$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json) Hash identifier: /GTtk7M5LtMmAXPocLWuI2ptnLjeG0BmQ3WO4gdIawg= Subject key identifier: 99:95:EC:41:60:FD:B3:C0:B2:3A:1A:86:06:8D:F8:B3:FC:93:AD:77 Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Certificate serial: 055E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft Manifest number: 0558 Signing time: Sun 02 Nov 2025 23:23:21 +0000 Manifest this update: Sun 02 Nov 2025 23:23:20 +0000 Manifest next update: Sun 09 Nov 2025 23:23:20 +0000 Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: gf7FVgUguIrNMuVVHMFZsNFOIJpYjZKxZcozEWUko/U=) 2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: rVSuRgzwSSh8GvKjFbVO5KBlpGlmt2sbJHlM6WMDYjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1374 (0x55e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5552, serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Validity Not Before: Nov 2 23:23:20 2025 GMT Not After : Nov 9 23:23:20 2025 GMT Subject: CN=6907e7e8-7b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:4c:1c:aa:e6:ad:a3:d1:d1:95:f1:37:ee: 4b:89:e8:23:2f:d0:0f:64:a6:0a:d0:13:ec:50:31: 8a:d2:aa:fa:3c:47:03:fc:8f:d7:9e:97:3e:28:31: de:ab:83:85:ee:16:a2:83:14:53:54:3c:7b:b3:3e: ee:7c:73:4c:28:7a:e8:a2:34:d9:43:fa:ff:96:b8: ce:56:5d:ef:61:5c:2c:48:14:aa:b8:dc:51:b4:43: 01:f3:c3:e2:0a:ed:cd:f3:9f:e5:af:12:95:34:26: 4d:58:07:b9:f6:a1:84:5c:30:5a:8c:9f:ba:be:30: c2:d4:69:28:cc:01:98:1b:f1:f1:58:e7:74:03:88: fc:e0:5a:df:59:0d:63:95:d1:f3:ee:f4:ad:e2:1a: 4c:72:72:e7:f7:81:9d:b7:b7:4c:8b:6b:16:5e:06: 5a:fb:ce:fb:2e:eb:9b:a2:90:ad:7a:3e:2f:0a:3d: e7:32:26:9f:40:2d:2d:18:c9:55:f5:dc:c6:68:b8: 2a:ca:10:ab:92:8f:d4:46:e7:a2:61:2d:61:9d:72: f4:34:19:3d:20:1c:f2:e0:7c:ed:5c:cc:2e:b9:af: 50:fe:42:e9:82:17:17:e8:5e:72:cc:a6:5a:fa:14: 0a:3e:34:b3:7e:c4:ad:3f:38:3d:ac:b6:76:3b:ab: 4a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:95:EC:41:60:FD:B3:C0:B2:3A:1A:86:06:8D:F8:B3:FC:93:AD:77 X509v3 Authority Key Identifier: keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b2:38:87:f3:fb:08:34:9b:e7:a2:7f:67:f1:03:fc:0a:c5: 16:23:42:1b:c0:ee:d5:ce:14:33:81:21:d0:74:c2:b3:94:1d: 78:24:0b:2f:d9:3c:23:8f:98:df:e9:96:52:41:7a:12:29:b0: 4c:b4:8e:40:8e:6c:e5:0c:36:b1:c0:5a:56:3b:c7:78:95:aa: aa:72:ee:ba:a3:28:a9:7a:82:1f:b1:23:87:5a:6d:9e:c7:dd: d3:84:7f:1b:cd:0e:67:21:3d:25:97:91:cd:10:c0:11:08:08: d9:8d:0f:75:41:89:49:68:a3:57:a3:80:f3:18:f5:b9:33:0b: fe:1a:68:54:03:da:35:08:28:9e:d0:8f:fb:d5:5c:2a:4b:d5: f0:b8:cc:a1:3e:00:d5:f4:12:41:ed:aa:24:13:30:0a:f5:b4: 51:0e:4b:cf:50:ff:19:81:35:a6:47:b8:4c:8c:8b:f0:9a:64: 70:80:91:70:ba:7b:95:4b:e7:7e:f5:cc:6a:0b:56:4f:41:6f: 02:ad:7b:d5:8f:ba:12:1f:89:6b:ff:58:dd:f6:d6:b3:be:c3: 72:bf:de:f2:d2:e3:16:1e:e4:12:78:81:72:55:33:fa:31:ee: 43:38:b3:7d:64:c9:ef:52:c2:a4:90:cb:d8:b9:b3:af:d2:73: a0:9c:27:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy MzJCOUUxM0EwHhcNMjUxMTAyMjMyMzIwWhcNMjUxMTA5MjMyMzIwWjAYMRYwFAYD VQQDEw02OTA3ZTdlOC03YjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv59MHKrmraPR0ZXxN+5LiegjL9APZKYK0BPsUDGK0qr6PEcD/I/Xnpc+KDHe q4OF7haigxRTVDx7sz7ufHNMKHroojTZQ/r/lrjOVl3vYVwsSBSquNxRtEMB88Pi Cu3N85/lrxKVNCZNWAe59qGEXDBajJ+6vjDC1GkozAGYG/HxWOd0A4j84FrfWQ1j ldHz7vSt4hpMcnLn94Gdt7dMi2sWXgZa+877LuubopCtej4vCj3nMiafQC0tGMlV 9dzGaLgqyhCrko/URueiYS1hnXL0NBk9IBzy4HztXMwuua9Q/kLpghcX6F5yzKZa +hQKPjSzfsStPzg9rLZ2O6tKrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmV7EFg /bPAsjoahgaN+LP8k613MB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU1Mi82RjYwRjc3QzBCQ0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1K czgxSHhUYjhkSllqSzU0VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAsjiH8/sINJvnon9n8QP8CsUWI0IbwO7VzhQzgSHQdMKzlB14JAsv 2Twjj5jf6ZZSQXoSKbBMtI5AjmzlDDaxwFpWO8d4laqqcu66oyipeoIfsSOHWm2e x93ThH8bzQ5nIT0ll5HNEMARCAjZjQ91QYlJaKNXo4DzGPW5Mwv+GmhUA9o1CCie 0I/71VwqS9XwuMyhPgDV9BJB7aokEzAK9bRRDkvPUP8ZgTWmR7hMjIvwmmRwgJFw unuVS+d+9cxqC1ZPQW8CrXvVj7oSH4lr/1jd9tazvsNyv97y0uMWHuQSeIFyVTP6 Me5DOLN9ZMnvUsKkkMvYubOv0nOgnCea -----END CERTIFICATE-----Generated at Tue Nov 4 08:28:03 2025 by rpki-client