$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft File: Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft (raw, json) Hash identifier: o1wzZgmmYj1t6s7osh4KsyALeYBQBPnjWOz1/iYskHY= Subject key identifier: 04:68:24:8F:24:A6:35:88:69:FE:E1:F2:13:B8:4B:DB:3C:FD:94:9F Authority key identifier: 12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA Certificate issuer: /CN=A916DFDD/serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft Manifest number: 2E Signing time: Fri 05 Sep 2025 08:13:43 +0000 Manifest this update: Fri 05 Sep 2025 08:13:42 +0000 Manifest next update: Fri 12 Sep 2025 08:13:42 +0000 Files and hashes: 1: Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl (hash: DvvZm5LbrJVwX/vuuVcKlB7TaD5YMWy3aJUIVkPacfI=) 2: 780B9CF8867811F0AA0D2534C4F9AE02.roa (hash: X3bLg+wYV1t3tD4gl+ObUUyr463NoOxUyC03tZzeKjA=) 3: 78817658867811F0AA0D2534C4F9AE02.roa (hash: XWnPSEphd3JYQ8zrDoJg7cr7D+uDeG7GtgQZULFil08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DFDD, serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA Validity Not Before: Sep 5 08:13:42 2025 GMT Not After : Sep 12 08:13:42 2025 GMT Subject: CN=68ba9bb6-fb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ff:29:90:e7:fd:bf:9c:b7:ce:57:b8:03:c5: 94:ac:a0:75:c5:c4:31:4d:1a:67:a9:9c:e0:17:cc: b7:20:00:16:f2:a0:0e:76:97:27:98:8b:a9:fc:2e: 76:1c:81:37:cb:1b:04:3a:bb:4c:1d:7d:bf:f6:24: 71:60:89:45:29:41:cc:49:a8:74:2a:5d:5e:57:df: 17:c4:d1:86:57:7f:91:94:4f:55:0f:a0:03:7c:eb: 40:5b:22:27:b1:bb:3e:0c:b5:2f:3a:c9:e3:7a:72: 24:7c:5d:b3:bd:8c:7c:92:44:8a:51:d8:de:db:b9: 76:53:1f:f9:51:e3:a7:9c:86:e8:29:bf:96:f9:ce: 59:ec:23:e5:38:c1:71:54:5c:91:81:71:1f:9d:db: 16:6a:44:11:e6:d1:8f:bb:0d:06:1b:be:e3:20:b7: 64:0a:8c:e7:e7:4b:26:d4:ce:d9:dd:e9:1b:fc:64: 3f:45:b2:b5:b3:52:c9:78:95:b3:d3:13:8e:11:c8: 1e:c0:82:2a:7e:2d:db:08:e5:28:6d:4d:c1:32:ed: bf:1e:7e:ee:05:3a:1c:04:24:4d:58:90:33:73:e9: 5a:e2:76:01:7c:a2:f9:17:d7:90:c3:df:4f:8a:cc: 20:4d:0a:e2:b0:46:94:d7:70:ec:7d:c2:05:a6:d9: 9e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:24:8F:24:A6:35:88:69:FE:E1:F2:13:B8:4B:DB:3C:FD:94:9F X509v3 Authority Key Identifier: keyid:12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6e:0e:10:4c:cf:e7:f5:6a:7f:de:df:48:f1:dd:ca:61:6c: 1f:2e:9d:07:94:1a:b9:c4:a9:81:a4:b0:7b:2f:37:4e:cc:4a: f2:8b:a9:1c:e9:e3:13:2a:f7:31:3f:2a:a0:0c:e0:ca:a6:28: 98:4e:db:c3:4e:b2:4e:32:d2:92:88:c7:77:6d:1e:78:cd:2d: d1:4e:56:96:cb:72:49:d5:bb:a1:65:9d:75:c4:44:f8:1e:60: 5e:56:f4:23:43:06:65:da:a7:55:93:86:30:40:7a:79:8c:41: 1e:e9:46:e1:f7:0f:84:3d:84:d7:e1:a5:9c:ef:59:86:7b:31: 22:c7:26:66:f5:12:45:66:fe:3a:b1:ed:39:c9:f3:ac:11:fe: 29:32:84:88:ca:31:76:f5:99:74:4f:89:49:92:ec:96:f8:c7: cc:b8:35:e4:d4:40:e8:2c:47:09:d3:44:60:56:64:e9:6d:61: c6:42:32:0c:9c:2d:39:aa:05:04:a1:fa:88:6a:10:12:23:21: 04:15:93:75:de:a7:47:b9:0d:4b:bb:bc:0c:1e:ab:17:c8:fc: 8a:0c:89:60:46:35:c1:89:d4:12:8b:12:ac:15:ef:24:1e:39: 91:3c:a9:0f:1f:6c:b1:b6:52:e0:57:21:3c:8f:fd:62:02:37: 76:aa:10:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REZERDExMC8GA1UEBRMoMTI1OUJGMkNFMkUxNkVERTRCQjY1NTkxMzA0MTgxNTU2 MTRCQTNFQTAeFw0yNTA5MDUwODEzNDJaFw0yNTA5MTIwODEzNDJaMBgxFjAUBgNV BAMTDTY4YmE5YmI2LWZiNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS/ymQ5/2/nLfOV7gDxZSsoHXFxDFNGmepnOAXzLcgABbyoA52lyeYi6n8LnYc gTfLGwQ6u0wdfb/2JHFgiUUpQcxJqHQqXV5X3xfE0YZXf5GUT1UPoAN860BbIiex uz4MtS86yeN6ciR8XbO9jHySRIpR2N7buXZTH/lR46echugpv5b5zlnsI+U4wXFU XJGBcR+d2xZqRBHm0Y+7DQYbvuMgt2QKjOfnSybUztnd6Rv8ZD9FsrWzUsl4lbPT E44RyB7Agip+LdsI5ShtTcEy7b8efu4FOhwEJE1YkDNz6VridgF8ovkX15DD30+K zCBNCuKwRpTXcOx9wgWm2Z7fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBGgkjySm NYhp/uHyE7hL2zz9lJ8wHwYDVR0jBBgwFoAUElm/LOLhbt5LtlWRMEGBVWFLo+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERkRELzk3RUUwQUMwNEE5 MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1THRsV1JNRUdCVldGTG8t by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWxtX0xPTGhidDVMdGxXUk1FR0JWV0ZMby1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RkRELzk3RUUwQUMwNEE5MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1 THRsV1JNRUdCVldGTG8tby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJuDhBMz+f1an/e30jx3cphbB8unQeUGrnEqYGksHsvN07MSvKLqRzp 4xMq9zE/KqAM4MqmKJhO28NOsk4y0pKIx3dtHnjNLdFOVpbLcknVu6FlnXXERPge YF5W9CNDBmXap1WThjBAenmMQR7pRuH3D4Q9hNfhpZzvWYZ7MSLHJmb1EkVm/jqx 7TnJ86wR/ikyhIjKMXb1mXRPiUmS7Jb4x8y4NeTUQOgsRwnTRGBWZOltYcZCMgyc LTmqBQSh+ohqEBIjIQQVk3Xep0e5DUu7vAweqxfI/IoMiWBGNcGJ1BKLEqwV7yQe OZE8qQ8fbLG2UuBXITyP/WICN3aqEKM= -----END CERTIFICATE-----Generated at Sat Sep 6 21:09:09 2025 by rpki-client