$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json) Hash identifier: PNF64FYZsoqBQ4WfC6GPlg9V8CzbVn9A8fVTJAOo2IA= Subject key identifier: FA:18:1E:06:26:E4:2B:9C:82:87:C1:61:7F:88:35:73:E5:DB:D5:56 Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Certificate serial: 0A24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft Manifest number: 0A1B Signing time: Wed 18 Jun 2025 19:40:50 +0000 Manifest this update: Wed 18 Jun 2025 19:40:49 +0000 Manifest next update: Wed 25 Jun 2025 19:40:49 +0000 Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: nwph0JlxUaCQqboV41yH7alrsAIOa0mxXAtI6TPvNPM=) 2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: c+KKdUiE40XaCCosVDJRN/ivdbzY7AEBYwh4rejWgD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2596 (0xa24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Validity Not Before: Jun 18 19:40:49 2025 GMT Not After : Jun 25 19:40:49 2025 GMT Subject: CN=68531641-6b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:8f:d2:9b:bd:c8:d8:6b:18:ae:13:db:47: cd:8e:dc:e0:53:ce:d6:b6:66:92:4f:69:d2:56:55: b1:08:de:fc:a1:eb:a2:59:bf:72:c6:dd:7b:02:4d: 75:bc:36:08:02:f8:a3:4d:f9:32:d3:37:21:c9:05: cd:92:54:eb:0e:89:0b:f7:a6:ac:67:87:05:52:6b: 5f:c2:b4:fc:d5:28:75:77:48:26:e9:e7:0b:c3:a2: cb:ba:ad:4d:6e:fd:c9:32:f2:87:12:f7:20:69:22: 8a:dc:c3:8c:cc:4f:2a:6d:e8:7e:70:67:c9:a3:38: 8b:e8:4f:1e:44:d4:69:30:40:4b:91:f6:cf:a6:29: c1:71:c6:8e:e1:ed:b7:ba:14:d5:91:0c:3f:3b:28: 11:7e:39:32:06:99:d0:98:c1:39:22:2c:ce:9c:5c: c7:aa:dc:d3:4e:ec:c7:4f:46:ef:6f:ad:41:7d:81: 45:1d:1d:82:ba:ff:ac:56:2a:46:90:62:33:7d:32: 79:8a:cb:f9:b0:d8:d4:3e:9b:ab:52:91:f8:ab:f2: 6f:03:4d:08:57:82:ba:49:4f:18:9d:f2:61:f9:7f: 3e:a4:9e:43:5b:27:fa:63:ac:e5:18:58:a5:ee:40: 04:36:14:74:e8:88:cb:22:4e:30:d7:2d:ba:20:b4: fe:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:18:1E:06:26:E4:2B:9C:82:87:C1:61:7F:88:35:73:E5:DB:D5:56 X509v3 Authority Key Identifier: keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:74:0c:71:75:2a:ef:f7:46:ed:43:8d:88:c1:8e:c4:2f:14: 53:92:17:b8:90:c8:ef:ca:8d:e3:f6:16:4d:21:16:03:01:12: 57:43:87:aa:f1:d0:1c:60:e1:8c:7b:9f:ed:81:e5:47:c1:e0: 5e:c4:fc:56:fe:a8:cf:c6:8f:5f:b4:15:bb:91:6a:ba:ca:5e: 49:e6:ce:49:39:cc:35:5d:60:cd:9d:ef:56:83:fe:26:5e:f5: 89:27:cf:64:75:02:ab:73:6b:75:d2:99:53:46:7f:6c:33:ee: 27:86:f7:e5:6e:96:ac:7e:aa:c8:70:ba:f2:e8:1b:f9:12:a8: 44:11:58:eb:09:f1:c2:cb:99:2a:ff:4f:20:68:e4:80:af:da: e1:e6:3e:53:73:6c:36:e2:a1:f0:44:0d:2c:58:ec:dc:c7:21: 9a:02:a7:29:85:66:ac:19:55:6f:c4:c8:a0:d1:90:2f:b4:5b: 1a:af:95:a4:00:a0:79:ea:06:29:70:b7:f6:f4:ac:27:5e:cb: 4b:11:ad:64:72:58:c6:f7:fc:72:d6:b3:6c:47:7f:b0:7a:a7: f0:06:e8:6f:06:81:93:d8:55:a6:b8:a1:b6:8f:f9:6c:93:65: a2:f4:57:ad:ab:e7:df:5c:b1:61:71:1b:1b:a2:79:b7:e4:cd: c6:40:86:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3 ODNFOEFDQkYwHhcNMjUwNjE4MTk0MDQ5WhcNMjUwNjI1MTk0MDQ5WjAYMRYwFAYD VQQDEw02ODUzMTY0MS02YjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMeP0pu9yNhrGK4T20fNjtzgU87WtmaST2nSVlWxCN78oeuiWb9yxt17Ak11 vDYIAvijTfky0zchyQXNklTrDokL96asZ4cFUmtfwrT81Sh1d0gm6ecLw6LLuq1N bv3JMvKHEvcgaSKK3MOMzE8qbeh+cGfJoziL6E8eRNRpMEBLkfbPpinBccaO4e23 uhTVkQw/OygRfjkyBpnQmME5IizOnFzHqtzTTuzHT0bvb61BfYFFHR2Cuv+sVipG kGIzfTJ5isv5sNjUPpurUpH4q/JvA00IV4K6SU8YnfJh+X8+pJ5DWyf6Y6zlGFil 7kAENhR06IjLIk4w1y26ILT+TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoYHgYm 5CucgofBYX+INXPl29VWMB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDc3QS9DODI4OTQzMjczRTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsx MmFXWGhwcktreDU0UG9yTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzdAxxdSrv90btQ42IwY7ELxRTkhe4kMjvyo3j9hZNIRYDARJXQ4eq 8dAcYOGMe5/tgeVHweBexPxW/qjPxo9ftBW7kWq6yl5J5s5JOcw1XWDNne9Wg/4m XvWJJ89kdQKrc2t10plTRn9sM+4nhvflbpasfqrIcLry6Bv5EqhEEVjrCfHCy5kq /08gaOSAr9rh5j5Tc2w24qHwRA0sWOzcxyGaAqcphWasGVVvxMig0ZAvtFsar5Wk AKB56gYpcLf29KwnXstLEa1kcljG9/xy1rNsR3+weqfwBuhvBoGT2FWmuKG2j/ls k2Wi9Fetq+ffXLFhcRsbonm35M3GQIZK -----END CERTIFICATE-----Generated at Thu Jun 19 14:27:17 2025 by rpki-client