$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft File: Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft (raw, json) Hash identifier: ioo9azl8aTbQKenBLuPXTyjHbgtVdoxzGodgZ5yN4II= Subject key identifier: B9:E9:97:F0:BF:AF:D1:88:D4:4A:02:9F:EB:09:A8:AB:E5:EF:D1:70 Authority key identifier: 12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA Certificate issuer: /CN=A916DFDD/serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft Manifest number: 0A Signing time: Tue 01 Jul 2025 08:56:29 +0000 Manifest this update: Tue 01 Jul 2025 08:56:28 +0000 Manifest next update: Tue 08 Jul 2025 08:56:28 +0000 Files and hashes: 1: Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl (hash: JBuBsfJb/7RsVlWblAaxoiyiG0wecifjtg84uFrGU8s=) 2: 3D44173A4A9111F085C19317C4F9AE02.roa (hash: FwH/enA0/FsCkLYjV+LnJ4sOG3fwQvbOVp0WkLtMY2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DFDD, serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA Validity Not Before: Jul 1 08:56:28 2025 GMT Not After : Jul 8 08:56:28 2025 GMT Subject: CN=6863a2bc-6bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:ba:8a:e9:2f:49:a6:2d:51:a0:53:36:da: ce:02:13:52:38:ae:5e:b4:39:85:8d:9e:06:d9:9a: a0:05:9a:8f:7c:ad:0c:f7:7c:39:ab:0d:29:4f:28: a1:72:9d:9f:86:c5:d4:d8:dd:83:ba:0e:6d:3a:88: 02:69:f4:30:32:42:61:6a:94:05:22:f5:7e:45:7b: af:95:a9:12:05:70:b0:8b:73:8d:91:74:69:0a:29: 08:fd:ac:82:f3:64:63:bc:3b:e1:37:fa:00:df:67: 2a:63:45:88:c3:43:c4:e8:90:42:5c:b6:76:b9:91: 5d:3c:c0:ae:09:70:b8:9b:f8:ba:03:1f:ea:68:f7: 3b:01:df:a0:e6:e3:36:c0:83:b8:ea:b7:35:7c:18: 51:1b:c2:99:47:f3:a0:8f:d6:01:5d:3b:97:53:e5: bf:56:e3:25:6b:d4:eb:2e:18:01:fc:55:8f:58:3c: d2:a8:c6:54:e4:47:78:22:58:a0:f3:11:fb:ad:9a: 47:75:24:c0:75:9e:8d:77:91:41:aa:9f:73:92:89: ac:67:20:ff:2c:b4:60:4e:76:a4:ca:23:cc:07:8a: 3c:b3:b3:c3:22:75:35:c6:3b:66:9d:13:17:48:24: 27:19:6b:87:20:82:92:f8:f5:a5:c9:03:c0:30:c8: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E9:97:F0:BF:AF:D1:88:D4:4A:02:9F:EB:09:A8:AB:E5:EF:D1:70 X509v3 Authority Key Identifier: keyid:12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ce:bc:4b:b4:37:2f:6e:f8:dd:e1:d0:94:4d:33:c2:4a:4a: d1:8f:30:4a:24:79:e9:7a:d6:fe:af:ba:9a:c2:33:ef:68:12: 8f:8d:73:b8:97:c2:45:76:a1:29:ce:38:4b:fa:be:5d:85:a8: 1f:ce:16:71:34:73:08:7f:48:1c:2b:28:61:e5:f1:e9:fc:48: fe:93:98:1e:bb:50:4a:cc:ec:0b:0a:9d:af:a5:e7:21:1e:51: 0e:55:1d:78:23:47:22:8a:ad:29:cd:0e:93:cc:b0:2b:8b:0b: 07:3b:8f:07:d7:fc:5c:4f:cf:f6:16:78:d5:92:2a:9a:d1:c5: b4:4e:c9:bf:b8:23:5f:89:63:3f:26:43:39:63:03:4f:07:db: f3:ec:a8:73:90:51:50:a7:e6:20:1b:37:4f:9e:0a:cc:28:03: 8a:36:76:f5:a7:2a:17:ef:df:d9:8b:03:8d:69:5e:43:37:71: a6:36:00:3b:42:c6:f9:97:56:53:49:98:f6:de:6c:ab:9f:49: b3:67:fe:d4:df:f8:e3:52:d4:2a:1e:44:94:6f:6a:f8:6a:7d: 97:38:f3:54:63:a7:56:b8:cc:79:cf:23:ab:5d:4d:ae:a9:5b: 6e:aa:8c:f1:b7:51:10:38:53:36:75:75:7f:d7:2d:68:91:82: 6d:cf:dd:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REZERDExMC8GA1UEBRMoMTI1OUJGMkNFMkUxNkVERTRCQjY1NTkxMzA0MTgxNTU2 MTRCQTNFQTAeFw0yNTA3MDEwODU2MjhaFw0yNTA3MDgwODU2MjhaMBgxFjAUBgNV BAMTDTY4NjNhMmJjLTZiZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHPLqK6S9Jpi1RoFM22s4CE1I4rl60OYWNngbZmqAFmo98rQz3fDmrDSlPKKFy nZ+GxdTY3YO6Dm06iAJp9DAyQmFqlAUi9X5Fe6+VqRIFcLCLc42RdGkKKQj9rILz ZGO8O+E3+gDfZypjRYjDQ8TokEJctna5kV08wK4JcLib+LoDH+po9zsB36Dm4zbA g7jqtzV8GFEbwplH86CP1gFdO5dT5b9W4yVr1OsuGAH8VY9YPNKoxlTkR3giWKDz Efutmkd1JMB1no13kUGqn3OSiaxnIP8stGBOdqTKI8wHijyzs8MidTXGO2adExdI JCcZa4cggpL49aXJA8AwyENzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuemX8L+v 0YjUSgKf6wmoq+Xv0XAwHwYDVR0jBBgwFoAUElm/LOLhbt5LtlWRMEGBVWFLo+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERkRELzk3RUUwQUMwNEE5 MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1THRsV1JNRUdCVldGTG8t by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWxtX0xPTGhidDVMdGxXUk1FR0JWV0ZMby1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RkRELzk3RUUwQUMwNEE5MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1 THRsV1JNRUdCVldGTG8tby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJzOvEu0Ny9u+N3h0JRNM8JKStGPMEokeel61v6vuprCM+9oEo+Nc7iX wkV2oSnOOEv6vl2FqB/OFnE0cwh/SBwrKGHl8en8SP6TmB67UErM7AsKna+l5yEe UQ5VHXgjRyKKrSnNDpPMsCuLCwc7jwfX/FxPz/YWeNWSKprRxbROyb+4I1+JYz8m QzljA08H2/PsqHOQUVCn5iAbN0+eCswoA4o2dvWnKhfv39mLA41pXkM3caY2ADtC xvmXVlNJmPbebKufSbNn/tTf+ONS1CoeRJRvavhqfZc481Rjp1a4zHnPI6tdTa6p W26qjPG3URA4UzZ1dX/XLWiRgm3P3Vc= -----END CERTIFICATE-----Generated at Wed Jul 2 13:20:39 2025 by rpki-client