$ rpki-client -vvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft File: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft (raw, json) Hash identifier: HWmsGe+gFTo7nyN1724rQ4lrSqecE7lVLx9vxI628kE= Subject key identifier: 95:FB:6F:5B:98:DB:F6:D4:37:5E:90:1F:2D:BB:CF:CA:25:C9:01:40 Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB Certificate issuer: /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Certificate serial: 0CD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft Manifest number: 0CCA Signing time: Tue 24 Mar 2026 18:11:55 +0000 Manifest this update: Tue 24 Mar 2026 18:11:55 +0000 Manifest next update: Tue 31 Mar 2026 18:11:55 +0000 Files and hashes: 1: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl (hash: hzdD7OT0gyMVMXer9B7sMiWJxTaHFyhq8CAxRNKzGKE=) 2: AD532D26090211EAAD8D5786C4F9AE02.roa (hash: k9g8nzceHdPoOK0fhj6CfdrThrPXw9qWDxl/CdnKp0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116D1, serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Validity Not Before: Mar 24 18:11:55 2026 GMT Not After : Mar 31 18:11:55 2026 GMT Subject: CN=69c2d3eb-ff1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d2:74:b0:61:6c:9d:e5:80:67:10:31:a6:52: 51:89:cc:3c:fa:4d:51:fa:88:00:79:13:cb:61:c4: a5:61:73:11:93:94:a8:58:f8:d2:db:cd:ac:b9:3f: e1:c6:2d:d8:74:65:35:3f:b2:5c:0b:d4:92:9f:56: 7e:f6:43:14:3b:34:38:b9:18:56:01:5d:ad:7c:75: 07:ff:ab:a1:3c:1e:ed:8b:47:a6:58:a9:be:20:21: ae:4e:7d:dd:ff:c8:91:da:d9:0f:d2:64:65:f0:10: ff:f5:1f:30:ff:3d:a9:fe:f0:a1:3e:88:c7:de:45: 5f:75:b4:0e:1b:d8:a2:55:a5:58:2f:b2:2c:a1:50: 69:63:75:01:40:2c:61:1a:29:8f:93:d1:77:87:08: 10:dd:de:2f:9b:3d:d3:5d:5d:0b:c0:87:ce:5c:db: 74:9e:be:97:78:b4:88:06:80:eb:f1:da:59:1b:f8: 42:d9:da:d0:c8:c6:cf:c8:89:b2:34:71:22:ad:4c: 8e:d7:75:89:aa:e3:4e:ae:d6:6d:50:d4:c5:ba:ed: 57:35:bb:ab:6b:99:2d:5c:66:45:0b:f4:f2:f2:d9: 6a:9b:01:9d:81:4b:0f:55:8f:7c:91:c1:22:74:51: 3b:de:65:78:44:18:26:b7:93:d0:7c:b2:68:92:6d: 0c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FB:6F:5B:98:DB:F6:D4:37:5E:90:1F:2D:BB:CF:CA:25:C9:01:40 X509v3 Authority Key Identifier: keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:c2:0a:6e:79:91:3f:0e:d5:60:5a:6e:18:bc:9b:57:dc:7f: bd:1f:fc:a9:e3:1d:be:de:b9:54:fa:35:c9:e8:9b:f4:23:93: d6:ab:47:38:fb:70:8d:18:24:96:13:4f:2d:12:a1:e8:16:34: 98:24:f6:1f:5f:31:b6:e3:f6:60:ef:7e:2d:f6:39:8d:3a:e7: 73:ac:c6:1d:ca:46:ee:6b:c3:8b:53:64:3f:94:93:c0:af:e9: d5:e0:9a:fe:92:6e:5e:f3:6f:5b:1d:52:ae:92:ac:6d:88:29: b3:36:aa:2f:a5:94:c8:2e:66:14:da:ed:f4:21:e1:fc:17:df: d8:88:82:ce:5c:4f:c8:15:24:2b:38:81:99:c9:b1:4f:b4:e3: 8f:41:76:95:60:f4:66:4a:43:ff:29:69:22:22:4b:02:60:6c: 3a:b9:a8:30:f2:4f:f8:f3:5f:28:bd:1e:10:35:e2:2d:bc:f6: 57:80:91:29:b0:bd:d9:a1:fd:dd:2e:20:97:77:73:4c:7d:65: 98:0f:db:53:95:b6:f1:91:b9:d9:64:08:35:86:db:ef:0d:3f: f6:15:4f:5c:12:38:9d:2a:62:cc:8f:5c:eb:18:05:95:ff:ef: df:9c:c1:57:fc:7d:7e:ff:da:7b:56:ef:5a:aa:26:8d:30:64: 03:2b:3e:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RDExMTAvBgNVBAUTKERERUJBNDZDQzdBODkyRDJBN0ZGNkFCNjQzNzdDN0VD RkZEOEFEQkIwHhcNMjYwMzI0MTgxMTU1WhcNMjYwMzMxMTgxMTU1WjAYMRYwFAYD VQQDEw02OWMyZDNlYi1mZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlNJ0sGFsneWAZxAxplJRicw8+k1R+ogAeRPLYcSlYXMRk5SoWPjS282suT/h xi3YdGU1P7JcC9SSn1Z+9kMUOzQ4uRhWAV2tfHUH/6uhPB7ti0emWKm+ICGuTn3d /8iR2tkP0mRl8BD/9R8w/z2p/vChPojH3kVfdbQOG9iiVaVYL7IsoVBpY3UBQCxh GimPk9F3hwgQ3d4vmz3TXV0LwIfOXNt0nr6XeLSIBoDr8dpZG/hC2drQyMbPyImy NHEirUyO13WJquNOrtZtUNTFuu1XNbura5ktXGZFC/Ty8tlqmwGdgUsPVY98kcEi dFE73mV4RBgmt5PQfLJokm0MQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJX7b1uY 2/bUN16QHy27z8olyQFAMB8GA1UdIwQYMBaAFN3rpGzHqJLSp/9qtkN3x+z/2K27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZEMS8xNUFFNEIyODA5 MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0S25fMnEyUTNmSDdQX1ly YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNldWtiTWVva3RLbl8ycTJRM2ZIN1BfWXJicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZEMS8xNUFFNEIyODA5MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0 S25fMnEyUTNmSDdQX1lyYnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA8IKbnmRPw7VYFpuGLybV9x/vR/8qeMdvt65VPo1yeib9COT1qtHOPtwjRgk lhNPLRKh6BY0mCT2H18xtuP2YO9+LfY5jTrnc6zGHcpG7mvDi1NkP5STwK/p1eCa /pJuXvNvWx1SrpKsbYgpszaqL6WUyC5mFNrt9CHh/Bff2IiCzlxPyBUkKziBmcmx T7Tjj0F2lWD0ZkpD/ylpIiJLAmBsOrmoMPJP+PNfKL0eEDXiLbz2V4CRKbC92aH9 3S4gl3dzTH1lmA/bU5W28ZG52WQINYbb7w0/9hVPXBI4nSpizI9c6xgFlf/v35zB V/x9fv/ae1bvWqomjTBkAys+kw== -----END CERTIFICATE-----Generated at Thu Mar 26 17:48:34 2026 by rpki-client