$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json) Hash identifier: AYa59fSZWNzzXXcdPkaeURA1PIMyqSYAEUNB5n/Dhg8= Subject key identifier: 8F:41:25:DC:25:9B:E4:15:79:BF:20:B8:FB:AB:F8:1F:3F:BA:EA:73 Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Certificate serial: 03D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft Manifest number: 03C9 Signing time: Thu 21 May 2026 00:42:08 +0000 Manifest this update: Thu 21 May 2026 00:42:07 +0000 Manifest next update: Thu 28 May 2026 00:42:07 +0000 Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: nXUmXnmWLM/X2xyBE6POYkd6iYJFtXmatEhAdqhfID8=) 2: 58699F5EB4E411F0AEF0381FC4F9AE02.roa (hash: SjCwwc0/l3mFASjbgIcuYJLD81TjGrpnKmBVX4rmehQ=) 3: 57883938B4E411F0AEF0381FC4F9AE02.roa (hash: tRVxcIftzJMb6hfa4ByEW74xsmKnvcvfoDwWiT9x6XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 977 (0x3d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Validity Not Before: May 21 00:42:07 2026 GMT Not After : May 28 00:42:07 2026 GMT Subject: CN=6a0e54df-3f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:71:94:e7:ed:19:c2:8d:47:2d:a1:12:33:52: 8b:43:c9:59:da:b1:7d:c0:a0:20:83:9f:78:59:dc: f9:38:b3:a9:5b:60:2b:9a:03:a5:4e:3f:fa:05:bc: 7d:48:7b:14:3b:73:94:9c:e7:64:73:72:05:24:dd: b8:4d:8f:33:da:e4:73:a6:b7:6c:ae:44:3e:59:04: 77:96:03:e1:fb:e0:2e:be:22:48:19:e1:10:ed:3d: 89:21:ad:79:4f:3f:8a:f6:8a:ae:b7:94:17:90:b0: 3a:9c:d2:cd:e4:ae:e5:4d:25:5c:69:28:f9:92:fa: b0:78:e6:1f:9e:34:50:3a:9c:e0:80:06:9a:5c:e8: 10:c8:70:7f:52:75:38:26:8a:8a:cc:b9:26:f4:6a: b3:1b:05:40:cd:22:8c:89:0e:73:ff:f9:02:2b:1b: cd:7a:38:44:e1:92:09:b5:d0:bb:c9:03:23:62:9d: 77:6a:ad:21:f2:b4:78:21:91:ee:51:8f:fe:46:e4: cc:dd:e0:ad:55:79:44:42:31:84:24:08:04:fe:dd: d0:dd:9a:d8:80:5c:d8:20:c7:d4:70:d4:12:e6:8e: b3:6d:93:09:28:df:b6:7c:73:bc:30:dc:44:54:ce: 3e:82:9d:bf:ac:a2:d5:b2:df:42:0b:e8:46:e0:65: ff:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:41:25:DC:25:9B:E4:15:79:BF:20:B8:FB:AB:F8:1F:3F:BA:EA:73 X509v3 Authority Key Identifier: keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:db:ef:45:4d:07:15:13:d4:c7:99:8f:f2:32:a8:6d:a8:8e: db:bd:59:56:a8:08:4e:90:21:4b:70:40:6c:2e:b7:2c:21:e6: ba:6b:8e:39:b8:f2:74:d0:ac:0e:ea:2c:7b:d5:7d:eb:0f:e8: c4:81:b4:02:6b:cb:14:9a:d0:9e:d7:19:c6:fd:06:21:1a:ac: 40:00:e2:9c:d3:68:c8:d7:60:f3:f7:27:fe:9f:3f:8b:6a:91: 22:96:68:d5:16:38:bd:91:1b:32:d4:86:18:8a:a2:79:7f:aa: 22:82:73:93:66:0b:46:4d:30:17:34:2a:e0:e7:e8:a7:25:0f: c8:00:df:45:d8:fa:a5:30:95:02:c4:45:f0:ff:0a:76:cf:a8: be:ee:dd:c7:bd:71:83:65:b8:05:5c:ef:66:ca:ba:e7:2c:7f: b5:e5:b3:39:7f:62:91:82:ea:ba:2b:15:ee:db:62:7b:4d:b3: 1b:7b:35:36:d1:10:85:61:fe:2e:c2:7e:13:8b:ef:aa:98:ff: 0e:3f:25:bb:81:18:c0:6b:ff:8b:67:52:d0:5d:be:ba:3c:2e: 51:cf:db:47:bf:8b:89:24:75:7b:46:6a:53:e6:2d:03:32:51: 29:ab:99:d3:fa:d7:d4:4a:cd:5a:73:a8:ee:34:8b:13:5c:db: 94:7c:76:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD RTc0RUVGQkIwHhcNMjYwNTIxMDA0MjA3WhcNMjYwNTI4MDA0MjA3WjAYMRYwFAYD VQQDEw02YTBlNTRkZi0zZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33GU5+0Zwo1HLaESM1KLQ8lZ2rF9wKAgg594Wdz5OLOpW2ArmgOlTj/6Bbx9 SHsUO3OUnOdkc3IFJN24TY8z2uRzprdsrkQ+WQR3lgPh++AuviJIGeEQ7T2JIa15 Tz+K9oqut5QXkLA6nNLN5K7lTSVcaSj5kvqweOYfnjRQOpzggAaaXOgQyHB/UnU4 JoqKzLkm9GqzGwVAzSKMiQ5z//kCKxvNejhE4ZIJtdC7yQMjYp13aq0h8rR4IZHu UY/+RuTM3eCtVXlEQjGEJAgE/t3Q3ZrYgFzYIMfUcNQS5o6zbZMJKN+2fHO8MNxE VM4+gp2/rKLVst9CC+hG4GX/lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI9BJdwl m+QVeb8guPur+B8/uupzMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjI0Qy9CQjUwRDlEMEQwNkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlf RUc1aGtOdy1MdWZPZE83N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKdvvRU0HFRPUx5mP8jKobaiO271ZVqgITpAhS3BAbC63LCHmumuOObjydNCs Duose9V96w/oxIG0AmvLFJrQntcZxv0GIRqsQADinNNoyNdg8/cn/p8/i2qRIpZo 1RY4vZEbMtSGGIqieX+qIoJzk2YLRk0wFzQq4OfopyUPyADfRdj6pTCVAsRF8P8K ds+ovu7dx71xg2W4BVzvZsq65yx/teWzOX9ikYLquisV7ttie02zG3s1NtEQhWH+ LsJ+E4vvqpj/Dj8lu4EYwGv/i2dS0F2+ujwuUc/bR7+LiSR1e0ZqU+YtAzJRKauZ 0/rX1ErNWnOo7jSLE1zblHx29g== -----END CERTIFICATE-----Generated at Thu May 21 11:59:26 2026 by rpki-client