$ rpki-client -vvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft File: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft (raw, json) Hash identifier: 1ru6jsepQ/eT6OMR4tBwOB7npNVxM/oOP65gWk68uuE= Subject key identifier: E3:0C:12:A0:64:D6:A4:41:48:37:2D:B4:D1:B6:4F:14:32:6B:B3:1D Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB Certificate issuer: /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Certificate serial: 0C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft Manifest number: 0C36 Signing time: Wed 18 Jun 2025 18:25:41 +0000 Manifest this update: Wed 18 Jun 2025 18:25:41 +0000 Manifest next update: Wed 25 Jun 2025 18:25:41 +0000 Files and hashes: 1: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl (hash: 5G3sxmw38wknRyrgaQpQ1zwg1jfCOG2rcTn18HmMk9E=) 2: AD532D26090211EAAD8D5786C4F9AE02.roa (hash: zMbxVtz2dv4BRq8dK++ZIDeWN8B3kY7lSogxQf54mCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 18:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3132 (0xc3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116D1, serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Validity Not Before: Jun 18 18:25:41 2025 GMT Not After : Jun 25 18:25:41 2025 GMT Subject: CN=685304a5-d1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cd:98:6e:2c:95:a7:3e:e0:65:d4:41:ea:cb: 09:14:be:a1:fc:38:9a:be:74:b4:ed:1a:38:cc:8b: cd:3f:98:07:00:7d:97:95:86:f2:d1:44:31:1c:13: e4:3b:ab:24:99:3f:ea:7e:5c:99:8a:77:b2:c4:f3: 5c:30:b9:b3:c8:62:59:5b:29:66:f7:d6:00:10:36: 12:7f:ed:9f:a7:83:74:ba:9e:ff:55:93:a6:d9:fb: 9c:f3:ad:84:98:e3:87:2c:40:75:42:8c:ee:2a:ab: 02:50:d5:03:77:ac:bd:1e:46:87:26:9f:c8:97:b0: 22:69:75:88:a8:9d:b9:9f:19:6f:7c:c5:a9:bb:07: 62:bb:9c:87:43:fe:db:e5:be:2c:83:d6:c0:82:76: 16:a6:70:0f:62:8c:92:90:0a:ab:62:bc:19:49:e6: 33:a5:ab:f0:c7:04:f4:0b:84:7b:40:3f:60:74:49: b3:ae:fe:a1:77:af:26:23:aa:39:05:99:19:ca:57: 75:c0:d6:ba:a3:94:b5:10:76:92:1b:53:c4:9d:9a: 1b:2d:af:2e:55:1d:38:7b:09:2d:ce:63:e9:72:df: 32:72:0f:dc:8d:fd:63:55:4a:d3:46:58:17:71:ad: fb:4c:29:d0:b2:c6:69:46:6d:20:b0:93:9a:8f:9b: f5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0C:12:A0:64:D6:A4:41:48:37:2D:B4:D1:B6:4F:14:32:6B:B3:1D X509v3 Authority Key Identifier: keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:66:45:e6:c2:8c:81:0d:fe:34:f2:6b:ac:2d:46:1e:34:8d: 46:1d:3b:8f:c5:4f:cb:0f:6d:4a:4f:da:14:ab:22:28:aa:ff: 0b:da:29:a8:99:47:2a:3c:45:6f:ba:e1:d2:5d:6f:8e:bc:3f: b4:cb:9a:39:53:7b:a0:d8:1f:ee:3f:25:8f:b2:db:44:fe:cd: c9:c9:78:8e:44:93:f9:48:78:1a:9f:4f:cb:09:bd:33:28:af: b9:70:7d:51:fa:4e:f5:6b:b3:32:53:15:0d:e2:22:5d:c4:f5: ca:04:ba:6b:b5:ca:12:2b:45:33:c9:bc:5f:63:f2:fa:63:d6: 4c:03:44:1d:a7:45:99:f3:87:64:fb:73:b5:fe:01:a2:4c:31: fc:b3:8e:f8:35:32:ef:ff:a9:9b:25:35:1d:45:ef:04:13:d7: 89:a0:1c:38:4a:62:66:92:7f:0e:24:0c:86:98:ed:b9:86:b5: 88:92:6a:ef:bf:bc:4c:b9:36:db:2e:6e:1f:c4:62:d6:8d:3c: 13:91:fa:9b:18:a7:08:96:e7:11:ed:8c:a6:bc:bd:88:eb:56: 4c:2e:3d:a6:8e:9f:1a:cc:5e:82:ac:3a:f1:99:c1:c3:59:17: cd:9a:3f:a6:f3:ad:bd:77:52:61:a7:05:42:db:55:31:ce:05: 7a:43:54:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RDExMTAvBgNVBAUTKERERUJBNDZDQzdBODkyRDJBN0ZGNkFCNjQzNzdDN0VD RkZEOEFEQkIwHhcNMjUwNjE4MTgyNTQxWhcNMjUwNjI1MTgyNTQxWjAYMRYwFAYD VQQDEw02ODUzMDRhNS1kMWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1s2YbiyVpz7gZdRB6ssJFL6h/DiavnS07Ro4zIvNP5gHAH2XlYby0UQxHBPk O6skmT/qflyZineyxPNcMLmzyGJZWylm99YAEDYSf+2fp4N0up7/VZOm2fuc862E mOOHLEB1QozuKqsCUNUDd6y9HkaHJp/Il7AiaXWIqJ25nxlvfMWpuwdiu5yHQ/7b 5b4sg9bAgnYWpnAPYoySkAqrYrwZSeYzpavwxwT0C4R7QD9gdEmzrv6hd68mI6o5 BZkZyld1wNa6o5S1EHaSG1PEnZobLa8uVR04ewktzmPpct8ycg/cjf1jVUrTRlgX ca37TCnQssZpRm0gsJOaj5v12QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMMEqBk 1qRBSDcttNG2TxQya7MdMB8GA1UdIwQYMBaAFN3rpGzHqJLSp/9qtkN3x+z/2K27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZEMS8xNUFFNEIyODA5 MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0S25fMnEyUTNmSDdQX1ly YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNldWtiTWVva3RLbl8ycTJRM2ZIN1BfWXJicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZEMS8xNUFFNEIyODA5MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0 S25fMnEyUTNmSDdQX1lyYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqZkXmwoyBDf408musLUYeNI1GHTuPxU/LD21KT9oUqyIoqv8L2imo mUcqPEVvuuHSXW+OvD+0y5o5U3ug2B/uPyWPsttE/s3JyXiORJP5SHgan0/LCb0z KK+5cH1R+k71a7MyUxUN4iJdxPXKBLprtcoSK0UzybxfY/L6Y9ZMA0Qdp0WZ84dk +3O1/gGiTDH8s474NTLv/6mbJTUdRe8EE9eJoBw4SmJmkn8OJAyGmO25hrWIkmrv v7xMuTbbLm4fxGLWjTwTkfqbGKcIlucR7YymvL2I61ZMLj2mjp8azF6CrDrxmcHD WRfNmj+m8629d1JhpwVC21UxzgV6Q1RX -----END CERTIFICATE-----Generated at Fri Jun 20 11:04:34 2025 by rpki-client