$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json) Hash identifier: uXcPSa/AKj3rdWBRkfwglTtlC7pIZ+4jP5DsnH+Dlo8= Subject key identifier: F7:43:C7:86:14:88:DB:6A:41:CC:09:D2:E2:5E:F5:D1:42:94:4C:2D Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Certificate serial: 09FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft Manifest number: 09F4 Signing time: Fri 04 Apr 2025 20:02:34 +0000 Manifest this update: Fri 04 Apr 2025 20:02:34 +0000 Manifest next update: Fri 11 Apr 2025 20:02:34 +0000 Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: ad8Dj5M0MCzuKbzvWxo6JdSb9akpWfANro7dAdrka8c=) 2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: B2rzduRjtCAy1p3+thwY4jllEo5iIiCf0nMJPxn4OUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2556 (0x9fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D477A Validity Not Before: Apr 4 20:02:34 2025 GMT Not After : Apr 11 20:02:34 2025 GMT Subject: CN=67f03ada-5b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:6f:22:72:68:9b:67:59:1d:f9:4d:9c:62: d1:21:31:f1:83:be:4b:e9:d5:3b:04:d5:ac:61:23: 00:41:31:6d:77:6d:81:e4:a2:63:d7:10:91:32:11: 27:36:fd:12:cb:0a:5c:7a:be:82:90:39:fc:64:82: 29:91:c1:2a:6a:00:70:b0:a1:5f:34:55:bb:40:5c: ae:3a:78:66:bc:bd:0e:0a:d5:9f:b0:9d:2b:94:76: c5:b8:b1:bb:bb:80:22:8b:68:d6:5a:73:92:35:93: bd:96:bd:22:75:df:5c:2e:77:b5:dd:12:71:6d:1b: c0:ed:90:7a:1c:fe:d8:0c:8a:89:35:c2:45:4d:06: 9b:5d:e5:de:0f:1f:cf:e7:85:d3:a5:ac:92:18:30: f4:17:89:51:9b:2a:2b:44:ab:cd:a8:c1:f9:c3:c0: ae:4a:15:cf:db:09:77:0e:51:11:a6:fa:b1:e5:b4: 74:e2:dd:12:01:64:24:a8:c4:e6:33:82:f4:a3:41: c0:82:da:13:b8:b3:0a:e1:6f:57:44:ea:58:2d:a0: 78:d9:f7:5f:84:b3:35:27:24:ba:ea:3f:a7:8d:9c: fb:fc:92:eb:6e:b2:69:11:47:ba:ad:d2:ef:ab:41: 9c:01:35:33:a2:00:24:e3:c6:ef:4e:9b:2a:ec:42: 8b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:43:C7:86:14:88:DB:6A:41:CC:09:D2:E2:5E:F5:D1:42:94:4C:2D X509v3 Authority Key Identifier: keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:de:f6:7b:a9:ef:96:4b:72:c1:68:30:40:85:41:38:d1:a7: 06:bb:b2:ce:90:07:02:9c:02:f8:32:f8:69:53:08:65:1d:0f: 4a:7e:ab:99:54:26:86:4f:74:b8:3a:02:42:06:a1:6d:98:5b: 5f:7b:88:ea:2d:a7:25:ce:1f:93:15:e7:a2:53:c3:59:24:32: 61:f8:98:e0:22:3a:4f:64:be:e8:b7:c4:6c:99:e5:13:12:fe: a1:8d:ea:8a:23:48:3a:99:92:b4:16:f9:2b:a2:cc:45:d3:a7: 18:69:8b:72:86:44:de:6c:b7:fd:85:cc:09:a6:0d:35:16:23: bc:66:0e:5d:98:81:ef:b1:c0:5d:38:56:d4:d0:e7:87:a1:3d: 42:4d:8d:bb:e4:09:c3:c5:f3:75:57:76:0b:c1:f0:72:bf:03: ab:6e:9e:5d:27:29:03:1f:b0:29:e5:a1:de:bd:20:bd:75:02: d6:23:32:45:cb:b0:cb:1b:ec:87:a7:35:64:0c:ae:2d:20:98: 51:27:a0:df:5e:d0:14:7d:7b:91:87:16:88:48:bb:ee:01:57: d0:d3:13:46:09:9c:5b:44:3b:88:8b:a6:6b:68:75:c0:3d:af: 67:97:a1:a9:3a:3e:aa:31:d1:78:f5:ba:c2:40:c0:ab:fb:88: 99:c2:61:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3 ODNFOEFDQkYwHhcNMjUwNDA0MjAwMjM0WhcNMjUwNDExMjAwMjM0WjAYMRYwFAYD VQQDEw02N2YwM2FkYS01YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdBvInJom2dZHflNnGLRITHxg75L6dU7BNWsYSMAQTFtd22B5KJj1xCRMhEn Nv0Sywpcer6CkDn8ZIIpkcEqagBwsKFfNFW7QFyuOnhmvL0OCtWfsJ0rlHbFuLG7 u4Aii2jWWnOSNZO9lr0idd9cLne13RJxbRvA7ZB6HP7YDIqJNcJFTQabXeXeDx/P 54XTpaySGDD0F4lRmyorRKvNqMH5w8CuShXP2wl3DlERpvqx5bR04t0SAWQkqMTm M4L0o0HAgtoTuLMK4W9XROpYLaB42fdfhLM1JyS66j+njZz7/JLrbrJpEUe6rdLv q0GcATUzogAk48bvTpsq7EKLKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdDx4YU iNtqQcwJ0uJe9dFClEwtMB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDc3QS9DODI4OTQzMjczRTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsx MmFXWGhwcktreDU0UG9yTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk3vZ7qe+WS3LBaDBAhUE40acGu7LOkAcCnAL4MvhpUwhlHQ9KfquZ VCaGT3S4OgJCBqFtmFtfe4jqLaclzh+TFeeiU8NZJDJh+JjgIjpPZL7ot8RsmeUT Ev6hjeqKI0g6mZK0FvkrosxF06cYaYtyhkTebLf9hcwJpg01FiO8Zg5dmIHvscBd OFbU0OeHoT1CTY275AnDxfN1V3YLwfByvwOrbp5dJykDH7Ap5aHevSC9dQLWIzJF y7DLG+yHpzVkDK4tIJhRJ6DfXtAUfXuRhxaISLvuAVfQ0xNGCZxbRDuIi6ZraHXA Pa9nl6GpOj6qMdF49brCQMCr+4iZwmFR -----END CERTIFICATE-----Generated at Sat Apr 5 22:04:47 2025 by rpki-client