$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json) Hash identifier: Hz8zG/cL2MEIJwBaIRDnj/AoyRFGvstJmg2Zy/o/bk8= Subject key identifier: 2A:32:47:9E:1C:89:05:5E:FA:BD:33:F3:16:68:F5:7C:DB:8F:AB:50 Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Certificate serial: 0A1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft Manifest number: 0A16 Signing time: Sun 08 Jun 2025 19:33:37 +0000 Manifest this update: Sun 08 Jun 2025 19:33:37 +0000 Manifest next update: Sun 15 Jun 2025 19:33:37 +0000 Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: aBrSEdZRPmguQKdY9HvhEFB5Dc5We72Frlwh3YCzh3A=) 2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: c+KKdUiE40XaCCosVDJRN/ivdbzY7AEBYwh4rejWgD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2591 (0xa1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Validity Not Before: Jun 8 19:33:37 2025 GMT Not After : Jun 15 19:33:37 2025 GMT Subject: CN=6845e591-7681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:62:87:83:e3:1a:a9:cd:9a:a2:4a:cc:dd:58: 04:a0:bf:e6:e1:1e:84:5b:e3:fb:15:15:2e:cc:fd: 34:3d:2e:21:92:d4:0d:6f:a0:14:dc:23:76:ac:a2: 50:97:82:9f:d1:ef:03:8f:05:23:26:86:0c:d7:6a: 00:7c:cc:ca:7e:bd:f4:e0:bf:97:64:63:55:53:82: f4:94:3b:7d:28:44:8b:2b:4d:39:75:17:70:2c:11: bb:38:4e:9c:7d:b6:49:07:ca:f2:2f:29:ec:6c:7e: 9b:54:e8:e1:12:b7:c9:15:09:ed:d0:f0:07:50:f5: 4f:8c:db:e2:12:d1:8a:8e:42:c8:30:76:3f:fd:03: 7c:a9:c1:9b:2f:db:d8:a2:3b:b4:61:54:0f:92:a8: 6f:a2:76:a4:ed:8b:a0:f8:76:aa:74:b9:76:12:8c: cc:d0:fd:0c:91:d3:ea:b5:04:85:cc:01:d4:8a:85: 33:31:a6:51:74:79:49:db:eb:d1:7f:27:93:0c:b3: 4d:14:de:28:fc:a7:c6:3c:76:21:49:32:54:0c:d7: 14:3e:6d:99:3b:8a:de:fe:7a:75:61:64:35:1c:e7: 1f:ee:01:7f:b3:1f:d6:30:8b:71:41:40:a5:77:2f: d9:65:62:bd:f6:7a:ab:6d:c5:27:d3:b7:b5:13:a0: 88:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:32:47:9E:1C:89:05:5E:FA:BD:33:F3:16:68:F5:7C:DB:8F:AB:50 X509v3 Authority Key Identifier: keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:19:45:df:7f:89:c8:3d:43:ab:f6:11:e0:8a:87:4c:13:6b: a1:d0:c2:7f:1c:2f:c2:41:3f:22:f4:a9:fb:f5:be:eb:f6:cd: 09:68:84:12:a5:84:7e:30:ee:1e:70:69:ac:65:0d:ea:fe:34: a3:0c:42:2e:4b:c6:b9:02:e0:84:96:56:78:85:c6:fa:b0:af: 87:97:21:af:63:78:77:72:ef:26:f2:bd:3f:21:95:dc:e4:dd: 7c:5b:ee:35:91:62:b1:0c:0f:89:0c:f0:de:c2:04:79:d3:0a: 9d:d8:16:66:63:08:61:e2:f6:67:90:39:72:55:80:16:d9:6a: a1:68:b5:b2:4c:07:e1:44:b4:d8:8b:53:e1:82:47:f4:fc:9d: 7e:0c:e0:f4:4e:7a:c5:0b:4c:72:1f:bb:08:f1:44:7d:e8:f5: c1:87:8f:7c:2d:7a:61:44:f6:99:1d:74:c7:f6:7a:c3:63:71: 88:82:6d:df:55:cf:a5:77:f6:ac:67:dc:c2:97:2c:b5:29:bf: 82:45:66:1f:e8:ee:7c:81:b1:90:91:97:03:93:43:95:7b:e2: 40:4a:51:f9:c2:bc:9c:d5:fb:8c:c1:b1:44:e7:c9:5f:ee:b1: 98:92:3b:d8:fe:c6:b9:be:9e:89:11:a2:fa:83:c9:58:ff:82: 80:05:7e:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3 ODNFOEFDQkYwHhcNMjUwNjA4MTkzMzM3WhcNMjUwNjE1MTkzMzM3WjAYMRYwFAYD VQQDEw02ODQ1ZTU5MS03NjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymKHg+Maqc2aokrM3VgEoL/m4R6EW+P7FRUuzP00PS4hktQNb6AU3CN2rKJQ l4Kf0e8DjwUjJoYM12oAfMzKfr304L+XZGNVU4L0lDt9KESLK005dRdwLBG7OE6c fbZJB8ryLynsbH6bVOjhErfJFQnt0PAHUPVPjNviEtGKjkLIMHY//QN8qcGbL9vY oju0YVQPkqhvonak7Yug+HaqdLl2EozM0P0MkdPqtQSFzAHUioUzMaZRdHlJ2+vR fyeTDLNNFN4o/KfGPHYhSTJUDNcUPm2ZO4re/np1YWQ1HOcf7gF/sx/WMItxQUCl dy/ZZWK99nqrbcUn07e1E6CIlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoyR54c iQVe+r0z8xZo9Xzbj6tQMB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDc3QS9DODI4OTQzMjczRTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsx MmFXWGhwcktreDU0UG9yTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFGUXff4nIPUOr9hHgiodME2uh0MJ/HC/CQT8i9Kn79b7r9s0JaIQS pYR+MO4ecGmsZQ3q/jSjDEIuS8a5AuCEllZ4hcb6sK+HlyGvY3h3cu8m8r0/IZXc 5N18W+41kWKxDA+JDPDewgR50wqd2BZmYwhh4vZnkDlyVYAW2WqhaLWyTAfhRLTY i1Phgkf0/J1+DOD0TnrFC0xyH7sI8UR96PXBh498LXphRPaZHXTH9nrDY3GIgm3f Vc+ld/asZ9zClyy1Kb+CRWYf6O58gbGQkZcDk0OVe+JASlH5wryc1fuMwbFE58lf 7rGYkjvY/sa5vp6JEaL6g8lY/4KABX69 -----END CERTIFICATE-----Generated at Sun Jun 8 21:36:16 2025 by rpki-client