$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json) Hash identifier: lbalhL0B6f3Y6+KgEfpH3wjJ5Kd8j3l2EKukISBxoXQ= Subject key identifier: B7:BC:7A:00:34:E7:CD:30:B9:08:F6:A3:C0:84:A3:A8:4A:A7:90:CF Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Certificate serial: 04F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft Manifest number: 04EE Signing time: Fri 04 Apr 2025 23:50:09 +0000 Manifest this update: Fri 04 Apr 2025 23:50:08 +0000 Manifest next update: Fri 11 Apr 2025 23:50:08 +0000 Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: sVriudPxk75ev3nsfWXJ/bZtirGLaSC4a4I9dj2GbE0=) 2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: rVSuRgzwSSh8GvKjFbVO5KBlpGlmt2sbJHlM6WMDYjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5552 Validity Not Before: Apr 4 23:50:08 2025 GMT Not After : Apr 11 23:50:08 2025 GMT Subject: CN=67f07031-840a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:e3:23:e1:af:6e:e7:a5:17:e9:4f:27:aa: 75:f2:ca:63:65:4d:70:b2:e5:76:ce:e2:cc:f2:8e: b8:0f:94:6b:82:ae:60:97:6c:89:9d:00:7e:86:53: 5a:3b:ff:a5:60:f8:f5:8f:cd:58:fb:de:ce:40:f3: 10:34:0c:e4:64:72:19:ef:4d:a5:ab:da:52:cb:10: 47:7d:7b:92:8b:75:02:3f:28:3d:ba:60:56:a8:90: 07:41:30:45:00:3c:2a:72:46:9a:b8:68:fb:94:7a: 77:06:9e:1d:27:9e:ee:3f:76:85:2a:bd:0c:73:f9: e8:74:42:d9:96:ca:18:89:b0:1a:db:96:10:df:49: 32:0a:93:22:8a:89:58:23:1e:4f:b6:ce:66:16:03: 0b:91:6e:21:55:1d:b1:d8:fb:0f:1e:2c:70:8f:30: 69:32:be:0b:7b:45:f7:2a:7b:79:37:72:fe:73:25: f1:1f:16:3e:cf:63:80:82:33:95:9f:19:8b:0b:ee: c4:29:3c:88:2f:73:36:fb:f5:ab:ee:5b:a5:7e:9a: c8:bb:af:ce:32:0e:aa:cd:4f:bd:35:49:65:3c:81: b2:cc:f8:89:20:3f:7d:d8:83:7d:39:7a:3c:2f:1b: 4b:6d:1f:26:58:85:43:bd:84:cc:0c:f4:36:00:67: 55:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BC:7A:00:34:E7:CD:30:B9:08:F6:A3:C0:84:A3:A8:4A:A7:90:CF X509v3 Authority Key Identifier: keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:84:ea:38:be:30:61:4a:1a:72:06:c8:39:7a:80:7e:31:7a: 1d:6c:82:e4:bb:63:3e:16:83:fb:94:72:58:40:11:22:d3:4a: 3b:8b:f4:c4:94:52:ee:fd:e5:ad:a6:34:e7:9e:fc:3f:b4:52: 98:44:76:82:38:8f:ec:2b:d0:88:71:7f:d9:7d:78:18:c7:24: 35:c4:cd:c3:25:4a:c1:ba:95:18:5c:68:0f:39:15:3d:13:bf: 28:0a:40:a0:c5:12:5d:08:2c:3e:0e:35:9c:7c:a9:81:10:05: 1d:5c:19:84:a8:44:30:99:e3:60:d9:a8:88:4a:dd:65:78:91: aa:57:e7:2d:9e:87:ff:1a:be:01:19:fc:b2:3a:ed:c8:d4:e2: 23:91:fb:39:55:15:00:46:33:9b:c1:4b:1e:1d:6d:bc:81:70: 6e:e2:b3:d6:fe:56:77:e4:a9:19:33:0f:fc:74:0b:c5:af:be: cf:4e:68:e1:f2:74:5b:d6:64:38:a1:4f:c3:25:95:5e:9b:ea: 78:6c:6f:0b:ae:0b:14:50:b5:dc:37:91:96:3a:34:00:84:90: 07:f6:bb:1d:00:0a:f7:dc:d6:ef:6e:f6:ab:9e:a3:d8:57:df: 04:55:90:d7:b9:b3:ad:ab:89:71:68:be:b9:74:f5:23:98:7b: 6e:24:43:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy MzJCOUUxM0EwHhcNMjUwNDA0MjM1MDA4WhcNMjUwNDExMjM1MDA4WjAYMRYwFAYD VQQDEw02N2YwNzAzMS04NDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaHjI+GvbuelF+lPJ6p18spjZU1wsuV2zuLM8o64D5Rrgq5gl2yJnQB+hlNa O/+lYPj1j81Y+97OQPMQNAzkZHIZ702lq9pSyxBHfXuSi3UCPyg9umBWqJAHQTBF ADwqckaauGj7lHp3Bp4dJ57uP3aFKr0Mc/nodELZlsoYibAa25YQ30kyCpMiiolY Ix5Pts5mFgMLkW4hVR2x2PsPHixwjzBpMr4Le0X3Knt5N3L+cyXxHxY+z2OAgjOV nxmLC+7EKTyIL3M2+/Wr7lulfprIu6/OMg6qzU+9NUllPIGyzPiJID992IN9OXo8 LxtLbR8mWIVDvYTMDPQ2AGdVHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLe8egA0 580wuQj2o8CEo6hKp5DPMB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU1Mi82RjYwRjc3QzBCQ0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1K czgxSHhUYjhkSllqSzU0VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDhOo4vjBhShpyBsg5eoB+MXodbILku2M+FoP7lHJYQBEi00o7i/TE lFLu/eWtpjTnnvw/tFKYRHaCOI/sK9CIcX/ZfXgYxyQ1xM3DJUrBupUYXGgPORU9 E78oCkCgxRJdCCw+DjWcfKmBEAUdXBmEqEQwmeNg2aiISt1leJGqV+ctnof/Gr4B GfyyOu3I1OIjkfs5VRUARjObwUseHW28gXBu4rPW/lZ35KkZMw/8dAvFr77PTmjh 8nRb1mQ4oU/DJZVem+p4bG8LrgsUULXcN5GWOjQAhJAH9rsdAAr33NbvbvarnqPY V98EVZDXubOtq4lxaL65dPUjmHtuJEMv -----END CERTIFICATE-----Generated at Sun Apr 6 03:31:28 2025 by rpki-client