$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft File: byZ-RWYIP-sjaiw5I7cDlgC955Q.mft (raw, json) Hash identifier: jXYkjZTEYYmMhWwgrZsBaNqmq2l98LbAYrjzKs7ubIA= Subject key identifier: F5:29:22:36:F8:8F:55:40:F0:E1:C7:44:06:51:59:30:88:21:C8:0E Authority key identifier: 6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94 Certificate issuer: /CN=A91E0C24/serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794 Certificate serial: 0B22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft Manifest number: 0B0B Signing time: Mon 02 Jun 2025 19:30:27 +0000 Manifest this update: Mon 02 Jun 2025 19:30:26 +0000 Manifest next update: Mon 09 Jun 2025 19:30:26 +0000 Files and hashes: 1: byZ-RWYIP-sjaiw5I7cDlgC955Q.crl (hash: iQz30FmECs2WkcBlJE1LIW5PHGncNx6K7gjD5FfPy1M=) 2: A86EF6C8C9AF11EAA26C015FC4F9AE02.roa (hash: zTAfwveIPTRwXSl7hQHDO93OE6PzSAULcilI97W7uGU=) 3: 40569A6AC9AE11EAA7F2915BC4F9AE02.roa (hash: w5Xib41tLpZBqTFHg11KbjSl/uzEpQNvFqS2fLAocwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2850 (0xb22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C24, serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794 Validity Not Before: Jun 2 19:30:26 2025 GMT Not After : Jun 9 19:30:26 2025 GMT Subject: CN=683dfbd3-99c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:42:6d:ae:f7:20:2a:23:2d:46:77:86:71: 3e:ab:c6:c8:ff:44:aa:35:75:d3:dd:38:6f:26:2d: dc:dc:48:c0:a2:4d:62:36:c2:d2:63:bb:35:0e:44: b6:e9:de:ab:8c:5e:68:94:b5:5d:a2:7b:cb:ec:07: cb:0c:26:e0:96:15:b0:b1:8d:c3:43:f9:34:43:80: de:c0:8a:3e:ef:ad:a2:d8:05:75:5e:aa:e5:a0:25: 3b:93:91:71:99:42:03:8b:93:c9:e2:c1:1a:05:d0: e8:25:63:ee:b9:b9:9c:ba:d2:27:3c:5c:eb:34:ee: c2:bc:b5:03:f2:1e:72:85:22:9e:ff:45:a0:f8:b5: 83:82:a0:ff:96:d7:26:d0:1d:90:90:13:45:22:de: 34:92:2f:fa:4b:1a:8b:04:57:9e:72:2e:c6:f7:8d: 1c:b4:93:f2:bb:91:a8:ef:50:5f:99:9e:5e:3a:66: 87:dc:b4:e0:19:ca:b5:e8:ac:ae:31:e6:99:36:9e: 4b:a6:71:88:4d:24:d6:a6:b4:1c:58:b6:b9:35:48: 54:b0:4b:44:01:3a:2c:67:98:ea:29:2c:04:bb:22: 29:67:6f:69:ba:08:51:25:fc:44:49:fe:7a:95:f2: e5:d5:c6:0f:4d:68:e3:0d:78:85:b5:84:0a:41:72: c3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:29:22:36:F8:8F:55:40:F0:E1:C7:44:06:51:59:30:88:21:C8:0E X509v3 Authority Key Identifier: keyid:6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:75:01:92:6b:e6:2f:2e:33:67:59:8b:57:22:28:ba:1d:bd: 65:91:08:e6:3a:0b:80:63:b6:14:db:4c:61:db:06:77:d0:1d: 5b:ac:cf:67:00:ff:4b:09:7d:05:4d:0e:91:42:ac:3d:bc:2b: 68:1c:60:7f:b3:ce:ea:a1:64:7e:4e:d3:03:74:76:7d:d3:68: 23:0f:7b:a1:31:22:b3:24:a4:8b:21:95:35:54:5d:4c:5c:0f: 5a:84:b3:24:15:d9:17:e0:6e:ee:19:01:4b:7e:ca:ca:36:7c: 94:98:c4:83:83:b6:ca:e1:ca:47:92:5d:80:73:6e:6e:ab:c3: 34:a1:12:ab:09:84:e6:99:cf:c9:ef:d7:6b:39:e8:e2:74:3b: 70:ef:55:20:c0:c2:56:65:1a:af:b3:ef:4b:cc:39:58:c8:8c: f0:06:76:8f:2c:a8:de:a3:66:62:39:3a:50:7b:0c:02:15:d6: 0a:0b:bd:16:06:73:88:f7:60:bf:a1:26:5c:fb:77:3d:d3:a4: d0:8c:34:84:50:00:67:18:e4:cb:a6:fe:84:8b:e3:51:9e:bb: 60:7d:b0:53:10:ca:f0:ed:95:7e:3d:8c:e1:e6:db:46:65:ee: 23:0a:71:eb:bd:a4:f6:3d:58:be:b4:43:0c:58:47:69:91:27: e4:c5:20:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDMjQxMTAvBgNVBAUTKDZGMjY3RTQ1NjYwODNGRUIyMzZBMkMzOTIzQjcwMzk2 MDBCREU3OTQwHhcNMjUwNjAyMTkzMDI2WhcNMjUwNjA5MTkzMDI2WjAYMRYwFAYD VQQDEw02ODNkZmJkMy05OWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNhCba73ICojLUZ3hnE+q8bI/0SqNXXT3ThvJi3c3EjAok1iNsLSY7s1DkS2 6d6rjF5olLVdonvL7AfLDCbglhWwsY3DQ/k0Q4DewIo+762i2AV1XqrloCU7k5Fx mUIDi5PJ4sEaBdDoJWPuubmcutInPFzrNO7CvLUD8h5yhSKe/0Wg+LWDgqD/ltcm 0B2QkBNFIt40ki/6SxqLBFeeci7G940ctJPyu5Go71BfmZ5eOmaH3LTgGcq16Kyu MeaZNp5LpnGITSTWprQcWLa5NUhUsEtEATosZ5jqKSwEuyIpZ29pughRJfxESf56 lfLl1cYPTWjjDXiFtYQKQXLDOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUpIjb4 j1VA8OHHRAZRWTCIIcgOMB8GA1UdIwQYMBaAFG8mfkVmCD/rI2osOSO3A5YAveeU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMyNC8xOEM4QjY5MjQ0 MzIxMUVBOUNBREZEMUNDNEY5QUUwMi9ieVotUldZSVAtc2phaXc1STdjRGxnQzk1 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5Wi1SV1lJUC1zamFpdzVJN2NEbGdDOTU1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEMyNC8xOEM4QjY5MjQ0MzIxMUVBOUNBREZEMUNDNEY5QUUwMi9ieVotUldZSVAt c2phaXc1STdjRGxnQzk1NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWdQGSa+YvLjNnWYtXIii6Hb1lkQjmOguAY7YU20xh2wZ30B1brM9n AP9LCX0FTQ6RQqw9vCtoHGB/s87qoWR+TtMDdHZ902gjD3uhMSKzJKSLIZU1VF1M XA9ahLMkFdkX4G7uGQFLfsrKNnyUmMSDg7bK4cpHkl2Ac25uq8M0oRKrCYTmmc/J 79drOejidDtw71UgwMJWZRqvs+9LzDlYyIzwBnaPLKjeo2ZiOTpQewwCFdYKC70W BnOI92C/oSZc+3c906TQjDSEUABnGOTLpv6Ei+NRnrtgfbBTEMrw7ZV+PYzh5ttG Ze4jCnHrvaT2PVi+tEMMWEdpkSfkxSBr -----END CERTIFICATE-----Generated at Wed Jun 4 00:09:39 2025 by rpki-client