$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json) Hash identifier: jkqlsJneA5oecNAHJZWL2qsuI8Pu1gxaWCY2zQVMGNc= Subject key identifier: 6A:48:C0:4E:6C:CF:6D:36:7A:A5:1D:4B:B6:BB:7F:4C:36:B8:60:64 Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft Manifest number: 052B Signing time: Tue 05 Aug 2025 00:00:05 +0000 Manifest this update: Tue 05 Aug 2025 00:00:04 +0000 Manifest next update: Tue 12 Aug 2025 00:00:04 +0000 Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: AK1ksVYWGLiGKSpXiiHDinUHWN6ZTyqlmxpoxUTgank=) 2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: rVSuRgzwSSh8GvKjFbVO5KBlpGlmt2sbJHlM6WMDYjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5552, serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Validity Not Before: Aug 5 00:00:04 2025 GMT Not After : Aug 12 00:00:04 2025 GMT Subject: CN=68914985-b1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f9:af:52:36:c3:a0:a0:bd:39:0e:2d:f1:fe: 56:35:a3:d6:24:f9:46:cd:b4:d1:8d:47:28:a3:60: 24:ce:e6:e3:76:45:d9:46:dc:80:cb:7f:c3:5e:ad: 87:26:64:98:59:40:c7:5c:9d:27:a2:10:d1:3a:ce: b2:ed:e5:ca:1d:6a:55:82:c9:16:35:e5:c6:e7:87: 55:33:50:59:29:20:fe:6a:ab:23:f8:8b:77:c6:48: a2:0c:5b:40:ab:04:6b:81:d3:93:14:08:61:94:4d: d0:e0:b7:01:23:06:4c:8b:f5:9d:7b:d2:e9:59:39: 1c:2e:a6:16:fc:ff:b6:cd:28:13:2f:35:c3:bd:56: 58:4e:2f:3f:da:ab:97:4f:68:0e:a8:5a:d4:36:68: 2a:fc:d4:9a:68:ae:ac:b6:e1:e4:95:59:32:b8:47: 27:b1:01:33:ed:48:86:dd:2b:91:11:2b:e1:de:ff: a6:a8:fe:83:04:54:49:d0:8c:1a:8d:d1:67:af:6a: d4:1c:99:36:a8:4c:27:6e:e9:e7:40:67:99:bc:41: d0:a1:2b:80:bb:82:02:c3:21:4b:f4:fe:6e:ad:e5: 74:62:b0:a6:90:de:60:51:99:7b:c2:2e:1f:22:65: c4:42:f7:03:f6:0a:60:62:bb:0b:9d:d2:50:59:ee: ab:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:48:C0:4E:6C:CF:6D:36:7A:A5:1D:4B:B6:BB:7F:4C:36:B8:60:64 X509v3 Authority Key Identifier: keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:51:2a:6b:85:47:0c:93:fd:2a:3f:f9:f8:53:4f:46:a2:f5: ea:10:78:bb:78:23:7c:99:67:2c:5e:49:c4:bc:6e:ee:3e:43: b8:2f:13:e6:50:c6:f0:e2:6b:fd:18:32:9d:ed:16:49:84:f9: a4:d3:9f:ae:93:48:1c:45:c5:e4:80:3e:82:86:c8:91:6b:51: d4:f2:44:84:da:cd:36:80:ed:d7:20:4b:40:2a:f1:0d:24:f1: 9a:9b:f7:24:51:c8:6a:f3:f6:16:d7:75:1e:09:79:e5:e5:36: f7:ff:06:3f:6c:af:05:ee:59:5e:eb:69:3f:d8:87:96:47:e7: 0f:06:a5:fb:8c:6f:f7:ff:da:f9:37:45:cd:6d:0f:c1:90:5f: b6:ad:11:f5:27:3e:2d:75:69:82:9f:99:ab:0f:ab:3b:20:1a: 9c:e8:24:55:64:4f:e3:39:97:aa:0f:5a:42:ab:a2:24:98:69: 1d:c2:a1:ca:a1:29:17:a5:62:07:24:92:39:7c:cd:d5:fd:fe: 57:5f:4d:35:59:da:48:fa:16:f4:5a:07:37:05:4a:b0:f3:b4: a5:5c:d7:8d:30:a4:08:d2:a8:cb:5b:1a:54:03:78:bf:29:c0: 8f:02:e5:dd:e8:05:83:87:a9:08:9c:f2:fe:90:ea:35:8a:8b: 3b:d1:bb:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy MzJCOUUxM0EwHhcNMjUwODA1MDAwMDA0WhcNMjUwODEyMDAwMDA0WjAYMRYwFAYD VQQDEw02ODkxNDk4NS1iMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPmvUjbDoKC9OQ4t8f5WNaPWJPlGzbTRjUcoo2AkzubjdkXZRtyAy3/DXq2H JmSYWUDHXJ0nohDROs6y7eXKHWpVgskWNeXG54dVM1BZKSD+aqsj+It3xkiiDFtA qwRrgdOTFAhhlE3Q4LcBIwZMi/Wde9LpWTkcLqYW/P+2zSgTLzXDvVZYTi8/2quX T2gOqFrUNmgq/NSaaK6stuHklVkyuEcnsQEz7UiG3SuRESvh3v+mqP6DBFRJ0Iwa jdFnr2rUHJk2qEwnbunnQGeZvEHQoSuAu4ICwyFL9P5ureV0YrCmkN5gUZl7wi4f ImXEQvcD9gpgYrsLndJQWe6rxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpIwE5s z202eqUdS7a7f0w2uGBkMB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU1Mi82RjYwRjc3QzBCQ0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1K czgxSHhUYjhkSllqSzU0VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1USprhUcMk/0qP/n4U09GovXqEHi7eCN8mWcsXknEvG7uPkO4LxPm UMbw4mv9GDKd7RZJhPmk05+uk0gcRcXkgD6ChsiRa1HU8kSE2s02gO3XIEtAKvEN JPGam/ckUchq8/YW13UeCXnl5Tb3/wY/bK8F7lle62k/2IeWR+cPBqX7jG/3/9r5 N0XNbQ/BkF+2rRH1Jz4tdWmCn5mrD6s7IBqc6CRVZE/jOZeqD1pCq6IkmGkdwqHK oSkXpWIHJJI5fM3V/f5XX001WdpI+hb0Wgc3BUqw87SlXNeNMKQI0qjLWxpUA3i/ KcCPAuXd6AWDh6kInPL+kOo1ios70bv7 -----END CERTIFICATE-----Generated at Wed Aug 6 14:06:11 2025 by rpki-client