$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft File: Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft (raw, json) Hash identifier: Wnt0j5aB4w3Z9h+3U+BUZg5PCfnJsan2XmXy9XEhutU= Subject key identifier: A1:3A:39:56:23:59:F2:C4:29:13:81:BE:C3:F8:92:75:97:7A:17:42 Authority key identifier: 12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA Certificate issuer: /CN=A916DFDD/serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft Manifest number: 1E Signing time: Sat 09 Aug 2025 08:24:36 +0000 Manifest this update: Sat 09 Aug 2025 08:24:35 +0000 Manifest next update: Sat 16 Aug 2025 08:24:35 +0000 Files and hashes: 1: Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl (hash: 3JkxLO7IrX9qKV+5gNEwIP6MYxg4s3fftCR1ew4uDUU=) 2: 3D44173A4A9111F085C19317C4F9AE02.roa (hash: FwH/enA0/FsCkLYjV+LnJ4sOG3fwQvbOVp0WkLtMY2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DFDD, serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA Validity Not Before: Aug 9 08:24:35 2025 GMT Not After : Aug 16 08:24:35 2025 GMT Subject: CN=689705c3-5d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:cd:c3:a0:5e:af:7a:18:cc:9b:05:61:86: ac:3a:ff:07:78:8f:ff:a4:a0:8c:17:7a:e7:0a:03: 33:a7:21:88:48:21:50:12:fd:6b:1b:3d:be:6b:20: 55:6d:2c:08:c6:95:2b:66:e4:54:c9:00:df:6b:94: ce:75:5d:20:86:ee:aa:be:8b:0e:d0:de:ec:d9:74: 84:40:8b:e9:ba:35:c6:c2:dc:a9:f7:a7:90:9c:2d: ba:43:33:51:49:ac:2c:fa:5c:52:3e:90:40:0e:5e: 4b:11:8a:26:b8:5c:db:64:f2:2b:cb:c7:33:85:0d: ad:d2:45:48:00:12:c6:2b:7a:29:a3:c6:38:a8:c1: d2:71:fc:52:8c:bb:04:7e:67:28:94:dd:4c:b9:9b: f2:64:47:5d:ae:0a:10:c1:4c:42:22:c0:22:c8:e9: 37:ac:81:37:2a:0a:ee:bd:48:6e:b9:a8:fe:22:69: e2:a9:9a:66:bc:04:52:e2:29:68:02:18:bb:1d:a4: 68:51:ff:a9:42:0e:9b:8a:76:b8:f6:24:1f:85:2c: f9:69:59:c5:34:b1:38:3d:d2:d8:3f:3f:d4:a8:73: 0c:46:98:2c:f5:f4:aa:e9:79:9d:d6:fc:46:13:80: 56:26:c4:df:06:78:7e:e9:ca:49:0f:54:6d:4f:e9: 45:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3A:39:56:23:59:F2:C4:29:13:81:BE:C3:F8:92:75:97:7A:17:42 X509v3 Authority Key Identifier: keyid:12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:bc:e3:42:8d:27:c2:00:d6:b7:15:d2:f5:a9:8d:94:d3:36: c7:a7:a4:c3:cd:87:b0:e8:ba:af:14:cc:d8:2a:5a:50:1a:91: 2c:25:5c:fb:8a:28:06:c6:c5:b2:a7:27:e7:28:c8:f1:be:3b: 3e:a8:b7:18:0c:67:47:a9:ac:f6:9e:81:cc:6b:4a:57:4d:1e: 91:c2:28:0f:c3:f0:5c:f0:cc:76:26:cb:53:8f:eb:f8:19:a6: 03:13:5a:13:5f:3c:de:ee:41:d0:dd:20:55:f5:46:91:dc:a4: 38:a8:df:af:7d:af:3c:28:fd:52:fe:76:d8:bc:0d:d8:5f:56: df:01:16:0e:b2:36:4a:ac:3e:77:35:73:56:99:5f:f2:f1:b9: a8:2f:c0:4f:19:e5:93:c8:f2:aa:6a:d9:89:a1:66:48:64:84: 62:6a:12:58:5f:9a:74:f5:c3:5c:ab:f8:8a:b6:52:ec:ea:10: 3c:2c:24:52:f5:be:01:9d:f7:74:92:b1:e6:11:ef:82:51:97: c8:4e:27:8d:cd:ae:c8:18:1f:f7:cc:04:50:57:7a:49:b5:e5: 46:8e:20:26:25:23:74:f2:59:71:ed:3e:d4:99:4c:f4:72:dd: 42:ce:67:8e:69:6c:ad:c4:80:59:d3:25:84:73:3b:bf:26:b6: ec:25:a0:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REZERDExMC8GA1UEBRMoMTI1OUJGMkNFMkUxNkVERTRCQjY1NTkxMzA0MTgxNTU2 MTRCQTNFQTAeFw0yNTA4MDkwODI0MzVaFw0yNTA4MTYwODI0MzVaMBgxFjAUBgNV BAMTDTY4OTcwNWMzLTVkN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPFs3DoF6vehjMmwVhhqw6/wd4j/+koIwXeucKAzOnIYhIIVAS/WsbPb5rIFVt LAjGlStm5FTJAN9rlM51XSCG7qq+iw7Q3uzZdIRAi+m6NcbC3Kn3p5CcLbpDM1FJ rCz6XFI+kEAOXksRiia4XNtk8ivLxzOFDa3SRUgAEsYreimjxjiowdJx/FKMuwR+ ZyiU3Uy5m/JkR12uChDBTEIiwCLI6TesgTcqCu69SG65qP4iaeKpmma8BFLiKWgC GLsdpGhR/6lCDpuKdrj2JB+FLPlpWcU0sTg90tg/P9SocwxGmCz19KrpeZ3W/EYT gFYmxN8GeH7pykkPVG1P6UVvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoTo5ViNZ 8sQpE4G+w/iSdZd6F0IwHwYDVR0jBBgwFoAUElm/LOLhbt5LtlWRMEGBVWFLo+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERkRELzk3RUUwQUMwNEE5 MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1THRsV1JNRUdCVldGTG8t by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWxtX0xPTGhidDVMdGxXUk1FR0JWV0ZMby1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RkRELzk3RUUwQUMwNEE5MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1 THRsV1JNRUdCVldGTG8tby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAW840KNJ8IA1rcV0vWpjZTTNsenpMPNh7Douq8UzNgqWlAakSwlXPuK KAbGxbKnJ+coyPG+Oz6otxgMZ0eprPaegcxrSldNHpHCKA/D8FzwzHYmy1OP6/gZ pgMTWhNfPN7uQdDdIFX1RpHcpDio3699rzwo/VL+dti8DdhfVt8BFg6yNkqsPnc1 c1aZX/LxuagvwE8Z5ZPI8qpq2YmhZkhkhGJqElhfmnT1w1yr+Iq2UuzqEDwsJFL1 vgGd93SSseYR74JRl8hOJ43NrsgYH/fMBFBXekm15UaOICYlI3TyWXHtPtSZTPRy 3ULOZ45pbK3EgFnTJYRzO78mtuwloFY= -----END CERTIFICATE-----Generated at Mon Aug 11 09:29:06 2025 by rpki-client