$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json) Hash identifier: GQ1z7UMiq2fKVwSad1DN/RueDGbOvv3gYi4XqnifB4Q= Subject key identifier: 72:A4:7B:41:F8:BB:87:DC:B8:13:70:BD:08:89:73:5F:76:57:17:B0 Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Certificate serial: 0A3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft Manifest number: 0A35 Signing time: Fri 08 Aug 2025 20:04:29 +0000 Manifest this update: Fri 08 Aug 2025 20:04:28 +0000 Manifest next update: Fri 15 Aug 2025 20:04:28 +0000 Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: gMuea9LLBkoFWvuq+9bEO1deer7nPtk7jCNSmQfzF6c=) 2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: c+KKdUiE40XaCCosVDJRN/ivdbzY7AEBYwh4rejWgD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2622 (0xa3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Validity Not Before: Aug 8 20:04:28 2025 GMT Not After : Aug 15 20:04:28 2025 GMT Subject: CN=6896584c-5a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:6c:20:9d:cd:a1:b6:00:fa:d3:f1:5b:81: 53:b2:c0:41:06:39:11:fc:3c:01:ff:4f:88:23:b9: 70:93:5e:ea:2f:29:d8:f9:61:85:2a:3c:74:63:81: a5:42:f4:06:ed:c7:8b:fb:74:2c:6d:c5:90:af:2a: f7:89:76:43:9b:2e:f9:3e:20:09:d3:a0:4c:6f:77: b1:ff:e6:67:ef:15:35:c7:4f:c4:cb:a8:3b:67:4e: ab:ee:6a:f0:35:bc:a3:cc:ba:2c:73:16:0b:0f:d1: d2:1f:03:4b:8d:77:0f:9f:93:07:65:de:f9:cd:b0: b5:72:8d:32:63:0b:5d:41:b2:26:fd:c9:4e:80:05: b5:89:34:0b:75:58:f5:e0:20:16:41:33:50:e0:c2: a1:d8:e1:3d:e4:3f:9f:0c:e6:d1:c4:71:aa:bd:68: ce:6e:7c:c2:90:98:bc:27:6b:ae:f3:07:1a:eb:07: fe:8d:fa:df:e4:03:a6:6d:3b:f8:10:26:82:f0:83: 01:9a:63:6f:9f:5f:9d:a8:10:52:2b:a3:9d:f5:b5: 1a:bf:da:d3:03:bf:d6:4f:11:f4:41:b0:2c:44:53: 5c:f2:12:e0:50:9f:95:c0:03:ec:8a:26:cf:b9:76: fd:7a:32:f9:8f:85:ce:f6:7e:5a:88:9b:af:e4:c1: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A4:7B:41:F8:BB:87:DC:B8:13:70:BD:08:89:73:5F:76:57:17:B0 X509v3 Authority Key Identifier: keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ed:da:2b:05:bc:65:30:a4:fa:fc:45:85:17:0a:ec:95:3f: b6:55:e5:65:23:b3:88:fd:07:a4:99:1b:5e:d5:2e:35:b3:32: fe:8e:76:39:dd:da:09:12:4a:7c:d8:0a:7e:3b:90:d0:06:67: 33:f8:7e:90:07:a5:36:ed:6a:44:0e:4f:ea:0a:51:59:74:6c: 26:86:d5:70:6c:22:16:9f:52:77:bd:cb:ac:a6:90:fe:a3:05: ab:cf:1a:96:00:b5:c3:6e:7e:cb:30:65:09:db:0c:62:f2:b1: 62:f1:ed:1f:a6:32:fe:2a:06:29:ba:87:2f:06:a3:7c:5c:1e: c7:75:14:78:c2:eb:45:67:f6:63:72:10:50:fa:49:3c:2a:ae: 07:ff:3d:db:63:c4:04:d6:f2:70:5a:dc:f9:b6:9b:49:65:2b: 2c:26:96:da:9b:6e:1f:8c:01:47:ae:c3:10:e6:3f:12:8a:6f: c2:9b:d3:fe:fb:0b:5f:50:dd:ad:d2:4b:c4:87:ed:43:b9:03: ef:22:61:d8:3d:82:34:2f:46:b3:d8:13:ad:7c:22:f4:d9:d9: 7c:3f:fc:87:14:92:9c:4d:ea:54:6b:59:cb:87:f7:bd:96:75: b9:d2:e0:31:5e:d5:25:2b:c7:0f:3b:16:5f:f0:ae:aa:ac:88: 26:94:23:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3 ODNFOEFDQkYwHhcNMjUwODA4MjAwNDI4WhcNMjUwODE1MjAwNDI4WjAYMRYwFAYD VQQDEw02ODk2NTg0Yy01YTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmxsIJ3NobYA+tPxW4FTssBBBjkR/DwB/0+II7lwk17qLynY+WGFKjx0Y4Gl QvQG7ceL+3QsbcWQryr3iXZDmy75PiAJ06BMb3ex/+Zn7xU1x0/Ey6g7Z06r7mrw NbyjzLoscxYLD9HSHwNLjXcPn5MHZd75zbC1co0yYwtdQbIm/clOgAW1iTQLdVj1 4CAWQTNQ4MKh2OE95D+fDObRxHGqvWjObnzCkJi8J2uu8wca6wf+jfrf5AOmbTv4 ECaC8IMBmmNvn1+dqBBSK6Od9bUav9rTA7/WTxH0QbAsRFNc8hLgUJ+VwAPsiibP uXb9ejL5j4XO9n5aiJuv5MHQSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKke0H4 u4fcuBNwvQiJc192VxewMB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDc3QS9DODI4OTQzMjczRTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsx MmFXWGhwcktreDU0UG9yTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa7dorBbxlMKT6/EWFFwrslT+2VeVlI7OI/QekmRte1S41szL+jnY5 3doJEkp82Ap+O5DQBmcz+H6QB6U27WpEDk/qClFZdGwmhtVwbCIWn1J3vcusppD+ owWrzxqWALXDbn7LMGUJ2wxi8rFi8e0fpjL+KgYpuocvBqN8XB7HdRR4wutFZ/Zj chBQ+kk8Kq4H/z3bY8QE1vJwWtz5tptJZSssJpbam24fjAFHrsMQ5j8Sim/Cm9P+ +wtfUN2t0kvEh+1DuQPvImHYPYI0L0az2BOtfCL02dl8P/yHFJKcTepUa1nLh/e9 lnW50uAxXtUlK8cPOxZf8K6qrIgmlCNt -----END CERTIFICATE-----Generated at Sat Aug 9 02:45:49 2025 by rpki-client