$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json) Hash identifier: qqB67kdy+9QZ29DRuyPNruq1dOIeZRY2szlj4oFxt2I= Subject key identifier: 2A:A0:60:56:80:AE:04:53:C9:E0:77:BE:C7:80:AE:3A:E0:DA:26:F9 Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Certificate serial: 0529 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft Manifest number: 0523 Signing time: Sun 20 Jul 2025 23:46:19 +0000 Manifest this update: Sun 20 Jul 2025 23:46:19 +0000 Manifest next update: Sun 27 Jul 2025 23:46:18 +0000 Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: pGy5GrI1+3CZQQMmWLJ6UE+wWjpRUVuzaL81ix7yG/U=) 2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: rVSuRgzwSSh8GvKjFbVO5KBlpGlmt2sbJHlM6WMDYjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1321 (0x529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5552, serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Validity Not Before: Jul 20 23:46:19 2025 GMT Not After : Jul 27 23:46:18 2025 GMT Subject: CN=687d7fcb-3230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:53:68:60:e1:1f:37:4b:0f:dc:a0:10:c1: 88:aa:f3:df:3e:ed:d2:5c:f4:6b:91:e4:04:d5:d9: 37:7d:ef:1b:de:9d:74:e7:24:df:59:7c:26:32:86: 68:fc:1a:de:c0:3a:d8:17:4c:e6:14:8f:9c:ca:01: c2:6e:8b:00:a9:7c:7d:15:fc:e9:c1:4a:67:87:d2: 89:e6:24:3d:ac:43:97:61:d6:04:ac:ce:cd:3e:c3: e3:b5:bb:2c:0f:34:fc:65:72:b6:b6:7f:c8:ed:b3: 89:61:f2:98:65:b0:fd:43:5b:e3:84:db:70:51:74: cf:4e:f3:29:79:a2:50:03:0f:ae:6c:0c:d4:10:a5: 9a:6e:45:41:5d:25:60:43:8e:60:1b:9a:27:1d:d2: 50:9d:6e:90:2c:e2:30:8f:d5:52:21:22:83:70:1b: d2:3c:d4:58:11:c8:8b:84:f5:fe:be:48:89:79:35: 59:04:e6:b5:16:5e:07:a3:87:97:fa:44:61:f5:44: 14:f7:00:6b:6c:d5:61:00:25:42:0a:22:d7:ca:7f: f1:21:8b:0a:6f:74:af:90:b3:90:e1:79:11:c6:81: 44:fd:6b:7c:c2:63:d4:ea:bd:00:ea:96:46:c6:a2: a7:5f:2d:1c:d4:cb:4f:4c:d5:ca:1c:38:2d:a5:be: 92:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A0:60:56:80:AE:04:53:C9:E0:77:BE:C7:80:AE:3A:E0:DA:26:F9 X509v3 Authority Key Identifier: keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:65:15:89:0f:a5:cd:fc:51:b1:9c:da:4b:92:72:dd:8a:bc: f7:dd:fa:e5:9a:6a:46:5a:73:f5:1e:70:e8:07:40:2a:c0:54: 0b:37:13:0f:73:39:45:c6:73:23:e4:f9:bb:9d:20:c0:26:c7: 30:54:64:8a:34:02:8f:a7:f2:7a:4d:07:e4:97:ed:e9:65:e0: 24:8e:f4:08:c1:5b:6d:b9:1e:52:d2:1b:3d:75:d4:74:60:f7: 9c:af:65:e1:4b:36:0b:f0:01:52:4a:8a:6d:11:79:4e:2d:0a: f7:bd:c5:86:94:5e:2d:36:bc:9d:9f:d2:bb:84:8b:b4:95:47: 9d:b2:e1:d5:bd:e5:76:0e:b7:f7:1d:53:4b:fd:d3:71:30:fa: f0:a2:3d:b1:3a:99:06:a7:6b:b6:ab:b5:da:75:34:95:8b:91: 48:10:59:fb:14:3c:84:bd:fa:95:b8:1c:61:32:2d:60:4f:0a: 01:f8:9e:35:87:57:33:93:cf:4c:e1:3e:3e:a7:51:66:d9:15: 78:58:79:5f:76:df:f5:6b:0c:80:eb:c9:b6:87:31:e4:70:ed: c0:3a:79:b9:47:a4:08:c0:4c:3f:9e:b9:19:e9:5a:87:4b:ac: 18:b5:1a:24:c3:2a:36:e8:f7:e6:2b:44:30:23:28:26:78:2c: d1:2a:df:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy MzJCOUUxM0EwHhcNMjUwNzIwMjM0NjE5WhcNMjUwNzI3MjM0NjE4WjAYMRYwFAYD VQQDEw02ODdkN2ZjYi0zMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnNTaGDhHzdLD9ygEMGIqvPfPu3SXPRrkeQE1dk3fe8b3p105yTfWXwmMoZo /BrewDrYF0zmFI+cygHCbosAqXx9FfzpwUpnh9KJ5iQ9rEOXYdYErM7NPsPjtbss DzT8ZXK2tn/I7bOJYfKYZbD9Q1vjhNtwUXTPTvMpeaJQAw+ubAzUEKWabkVBXSVg Q45gG5onHdJQnW6QLOIwj9VSISKDcBvSPNRYEciLhPX+vkiJeTVZBOa1Fl4Ho4eX +kRh9UQU9wBrbNVhACVCCiLXyn/xIYsKb3SvkLOQ4XkRxoFE/Wt8wmPU6r0A6pZG xqKnXy0c1MtPTNXKHDgtpb6SdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqgYFaA rgRTyeB3vseArjrg2ib5MB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU1Mi82RjYwRjc3QzBCQ0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1K czgxSHhUYjhkSllqSzU0VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUZRWJD6XN/FGxnNpLknLdirz33frlmmpGWnP1HnDoB0AqwFQLNxMP czlFxnMj5Pm7nSDAJscwVGSKNAKPp/J6TQfkl+3pZeAkjvQIwVttuR5S0hs9ddR0 YPecr2XhSzYL8AFSSoptEXlOLQr3vcWGlF4tNrydn9K7hIu0lUedsuHVveV2Drf3 HVNL/dNxMPrwoj2xOpkGp2u2q7XadTSVi5FIEFn7FDyEvfqVuBxhMi1gTwoB+J41 h1czk89M4T4+p1Fm2RV4WHlfdt/1awyA68m2hzHkcO3AOnm5R6QIwEw/nrkZ6VqH S6wYtRokwyo26PfmK0QwIygmeCzRKt80 -----END CERTIFICATE-----Generated at Mon Jul 21 05:47:06 2025 by rpki-client