$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json) Hash identifier: IsLTglV0M6gaERcfotO7HD/VO1fsBCFY8KnQrXB76e0= Subject key identifier: F8:D1:14:24:7F:2A:76:69:96:B6:BF:5C:07:6C:B5:B0:11:7C:6E:0C Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Certificate serial: 0A06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft Manifest number: 09FE Signing time: Thu 24 Apr 2025 19:45:43 +0000 Manifest this update: Thu 24 Apr 2025 19:45:42 +0000 Manifest next update: Thu 01 May 2025 19:45:42 +0000 Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: o9FO32hfDCm9+EzjHmpPoD8u+rkc2N8APWyYKNE/TcA=) 2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: B2rzduRjtCAy1p3+thwY4jllEo5iIiCf0nMJPxn4OUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2566 (0xa06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Validity Not Before: Apr 24 19:45:42 2025 GMT Not After : May 1 19:45:42 2025 GMT Subject: CN=680a94e7-ae56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:e8:1c:8c:99:cf:72:38:f2:d0:2d:8a:bb: b3:a4:f3:a6:14:0e:74:fe:0a:6c:a8:3e:44:e4:8d: 93:68:4c:af:b4:16:14:11:e1:52:e0:2d:0c:b6:76: 2f:84:14:da:39:a2:93:a7:d3:a4:cc:c7:07:5b:62: 4a:a9:c6:20:94:c1:e3:11:12:9c:ee:96:9c:10:01: d2:ad:5d:3e:10:51:b8:cb:11:4f:f5:4f:37:e7:3d: 97:3d:98:2b:d2:7a:f9:14:a7:fb:bb:08:8a:11:65: 51:0c:99:9e:c0:87:e5:e7:cf:43:eb:80:f8:8a:88: 6e:97:d2:05:2c:18:eb:ee:32:cf:7d:ce:e8:98:b0: 5b:4b:43:86:c3:ee:ec:32:46:75:e4:a4:06:2a:23: 11:af:87:09:09:80:30:a6:02:a9:8d:75:14:03:2b: 1a:68:0f:1c:60:31:8f:7c:35:4f:23:23:21:bc:50: fd:31:af:65:14:d9:90:fc:7c:e2:e2:85:6e:93:28: b9:d6:b2:75:1e:2e:2d:3d:a0:69:d3:9a:74:14:9c: 87:30:8e:93:04:fb:57:dc:05:99:e6:f5:ab:00:db: ff:ee:28:78:57:89:83:4d:f3:90:6a:d7:14:1c:e6: 72:d4:90:07:42:b7:ef:6f:2f:ed:a5:be:92:60:92: 2e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D1:14:24:7F:2A:76:69:96:B6:BF:5C:07:6C:B5:B0:11:7C:6E:0C X509v3 Authority Key Identifier: keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:77:61:74:20:5d:a0:bf:9b:90:83:a0:18:cf:74:3d:5b:07: 18:7d:6e:34:d6:17:3b:d7:92:93:37:3a:20:39:fe:1c:c2:48: 30:bc:3b:f6:61:35:d3:1e:27:99:5f:39:1c:e2:31:8e:9f:47: 9c:a8:7f:04:67:39:a7:9f:fd:0a:86:01:e8:d5:43:6f:07:ab: ca:63:58:22:d4:f9:91:e3:67:a3:25:2a:a7:39:cd:45:d5:5d: 6c:ed:fa:d4:1a:67:83:79:e6:14:7b:4f:63:8c:98:f7:75:9a: 4e:4d:90:41:88:99:9d:61:00:24:f8:65:76:d7:42:91:31:ee: 99:b8:1c:83:35:a1:dd:cd:76:85:16:4d:7b:af:99:91:64:ac: 61:9a:e8:34:91:df:c5:43:5d:2b:0f:5d:5c:e4:56:91:7a:9a: ae:41:7d:a8:fb:57:3d:cc:29:e1:9b:3d:60:51:12:d3:d9:fe: e6:e4:61:21:1d:4f:68:2b:e0:13:25:d6:c4:d9:a5:8f:6a:fa: a6:f3:73:fc:17:99:28:c4:40:08:f4:49:24:83:38:e3:1e:e7: 08:69:e5:e6:f5:62:35:b3:8d:b3:0f:ef:76:64:ed:bb:fc:ee: 76:5c:a0:20:d6:9a:b6:9e:ba:12:37:46:ac:6c:c0:52:83:46: ab:17:36:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3 ODNFOEFDQkYwHhcNMjUwNDI0MTk0NTQyWhcNMjUwNTAxMTk0NTQyWjAYMRYwFAYD VQQDEw02ODBhOTRlNy1hZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE3oHIyZz3I48tAtiruzpPOmFA50/gpsqD5E5I2TaEyvtBYUEeFS4C0MtnYv hBTaOaKTp9OkzMcHW2JKqcYglMHjERKc7pacEAHSrV0+EFG4yxFP9U835z2XPZgr 0nr5FKf7uwiKEWVRDJmewIfl589D64D4iohul9IFLBjr7jLPfc7omLBbS0OGw+7s MkZ15KQGKiMRr4cJCYAwpgKpjXUUAysaaA8cYDGPfDVPIyMhvFD9Ma9lFNmQ/Hzi 4oVukyi51rJ1Hi4tPaBp05p0FJyHMI6TBPtX3AWZ5vWrANv/7ih4V4mDTfOQatcU HOZy1JAHQrfvby/tpb6SYJIuNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjRFCR/ KnZplra/XAdstbARfG4MMB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDc3QS9DODI4OTQzMjczRTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsx MmFXWGhwcktreDU0UG9yTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBed2F0IF2gv5uQg6AYz3Q9WwcYfW401hc715KTNzogOf4cwkgwvDv2 YTXTHieZXzkc4jGOn0ecqH8EZzmnn/0KhgHo1UNvB6vKY1gi1PmR42ejJSqnOc1F 1V1s7frUGmeDeeYUe09jjJj3dZpOTZBBiJmdYQAk+GV210KRMe6ZuByDNaHdzXaF Fk17r5mRZKxhmug0kd/FQ10rD11c5FaRepquQX2o+1c9zCnhmz1gURLT2f7m5GEh HU9oK+ATJdbE2aWPavqm83P8F5koxEAI9EkkgzjjHucIaeXm9WI1s42zD+92ZO27 /O52XKAg1pq2nroSN0asbMBSg0arFzba -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:36 2025 by rpki-client