$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json) Hash identifier: QyNTLlQSNrv3WmDXQkq6r/fw/FMnyuAu3DJDBam6sBM= Subject key identifier: 08:FD:5A:04:5A:D2:91:93:5B:01:0F:02:4E:AD:19:84:06:3D:0E:84 Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Certificate serial: 055F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft Manifest number: 0559 Signing time: Tue 04 Nov 2025 23:28:43 +0000 Manifest this update: Tue 04 Nov 2025 23:28:42 +0000 Manifest next update: Tue 11 Nov 2025 23:28:42 +0000 Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: f1Z51nGwQ0rBKkstfcv4caIwcMIl0Yxx0WIa4O9egFM=) 2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: rVSuRgzwSSh8GvKjFbVO5KBlpGlmt2sbJHlM6WMDYjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1375 (0x55f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5552, serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Validity Not Before: Nov 4 23:28:42 2025 GMT Not After : Nov 11 23:28:42 2025 GMT Subject: CN=690a8c2a-4413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c6:4b:2e:5d:17:a6:9a:b4:a5:54:08:6e:e3: ed:24:b6:18:b5:64:c6:d1:b0:72:ea:92:44:23:75: 38:a2:ed:62:a9:2c:93:f9:2f:58:00:67:21:2e:bd: df:5e:47:2c:4d:c1:e7:39:2d:29:bc:7b:ae:72:43: 55:ef:a5:a6:2e:03:36:ec:e4:f4:59:63:1e:35:15: 7c:e6:db:cd:58:d2:3c:c0:e7:43:a4:6c:da:0f:57: d6:2e:42:f5:9a:ea:b5:c5:84:df:81:8c:26:50:5a: 2e:f6:5f:cc:47:99:33:99:c4:be:93:91:6f:f9:2a: b5:b2:ca:35:1d:07:5f:4e:52:d2:5a:92:d1:91:d6: 59:29:ec:71:26:c3:f1:ab:e4:8c:c3:59:e5:8e:92: 88:af:6d:45:ca:36:35:30:0b:85:c3:33:15:43:4c: 80:9c:bf:8d:56:96:ba:67:dc:f6:bc:5b:44:fa:9e: 6d:ba:ed:d3:f4:68:1f:13:ae:01:35:5b:cb:19:53: 2e:54:fa:9c:e8:21:6e:9e:2d:11:47:56:ac:25:e4: 85:01:f2:1e:b1:10:29:eb:f0:e5:f0:49:76:44:1e: 73:9e:6f:19:a5:30:ed:e2:d8:3b:ed:f7:74:69:21: ef:33:18:7f:19:98:21:fb:f7:f7:ee:56:6e:22:8b: 03:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FD:5A:04:5A:D2:91:93:5B:01:0F:02:4E:AD:19:84:06:3D:0E:84 X509v3 Authority Key Identifier: keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:54:e8:80:6b:83:b5:12:e5:d3:35:d2:1d:50:9b:94:d7:42: 69:92:14:55:85:d1:49:44:4e:5f:a7:93:8b:22:60:36:d6:1b: 3c:4d:01:bc:62:1a:15:36:2e:ac:a8:99:86:a6:04:ec:5f:ed: 47:16:9a:7f:5e:33:4d:73:db:7d:80:dc:8a:fa:f0:b4:dc:52: 41:b0:d7:5e:f8:75:05:20:40:00:ac:68:9b:1d:97:93:0a:13: 83:c8:7e:28:64:34:d4:4c:a5:f2:cc:8f:95:96:88:94:95:b9: ee:b6:b8:b0:90:5d:7d:44:93:f4:f6:c2:a2:1a:3d:83:30:6e: c5:77:70:a2:82:c1:ea:e3:0f:70:80:8b:fd:99:52:6a:68:88: b7:5e:00:55:71:21:84:7d:73:8e:f7:41:fc:de:86:86:dc:da: 21:2f:b4:97:52:a5:b0:b1:4a:3b:1a:f6:6e:0f:7a:1d:df:25: 63:4f:6c:df:da:ef:96:d1:d6:e9:13:04:85:10:9c:64:2a:b9: c0:12:59:86:88:e1:9d:f6:5b:db:7d:56:1f:90:d8:c6:63:0d: 0e:2a:d2:a8:e4:26:d8:63:34:03:1b:5e:b3:1d:c5:20:ff:06: d0:7c:ac:cf:b6:7b:83:84:13:7d:7c:e2:bb:82:b8:fe:06:40: 5d:b2:81:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy MzJCOUUxM0EwHhcNMjUxMTA0MjMyODQyWhcNMjUxMTExMjMyODQyWjAYMRYwFAYD VQQDEw02OTBhOGMyYS00NDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsZLLl0Xppq0pVQIbuPtJLYYtWTG0bBy6pJEI3U4ou1iqSyT+S9YAGchLr3f XkcsTcHnOS0pvHuuckNV76WmLgM27OT0WWMeNRV85tvNWNI8wOdDpGzaD1fWLkL1 muq1xYTfgYwmUFou9l/MR5kzmcS+k5Fv+Sq1sso1HQdfTlLSWpLRkdZZKexxJsPx q+SMw1nljpKIr21FyjY1MAuFwzMVQ0yAnL+NVpa6Z9z2vFtE+p5tuu3T9GgfE64B NVvLGVMuVPqc6CFuni0RR1asJeSFAfIesRAp6/Dl8El2RB5znm8ZpTDt4tg77fd0 aSHvMxh/GZgh+/f37lZuIosD/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAj9WgRa 0pGTWwEPAk6tGYQGPQ6EMB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU1Mi82RjYwRjc3QzBCQ0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1K czgxSHhUYjhkSllqSzU0VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXVOiAa4O1EuXTNdIdUJuU10JpkhRVhdFJRE5fp5OLImA21hs8TQG8 YhoVNi6sqJmGpgTsX+1HFpp/XjNNc9t9gNyK+vC03FJBsNde+HUFIEAArGibHZeT ChODyH4oZDTUTKXyzI+VloiUlbnutriwkF19RJP09sKiGj2DMG7Fd3CigsHq4w9w gIv9mVJqaIi3XgBVcSGEfXOO90H83oaG3NohL7SXUqWwsUo7GvZuD3od3yVjT2zf 2u+W0dbpEwSFEJxkKrnAElmGiOGd9lvbfVYfkNjGYw0OKtKo5CbYYzQDG16zHcUg /wbQfKzPtnuDhBN9fOK7grj+BkBdsoHy -----END CERTIFICATE-----Generated at Wed Nov 5 23:04:22 2025 by rpki-client