$ rpki-client -vvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft File: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft (raw, json) Hash identifier: bpHPRgTwipl/45pify/SYO8tYnnqBjRoc0jI/m5jkzA= Subject key identifier: B0:9F:99:C9:2F:C1:31:7C:CA:9C:C4:0C:B8:5B:89:20:7A:98:84:AF Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB Certificate issuer: /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft Manifest number: 0C5A Signing time: Sun 24 Aug 2025 18:27:23 +0000 Manifest this update: Sun 24 Aug 2025 18:27:22 +0000 Manifest next update: Sun 31 Aug 2025 18:27:22 +0000 Files and hashes: 1: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl (hash: PVbB6tq1r/LU9GozjIQcn2ufI3r4zUJS6QiTFUObrzU=) 2: AD532D26090211EAAD8D5786C4F9AE02.roa (hash: xiqUMJWPyshWh78LUHnXsaBooxohe6ygJEfyrIMmpkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116D1, serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Validity Not Before: Aug 24 18:27:22 2025 GMT Not After : Aug 31 18:27:22 2025 GMT Subject: CN=68ab598a-0df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:45:f3:ee:0e:f0:d6:35:6b:79:1f:81:c9: b4:5f:45:7e:c5:4a:b9:92:6f:e8:e3:0d:14:10:20: d4:47:65:aa:d9:dc:3c:d3:d6:2b:b3:ae:09:b6:39: 8f:62:c2:5d:95:c2:0e:28:95:61:97:0b:1d:51:ca: 34:71:f9:c2:d7:30:73:86:01:24:e6:0b:77:71:13: ce:79:a1:83:c6:fc:79:3d:f2:8e:27:da:d1:ca:21: 2d:8c:76:d6:92:ab:16:04:53:d1:4e:8a:06:57:ba: fc:ff:ba:2b:ee:6b:04:e6:53:de:81:08:64:5b:d9: ce:c4:f4:4c:63:8e:58:20:7e:d3:89:23:9f:b7:86: 1d:89:c6:4c:b2:86:01:ee:60:4e:55:85:96:6e:dc: bb:c0:c5:68:04:28:a8:82:86:c6:81:80:54:30:e9: c6:97:6a:07:e3:e4:e0:d7:73:5a:10:ef:df:21:e5: 79:1f:84:88:51:c5:d4:06:23:d5:5b:b7:2f:3d:4c: e2:11:91:9f:99:22:1c:96:7a:38:63:a5:78:1f:95: f2:26:10:1f:43:26:49:60:35:ef:fa:2c:20:0b:eb: bf:a1:57:38:0d:4f:be:76:de:95:3d:39:7c:c3:26: 76:05:9c:3e:99:f4:39:5a:c5:67:a4:9b:32:04:3a: 22:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9F:99:C9:2F:C1:31:7C:CA:9C:C4:0C:B8:5B:89:20:7A:98:84:AF X509v3 Authority Key Identifier: keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:51:c4:0c:8b:15:8b:52:2d:31:4e:8b:6b:52:49:00:b2:80: 00:ea:b9:8e:b3:4b:b3:60:a6:2b:5b:91:cc:a1:3f:07:00:a0: 52:b9:2f:9f:25:e0:6a:ec:87:3c:c8:48:d0:e6:58:7b:d3:25: d7:18:a7:9a:8b:7b:cd:ef:3b:fe:eb:5d:b3:4b:c5:6c:f9:e1: 64:45:2e:39:12:68:f7:1c:57:c8:8e:e2:4c:df:94:21:05:63: 2a:db:45:75:1c:e3:9d:04:4b:d8:cd:1f:92:37:66:68:3e:3d: f5:1b:88:d8:50:eb:83:b3:c3:4e:9d:60:fc:df:c9:c8:06:65: a5:78:58:c4:32:df:51:f7:1a:ee:44:ba:cd:42:ad:fb:bf:f5: 06:31:d4:b0:fb:2e:d6:e7:72:c1:8a:a8:d3:a5:34:4d:93:c4: b3:57:58:31:f4:08:01:c5:7f:51:4c:d9:41:ac:2a:fc:c2:fb: 75:a4:50:1a:4d:10:38:b3:d5:ba:e7:fb:0b:84:e5:dc:8b:a5: 38:31:49:b7:2d:68:10:fc:e7:ed:a1:a2:b4:e7:da:0a:00:d7: 26:a9:9d:94:e1:1b:ee:a1:4f:c8:8f:4c:33:56:75:4a:dd:24: 97:2e:83:51:8f:3f:9d:c4:f5:22:9d:47:11:3c:bd:a8:d8:73: 57:0a:09:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RDExMTAvBgNVBAUTKERERUJBNDZDQzdBODkyRDJBN0ZGNkFCNjQzNzdDN0VD RkZEOEFEQkIwHhcNMjUwODI0MTgyNzIyWhcNMjUwODMxMTgyNzIyWjAYMRYwFAYD VQQDEw02OGFiNTk4YS0wZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbVF8+4O8NY1a3kfgcm0X0V+xUq5km/o4w0UECDUR2Wq2dw809Yrs64JtjmP YsJdlcIOKJVhlwsdUco0cfnC1zBzhgEk5gt3cRPOeaGDxvx5PfKOJ9rRyiEtjHbW kqsWBFPRTooGV7r8/7or7msE5lPegQhkW9nOxPRMY45YIH7TiSOft4YdicZMsoYB 7mBOVYWWbty7wMVoBCiogobGgYBUMOnGl2oH4+Tg13NaEO/fIeV5H4SIUcXUBiPV W7cvPUziEZGfmSIclno4Y6V4H5XyJhAfQyZJYDXv+iwgC+u/oVc4DU++dt6VPTl8 wyZ2BZw+mfQ5WsVnpJsyBDoinQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCfmckv wTF8ypzEDLhbiSB6mISvMB8GA1UdIwQYMBaAFN3rpGzHqJLSp/9qtkN3x+z/2K27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZEMS8xNUFFNEIyODA5 MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0S25fMnEyUTNmSDdQX1ly YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNldWtiTWVva3RLbl8ycTJRM2ZIN1BfWXJicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZEMS8xNUFFNEIyODA5MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0 S25fMnEyUTNmSDdQX1lyYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYUcQMixWLUi0xTotrUkkAsoAA6rmOs0uzYKYrW5HMoT8HAKBSuS+f JeBq7Ic8yEjQ5lh70yXXGKeai3vN7zv+612zS8Vs+eFkRS45Emj3HFfIjuJM35Qh BWMq20V1HOOdBEvYzR+SN2ZoPj31G4jYUOuDs8NOnWD838nIBmWleFjEMt9R9xru RLrNQq37v/UGMdSw+y7W53LBiqjTpTRNk8SzV1gx9AgBxX9RTNlBrCr8wvt1pFAa TRA4s9W65/sLhOXci6U4MUm3LWgQ/OftoaK059oKANcmqZ2U4RvuoU/Ij0wzVnVK 3SSXLoNRjz+dxPUinUcRPL2o2HNXCgkx -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:09 2025 by rpki-client