$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json) Hash identifier: QwLdFnJqEO2QyeC91nggOSUJgbov9HVpjfMbVE+VCFU= Subject key identifier: B8:D9:9F:0D:F4:E4:E5:58:4E:84:AF:04:5A:73:9B:44:8B:39:3D:8F Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Certificate serial: 0517 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft Manifest number: 0511 Signing time: Sat 14 Jun 2025 23:21:37 +0000 Manifest this update: Sat 14 Jun 2025 23:21:37 +0000 Manifest next update: Sat 21 Jun 2025 23:21:37 +0000 Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: DaNthPNL+c0S4Sa4VvLFwqGfqanjAo8HRn1dGLjcV14=) 2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: rVSuRgzwSSh8GvKjFbVO5KBlpGlmt2sbJHlM6WMDYjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5552, serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Validity Not Before: Jun 14 23:21:37 2025 GMT Not After : Jun 21 23:21:37 2025 GMT Subject: CN=684e0401-8a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:18:26:77:d1:df:92:b5:95:e2:17:c4:72: 00:50:c8:4d:3e:8e:7d:cf:c4:22:fb:5e:22:44:88: 45:74:8e:01:1c:44:a6:dd:77:0f:e1:05:ca:29:54: fd:09:8c:9c:4b:8f:e1:d2:db:23:f7:b6:05:24:16: 82:3a:80:67:b8:87:43:18:96:5b:03:60:9a:c1:63: df:02:05:35:db:5e:85:1c:eb:04:37:68:af:27:42: 3e:89:9b:89:66:f5:09:0c:d5:e9:14:e3:8f:13:f4: 05:a2:43:6f:4d:74:bb:a2:3d:9b:eb:25:e2:8a:0d: 53:fe:1e:03:68:1a:8e:62:73:27:08:88:24:84:9b: 08:a0:e1:f5:33:49:e7:ad:eb:c1:2c:ce:79:c1:f3: fc:5b:22:08:52:dd:09:96:f3:60:4c:4c:64:6e:6b: 63:26:09:17:f9:7c:80:4a:26:3c:18:22:94:64:e6: c1:35:bf:4d:13:68:31:56:3c:85:ef:fd:84:5d:7d: 8c:2b:fe:c9:48:cd:29:a5:22:e6:cb:13:2a:c6:8c: ab:c2:f0:0f:73:bb:21:de:4c:8e:95:53:b7:18:ba: 4c:1e:a0:9e:12:d9:45:d2:77:e1:5b:45:ec:4d:a1: 9f:b6:ad:7f:49:d8:1c:d4:91:2f:79:94:1a:c3:e9: 37:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D9:9F:0D:F4:E4:E5:58:4E:84:AF:04:5A:73:9B:44:8B:39:3D:8F X509v3 Authority Key Identifier: keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c9:10:44:81:b2:24:ca:ff:66:af:52:d5:2f:36:3c:ec:3f: 40:6b:99:1a:56:c8:73:13:26:8b:55:f9:3d:85:ac:32:18:27: 88:16:3f:e4:c7:1e:11:99:81:ff:17:d4:6c:1e:c7:a0:61:4c: 33:0e:65:55:77:98:d1:56:df:c4:9a:6f:ca:37:c7:01:e4:66: 1c:63:99:1f:e2:cf:3d:d2:ff:c1:4b:56:49:f3:76:4d:fc:cf: 29:67:a1:cb:a4:bb:3a:71:a2:98:4c:98:a6:99:36:58:88:60: db:0c:88:b3:20:80:3b:89:fe:93:35:88:f5:23:15:d5:cd:1a: b5:fc:4e:53:fe:ff:a1:83:d8:e1:ff:7c:59:e6:2c:a6:a8:eb: f5:72:91:64:6b:a5:fc:0f:9b:60:01:01:52:74:94:ce:9c:6c: 7c:c9:2b:db:61:0b:a4:62:9e:9b:b6:eb:68:9d:09:e3:4b:dc: a1:ac:69:b5:94:0f:de:83:02:f5:64:86:63:d8:8d:46:35:75: f4:bc:9c:20:0d:f8:22:ef:d7:76:d6:e8:b3:1b:fa:99:2c:77: e5:ae:86:13:ff:bc:89:f0:4c:fd:09:5b:2e:d7:f5:be:f2:92: 19:94:eb:47:5d:1b:eb:bf:ac:9b:95:18:56:eb:c1:c3:fb:1d: 81:b3:5e:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy MzJCOUUxM0EwHhcNMjUwNjE0MjMyMTM3WhcNMjUwNjIxMjMyMTM3WjAYMRYwFAYD VQQDEw02ODRlMDQwMS04YTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz88YJnfR35K1leIXxHIAUMhNPo59z8Qi+14iRIhFdI4BHESm3XcP4QXKKVT9 CYycS4/h0tsj97YFJBaCOoBnuIdDGJZbA2CawWPfAgU1216FHOsEN2ivJ0I+iZuJ ZvUJDNXpFOOPE/QFokNvTXS7oj2b6yXiig1T/h4DaBqOYnMnCIgkhJsIoOH1M0nn revBLM55wfP8WyIIUt0JlvNgTExkbmtjJgkX+XyASiY8GCKUZObBNb9NE2gxVjyF 7/2EXX2MK/7JSM0ppSLmyxMqxoyrwvAPc7sh3kyOlVO3GLpMHqCeEtlF0nfhW0Xs TaGftq1/Sdgc1JEveZQaw+k3FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjZnw30 5OVYToSvBFpzm0SLOT2PMB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU1Mi82RjYwRjc3QzBCQ0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1K czgxSHhUYjhkSllqSzU0VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKyRBEgbIkyv9mr1LVLzY87D9Aa5kaVshzEyaLVfk9hawyGCeIFj/k xx4RmYH/F9RsHsegYUwzDmVVd5jRVt/Emm/KN8cB5GYcY5kf4s890v/BS1ZJ83ZN /M8pZ6HLpLs6caKYTJimmTZYiGDbDIizIIA7if6TNYj1IxXVzRq1/E5T/v+hg9jh /3xZ5iymqOv1cpFka6X8D5tgAQFSdJTOnGx8ySvbYQukYp6btutonQnjS9yhrGm1 lA/egwL1ZIZj2I1GNXX0vJwgDfgi79d21uizG/qZLHflroYT/7yJ8Ez9CVsu1/W+ 8pIZlOtHXRvrv6yblRhW68HD+x2Bs17+ -----END CERTIFICATE-----Generated at Sun Jun 15 19:22:24 2025 by rpki-client