$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json) Hash identifier: oDs+n/X1e7bdqS4nfiHtoyrJll5LkOdmF7CidG8/ewQ= Subject key identifier: 9C:D8:CF:C3:E8:FC:DC:CD:24:75:FB:F4:F1:E2:68:BB:E6:12:86:E9 Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Certificate serial: 0A53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft Manifest number: 0A4A Signing time: Thu 18 Sep 2025 19:56:44 +0000 Manifest this update: Thu 18 Sep 2025 19:56:44 +0000 Manifest next update: Thu 25 Sep 2025 19:56:44 +0000 Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: LGSzYHfPOctmfdBXppDnomtB88kZs7vG5WW3wotQNsE=) 2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: c+KKdUiE40XaCCosVDJRN/ivdbzY7AEBYwh4rejWgD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2643 (0xa53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Validity Not Before: Sep 18 19:56:44 2025 GMT Not After : Sep 25 19:56:44 2025 GMT Subject: CN=68cc63fc-f34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:94:e7:c1:a2:e0:b3:2a:e9:92:b0:8f:c8: 25:81:87:3a:b9:51:cc:b4:47:ca:a3:da:6e:54:b1: d0:43:cd:0f:d2:6b:7b:f8:24:05:db:0d:c5:11:63: 9b:63:33:25:0a:16:af:63:8f:3f:16:cf:0b:88:53: 20:a7:f7:53:06:94:b1:96:8a:e0:d3:a2:d5:64:de: e4:ae:b6:7a:44:89:1a:06:d2:75:8c:ed:70:81:e0: d5:28:78:7e:92:f8:9f:27:87:55:b6:b0:0d:fc:6e: 04:55:44:b4:18:6b:38:82:47:a5:f9:0b:21:19:ee: b4:1c:0e:60:a5:f8:cc:94:7f:32:3a:ee:cd:5f:bc: 02:48:cd:b7:41:81:8e:d3:7e:09:95:32:19:91:f0: 28:03:1a:1a:3d:8c:ce:15:22:e3:5f:43:cd:d6:d1: 50:1a:0a:ed:0f:2b:fa:51:09:e2:47:c9:8f:17:5a: 99:fe:0b:4e:b6:56:c9:19:d7:ac:ef:7a:2a:ae:b2: e0:95:0b:e3:1a:8a:48:0e:48:c9:7c:51:0b:89:ea: fc:fe:32:3d:6b:73:80:d9:b6:36:99:a2:df:53:a1: c8:ab:d9:e2:06:48:b4:56:06:ca:c2:96:25:7b:9a: 71:f7:06:86:10:b4:c6:03:4b:c0:44:65:27:3c:a2: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D8:CF:C3:E8:FC:DC:CD:24:75:FB:F4:F1:E2:68:BB:E6:12:86:E9 X509v3 Authority Key Identifier: keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:05:37:5f:c9:63:91:0d:c5:16:05:6a:ad:16:b8:b9:a9:b3: 3b:4d:d0:ce:77:b1:06:ca:64:4e:f2:bd:0d:51:09:22:3d:50: 8c:16:03:38:36:0c:37:e2:b6:81:06:21:bb:36:2a:47:1f:e9: bc:66:6b:0a:ee:05:4f:8a:87:92:e7:3a:8f:27:c6:36:b7:7a: 6c:a7:8b:29:b6:1c:3c:19:41:69:30:66:75:11:95:f8:2c:48: 95:57:77:31:55:d7:1c:80:25:61:d5:a5:f5:df:a6:7f:a3:ab: 6b:b3:eb:77:10:76:c9:6a:4c:e7:e2:46:26:9c:8d:ae:08:e9: 7b:44:4e:c8:f8:33:9c:63:dc:e6:e6:21:04:49:bc:ad:7a:17: ad:12:14:43:0b:cd:5f:75:78:bb:0e:e8:49:26:4f:b5:19:53: 1b:3e:e7:8a:d2:ca:1e:47:f3:e2:41:16:33:58:40:2f:f8:fe: 53:1c:23:05:df:ac:35:9d:c0:45:89:7b:b8:a4:3b:28:62:88: e1:5f:ec:a2:8c:2e:a1:41:b6:63:7c:21:9b:75:69:05:19:fe: a8:4a:06:3a:5a:83:5d:8a:38:2e:73:30:c5:d9:27:0d:85:fd: 3c:65:04:7a:be:77:f7:89:1a:77:68:3b:9b:62:60:46:33:e7: 9e:34:7a:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3 ODNFOEFDQkYwHhcNMjUwOTE4MTk1NjQ0WhcNMjUwOTI1MTk1NjQ0WjAYMRYwFAYD VQQDEw02OGNjNjNmYy1mMzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/+U58Gi4LMq6ZKwj8glgYc6uVHMtEfKo9puVLHQQ80P0mt7+CQF2w3FEWOb YzMlChavY48/Fs8LiFMgp/dTBpSxlorg06LVZN7krrZ6RIkaBtJ1jO1wgeDVKHh+ kvifJ4dVtrAN/G4EVUS0GGs4gkel+QshGe60HA5gpfjMlH8yOu7NX7wCSM23QYGO 034JlTIZkfAoAxoaPYzOFSLjX0PN1tFQGgrtDyv6UQniR8mPF1qZ/gtOtlbJGdes 73oqrrLglQvjGopIDkjJfFELier8/jI9a3OA2bY2maLfU6HIq9niBki0VgbKwpYl e5px9waGELTGA0vARGUnPKLmBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzYz8Po /NzNJHX79PHiaLvmEobpMB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDc3QS9DODI4OTQzMjczRTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsx MmFXWGhwcktreDU0UG9yTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvBTdfyWORDcUWBWqtFri5qbM7TdDOd7EGymRO8r0NUQkiPVCMFgM4 Ngw34raBBiG7NipHH+m8ZmsK7gVPioeS5zqPJ8Y2t3psp4spthw8GUFpMGZ1EZX4 LEiVV3cxVdccgCVh1aX136Z/o6trs+t3EHbJakzn4kYmnI2uCOl7RE7I+DOcY9zm 5iEESbytehetEhRDC81fdXi7DuhJJk+1GVMbPueK0soeR/PiQRYzWEAv+P5THCMF 36w1ncBFiXu4pDsoYojhX+yijC6hQbZjfCGbdWkFGf6oSgY6WoNdijguczDF2ScN hf08ZQR6vnf3iRp3aDubYmBGM+eeNHpd -----END CERTIFICATE-----Generated at Fri Sep 19 17:31:42 2025 by rpki-client