$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft File: Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft (raw, json) Hash identifier: f/0Ef7KROZ37vm6UTQfUTtP2IE4HHE9XMh4Hei1sgq0= Subject key identifier: B7:47:13:77:D7:1E:61:31:87:21:0D:E6:46:2B:2F:9F:D1:A6:49:29 Authority key identifier: 12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA Certificate issuer: /CN=A916DFDD/serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft Manifest number: 25 Signing time: Sat 23 Aug 2025 08:02:35 +0000 Manifest this update: Sat 23 Aug 2025 08:02:34 +0000 Manifest next update: Sat 30 Aug 2025 08:02:34 +0000 Files and hashes: 1: Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl (hash: MT/+YWuYtY3Eh3bcSkKRLalRmA2qRVs97A8VdDwKcN8=) 2: 3D44173A4A9111F085C19317C4F9AE02.roa (hash: FwH/enA0/FsCkLYjV+LnJ4sOG3fwQvbOVp0WkLtMY2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DFDD, serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA Validity Not Before: Aug 23 08:02:34 2025 GMT Not After : Aug 30 08:02:34 2025 GMT Subject: CN=68a9759a-d83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:fb:4e:42:bf:d5:af:37:9c:fd:33:95:4d:15: a7:9b:f8:d0:d2:db:68:67:91:3d:16:e4:e0:7a:b0: 46:bd:ac:ba:cb:fb:90:ef:45:1b:7b:c3:08:a5:8e: 06:0c:e5:0d:44:30:e9:e2:03:1d:5c:80:90:ee:77: 37:78:f0:13:91:d6:b7:64:d9:e7:46:f4:aa:26:6c: 2a:80:b5:eb:45:6b:78:42:09:e4:b5:9a:e4:0e:71: 9e:68:80:ca:8f:d8:22:ca:16:a0:af:e9:53:34:fe: 8e:99:83:e2:7a:32:84:50:13:52:2e:a7:57:60:7f: d7:79:75:03:37:59:f0:de:97:e3:38:76:9c:d0:e0: d1:2a:2a:9b:76:00:75:da:3a:88:5b:d8:bf:a4:2b: 68:d2:02:c9:16:7d:16:ef:54:63:50:98:7b:b1:f1: 3a:b5:a8:38:3e:a4:db:e7:a0:72:9d:87:a4:11:45: 66:e2:08:f1:7e:03:d4:66:61:31:fd:2d:71:ed:44: 47:28:a5:d0:76:fa:2a:39:ea:81:6d:00:03:04:16: 6e:2b:d4:27:05:86:b3:b3:f9:1b:8b:f0:30:55:07: 6b:f7:04:3f:ba:45:a6:5a:0f:4c:f1:a5:61:e9:a7: 7b:0e:75:88:97:de:46:91:b2:32:2c:30:aa:e5:88: 4f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:47:13:77:D7:1E:61:31:87:21:0D:E6:46:2B:2F:9F:D1:A6:49:29 X509v3 Authority Key Identifier: keyid:12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:bf:61:df:2e:71:52:84:cc:35:c7:cf:29:2c:16:5f:06:0e: a1:5a:d6:40:c1:d9:3a:80:d0:4c:8d:dd:b7:62:f7:e4:2b:d6: be:df:2f:39:50:99:da:b6:4d:aa:51:ac:61:5c:b7:56:8a:10: 9a:2e:97:fd:68:15:59:f1:c4:e0:0a:fc:fd:bc:f9:d0:12:a8: d5:9c:7f:00:3a:da:0f:d4:da:dc:29:82:c8:2f:a4:8c:34:f6: 83:7e:19:1f:de:e8:62:58:92:fd:5f:8e:15:79:ba:72:65:02: 38:59:ad:9d:92:c7:20:3f:a1:d1:50:1b:bf:32:e9:27:b3:03: e0:90:32:e9:f5:9a:1f:bb:bd:99:6d:3a:a4:ba:6e:14:13:d6: b5:bb:6c:90:9f:b8:f8:f5:8a:f5:09:dc:fd:a4:48:1a:75:c7: 51:2f:b7:b7:8b:f9:8c:7e:02:c9:54:fb:8e:59:0d:d7:32:9b: 51:1c:54:54:3c:b2:2c:26:54:e9:ad:6f:c4:1c:d1:8f:cd:88: 7c:ae:89:66:1e:42:83:5f:d0:6d:60:63:7a:b0:f7:e9:2c:a9: e5:15:4b:37:c6:14:af:b3:22:ac:ea:81:94:08:51:e3:2f:ba: 3e:4d:d7:87:55:d7:73:f3:13:33:14:56:df:06:18:32:7d:53: 56:06:fc:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REZERDExMC8GA1UEBRMoMTI1OUJGMkNFMkUxNkVERTRCQjY1NTkxMzA0MTgxNTU2 MTRCQTNFQTAeFw0yNTA4MjMwODAyMzRaFw0yNTA4MzAwODAyMzRaMBgxFjAUBgNV BAMTDTY4YTk3NTlhLWQ4M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2+05Cv9WvN5z9M5VNFaeb+NDS22hnkT0W5OB6sEa9rLrL+5DvRRt7wwiljgYM 5Q1EMOniAx1cgJDudzd48BOR1rdk2edG9KombCqAtetFa3hCCeS1muQOcZ5ogMqP 2CLKFqCv6VM0/o6Zg+J6MoRQE1Iup1dgf9d5dQM3WfDel+M4dpzQ4NEqKpt2AHXa Oohb2L+kK2jSAskWfRbvVGNQmHux8Tq1qDg+pNvnoHKdh6QRRWbiCPF+A9RmYTH9 LXHtREcopdB2+io56oFtAAMEFm4r1CcFhrOz+RuL8DBVB2v3BD+6RaZaD0zxpWHp p3sOdYiX3kaRsjIsMKrliE+XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt0cTd9ce YTGHIQ3mRisvn9GmSSkwHwYDVR0jBBgwFoAUElm/LOLhbt5LtlWRMEGBVWFLo+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERkRELzk3RUUwQUMwNEE5 MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1THRsV1JNRUdCVldGTG8t by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWxtX0xPTGhidDVMdGxXUk1FR0JWV0ZMby1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RkRELzk3RUUwQUMwNEE5MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1 THRsV1JNRUdCVldGTG8tby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAG/Yd8ucVKEzDXHzyksFl8GDqFa1kDB2TqA0EyN3bdi9+Qr1r7fLzlQ mdq2TapRrGFct1aKEJoul/1oFVnxxOAK/P28+dASqNWcfwA62g/U2twpgsgvpIw0 9oN+GR/e6GJYkv1fjhV5unJlAjhZrZ2SxyA/odFQG78y6SezA+CQMun1mh+7vZlt OqS6bhQT1rW7bJCfuPj1ivUJ3P2kSBp1x1Evt7eL+Yx+AslU+45ZDdcym1EcVFQ8 siwmVOmtb8Qc0Y/NiHyuiWYeQoNf0G1gY3qw9+ksqeUVSzfGFK+zIqzqgZQIUeMv uj5N14dV13PzEzMUVt8GGDJ9U1YG/KE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:17 2025 by rpki-client