$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json) Hash identifier: n667HJR5jv0MKZYSRmZdOQ105//y4B6qtN9vwv2w36c= Subject key identifier: E7:78:DE:B5:91:77:95:98:CF:4A:CF:FD:E2:47:DE:D7:AC:D4:81:93 Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Certificate serial: 04FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft Manifest number: 04F8 Signing time: Thu 24 Apr 2025 23:28:54 +0000 Manifest this update: Thu 24 Apr 2025 23:28:54 +0000 Manifest next update: Thu 01 May 2025 23:28:54 +0000 Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: r8OCE/5i9cjetNn/HX9osCkpKQnHDFPOkUvqlAhxEiA=) 2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: rVSuRgzwSSh8GvKjFbVO5KBlpGlmt2sbJHlM6WMDYjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1278 (0x4fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5552, serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Validity Not Before: Apr 24 23:28:54 2025 GMT Not After : May 1 23:28:54 2025 GMT Subject: CN=680ac936-4737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:c4:b8:64:85:f1:1c:de:84:b6:80:76:84: 74:b3:b5:be:30:e3:c2:0a:1f:9a:ce:12:3e:0f:87: 63:61:75:f0:a5:63:c2:d0:15:25:9b:b2:24:4a:df: 2e:0a:7c:2b:24:39:32:76:24:61:5c:f6:7b:c9:8c: 0c:fd:4b:f5:55:2c:99:93:4b:44:bb:f2:a2:ee:80: 0a:f8:a4:03:6c:ad:b7:d0:fb:c6:47:16:bf:23:3b: b8:58:d5:73:86:b8:e0:9e:c1:b2:f0:ce:b7:34:b2: 31:2f:d3:cb:16:55:8c:65:ac:a6:b0:ca:40:38:d6: 0e:e2:74:52:26:85:0b:4a:51:03:4e:32:96:9d:0f: 64:24:e0:22:f2:07:49:f1:74:ff:9f:8f:7e:e2:e2: c9:12:a1:57:6d:bc:5f:76:5f:7f:c2:0a:d6:3e:76: 76:4f:89:3b:3c:57:d2:77:a3:63:bd:ed:c7:bd:c5: 6b:b8:37:b9:08:b8:ad:d7:69:b9:7a:b7:63:f2:88: 15:0e:34:44:47:96:3b:34:d3:e3:8b:cf:20:64:c7: d0:de:d2:04:f3:57:d3:8b:b8:3d:66:4f:d9:9e:8d: 7a:61:f7:1f:c3:47:10:89:50:39:cd:b1:ec:58:68: 38:ab:f0:ea:19:e6:1a:39:b1:8f:05:cf:a8:3d:8b: d2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:78:DE:B5:91:77:95:98:CF:4A:CF:FD:E2:47:DE:D7:AC:D4:81:93 X509v3 Authority Key Identifier: keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:90:5a:8a:3d:c4:fe:22:bf:1a:f7:00:c5:c1:a4:3f:15:59: fb:01:ad:2f:57:87:17:c8:0b:dc:fe:3d:e6:23:9d:0a:9b:e1: 51:d5:e8:9c:46:4e:3e:08:ce:d3:52:48:97:5d:cb:94:42:2e: 73:91:67:51:8d:3d:d3:53:06:41:2b:d3:f4:cb:48:f0:98:66: 30:a1:5b:e9:28:0c:40:06:5a:20:51:f7:51:95:e0:2b:a9:50: 09:2a:ba:b9:50:c2:f7:7e:13:2b:c1:c3:c6:dc:48:e9:f4:7a: 59:3f:7a:fa:f9:99:be:71:80:b8:45:68:95:57:53:39:23:3c: d0:11:a6:ec:90:6b:12:f1:f6:76:c9:01:ff:9b:a3:75:54:b0: 27:4c:2c:b9:b7:e1:3e:4f:06:95:e5:47:5f:37:09:b5:36:f0: 18:9b:c0:b4:59:3f:71:b0:5e:3d:eb:fb:69:02:cc:46:51:12: 66:aa:a9:85:d1:fb:99:d3:40:23:08:c0:0f:c3:ff:6c:8a:32: 62:f6:e0:25:37:58:72:75:30:37:a5:a9:24:36:63:42:db:a8: 19:eb:0e:7d:cb:6a:cc:11:cc:0d:0f:12:e7:b5:22:05:b5:7d: 53:dc:57:b9:33:25:9d:ea:f3:bd:95:1b:40:b6:75:a3:40:82: 3c:fc:7e:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy MzJCOUUxM0EwHhcNMjUwNDI0MjMyODU0WhcNMjUwNTAxMjMyODU0WjAYMRYwFAYD VQQDEw02ODBhYzkzNi00NzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVbEuGSF8RzehLaAdoR0s7W+MOPCCh+azhI+D4djYXXwpWPC0BUlm7IkSt8u CnwrJDkydiRhXPZ7yYwM/Uv1VSyZk0tEu/Ki7oAK+KQDbK230PvGRxa/Izu4WNVz hrjgnsGy8M63NLIxL9PLFlWMZaymsMpAONYO4nRSJoULSlEDTjKWnQ9kJOAi8gdJ 8XT/n49+4uLJEqFXbbxfdl9/wgrWPnZ2T4k7PFfSd6Njve3HvcVruDe5CLit12m5 erdj8ogVDjRER5Y7NNPji88gZMfQ3tIE81fTi7g9Zk/Zno16Yfcfw0cQiVA5zbHs WGg4q/DqGeYaObGPBc+oPYvS/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOd43rWR d5WYz0rP/eJH3tes1IGTMB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU1Mi82RjYwRjc3QzBCQ0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1K czgxSHhUYjhkSllqSzU0VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCikFqKPcT+Ir8a9wDFwaQ/FVn7Aa0vV4cXyAvc/j3mI50Km+FR1eic Rk4+CM7TUkiXXcuUQi5zkWdRjT3TUwZBK9P0y0jwmGYwoVvpKAxABlogUfdRleAr qVAJKrq5UML3fhMrwcPG3Ejp9HpZP3r6+Zm+cYC4RWiVV1M5IzzQEabskGsS8fZ2 yQH/m6N1VLAnTCy5t+E+TwaV5UdfNwm1NvAYm8C0WT9xsF496/tpAsxGURJmqqmF 0fuZ00AjCMAPw/9sijJi9uAlN1hydTA3pakkNmNC26gZ6w59y2rMEcwNDxLntSIF tX1T3Fe5MyWd6vO9lRtAtnWjQII8/H5O -----END CERTIFICATE-----Generated at Sat Apr 26 04:54:39 2025 by rpki-client