$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json) Hash identifier: kRKnfDjIujjXIWHgBN+ZwlRpgVhpYXufR3uirL9JCx4= Subject key identifier: 4D:55:D0:52:D8:10:85:85:60:1C:61:3D:63:D8:98:58:79:63:9A:AB Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Certificate serial: 0A6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft Manifest number: 0A63 Signing time: Thu 06 Nov 2025 18:32:45 +0000 Manifest this update: Thu 06 Nov 2025 18:32:45 +0000 Manifest next update: Thu 13 Nov 2025 18:32:45 +0000 Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: WioQRJD3tg0lA/SwCkD8QCWE3C21LikotWziE1vG5oE=) 2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: c+KKdUiE40XaCCosVDJRN/ivdbzY7AEBYwh4rejWgD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 18:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2668 (0xa6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Validity Not Before: Nov 6 18:32:45 2025 GMT Not After : Nov 13 18:32:45 2025 GMT Subject: CN=690ce9cd-a2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:42:12:6d:04:82:30:be:3e:1e:24:e5:c2: 02:bf:ad:34:c1:85:f8:5f:61:d8:f5:ec:32:01:a4: 9d:5a:79:3b:d7:69:99:80:95:0e:f0:03:fb:f7:60: ce:70:51:bf:8c:07:f2:91:a3:b0:51:f7:a8:33:fc: 76:28:11:b8:51:d8:e8:cd:9a:27:a8:c1:fb:38:77: af:ba:a0:b8:48:d3:87:2f:93:d9:39:cc:91:13:f0: 4a:3e:f1:ab:22:bc:c1:3c:22:90:7f:cf:f1:33:c6: 1b:56:2f:9d:9b:0a:ab:aa:d0:74:ab:41:ac:7d:d6: ed:f6:d8:7b:de:e0:5d:e2:92:03:ac:b7:c5:16:3a: 7a:4e:1e:0a:d9:be:0f:06:c8:3e:0c:81:00:e1:74: fa:82:a4:2a:41:21:4b:84:cf:91:6f:22:c2:e4:d4: d5:ca:8b:0d:68:4e:7d:5c:7c:46:89:fb:38:21:02: ef:a0:5f:c7:62:e7:3a:0f:b8:3f:5e:72:4c:2e:24: 34:a2:b9:e3:7c:61:3c:22:2b:10:44:40:99:cb:4c: 18:c2:08:9b:6a:3e:ce:af:20:e2:47:db:2b:40:1d: 8f:a1:72:74:34:0c:54:8b:df:72:2c:7d:1e:8b:31: 0c:cb:87:bb:0d:92:ad:a1:48:0d:5e:b3:0f:c1:ca: a6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:55:D0:52:D8:10:85:85:60:1C:61:3D:63:D8:98:58:79:63:9A:AB X509v3 Authority Key Identifier: keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:68:7e:6c:21:84:20:cd:a9:08:ba:ff:a3:a6:45:e4:76:c0: 53:23:6a:22:da:c9:1e:e8:24:d8:6a:b6:fb:3e:23:20:09:ae: a7:d7:ce:4d:6b:3b:9f:d3:87:67:2f:aa:a7:5c:e3:bb:f9:9f: 06:59:69:77:2e:e9:32:9c:ee:ae:94:f4:2f:eb:49:21:b4:70: 39:3b:30:29:4f:d6:b5:18:f4:ee:a6:ad:90:4d:47:4e:ce:3c: 21:b5:0f:f4:b1:b3:2c:d8:d3:77:9e:c8:51:c4:33:5e:76:dc: 0b:2e:0d:cd:6d:17:4d:71:2a:19:d0:ea:ef:0c:8e:e9:e8:bd: ab:50:4e:c9:2b:b9:26:32:4d:0e:74:4d:d8:5f:52:99:76:41: a6:f9:2a:43:d0:a8:e2:e2:04:8c:64:83:4d:6f:97:83:5e:57: e9:55:7d:4f:37:20:96:69:2d:fd:2a:a6:d7:c8:a2:19:e4:a1: 50:8e:6f:a5:40:ae:39:ca:56:4d:06:48:fd:41:94:c9:ce:db: c2:ee:d7:76:e0:dd:78:8e:39:42:b0:8a:a3:01:5d:15:d9:db: 65:03:61:71:68:a2:4f:01:e3:6f:b0:88:6f:ad:5d:cb:26:64: 69:56:7a:88:08:fb:1e:7b:ec:84:77:e9:1e:9f:a0:46:46:b4: 4b:e7:16:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3 ODNFOEFDQkYwHhcNMjUxMTA2MTgzMjQ1WhcNMjUxMTEzMTgzMjQ1WjAYMRYwFAYD VQQDEw02OTBjZTljZC1hMmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uNCEm0EgjC+Ph4k5cICv600wYX4X2HY9ewyAaSdWnk712mZgJUO8AP792DO cFG/jAfykaOwUfeoM/x2KBG4UdjozZonqMH7OHevuqC4SNOHL5PZOcyRE/BKPvGr IrzBPCKQf8/xM8YbVi+dmwqrqtB0q0Gsfdbt9th73uBd4pIDrLfFFjp6Th4K2b4P Bsg+DIEA4XT6gqQqQSFLhM+RbyLC5NTVyosNaE59XHxGifs4IQLvoF/HYuc6D7g/ XnJMLiQ0ornjfGE8IisQRECZy0wYwgibaj7OryDiR9srQB2PoXJ0NAxUi99yLH0e izEMy4e7DZKtoUgNXrMPwcqmCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1V0FLY EIWFYBxhPWPYmFh5Y5qrMB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDc3QS9DODI4OTQzMjczRTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsx MmFXWGhwcktreDU0UG9yTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPaH5sIYQgzakIuv+jpkXkdsBTI2oi2ske6CTYarb7PiMgCa6n185N azuf04dnL6qnXOO7+Z8GWWl3LukynO6ulPQv60khtHA5OzApT9a1GPTupq2QTUdO zjwhtQ/0sbMs2NN3nshRxDNedtwLLg3NbRdNcSoZ0OrvDI7p6L2rUE7JK7kmMk0O dE3YX1KZdkGm+SpD0Kji4gSMZINNb5eDXlfpVX1PNyCWaS39KqbXyKIZ5KFQjm+l QK45ylZNBkj9QZTJztvC7td24N14jjlCsIqjAV0V2dtlA2FxaKJPAeNvsIhvrV3L JmRpVnqICPsee+yEd+ken6BGRrRL5xa7 -----END CERTIFICATE-----Generated at Fri Nov 7 17:24:00 2025 by rpki-client