$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json) Hash identifier: gS4dd1B4iJnyXacn47vgDboE3q51QT800vSCI+AFsMI= Subject key identifier: 9A:B6:86:95:B0:74:B0:AF:B0:84:0E:DA:93:4D:18:99:D7:44:7B:5F Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Certificate serial: 0548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft Manifest number: 0542 Signing time: Thu 18 Sep 2025 23:49:02 +0000 Manifest this update: Thu 18 Sep 2025 23:49:01 +0000 Manifest next update: Thu 25 Sep 2025 23:49:01 +0000 Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: YAJUwk/jYqawVLUXg8jaXX6OuNjMgN1ei+TF5T/ZAI0=) 2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: rVSuRgzwSSh8GvKjFbVO5KBlpGlmt2sbJHlM6WMDYjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1352 (0x548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5552, serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Validity Not Before: Sep 18 23:49:01 2025 GMT Not After : Sep 25 23:49:01 2025 GMT Subject: CN=68cc9a6d-b11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e4:bb:4c:e2:42:f9:d9:70:f2:cf:79:0d:7e: 7c:15:1c:c8:06:a8:2d:2e:fe:6c:8d:7b:67:a0:90: 3d:3a:6d:67:aa:ae:ce:85:45:eb:ba:cb:ba:b7:0f: 90:34:de:92:6f:3a:51:8b:8a:74:1f:23:3b:1f:51: b2:28:91:7d:9a:28:a6:93:81:dc:d2:41:27:e6:b5: 00:8e:ab:f1:24:a6:09:d3:b8:58:0e:b3:3a:08:90: 47:d2:6f:84:ab:10:a1:4d:f8:c0:2a:47:bb:96:b5: ff:28:a4:3d:2e:c6:1a:26:77:bc:e2:99:50:16:1d: 40:73:57:28:f2:19:6d:f0:7e:f7:04:21:8c:d6:2c: f9:58:d9:90:3a:1c:3c:0c:a4:38:39:72:a8:84:9f: b2:1e:f4:9e:22:8a:74:7b:2a:db:d5:ad:cc:11:1a: 59:0d:bf:1d:6b:df:9b:37:5a:c8:d1:5b:b3:bf:54: b3:a4:64:e9:4d:d2:03:67:ef:8f:17:48:31:42:6e: 1e:e8:91:04:4a:cc:27:b0:55:d4:dd:11:cb:fe:5e: 2b:7b:dd:17:2b:6a:78:b4:22:62:09:35:9a:33:0e: 2a:b1:90:30:71:96:09:c4:72:31:43:76:0d:6b:00: 58:c4:e3:22:99:28:ab:a1:2d:15:b7:1b:19:b0:2b: 70:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B6:86:95:B0:74:B0:AF:B0:84:0E:DA:93:4D:18:99:D7:44:7B:5F X509v3 Authority Key Identifier: keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4c:01:c9:63:47:62:3d:5b:42:e1:38:7e:92:2f:ce:7f:e9: 37:ab:f0:b8:67:0e:d6:7c:4e:a2:8c:40:b8:9a:81:5b:1b:43: b7:fe:88:ee:0a:35:33:a3:06:55:24:f7:b5:1f:92:76:99:a3: d4:b0:5e:a0:b0:da:c5:01:87:c0:bd:5d:91:02:33:b8:f9:40: e5:ad:f8:e1:ec:a0:b9:28:6c:c8:f3:e5:bd:76:9e:98:35:8a: 0a:c1:20:69:be:31:5a:8a:f9:28:be:04:bc:6c:25:0f:60:d7: 5e:81:a4:70:3d:5e:d9:27:dd:33:c4:db:dc:7a:12:39:cf:f3: 79:39:20:eb:9a:fc:cb:ed:3f:43:d3:b3:ea:e5:75:7c:cd:15: 72:9f:e9:7b:06:13:e1:e2:46:24:69:19:e3:93:22:00:89:29: ba:03:61:fb:fd:8b:9b:b6:e9:e6:49:d8:f0:d1:4f:e6:87:bf: 8a:71:98:2b:0f:20:fa:64:40:99:76:75:de:cf:12:1a:a8:26: 76:db:34:7d:ae:9f:7d:fd:36:fd:45:a5:e5:d5:ea:4e:01:5d: a7:4c:d4:b2:fd:8f:df:e5:8d:2c:61:f0:fd:9f:4e:51:f9:d8: 36:29:3d:0c:32:f3:f6:d7:f3:f9:32:f5:93:4a:7d:d2:e0:4a: 73:a0:22:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy MzJCOUUxM0EwHhcNMjUwOTE4MjM0OTAxWhcNMjUwOTI1MjM0OTAxWjAYMRYwFAYD VQQDEw02OGNjOWE2ZC1iMTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuS7TOJC+dlw8s95DX58FRzIBqgtLv5sjXtnoJA9Om1nqq7OhUXrusu6tw+Q NN6SbzpRi4p0HyM7H1GyKJF9miimk4Hc0kEn5rUAjqvxJKYJ07hYDrM6CJBH0m+E qxChTfjAKke7lrX/KKQ9LsYaJne84plQFh1Ac1co8hlt8H73BCGM1iz5WNmQOhw8 DKQ4OXKohJ+yHvSeIop0eyrb1a3MERpZDb8da9+bN1rI0Vuzv1SzpGTpTdIDZ++P F0gxQm4e6JEESswnsFXU3RHL/l4re90XK2p4tCJiCTWaMw4qsZAwcZYJxHIxQ3YN awBYxOMimSiroS0VtxsZsCtwsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq2hpWw dLCvsIQO2pNNGJnXRHtfMB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU1Mi82RjYwRjc3QzBCQ0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1K czgxSHhUYjhkSllqSzU0VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcTAHJY0diPVtC4Th+ki/Of+k3q/C4Zw7WfE6ijEC4moFbG0O3/oju CjUzowZVJPe1H5J2maPUsF6gsNrFAYfAvV2RAjO4+UDlrfjh7KC5KGzI8+W9dp6Y NYoKwSBpvjFaivkovgS8bCUPYNdegaRwPV7ZJ90zxNvcehI5z/N5OSDrmvzL7T9D 07Pq5XV8zRVyn+l7BhPh4kYkaRnjkyIAiSm6A2H7/YubtunmSdjw0U/mh7+KcZgr DyD6ZECZdnXezxIaqCZ22zR9rp99/Tb9RaXl1epOAV2nTNSy/Y/f5Y0sYfD9n05R +dg2KT0MMvP21/P5MvWTSn3S4EpzoCLh -----END CERTIFICATE-----Generated at Fri Sep 19 03:52:44 2025 by rpki-client