$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json) Hash identifier: 84sULgICJ15dAEd7i13VgDEaEvOdcJlddzYX9715Ipg= Subject key identifier: 63:1E:B0:6D:70:A0:05:3C:A1:69:07:84:99:AF:6F:11:5C:3A:09:60 Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Certificate serial: 051F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft Manifest number: 0519 Signing time: Tue 01 Jul 2025 00:02:04 +0000 Manifest this update: Tue 01 Jul 2025 00:02:03 +0000 Manifest next update: Tue 08 Jul 2025 00:02:03 +0000 Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: PyupZkAdfG/5c78pmMzD7QdM4Ylg1AtXiSWSLMZwCvA=) 2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: rVSuRgzwSSh8GvKjFbVO5KBlpGlmt2sbJHlM6WMDYjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1311 (0x51f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5552, serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Validity Not Before: Jul 1 00:02:03 2025 GMT Not After : Jul 8 00:02:03 2025 GMT Subject: CN=6863257b-5a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a1:ad:86:51:6e:f2:e0:03:ee:bb:74:17:17: 2c:62:1e:f0:26:81:cf:09:00:e9:ce:6b:3d:4e:38: 40:04:af:1f:30:ea:36:72:09:b8:18:ff:9b:68:d2: 65:d0:7d:95:5e:6e:6c:a1:36:93:5d:7d:da:2c:3d: 11:03:f2:45:7f:d6:76:4f:0a:c1:32:d4:30:18:b9: 3a:d0:ca:9d:df:c8:94:a9:da:d4:ab:b4:62:47:20: 6a:e7:cf:e8:82:06:01:9c:5b:ca:32:85:c2:ed:0e: e7:96:62:48:4f:17:af:8d:c6:dc:ec:15:a8:8b:a3: 20:fc:2d:b9:51:44:cc:ed:38:46:56:2a:8b:c0:0d: 2c:e4:04:39:69:45:0f:e4:1a:55:7e:1c:43:1e:5a: 60:ec:a0:e8:c9:87:bd:f4:0a:19:84:d5:28:ed:c4: c2:6e:5d:5b:1d:20:dd:cc:74:97:ee:19:c9:ad:0f: 2c:3a:9d:5a:63:99:a7:b1:1a:2e:e6:ae:8b:6a:10: 26:7f:84:dd:8d:f1:bb:6d:32:16:58:65:0c:1e:8c: f6:09:65:91:66:31:25:22:a0:c5:d2:4f:f4:36:33: 68:f7:27:b7:5f:4c:3a:da:05:6e:e1:d3:9d:65:48: 61:35:a2:a3:02:f4:42:79:bf:3f:26:28:07:89:5c: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1E:B0:6D:70:A0:05:3C:A1:69:07:84:99:AF:6F:11:5C:3A:09:60 X509v3 Authority Key Identifier: keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:65:f7:d2:f7:ce:56:06:c8:57:07:4d:48:77:7d:86:74:2d: 7c:ad:7e:cd:c7:de:80:28:04:b4:8f:44:b1:86:5f:95:c4:19: 12:a9:f6:25:f9:6c:75:74:75:8c:6c:84:89:eb:30:1d:cb:96: c2:f8:e8:ee:a4:6d:a4:53:c1:85:cc:d9:4f:08:fe:da:e7:d0: 19:49:e1:8a:97:2c:46:f9:14:ff:79:d7:8b:b9:e8:22:77:1d: fd:0b:51:ef:e1:fc:d9:9b:cc:2d:9f:75:9e:6c:e5:d8:0a:54: 2f:d5:d3:22:9d:dc:00:8d:d2:cf:d3:fa:87:d0:e1:d1:03:88: ad:21:b4:2a:27:63:41:57:51:c1:9a:0e:76:92:ee:3a:ae:3d: 3c:3d:fb:c0:1d:01:4a:2b:6b:96:6b:15:11:14:8f:12:67:7b: 05:7b:e4:c5:38:8f:1e:45:13:36:f7:03:4e:3e:7c:9c:37:b4: 2e:61:80:de:37:67:a8:60:6b:04:96:4c:81:a6:dd:2c:b5:c8: 01:81:da:81:95:32:cc:15:b7:80:5f:e0:68:00:0a:be:ea:f4: fe:52:db:7b:10:2d:77:ae:e2:16:8c:8d:26:92:23:21:12:94: 57:61:23:cf:8e:3d:5a:ab:46:f6:ae:59:bd:d9:28:a2:64:fb: dc:82:bd:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy MzJCOUUxM0EwHhcNMjUwNzAxMDAwMjAzWhcNMjUwNzA4MDAwMjAzWjAYMRYwFAYD VQQDEw02ODYzMjU3Yi01YTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKGthlFu8uAD7rt0FxcsYh7wJoHPCQDpzms9TjhABK8fMOo2cgm4GP+baNJl 0H2VXm5soTaTXX3aLD0RA/JFf9Z2TwrBMtQwGLk60Mqd38iUqdrUq7RiRyBq58/o ggYBnFvKMoXC7Q7nlmJITxevjcbc7BWoi6Mg/C25UUTM7ThGViqLwA0s5AQ5aUUP 5BpVfhxDHlpg7KDoyYe99AoZhNUo7cTCbl1bHSDdzHSX7hnJrQ8sOp1aY5mnsRou 5q6LahAmf4TdjfG7bTIWWGUMHoz2CWWRZjElIqDF0k/0NjNo9ye3X0w62gVu4dOd ZUhhNaKjAvRCeb8/JigHiVxfIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMesG1w oAU8oWkHhJmvbxFcOglgMB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU1Mi82RjYwRjc3QzBCQ0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1K czgxSHhUYjhkSllqSzU0VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWZffS985WBshXB01Id32GdC18rX7Nx96AKAS0j0Sxhl+VxBkSqfYl +Wx1dHWMbISJ6zAdy5bC+OjupG2kU8GFzNlPCP7a59AZSeGKlyxG+RT/edeLuegi dx39C1Hv4fzZm8wtn3WebOXYClQv1dMindwAjdLP0/qH0OHRA4itIbQqJ2NBV1HB mg52ku46rj08PfvAHQFKK2uWaxURFI8SZ3sFe+TFOI8eRRM29wNOPnycN7QuYYDe N2eoYGsElkyBpt0stcgBgdqBlTLMFbeAX+BoAAq+6vT+Utt7EC13ruIWjI0mkiMh EpRXYSPPjj1aq0b2rlm92SiiZPvcgr1u -----END CERTIFICATE-----Generated at Tue Jul 1 05:29:00 2025 by rpki-client