$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft File: Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft (raw, json) Hash identifier: M8ZE4p2AVl16hu/T/tzeEnegg0KgnVHcEAjOngQ1WzE= Subject key identifier: 10:34:E7:60:14:5B:E4:73:A2:B2:73:3E:EB:DC:B6:09:A3:CE:D3:5B Authority key identifier: 12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA Certificate issuer: /CN=A916DFDD/serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft Manifest number: 4D Signing time: Wed 05 Nov 2025 07:31:53 +0000 Manifest this update: Wed 05 Nov 2025 07:31:53 +0000 Manifest next update: Wed 12 Nov 2025 07:31:53 +0000 Files and hashes: 1: Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl (hash: g60Wfd/jG3Q1XNpF1lH/NUGLUjYDm6l+E5xYUCRld2U=) 2: 780B9CF8867811F0AA0D2534C4F9AE02.roa (hash: X3bLg+wYV1t3tD4gl+ObUUyr463NoOxUyC03tZzeKjA=) 3: 78817658867811F0AA0D2534C4F9AE02.roa (hash: XWnPSEphd3JYQ8zrDoJg7cr7D+uDeG7GtgQZULFil08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DFDD, serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA Validity Not Before: Nov 5 07:31:53 2025 GMT Not After : Nov 12 07:31:53 2025 GMT Subject: CN=690afd69-ab94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:45:37:6e:34:3a:02:d4:26:c1:8f:27:5a: 16:93:4d:c5:8a:91:c2:82:aa:39:4b:67:30:36:fd: 60:8c:3b:e4:9d:26:1d:03:c3:69:03:0e:e6:91:78: 43:1d:d4:68:bb:ce:ca:5a:9e:06:dc:44:c5:8b:b8: 47:ad:3b:3d:22:7b:18:e1:5d:8b:6a:68:6f:b1:f7: 7f:1e:32:1f:6e:81:cc:50:fc:87:f5:6a:55:09:15: 46:f5:b8:a0:24:f5:39:5f:20:b4:42:4a:d5:48:04: fe:ae:e9:33:f5:d5:df:20:4a:f3:66:6b:a1:f6:7f: 45:a6:3b:c7:28:ac:b9:84:f9:c4:16:85:83:df:dd: b5:db:d8:78:b2:8a:92:87:1c:12:b2:d4:d6:9c:77: 50:4a:7e:a5:54:ea:cb:e7:f3:16:27:da:08:07:8a: 9d:a4:ce:d8:38:4f:c1:38:76:d8:5b:d1:d0:74:82: 7c:75:c1:68:d4:d0:05:95:a0:7d:9c:5b:88:4a:0b: 96:07:3e:c0:4f:40:80:ab:e4:40:35:95:00:8e:f0: c2:8c:3b:d8:b2:35:eb:12:49:f5:fc:c1:5d:78:de: 74:46:b9:6c:4f:39:b3:50:f6:27:28:3f:b1:d0:23: 3f:52:0d:e4:5e:8e:97:67:07:d2:6b:97:2d:6b:64: 84:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:34:E7:60:14:5B:E4:73:A2:B2:73:3E:EB:DC:B6:09:A3:CE:D3:5B X509v3 Authority Key Identifier: keyid:12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:3d:ab:df:da:00:ba:1d:5e:20:45:b4:22:12:e3:71:e0:6e: f9:23:36:b8:b7:c9:c1:52:b3:b8:84:97:26:df:27:9b:78:ac: 9b:6c:a6:10:a3:15:00:1b:8d:1c:25:63:5b:f4:55:6f:58:4d: 85:0d:31:6d:e9:14:a9:fb:fd:0a:d8:b9:89:a2:79:01:79:1f: 6d:d5:1c:81:7c:2d:32:d2:c6:87:77:c7:5c:4e:8f:40:6c:02: fb:43:c6:db:5b:c9:c3:88:0f:2d:e1:41:9e:f0:52:cd:d5:4e: b4:3c:6d:01:bd:8f:6a:93:94:44:ae:1b:58:09:2b:6b:c1:06: 76:69:a5:4b:df:4e:67:13:3f:53:9c:a2:52:41:af:f9:cd:1f: f4:68:0f:77:12:17:9a:d0:0d:89:07:6a:2e:a0:f4:81:d7:e8: 0d:f0:0b:3b:e0:a5:e8:73:0a:f7:3b:d3:f5:fa:69:86:32:20: 56:79:68:76:19:8c:18:7d:30:f3:3b:c0:ad:42:f5:78:63:67: 9f:38:72:fd:63:61:f2:44:47:03:c0:87:f1:4d:15:78:8b:8d: 92:14:f3:9b:6a:5d:85:f4:41:54:92:09:c7:0b:53:bc:af:02: 6d:79:00:fa:ba:78:ea:54:81:18:88:f0:8d:e7:c6:67:c1:db: 2e:f4:92:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REZERDExMC8GA1UEBRMoMTI1OUJGMkNFMkUxNkVERTRCQjY1NTkxMzA0MTgxNTU2 MTRCQTNFQTAeFw0yNTExMDUwNzMxNTNaFw0yNTExMTIwNzMxNTNaMBgxFjAUBgNV BAMTDTY5MGFmZDY5LWFiOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC770U3bjQ6AtQmwY8nWhaTTcWKkcKCqjlLZzA2/WCMO+SdJh0Dw2kDDuaReEMd 1Gi7zspangbcRMWLuEetOz0iexjhXYtqaG+x938eMh9ugcxQ/If1alUJFUb1uKAk 9TlfILRCStVIBP6u6TP11d8gSvNma6H2f0WmO8corLmE+cQWhYPf3bXb2HiyipKH HBKy1Nacd1BKfqVU6svn8xYn2ggHip2kztg4T8E4dthb0dB0gnx1wWjU0AWVoH2c W4hKC5YHPsBPQICr5EA1lQCO8MKMO9iyNesSSfX8wV143nRGuWxPObNQ9icoP7HQ Iz9SDeRejpdnB9Jrly1rZIQLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEDTnYBRb 5HOisnM+69y2CaPO01swHwYDVR0jBBgwFoAUElm/LOLhbt5LtlWRMEGBVWFLo+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERkRELzk3RUUwQUMwNEE5 MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1THRsV1JNRUdCVldGTG8t by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWxtX0xPTGhidDVMdGxXUk1FR0JWV0ZMby1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RkRELzk3RUUwQUMwNEE5MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1 THRsV1JNRUdCVldGTG8tby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACc9q9/aALodXiBFtCIS43HgbvkjNri3ycFSs7iElybfJ5t4rJtsphCj FQAbjRwlY1v0VW9YTYUNMW3pFKn7/QrYuYmieQF5H23VHIF8LTLSxod3x1xOj0Bs AvtDxttbycOIDy3hQZ7wUs3VTrQ8bQG9j2qTlESuG1gJK2vBBnZppUvfTmcTP1Oc olJBr/nNH/RoD3cSF5rQDYkHai6g9IHX6A3wCzvgpehzCvc70/X6aYYyIFZ5aHYZ jBh9MPM7wK1C9XhjZ584cv1jYfJERwPAh/FNFXiLjZIU85tqXYX0QVSSCccLU7yv Am15APq6eOpUgRiI8I3nxmfB2y70kso= -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:31 2025 by rpki-client