$ rpki-client -vvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft File: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft (raw, json) Hash identifier: XJyetprkiVk3CNFZjm4b7NSuWkKlfX3/LTbrqnr2UUI= Subject key identifier: B4:38:4D:57:11:C7:F9:2E:CD:A9:E5:5D:F7:6D:DC:FC:BF:D9:0A:E5 Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB Certificate issuer: /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Certificate serial: 0C7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft Manifest number: 0C76 Signing time: Sat 18 Oct 2025 19:11:59 +0000 Manifest this update: Sat 18 Oct 2025 19:11:59 +0000 Manifest next update: Sat 25 Oct 2025 19:11:59 +0000 Files and hashes: 1: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl (hash: /WOEFcS/tB+gugrpImuMyCa5p7KAYF3hRvWf00LBY10=) 2: AD532D26090211EAAD8D5786C4F9AE02.roa (hash: xiqUMJWPyshWh78LUHnXsaBooxohe6ygJEfyrIMmpkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3197 (0xc7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116D1, serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Validity Not Before: Oct 18 19:11:59 2025 GMT Not After : Oct 25 19:11:59 2025 GMT Subject: CN=68f3e67f-2039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b3:dd:bd:8b:77:84:3f:37:97:d5:12:f2:76: 27:57:d8:3d:8a:85:db:6e:6b:4c:49:87:81:64:e3: 65:d8:f6:d6:f2:0b:64:35:e7:50:4a:f6:81:8b:ab: 7f:cc:8f:40:6e:de:4d:21:09:97:ab:cc:91:36:09: 3e:b5:78:2e:aa:d3:d8:b6:06:8d:f8:77:71:b6:ea: ae:ef:2d:04:e3:35:78:a4:b7:c6:d8:b9:fc:5e:0d: 05:08:49:81:92:73:cc:d9:6f:d0:d7:39:bf:d3:c1: ed:d8:cf:b5:80:ba:a2:97:c3:a9:9a:fc:ce:fd:be: fa:e8:0f:90:33:9f:da:88:22:3b:68:00:55:f9:b2: ee:a3:bc:94:ff:fe:24:cf:67:21:28:12:c7:64:d0: 35:09:05:b6:4d:77:f3:02:9c:4c:87:b5:0b:a3:40: 7a:60:12:29:36:16:62:a0:c1:4e:1f:e6:ac:07:88: 28:77:00:7a:8b:07:d8:6c:74:be:e6:21:67:03:62: 59:0a:5e:a4:da:fb:34:bb:99:90:44:90:61:2f:f6: f6:7f:06:48:07:52:b0:53:3d:90:bd:d5:f7:03:23: 91:5f:e5:26:0d:40:12:3f:db:3e:ac:04:9e:50:a8: 82:ec:f8:a5:15:d5:5d:56:b2:fd:ca:aa:bf:a8:ec: 44:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:38:4D:57:11:C7:F9:2E:CD:A9:E5:5D:F7:6D:DC:FC:BF:D9:0A:E5 X509v3 Authority Key Identifier: keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:d8:7e:b7:8a:03:97:c8:b1:a4:8a:4f:5d:45:77:ae:fc:30: e5:de:bc:45:b1:a6:df:83:8d:93:74:ee:75:42:ac:ec:7e:3d: 8f:00:09:8e:e9:52:b9:57:dd:9d:94:b6:c5:29:f9:02:f6:87: d5:c5:d3:db:77:5f:8a:3b:3c:f8:1a:8c:b6:14:8b:0a:a4:da: 83:53:3a:67:c9:8a:1b:a7:36:0d:59:55:53:3e:e3:c9:c2:bc: 29:2f:bc:49:4e:46:11:19:eb:41:86:77:c1:57:fa:35:3f:cf: 6d:c6:ec:62:d7:56:ff:b2:48:75:4c:27:40:e9:85:49:b9:e5: 29:ea:5f:a4:ce:b9:cc:7b:88:b0:d3:bb:7a:90:07:d6:55:40: a6:6d:38:b2:12:90:ff:76:69:c8:dc:64:7c:e0:2b:df:1c:78: 8d:b5:ae:8e:43:ae:46:dc:a3:25:9d:64:57:b6:87:35:3b:60: 23:97:3c:c3:02:b6:0f:c1:12:72:30:5e:f8:82:76:97:55:2f: 3b:40:89:00:cc:e8:2c:d1:81:d2:c9:b5:4e:c8:29:98:a8:d3: 67:3a:f1:c0:7c:d9:f4:89:ec:8c:95:18:1d:2a:3a:15:3a:6b: 2e:34:fb:a7:75:9d:85:08:c1:01:e0:4c:03:b4:3a:93:e8:83: 6e:da:21:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RDExMTAvBgNVBAUTKERERUJBNDZDQzdBODkyRDJBN0ZGNkFCNjQzNzdDN0VD RkZEOEFEQkIwHhcNMjUxMDE4MTkxMTU5WhcNMjUxMDI1MTkxMTU5WjAYMRYwFAYD VQQDEw02OGYzZTY3Zi0yMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLPdvYt3hD83l9US8nYnV9g9ioXbbmtMSYeBZONl2PbW8gtkNedQSvaBi6t/ zI9Abt5NIQmXq8yRNgk+tXguqtPYtgaN+Hdxtuqu7y0E4zV4pLfG2Ln8Xg0FCEmB knPM2W/Q1zm/08Ht2M+1gLqil8OpmvzO/b766A+QM5/aiCI7aABV+bLuo7yU//4k z2chKBLHZNA1CQW2TXfzApxMh7ULo0B6YBIpNhZioMFOH+asB4godwB6iwfYbHS+ 5iFnA2JZCl6k2vs0u5mQRJBhL/b2fwZIB1KwUz2QvdX3AyORX+UmDUASP9s+rASe UKiC7PilFdVdVrL9yqq/qOxEWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQ4TVcR x/kuzanlXfdt3Py/2QrlMB8GA1UdIwQYMBaAFN3rpGzHqJLSp/9qtkN3x+z/2K27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZEMS8xNUFFNEIyODA5 MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0S25fMnEyUTNmSDdQX1ly YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNldWtiTWVva3RLbl8ycTJRM2ZIN1BfWXJicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZEMS8xNUFFNEIyODA5MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0 S25fMnEyUTNmSDdQX1lyYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA52H63igOXyLGkik9dRXeu/DDl3rxFsabfg42TdO51Qqzsfj2PAAmO 6VK5V92dlLbFKfkC9ofVxdPbd1+KOzz4Goy2FIsKpNqDUzpnyYobpzYNWVVTPuPJ wrwpL7xJTkYRGetBhnfBV/o1P89txuxi11b/skh1TCdA6YVJueUp6l+kzrnMe4iw 07t6kAfWVUCmbTiyEpD/dmnI3GR84CvfHHiNta6OQ65G3KMlnWRXtoc1O2AjlzzD ArYPwRJyMF74gnaXVS87QIkAzOgs0YHSybVOyCmYqNNnOvHAfNn0ieyMlRgdKjoV OmsuNPundZ2FCMEB4EwDtDqT6INu2iG/ -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:51 2025 by rpki-client