$ rpki-client -vvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft File: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft (raw, json) Hash identifier: 74Uulx347FZSLHXF2HmpmLMuaXhIUCopttFfVYclFMU= Subject key identifier: D6:C7:C4:1B:BD:55:9D:BF:B2:8B:26:E3:53:7A:AB:BC:5C:17:63:D0 Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB Certificate issuer: /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Certificate serial: 0C86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft Manifest number: 0C7F Signing time: Tue 04 Nov 2025 18:31:05 +0000 Manifest this update: Tue 04 Nov 2025 18:31:05 +0000 Manifest next update: Tue 11 Nov 2025 18:31:05 +0000 Files and hashes: 1: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl (hash: pY2CwbJRj5OVtys9Jm2UYThNcJtvJf7qJTTKVQSxasc=) 2: AD532D26090211EAAD8D5786C4F9AE02.roa (hash: xiqUMJWPyshWh78LUHnXsaBooxohe6ygJEfyrIMmpkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116D1, serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB Validity Not Before: Nov 4 18:31:05 2025 GMT Not After : Nov 11 18:31:05 2025 GMT Subject: CN=690a4669-c625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:c2:9a:0a:93:f7:c2:8a:37:65:dc:f5:a7: 85:8e:81:b6:8b:45:c1:63:26:03:d8:c2:8a:d9:06: 69:1d:b0:7b:96:6d:f9:2b:88:6b:75:29:b8:3d:12: 28:2e:4d:5d:1c:cb:ac:06:8f:5c:95:68:d3:ce:8d: ff:06:26:b5:6d:40:46:1e:ca:b4:2a:43:18:cb:0b: 81:c4:15:48:29:bd:bd:2a:fd:b8:c4:3b:fb:f4:4b: 7d:d6:d8:b5:f8:81:c1:61:c8:99:33:7b:ae:b6:c5: 0a:f4:e1:9c:ab:43:51:3e:f8:8c:ac:00:7a:90:64: 88:45:91:1d:38:97:0c:c4:24:68:41:ce:18:9d:fc: 35:fd:e6:5b:05:4f:07:4d:d8:52:d0:8f:a4:48:7d: a3:70:a6:e5:77:1b:8f:23:a0:34:1a:d4:ae:ba:c6: 60:08:73:7f:65:96:1c:bc:09:07:f2:ce:25:27:27: 3d:b2:0f:c3:d4:51:8e:0e:25:e7:47:65:06:36:a8: 35:d2:89:cf:51:58:17:f5:07:a1:79:78:6c:75:83: df:b6:9c:da:c7:d3:5d:80:ba:b9:53:a4:e3:21:e3: 01:d9:df:82:10:e1:f0:64:05:48:1f:02:c0:cb:e1: 6b:77:57:54:2d:ee:dd:26:7f:a4:72:30:22:4c:82: 37:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C7:C4:1B:BD:55:9D:BF:B2:8B:26:E3:53:7A:AB:BC:5C:17:63:D0 X509v3 Authority Key Identifier: keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:e1:44:c2:4b:21:a0:34:c5:18:41:51:68:4a:54:0b:15:10: de:c8:9d:1b:c7:a4:46:1a:26:1d:f7:2b:b9:37:41:46:5f:48: db:e9:b4:f3:1d:95:68:e6:23:64:9b:a4:16:87:0b:1b:95:7e: 9a:2f:7d:25:88:95:80:9b:e9:75:10:68:c1:4e:8d:ea:45:e8: c0:be:8c:12:56:2e:23:6c:cd:5b:7d:db:4e:37:43:08:5d:9c: 90:46:5b:77:df:ce:83:0b:97:d6:62:db:8e:08:8e:04:b6:53: 20:3e:28:8a:76:69:7f:fd:25:8f:09:ef:29:46:18:87:51:b7: ff:4e:79:6d:bc:de:07:f1:51:0e:85:a4:32:9d:90:51:04:bb: d3:ca:1e:a5:d4:78:7c:3a:98:ad:d7:32:df:55:5a:bf:ae:c8: d7:7a:7a:cd:f4:23:e8:c7:66:7e:9e:8d:e5:09:32:c5:78:b7: a4:2b:7c:97:55:9f:a0:c4:9b:39:38:bb:79:6c:1a:fe:35:4b: fc:79:26:df:33:a0:b7:c2:cb:80:23:c3:dc:7d:b4:e0:c8:5e: 77:fc:d3:ec:06:60:ad:98:dc:86:92:88:73:b2:57:16:c6:ea: 60:c5:4f:9d:55:c5:e5:c8:84:ce:0e:29:b4:d0:5f:33:cc:e6: 80:e9:cf:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RDExMTAvBgNVBAUTKERERUJBNDZDQzdBODkyRDJBN0ZGNkFCNjQzNzdDN0VD RkZEOEFEQkIwHhcNMjUxMTA0MTgzMTA1WhcNMjUxMTExMTgzMTA1WjAYMRYwFAYD VQQDEw02OTBhNDY2OS1jNjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBTCmgqT98KKN2Xc9aeFjoG2i0XBYyYD2MKK2QZpHbB7lm35K4hrdSm4PRIo Lk1dHMusBo9clWjTzo3/Bia1bUBGHsq0KkMYywuBxBVIKb29Kv24xDv79Et91ti1 +IHBYciZM3uutsUK9OGcq0NRPviMrAB6kGSIRZEdOJcMxCRoQc4Ynfw1/eZbBU8H TdhS0I+kSH2jcKbldxuPI6A0GtSuusZgCHN/ZZYcvAkH8s4lJyc9sg/D1FGODiXn R2UGNqg10onPUVgX9QeheXhsdYPftpzax9NdgLq5U6TjIeMB2d+CEOHwZAVIHwLA y+Frd1dULe7dJn+kcjAiTII3hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbHxBu9 VZ2/sosm41N6q7xcF2PQMB8GA1UdIwQYMBaAFN3rpGzHqJLSp/9qtkN3x+z/2K27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZEMS8xNUFFNEIyODA5 MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0S25fMnEyUTNmSDdQX1ly YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNldWtiTWVva3RLbl8ycTJRM2ZIN1BfWXJicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZEMS8xNUFFNEIyODA5MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0 S25fMnEyUTNmSDdQX1lyYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX4UTCSyGgNMUYQVFoSlQLFRDeyJ0bx6RGGiYd9yu5N0FGX0jb6bTz HZVo5iNkm6QWhwsblX6aL30liJWAm+l1EGjBTo3qRejAvowSVi4jbM1bfdtON0MI XZyQRlt3386DC5fWYtuOCI4EtlMgPiiKdml//SWPCe8pRhiHUbf/TnltvN4H8VEO haQynZBRBLvTyh6l1Hh8Opit1zLfVVq/rsjXenrN9CPox2Z+no3lCTLFeLekK3yX VZ+gxJs5OLt5bBr+NUv8eSbfM6C3wsuAI8PcfbTgyF53/NPsBmCtmNyGkohzslcW xupgxU+dVcXlyITODim00F8zzOaA6c+h -----END CERTIFICATE-----Generated at Wed Nov 5 16:42:39 2025 by rpki-client