6:ce:90:01:ac:a3:a8:c5:7d: e6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:83:FA:05:83:72:6C:09:92:CB:B3:D2:52:9F:AA:F2:FA:E9:93:21 X509v3 Authority Key Identifier: keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:50:39:07:52:36:62:9f:ef:da:3d:0c:55:f6:fb:ef:be:ec: eb:d4:99:62:fb:f4:81:a7:e2:0f:9c:2c:23:e8:a3:6b:95:ff: 4a:eb:00:8c:17:6f:49:c5:13:4e:59:45:02:ba:ad:2d:48:3d: 1f:28:f2:69:04:e0:d3:e3:60:f5:8a:da:ee:05:40:8c:28:7a: cb:a1:3a:e4:9d:b1:67:82:d4:8c:fc:be:15:fa:42:34:1a:17: 47:c1:bc:b8:4d:22:8f:95:43:e1:c3:9a:43:1e:b3:c4:6a:d2: 47:7c:a1:77:8b:14:a9:43:27:45:09:60:35:29:2f:1f:30:ee: b2:71:bc:44:b5:d6:35:60:82:71:ce:6b:a0:e1:59:a3:45:41: 3a:ae:53:0c:53:d3:ed:fe:27:18:d7:74:65:dc:7d:4e:fe:bc: 4c:9f:47:12:e9:49:17:2f:c1:49:ca:43:6d:40:e0:a6:c0:11: a1:80:e4:b1:41:8c:7e:cb:40:e9:2b:ca:77:a7:13:c2:46:1f: 78:d5:04:7e:75:f1:b3:85:d8:dd:04:28:1e:65:13:b3:ac:6f: 84:d6:7b:2e:88:36:3e:30:64:01:0f:e1:d6:ff:9a:1c:00:e1: 8e:da:23:8c:fe:9f:13:c4:9e:2b:ee:c1:7e:d4:11:d5:c4:0d: 2b:ba:18:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD RTc0RUVGQkIwHhcNMjYwNDA1MDAyNzE2WhcNMjYwNDEyMDAyNzE2WjAYMRYwFAYD VQQDEw02OWQxYWM2NS00MzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPaLpT7b5KtBd2E3I9n5vX86TEdnEuYC7Clp8q5lWk7zaBlN4D61Z2xxU86k qBkut5WdZO8P5AsSZPI0ga5btgwymhw92VwSvEWXpE/cOFfwPFYSQsKTRA1T0ss+ 3xaWvcBYNVhrvR+lFGJ5qgoakSDZ4lnzbSMV3s8mHAlH/Iopnb26jQvOAF/t7M+u 9rYWTeO73iuzXYJNOtgUAP6ejwAXBdl0bVQ242qSW6UCNybjxw+aV6LhWZ5lKfhH dzKzTxZHKYFXzNWJQHL4MSOCBU/MJpx9As0X4moEQdGXxwoFKP6rwNunp840NPMK s4BK3nv8ilq2zpABrKOoxX3m9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBeD+gWD cmwJksuz0lKfqvL66ZMhMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjI0Qy9CQjUwRDlEMEQwNkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlf RUc1aGtOdy1MdWZPZE83N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACVA5B1I2Yp/v2j0MVfb7777s69SZYvv0gafiD5wsI+ija5X/SusAjBdvScUT TllFArqtLUg9HyjyaQTg0+Ng9Yra7gVAjCh6y6E65J2xZ4LUjPy+FfpCNBoXR8G8 uE0ij5VD4cOaQx6zxGrSR3yhd4sUqUMnRQlgNSkvHzDusnG8RLXWNWCCcc5roOFZ o0VBOq5TDFPT7f4nGNd0Zdx9Tv68TJ9HEulJFy/BScpDbUDgpsARoYDksUGMfstA 6SvKd6cTwkYfeNUEfnXxs4XY3QQoHmUTs6xvhNZ7Log2PjBkAQ/h1v+aHADhjtoj jP6fE8SeK+7BftQR1cQNK7oYwQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:35 2026 by rpki-client