$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json) Hash identifier: o4ym6jxBP3bJoF06xukRc8upntHN7N+tEVMisyErIdI= Subject key identifier: B6:61:4A:FE:72:E6:19:93:70:0E:DF:39:9F:1C:7C:2C:B7:D9:E4:72 Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft Manifest number: 0509 Signing time: Fri 30 May 2025 23:51:20 +0000 Manifest this update: Fri 30 May 2025 23:51:20 +0000 Manifest next update: Fri 06 Jun 2025 23:51:20 +0000 Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: xTvKitO3Qv9Cqog69rdHa186UuK1a/W8jy3NwxsJk0g=) 2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: rVSuRgzwSSh8GvKjFbVO5KBlpGlmt2sbJHlM6WMDYjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5552, serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Validity Not Before: May 30 23:51:20 2025 GMT Not After : Jun 6 23:51:20 2025 GMT Subject: CN=683a4478-2c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:95:09:4d:a8:23:72:41:0c:f6:9a:79:97: 9f:14:03:78:2d:58:e4:82:ce:0b:a0:8f:36:1e:5f: f1:0b:e4:a7:f7:cf:ca:97:c8:ec:41:e2:d6:8a:92: 57:d9:02:fe:e3:1d:b2:d5:fd:93:19:f0:75:90:70: 7e:06:13:30:5c:e9:16:9d:78:ba:f4:e0:09:e7:ab: 85:36:c0:f0:a8:07:97:c6:9d:1d:82:57:22:1b:35: 36:ba:29:8d:ca:df:16:46:0b:36:f7:89:9a:9b:7b: e7:e6:d0:d6:a7:9c:e7:4a:eb:7f:93:b5:e8:01:c3: 80:48:4b:60:6c:06:a2:70:84:53:89:47:30:e2:03: 30:8e:ac:ab:c1:39:50:fb:4a:22:24:4d:e8:c6:2f: b3:1f:03:e1:e1:e5:2f:99:75:62:64:1a:40:79:c2: 64:00:b6:9f:f3:6a:b7:8e:a1:5e:15:0a:b9:60:b8: 28:62:56:d0:54:4c:75:46:0d:f9:32:ad:4f:7d:d6: a7:97:02:77:0a:1c:df:d3:5f:d6:f7:a7:ab:14:f9: b0:88:4d:da:20:42:bf:89:49:0b:dd:1e:b7:f7:4c: c1:f5:df:74:98:28:fd:a1:35:90:d8:ce:73:6b:2c: e4:96:05:98:d3:39:e8:7f:5b:c4:88:8f:c0:94:3b: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:61:4A:FE:72:E6:19:93:70:0E:DF:39:9F:1C:7C:2C:B7:D9:E4:72 X509v3 Authority Key Identifier: keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:78:0e:37:6b:32:8e:c5:92:9d:6d:26:20:c3:c4:96:3b:b4: 36:f6:d0:91:a3:bc:6f:d0:df:e7:4e:0e:73:ef:52:bc:0a:09: 55:44:7f:1a:07:4c:c5:80:29:78:a3:a3:d3:f3:e6:55:b5:25: 29:ee:a7:2f:48:5d:ec:b2:4a:71:22:a9:82:34:29:82:06:9f: c2:d2:ad:bb:c4:d4:70:de:3c:f1:dc:32:c2:02:d8:6a:70:71: e7:e3:f9:55:bb:de:98:37:59:e9:51:76:0a:95:9b:d4:48:8b: 6f:c1:1c:44:c2:3d:b6:6a:22:a9:ec:b6:da:a3:3b:f2:4f:c5: 90:20:c5:0e:7f:9d:66:90:d3:cc:d0:8b:a8:42:bf:07:13:1a: c0:d1:30:b6:f1:77:59:9a:e5:4d:24:c0:dd:f2:aa:f9:35:4c: 4e:15:52:5a:5a:35:a5:73:a0:3a:cc:06:39:f7:d9:b9:dd:04: d0:99:ba:5c:99:5e:35:fc:f9:f6:34:86:2b:8a:d8:ed:b8:4c: e2:0b:92:76:94:a2:f7:28:3e:82:55:e4:33:8b:28:3d:5d:4f: 0b:eb:58:f8:63:c9:54:c4:89:b4:db:a7:2b:e9:5c:d2:19:7a: 5f:1a:e5:a8:b2:d8:af:29:c2:99:9e:de:ff:a1:b2:55:a6:19: da:96:df:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy MzJCOUUxM0EwHhcNMjUwNTMwMjM1MTIwWhcNMjUwNjA2MjM1MTIwWjAYMRYwFAYD VQQDEw02ODNhNDQ3OC0yYzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQCVCU2oI3JBDPaaeZefFAN4LVjkgs4LoI82Hl/xC+Sn98/Kl8jsQeLWipJX 2QL+4x2y1f2TGfB1kHB+BhMwXOkWnXi69OAJ56uFNsDwqAeXxp0dglciGzU2uimN yt8WRgs294mam3vn5tDWp5znSut/k7XoAcOASEtgbAaicIRTiUcw4gMwjqyrwTlQ +0oiJE3oxi+zHwPh4eUvmXViZBpAecJkALaf82q3jqFeFQq5YLgoYlbQVEx1Rg35 Mq1PfdanlwJ3Chzf01/W96erFPmwiE3aIEK/iUkL3R6390zB9d90mCj9oTWQ2M5z ayzklgWY0znof1vEiI/AlDtYNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZhSv5y 5hmTcA7fOZ8cfCy32eRyMB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU1Mi82RjYwRjc3QzBCQ0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1K czgxSHhUYjhkSllqSzU0VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJeA43azKOxZKdbSYgw8SWO7Q29tCRo7xv0N/nTg5z71K8CglVRH8a B0zFgCl4o6PT8+ZVtSUp7qcvSF3sskpxIqmCNCmCBp/C0q27xNRw3jzx3DLCAthq cHHn4/lVu96YN1npUXYKlZvUSItvwRxEwj22aiKp7LbaozvyT8WQIMUOf51mkNPM 0IuoQr8HExrA0TC28XdZmuVNJMDd8qr5NUxOFVJaWjWlc6A6zAY599m53QTQmbpc mV41/Pn2NIYritjtuEziC5J2lKL3KD6CVeQziyg9XU8L61j4Y8lUxIm026cr6VzS GXpfGuWostivKcKZnt7/obJVphnalt/b -----END CERTIFICATE-----Generated at Sat May 31 16:30:30 2025 by rpki-client