$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json) Hash identifier: GKNrt6wb93XgvqUKSjCxH4UD91SLcJlTKjMO7fiTDE8= Subject key identifier: 66:4C:00:94:6F:AE:15:16:D2:87:29:C2:63:F3:C7:34:96:C0:5C:34 Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Certificate serial: 0A35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft Manifest number: 0A2C Signing time: Tue 22 Jul 2025 20:01:44 +0000 Manifest this update: Tue 22 Jul 2025 20:01:44 +0000 Manifest next update: Tue 29 Jul 2025 20:01:44 +0000 Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: Lnyo/QH+r+pegcXN9c8VVWnqQ8YiBHUIaraz4JPEmLY=) 2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: c+KKdUiE40XaCCosVDJRN/ivdbzY7AEBYwh4rejWgD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 20:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2613 (0xa35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Validity Not Before: Jul 22 20:01:44 2025 GMT Not After : Jul 29 20:01:44 2025 GMT Subject: CN=687fee28-a73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:30:fd:37:58:93:69:c1:f1:3d:d2:da:0d:70: d0:98:17:1b:fa:c4:22:80:3d:c4:03:da:33:c3:a0: f9:18:42:54:27:74:11:a9:5d:ac:74:87:fb:d8:fe: d0:67:84:e5:6f:d0:ed:66:c5:90:e6:28:27:aa:03: 82:44:42:c0:3e:37:09:ba:79:0f:e5:c3:6b:50:0b: a1:4e:00:5c:a5:eb:d9:09:45:01:57:58:43:78:ba: 9e:4b:f6:6e:cf:01:8f:82:e6:a9:5d:e6:69:79:78: a8:b9:b8:85:e7:97:90:aa:75:32:b5:4f:98:76:75: b6:0e:cb:35:ad:c6:69:d1:ca:fc:25:f4:5d:b4:24: 62:00:b2:49:91:1b:c0:fb:8c:4f:d1:99:8b:e8:17: df:26:a9:e4:3b:ba:e9:01:4b:85:02:40:d4:fc:1c: 05:e8:03:49:84:8b:89:bf:3e:52:1f:7a:e8:9e:8b: 35:b7:75:da:3b:e5:65:c5:9a:57:a0:f9:a1:e2:82: 3b:b7:0d:03:08:15:bc:e1:10:a1:f3:1b:04:53:d7: 4c:5f:4e:bb:30:d6:79:78:20:2d:6d:49:58:1b:2e: ff:bf:76:af:14:5f:98:9a:cc:01:39:ae:f9:7d:9f: ca:93:06:ec:0a:9a:79:21:c6:df:f6:eb:2c:05:fe: 5e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4C:00:94:6F:AE:15:16:D2:87:29:C2:63:F3:C7:34:96:C0:5C:34 X509v3 Authority Key Identifier: keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e5:c9:ed:ec:aa:6a:3b:5c:7d:de:f1:d8:4c:93:0f:d7:53: e1:27:52:a7:7f:d1:f3:02:ec:0c:07:79:e0:1d:d4:98:ab:f1: 00:d4:80:4c:d9:a4:7c:5c:97:a0:5a:6e:3a:3a:89:71:09:74: 98:4a:ef:bd:8e:08:71:63:45:33:31:37:ea:56:82:fa:1f:9e: 8c:9f:31:ad:a4:77:32:1f:51:eb:6f:63:e6:35:2a:59:a2:70: 80:81:c8:54:b7:25:58:ec:19:79:87:08:d1:9f:05:23:94:70: 18:5a:d2:b0:d5:ab:12:2e:25:74:ab:f1:46:0d:ca:3d:2a:ff: 6a:06:e3:dc:be:5d:22:ff:b4:87:7d:e2:31:7f:bf:ac:61:51: 11:8e:bb:b4:64:b2:a2:84:4d:47:58:ca:ba:06:83:74:18:b5: cf:6a:92:f8:b9:7a:e7:1e:f5:b8:0a:23:5b:1e:31:ad:ad:b9: 26:b0:1f:75:66:dd:cf:b2:d0:b1:fe:68:0c:00:9a:53:55:e8: d8:d2:f8:2a:88:c3:13:28:f1:6e:ca:17:49:cc:50:7b:38:89: 3a:b7:f9:65:81:ce:60:36:7a:ab:36:d6:f7:19:46:7e:e3:53: 17:4b:2f:23:93:eb:6c:8b:e9:35:9d:1b:52:e8:6a:9a:45:24: 9d:60:69:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3 ODNFOEFDQkYwHhcNMjUwNzIyMjAwMTQ0WhcNMjUwNzI5MjAwMTQ0WjAYMRYwFAYD VQQDEw02ODdmZWUyOC1hNzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjD9N1iTacHxPdLaDXDQmBcb+sQigD3EA9ozw6D5GEJUJ3QRqV2sdIf72P7Q Z4Tlb9DtZsWQ5ignqgOCRELAPjcJunkP5cNrUAuhTgBcpevZCUUBV1hDeLqeS/Zu zwGPguapXeZpeXioubiF55eQqnUytU+YdnW2Dss1rcZp0cr8JfRdtCRiALJJkRvA +4xP0ZmL6BffJqnkO7rpAUuFAkDU/BwF6ANJhIuJvz5SH3ronos1t3XaO+VlxZpX oPmh4oI7tw0DCBW84RCh8xsEU9dMX067MNZ5eCAtbUlYGy7/v3avFF+YmswBOa75 fZ/KkwbsCpp5Icbf9ussBf5eAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZMAJRv rhUW0ocpwmPzxzSWwFw0MB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDc3QS9DODI4OTQzMjczRTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsx MmFXWGhwcktreDU0UG9yTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq5cnt7KpqO1x93vHYTJMP11PhJ1Knf9HzAuwMB3ngHdSYq/EA1IBM 2aR8XJegWm46OolxCXSYSu+9jghxY0UzMTfqVoL6H56MnzGtpHcyH1Hrb2PmNSpZ onCAgchUtyVY7Bl5hwjRnwUjlHAYWtKw1asSLiV0q/FGDco9Kv9qBuPcvl0i/7SH feIxf7+sYVERjru0ZLKihE1HWMq6BoN0GLXPapL4uXrnHvW4CiNbHjGtrbkmsB91 Zt3PstCx/mgMAJpTVejY0vgqiMMTKPFuyhdJzFB7OIk6t/llgc5gNnqrNtb3GUZ+ 41MXSy8jk+tsi+k1nRtS6GqaRSSdYGmo -----END CERTIFICATE-----Generated at Thu Jul 24 19:07:41 2025 by rpki-client