$ rpki-client -vvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft File: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft (raw, json) Hash identifier: mdUKMLPTynuDmnaIv17RdatnYJUVl6Em0qnZxub9DgI= Subject key identifier: C7:6B:53:78:40:CD:7D:01:15:34:18:C2:5B:EB:A1:BE:7F:BE:6E:D7 Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB Certificate issuer: /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Certificate serial: 0C85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft Manifest number: 0C7E Signing time: Sun 02 Nov 2025 18:25:22 +0000 Manifest this update: Sun 02 Nov 2025 18:25:22 +0000 Manifest next update: Sun 09 Nov 2025 18:25:22 +0000 Files and hashes: 1: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl (hash: mFtL46l8qFkkAw1RpfZUoEU8++9MXGVfbsHdoTnue8E=) 2: AD532D26090211EAAD8D5786C4F9AE02.roa (hash: xiqUMJWPyshWh78LUHnXsaBooxohe6ygJEfyrIMmpkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3205 (0xc85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116D1, serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Validity Not Before: Nov 2 18:25:22 2025 GMT Not After : Nov 9 18:25:22 2025 GMT Subject: CN=6907a212-e41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:32:91:6a:c0:ec:0c:57:92:16:1d:32:9d: 46:5f:da:08:49:07:ac:e5:b0:37:48:ad:9a:79:c5: 0b:4c:43:5d:a7:c0:9e:0b:03:48:09:46:11:fd:fb: e4:52:50:96:16:c7:9c:35:a1:98:be:ff:24:3e:f8: c0:7e:97:e4:1f:65:ca:7a:f3:4a:ce:b7:10:98:ab: aa:ae:35:a8:44:b5:9f:08:23:4d:d3:b0:68:67:7b: 77:d5:5d:b7:ac:d8:6b:59:c1:b6:17:e3:ee:09:94: 5b:88:c5:72:fe:ae:ab:18:02:b2:28:68:89:36:58: 02:54:e0:02:1e:4b:8e:72:da:ec:56:a6:52:ab:36: 7e:0c:4d:51:f4:67:b2:09:91:d5:02:54:27:92:54: 4b:42:e8:52:75:10:18:53:2a:d9:c7:5a:16:3b:85: 74:5a:35:2d:9f:a4:97:54:2f:da:84:75:85:9c:6d: 3b:fe:99:c0:94:30:5e:90:df:51:72:f4:1d:00:b7: 63:91:8c:fc:1d:bf:dd:ac:0c:8b:51:95:2b:02:7f: 32:17:8b:d6:56:50:d8:71:08:60:0b:72:d1:85:e6: 32:98:79:eb:9f:fe:17:cb:99:08:d7:8a:df:25:28: 9d:34:98:ab:a7:f3:c7:59:46:6c:6d:b9:6a:e5:b9: ec:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6B:53:78:40:CD:7D:01:15:34:18:C2:5B:EB:A1:BE:7F:BE:6E:D7 X509v3 Authority Key Identifier: keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:58:0f:05:3f:b7:52:c1:67:1f:09:7d:6b:0e:fe:a4:fc:e4: 7a:bc:17:8b:62:c3:40:d8:84:8e:e4:0b:4a:1a:3c:6b:23:6e: 12:e3:cd:6a:95:00:c1:91:cf:3a:1a:c7:99:96:57:96:b8:55: ec:5a:3d:7d:b1:bf:47:b2:01:97:7c:ce:a9:38:2d:c6:bc:83: 01:df:e6:6b:20:9c:31:7a:81:a8:5b:ff:ab:4d:89:1c:6c:11: eb:78:d7:b7:bc:23:a2:c2:db:57:72:fd:47:42:77:01:61:0b: b6:47:54:6a:3d:b5:6c:6a:ab:e4:48:ea:38:e3:94:f2:dc:94: 63:f1:d4:3e:9e:49:5d:4c:d8:12:44:03:e4:54:a1:0d:27:87: 43:c1:a9:0a:41:3c:bf:01:5d:87:e2:ef:41:4d:b4:85:77:c3: e5:97:63:bf:2e:e8:7b:fe:7e:38:36:ca:06:5a:19:2d:ee:bc: 96:f7:6e:03:8c:4a:a8:e7:6a:bb:d0:26:b3:8f:ab:09:1a:89: 20:4d:26:de:fc:76:9f:fa:d1:e1:00:60:13:29:13:65:24:9a: bb:0f:a4:a6:39:48:43:8b:83:1e:95:f5:c1:d0:b9:eb:27:f5: 7a:e1:4b:c8:3f:45:47:fe:49:56:ac:a5:a5:22:30:82:f1:c8: ff:32:00:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RDExMTAvBgNVBAUTKERERUJBNDZDQzdBODkyRDJBN0ZGNkFCNjQzNzdDN0VD RkZEOEFEQkIwHhcNMjUxMTAyMTgyNTIyWhcNMjUxMTA5MTgyNTIyWjAYMRYwFAYD VQQDEw02OTA3YTIxMi1lNDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dQykWrA7AxXkhYdMp1GX9oISQes5bA3SK2aecULTENdp8CeCwNICUYR/fvk UlCWFsecNaGYvv8kPvjAfpfkH2XKevNKzrcQmKuqrjWoRLWfCCNN07BoZ3t31V23 rNhrWcG2F+PuCZRbiMVy/q6rGAKyKGiJNlgCVOACHkuOctrsVqZSqzZ+DE1R9Gey CZHVAlQnklRLQuhSdRAYUyrZx1oWO4V0WjUtn6SXVC/ahHWFnG07/pnAlDBekN9R cvQdALdjkYz8Hb/drAyLUZUrAn8yF4vWVlDYcQhgC3LRheYymHnrn/4Xy5kI14rf JSidNJirp/PHWUZsbblq5bns2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdrU3hA zX0BFTQYwlvrob5/vm7XMB8GA1UdIwQYMBaAFN3rpGzHqJLSp/9qtkN3x+z/2K27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZEMS8xNUFFNEIyODA5 MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0S25fMnEyUTNmSDdQX1ly YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNldWtiTWVva3RLbl8ycTJRM2ZIN1BfWXJicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZEMS8xNUFFNEIyODA5MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0 S25fMnEyUTNmSDdQX1lyYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTWA8FP7dSwWcfCX1rDv6k/OR6vBeLYsNA2ISO5AtKGjxrI24S481q lQDBkc86GseZlleWuFXsWj19sb9HsgGXfM6pOC3GvIMB3+ZrIJwxeoGoW/+rTYkc bBHreNe3vCOiwttXcv1HQncBYQu2R1RqPbVsaqvkSOo445Ty3JRj8dQ+nkldTNgS RAPkVKENJ4dDwakKQTy/AV2H4u9BTbSFd8Pll2O/Luh7/n44NsoGWhkt7ryW924D jEqo52q70Cazj6sJGokgTSbe/Haf+tHhAGATKRNlJJq7D6SmOUhDi4MelfXB0Lnr J/V64UvIP0VH/klWrKWlIjCC8cj/MgDu -----END CERTIFICATE-----Generated at Tue Nov 4 07:21:46 2025 by rpki-client