$ rpki-client -vvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft File: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft (raw, json) Hash identifier: 2KNt7aoXRQ+Sg2DIBtpEvE9cwLif67HKLT7Oqi+Hdsc= Subject key identifier: A8:A7:91:95:C6:B8:43:B1:12:35:92:9F:20:E1:18:EA:97:77:53:73 Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB Certificate issuer: /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Certificate serial: 0C57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft Manifest number: 0C51 Signing time: Sun 10 Aug 2025 18:30:20 +0000 Manifest this update: Sun 10 Aug 2025 18:30:20 +0000 Manifest next update: Sun 17 Aug 2025 18:30:20 +0000 Files and hashes: 1: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl (hash: 3NPm+7SSE5VxkkQiFZq0V5fplhVBH6pREXIsVRS5uIY=) 2: AD532D26090211EAAD8D5786C4F9AE02.roa (hash: zMbxVtz2dv4BRq8dK++ZIDeWN8B3kY7lSogxQf54mCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3159 (0xc57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116D1, serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Validity Not Before: Aug 10 18:30:20 2025 GMT Not After : Aug 17 18:30:20 2025 GMT Subject: CN=6898e53c-5191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b8:d8:a6:fa:bb:1a:44:2e:7e:8d:4c:cb:13: 5b:19:62:b6:d9:60:d9:df:55:a0:a4:48:28:cd:af: 7c:32:03:96:8d:08:0f:6a:a0:f3:8d:fb:4e:76:cf: 50:d4:95:09:54:24:b6:da:11:33:ac:9d:ea:01:c1: 56:8e:36:cb:fc:10:a9:99:d3:6b:89:f5:90:25:15: 59:6e:73:30:ca:00:80:6f:9f:4d:b0:b4:5a:ed:0e: f6:42:b2:34:b8:eb:69:6b:d6:ad:44:d7:10:69:0d: ac:c3:f8:59:0e:4c:85:5a:df:f3:c4:29:62:15:4b: 78:2b:8c:b8:fa:a2:17:38:8a:8a:1b:f8:95:e6:16: 37:bf:d8:bb:44:14:a3:f0:94:b0:37:52:a0:60:48: 3d:9a:94:f8:89:7c:56:c8:d9:ac:54:b2:e4:1c:d9: 0c:78:a3:f8:90:d8:88:88:6d:f6:aa:e9:d8:cd:fc: bf:7c:14:78:3f:44:0b:6e:f1:df:9b:53:36:3a:ba: d7:c9:f8:5c:e4:48:d4:fe:be:3a:41:97:bb:1c:2a: de:14:e0:c2:bd:88:fa:d2:b9:fb:a8:16:72:7a:97: f3:1b:e5:88:45:12:5e:9a:38:c8:38:a8:8f:5e:3a: 3a:26:5d:fe:e0:1f:02:12:19:cb:a8:8f:b8:8c:2e: 05:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A7:91:95:C6:B8:43:B1:12:35:92:9F:20:E1:18:EA:97:77:53:73 X509v3 Authority Key Identifier: keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:0a:a6:a9:df:0d:ac:b3:87:e4:11:48:df:45:b8:49:91:ae: 9e:2c:9d:1a:62:bf:8a:e5:a0:5e:80:02:12:aa:ac:fb:07:5b: fb:30:7f:72:83:1f:36:2a:60:4e:b4:66:38:20:81:8e:f8:a9: 21:37:70:0f:d0:03:21:2f:53:8f:9f:b0:18:e8:c6:a9:37:7c: eb:4b:d7:0b:2d:e9:37:2a:cd:41:2e:44:14:bc:60:78:5f:aa: 05:e1:ab:61:8d:26:8b:22:2c:c3:d3:09:a7:c1:e0:18:2f:69: e8:a5:8c:f0:38:2a:62:2a:3b:7f:7d:14:64:3d:7f:30:29:55: 1f:92:98:89:ce:a3:f0:24:fc:df:5d:5b:e3:b2:0d:a1:66:f4: a0:25:05:f9:22:4e:ff:ab:4b:c6:12:df:f8:7f:6f:0e:b5:24: 62:11:91:b4:37:32:fe:a5:6f:e1:b9:33:f2:ae:89:1e:5e:92: b6:d1:fc:96:32:95:74:55:c4:37:90:85:58:61:58:d7:d5:f4: c2:1b:8b:b2:9f:63:5b:7b:1e:0b:5b:a3:29:1a:29:0f:d0:80: 74:09:39:f3:d7:11:20:a8:cc:0b:ca:af:80:4b:7f:db:61:12: a6:ae:a5:d3:51:1a:ee:8b:1c:70:8c:db:7a:eb:d0:e0:da:8e: bb:64:9d:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RDExMTAvBgNVBAUTKERERUJBNDZDQzdBODkyRDJBN0ZGNkFCNjQzNzdDN0VD RkZEOEFEQkIwHhcNMjUwODEwMTgzMDIwWhcNMjUwODE3MTgzMDIwWjAYMRYwFAYD VQQDEw02ODk4ZTUzYy01MTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7jYpvq7GkQufo1MyxNbGWK22WDZ31WgpEgoza98MgOWjQgPaqDzjftOds9Q 1JUJVCS22hEzrJ3qAcFWjjbL/BCpmdNrifWQJRVZbnMwygCAb59NsLRa7Q72QrI0 uOtpa9atRNcQaQ2sw/hZDkyFWt/zxCliFUt4K4y4+qIXOIqKG/iV5hY3v9i7RBSj 8JSwN1KgYEg9mpT4iXxWyNmsVLLkHNkMeKP4kNiIiG32qunYzfy/fBR4P0QLbvHf m1M2OrrXyfhc5EjU/r46QZe7HCreFODCvYj60rn7qBZyepfzG+WIRRJemjjIOKiP Xjo6Jl3+4B8CEhnLqI+4jC4FJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKinkZXG uEOxEjWSnyDhGOqXd1NzMB8GA1UdIwQYMBaAFN3rpGzHqJLSp/9qtkN3x+z/2K27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZEMS8xNUFFNEIyODA5 MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0S25fMnEyUTNmSDdQX1ly YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNldWtiTWVva3RLbl8ycTJRM2ZIN1BfWXJicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZEMS8xNUFFNEIyODA5MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0 S25fMnEyUTNmSDdQX1lyYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBECqap3w2ss4fkEUjfRbhJka6eLJ0aYr+K5aBegAISqqz7B1v7MH9y gx82KmBOtGY4IIGO+KkhN3AP0AMhL1OPn7AY6MapN3zrS9cLLek3Ks1BLkQUvGB4 X6oF4athjSaLIizD0wmnweAYL2nopYzwOCpiKjt/fRRkPX8wKVUfkpiJzqPwJPzf XVvjsg2hZvSgJQX5Ik7/q0vGEt/4f28OtSRiEZG0NzL+pW/huTPyrokeXpK20fyW MpV0VcQ3kIVYYVjX1fTCG4uyn2Nbex4LW6MpGikP0IB0CTnz1xEgqMwLyq+AS3/b YRKmrqXTURruixxwjNt669Dg2o67ZJ29 -----END CERTIFICATE-----Generated at Mon Aug 11 05:16:27 2025 by rpki-client