$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json) Hash identifier: 5Hi3O1JgAGZS57W8YcUlS9qiA8rL9ST+p2mToqQ9Yi0= Subject key identifier: 9D:3D:E3:7D:FA:9B:DF:27:0C:89:CA:55:3F:C8:2F:BC:1C:FA:9C:9D Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Certificate serial: 0505 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft Manifest number: 04FF Signing time: Thu 08 May 2025 23:29:28 +0000 Manifest this update: Thu 08 May 2025 23:29:27 +0000 Manifest next update: Thu 15 May 2025 23:29:27 +0000 Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: su2HFcbrBR3C7q3eA+ffpQssjQE9iW/XUgkjEGggz1U=) 2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: rVSuRgzwSSh8GvKjFbVO5KBlpGlmt2sbJHlM6WMDYjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 23:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1285 (0x505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5552, serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Validity Not Before: May 8 23:29:27 2025 GMT Not After : May 15 23:29:27 2025 GMT Subject: CN=681d3e58-fbb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:63:a3:28:82:ec:0f:e3:4c:1e:87:eb:d9:67: a5:1c:ce:d1:bc:d3:f6:a6:d0:67:c9:e8:0e:0d:65: ad:8b:b7:b9:a8:f2:c9:e2:fa:af:f0:b0:f6:b3:58: 8c:7a:c2:8f:8d:79:bf:cc:fb:85:bf:23:14:fa:3c: 4c:59:cb:33:c3:4d:41:2e:94:e1:3e:ae:79:ee:61: 24:b9:df:ef:db:4e:22:8a:be:be:7b:ed:29:22:98: 3c:08:d2:53:b8:24:d3:44:8d:bc:02:61:6d:f0:96: 84:5e:3b:4f:6f:91:0d:7e:7c:b1:3a:3f:c3:5c:d0: 73:51:c1:dd:50:33:8e:21:c6:47:3a:ab:b1:d7:a9: 4b:55:6d:ea:2b:44:65:19:63:4b:c2:2e:cd:80:d1: aa:74:c2:93:8f:fc:ab:f5:53:c4:62:85:ac:2e:c7: f5:c1:67:9b:2a:42:5b:32:87:ed:9b:8b:55:5b:3e: f2:9f:88:05:ca:43:b7:e8:49:e6:fb:65:77:4a:b3: 80:7a:58:3c:2d:ec:6b:b8:7f:af:0b:13:b1:48:d9: c3:c7:2d:25:cb:65:af:01:0e:75:cb:77:ff:71:8e: 08:02:4f:10:3f:e5:e2:9c:fd:a4:ab:0f:01:67:1a: 99:2a:58:7e:e6:e5:cd:19:46:51:24:b6:ce:ed:3c: 6c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3D:E3:7D:FA:9B:DF:27:0C:89:CA:55:3F:C8:2F:BC:1C:FA:9C:9D X509v3 Authority Key Identifier: keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b3:19:df:e9:f1:0c:78:3f:96:ea:af:2f:1e:cc:86:81:1b: 30:72:c4:14:a7:5a:3e:e0:8c:3d:d1:01:be:a0:e7:c6:df:ce: 81:fc:a5:eb:94:03:ce:04:cc:5f:98:68:30:15:f6:fc:8d:dc: 0a:f0:d1:69:8a:a7:32:7c:b4:f5:2f:c2:0d:f4:aa:67:eb:17: b9:43:d9:00:37:e1:9b:04:87:17:45:c6:79:58:01:c6:ba:c3: b8:5b:a6:92:37:d8:9d:cf:ba:05:5f:df:99:35:92:29:69:06: cb:ee:36:e3:3d:5f:65:05:33:8e:9d:24:d4:43:e3:c7:7e:62: 83:1a:8d:7c:b5:25:e8:2b:e9:6c:b9:3c:47:61:ee:60:a2:90: 86:91:07:33:9b:27:2d:36:22:2b:be:d9:c0:50:0b:df:50:40: f3:24:30:55:79:fe:66:45:00:98:e4:08:10:27:f4:d8:38:70: 24:5c:4e:af:dc:78:a3:4a:90:dd:c9:f2:28:28:4e:c9:17:46: 0f:c7:c3:70:5b:f5:2a:13:c4:b4:3e:fa:45:be:b5:37:71:c1: 72:e2:d2:10:c4:dc:44:05:d7:98:fe:a7:dd:91:b2:77:20:f0: 1b:b5:81:ba:e6:5f:ab:80:f0:17:3a:f8:8a:d4:f3:1b:ea:3d: 4c:ea:bd:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy MzJCOUUxM0EwHhcNMjUwNTA4MjMyOTI3WhcNMjUwNTE1MjMyOTI3WjAYMRYwFAYD VQQDEw02ODFkM2U1OC1mYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2OjKILsD+NMHofr2WelHM7RvNP2ptBnyegODWWti7e5qPLJ4vqv8LD2s1iM esKPjXm/zPuFvyMU+jxMWcszw01BLpThPq557mEkud/v204iir6+e+0pIpg8CNJT uCTTRI28AmFt8JaEXjtPb5ENfnyxOj/DXNBzUcHdUDOOIcZHOqux16lLVW3qK0Rl GWNLwi7NgNGqdMKTj/yr9VPEYoWsLsf1wWebKkJbMoftm4tVWz7yn4gFykO36Enm +2V3SrOAelg8LexruH+vCxOxSNnDxy0ly2WvAQ51y3f/cY4IAk8QP+XinP2kqw8B ZxqZKlh+5uXNGUZRJLbO7TxsoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ094336 m98nDInKVT/IL7wc+pydMB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU1Mi82RjYwRjc3QzBCQ0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1K czgxSHhUYjhkSllqSzU0VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMsxnf6fEMeD+W6q8vHsyGgRswcsQUp1o+4Iw90QG+oOfG386B/KXr lAPOBMxfmGgwFfb8jdwK8NFpiqcyfLT1L8IN9Kpn6xe5Q9kAN+GbBIcXRcZ5WAHG usO4W6aSN9idz7oFX9+ZNZIpaQbL7jbjPV9lBTOOnSTUQ+PHfmKDGo18tSXoK+ls uTxHYe5gopCGkQczmyctNiIrvtnAUAvfUEDzJDBVef5mRQCY5AgQJ/TYOHAkXE6v 3HijSpDdyfIoKE7JF0YPx8NwW/UqE8S0PvpFvrU3ccFy4tIQxNxEBdeY/qfdkbJ3 IPAbtYG65l+rgPAXOviK1PMb6j1M6r27 -----END CERTIFICATE-----Generated at Fri May 9 02:53:16 2025 by rpki-client