$ rpki-client -vvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft File: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft (raw, json) Hash identifier: mGsyTUC6eiYkdou2VNQPAMsYboq6bqAfYBQnRazGRCw= Subject key identifier: E7:0E:46:35:AA:6F:02:01:2D:53:61:69:90:E3:67:BB:3A:E7:95:EC Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB Certificate issuer: /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Certificate serial: 0C35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft Manifest number: 0C2F Signing time: Wed 04 Jun 2025 18:31:31 +0000 Manifest this update: Wed 04 Jun 2025 18:31:30 +0000 Manifest next update: Wed 11 Jun 2025 18:31:30 +0000 Files and hashes: 1: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl (hash: dKDn8fpKI/lHHj3cLbOKFUTA0vDfVfBVevl0kTe7TgA=) 2: AD532D26090211EAAD8D5786C4F9AE02.roa (hash: zMbxVtz2dv4BRq8dK++ZIDeWN8B3kY7lSogxQf54mCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 18:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3125 (0xc35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116D1, serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Validity Not Before: Jun 4 18:31:30 2025 GMT Not After : Jun 11 18:31:30 2025 GMT Subject: CN=68409102-2ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:64:aa:c1:60:85:14:67:b7:ab:6e:0f:8f: da:3a:ae:fc:9d:6f:6c:5b:d8:23:6b:de:64:64:4f: c8:1f:f6:41:24:c4:f3:1f:15:4d:6b:cd:fc:47:ec: 68:3a:d2:e9:e9:34:15:cc:7a:5d:dd:45:9e:d8:51: dc:c8:d2:af:88:94:f0:4a:f0:d6:17:cb:95:69:d8: 58:48:9e:ff:42:21:ff:88:d3:7e:47:fd:bf:d8:cd: 29:92:b2:11:ed:e0:9c:af:4d:1e:9f:90:12:d8:5f: bd:32:51:f5:28:1c:d4:6c:0a:c8:be:db:c1:06:97: 65:44:da:58:42:5c:0b:54:83:db:f1:e5:79:ec:58: e1:b0:64:b5:d6:e7:1f:a5:e5:f8:d7:3e:8a:c8:91: e9:b8:6b:0b:4b:5f:7c:e3:53:04:ce:d4:c5:08:61: bb:84:93:09:47:86:be:6e:7e:6e:07:ee:c6:4e:aa: a5:fc:65:ca:b5:7b:0b:75:3c:71:a9:a3:80:96:b3: 9b:ac:58:6b:db:97:3e:7b:ea:ea:f8:70:83:fc:ea: 28:7e:56:9c:f3:59:e2:46:d4:37:09:4a:3c:07:e9: e2:2f:2d:e6:93:d3:fb:d1:4d:80:a2:d4:39:65:16: cf:c7:6d:05:33:ac:9f:e0:dd:15:6c:8c:21:75:13: 2f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0E:46:35:AA:6F:02:01:2D:53:61:69:90:E3:67:BB:3A:E7:95:EC X509v3 Authority Key Identifier: keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:72:a9:8d:e7:5f:53:dc:bc:c6:17:a9:23:bc:2d:e2:61:e6: 27:b8:5b:b2:1e:6a:fa:e3:38:88:2d:d2:81:aa:c0:bb:b7:ab: 2c:c8:ce:3b:a2:0a:61:08:4d:48:51:f4:0c:57:e1:f5:b2:37: 35:39:67:4e:f8:ba:8d:b6:e8:40:f6:cd:ee:0e:26:ea:f6:11: 04:0e:ac:1d:6d:ce:e4:42:27:7e:3f:d2:e2:3c:8f:ab:ba:ef: 0d:de:33:23:b1:d4:f8:8e:21:96:00:5e:df:64:27:f5:6e:b3: 3f:0b:49:fa:cd:3b:d7:83:fb:a8:ba:f9:2d:e9:41:52:21:1a: 0f:ba:98:74:09:8e:c0:3b:f5:44:09:45:a4:69:83:f0:0b:a8: 96:2b:35:79:0d:14:90:d1:4c:81:9c:ef:2d:98:4d:97:94:76: 7a:72:04:e6:a8:45:1f:af:10:18:cd:91:31:b4:aa:6a:93:0c: da:68:58:4b:3b:d5:87:a5:70:fc:83:65:cb:2e:49:11:15:ab: 8d:03:82:dd:87:29:73:79:9b:fa:4e:2b:96:72:64:e0:c3:85: 32:ca:0b:16:80:74:99:c5:43:91:da:7a:1a:d8:6e:be:b5:a2: 9d:9e:44:37:0d:22:5b:3d:30:44:90:63:83:d7:74:af:91:ae: 71:97:a8:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RDExMTAvBgNVBAUTKERERUJBNDZDQzdBODkyRDJBN0ZGNkFCNjQzNzdDN0VD RkZEOEFEQkIwHhcNMjUwNjA0MTgzMTMwWhcNMjUwNjExMTgzMTMwWjAYMRYwFAYD VQQDEw02ODQwOTEwMi0yZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJZkqsFghRRnt6tuD4/aOq78nW9sW9gja95kZE/IH/ZBJMTzHxVNa838R+xo OtLp6TQVzHpd3UWe2FHcyNKviJTwSvDWF8uVadhYSJ7/QiH/iNN+R/2/2M0pkrIR 7eCcr00en5AS2F+9MlH1KBzUbArIvtvBBpdlRNpYQlwLVIPb8eV57FjhsGS11ucf peX41z6KyJHpuGsLS19841MEztTFCGG7hJMJR4a+bn5uB+7GTqql/GXKtXsLdTxx qaOAlrObrFhr25c+e+rq+HCD/Oooflac81niRtQ3CUo8B+niLy3mk9P70U2AotQ5 ZRbPx20FM6yf4N0VbIwhdRMvrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcORjWq bwIBLVNhaZDjZ7s655XsMB8GA1UdIwQYMBaAFN3rpGzHqJLSp/9qtkN3x+z/2K27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZEMS8xNUFFNEIyODA5 MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0S25fMnEyUTNmSDdQX1ly YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNldWtiTWVva3RLbl8ycTJRM2ZIN1BfWXJicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZEMS8xNUFFNEIyODA5MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0 S25fMnEyUTNmSDdQX1lyYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYcqmN519T3LzGF6kjvC3iYeYnuFuyHmr64ziILdKBqsC7t6ssyM47 ogphCE1IUfQMV+H1sjc1OWdO+LqNtuhA9s3uDibq9hEEDqwdbc7kQid+P9LiPI+r uu8N3jMjsdT4jiGWAF7fZCf1brM/C0n6zTvXg/uouvkt6UFSIRoPuph0CY7AO/VE CUWkaYPwC6iWKzV5DRSQ0UyBnO8tmE2XlHZ6cgTmqEUfrxAYzZExtKpqkwzaaFhL O9WHpXD8g2XLLkkRFauNA4LdhylzeZv6TiuWcmTgw4UyygsWgHSZxUOR2noa2G6+ taKdnkQ3DSJbPTBEkGOD13Svka5xl6ie -----END CERTIFICATE-----Generated at Thu Jun 5 19:22:14 2025 by rpki-client