$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft File: Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft (raw, json) Hash identifier: YUKilgEGoGLUuY9BtPP+1rDF7PMMvq9XzddERDsjWuY= Subject key identifier: 56:47:DD:9D:D3:B2:C6:87:5C:99:50:53:20:15:CC:8C:A6:17:A0:1D Authority key identifier: 12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA Certificate issuer: /CN=A916DFDD/serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft Manifest number: 44 Signing time: Sun 19 Oct 2025 10:52:58 +0000 Manifest this update: Sun 19 Oct 2025 10:52:57 +0000 Manifest next update: Sun 26 Oct 2025 10:52:57 +0000 Files and hashes: 1: Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl (hash: tsDcIeikFK0o6o3aLArgBCRNuMCPHY1MthO5aYKUpVk=) 2: 780B9CF8867811F0AA0D2534C4F9AE02.roa (hash: X3bLg+wYV1t3tD4gl+ObUUyr463NoOxUyC03tZzeKjA=) 3: 78817658867811F0AA0D2534C4F9AE02.roa (hash: XWnPSEphd3JYQ8zrDoJg7cr7D+uDeG7GtgQZULFil08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DFDD, serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA Validity Not Before: Oct 19 10:52:57 2025 GMT Not After : Oct 26 10:52:57 2025 GMT Subject: CN=68f4c309-fbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:0e:93:f6:45:43:73:94:fc:1f:16:5f:8d: ba:f6:7f:a0:d0:49:0e:51:de:4b:8f:1e:a2:3b:fb: b9:af:cf:0f:de:bb:57:37:7f:81:18:72:7d:52:b6: 9a:0e:fc:e4:87:bb:f4:6c:07:d7:6d:fb:c3:cd:e7: 11:65:60:d3:60:9d:cd:d2:cc:d4:cf:0f:af:49:04: e3:b8:d2:9e:da:e9:e3:4b:80:f0:6b:ec:7a:fe:24: 39:56:5b:94:d4:60:91:fe:7f:84:fb:3b:3b:28:23: 5f:92:0c:78:5a:75:cf:62:ed:ef:91:c0:68:d9:9b: dc:15:85:b2:4a:78:56:f2:ea:1f:03:9b:90:bb:57: 45:65:06:f8:d0:9e:74:f3:c5:30:81:8f:23:d2:b3: 72:66:27:d2:2e:c5:e0:94:a5:23:0e:6e:3d:63:d9: e7:0f:89:c2:86:52:bb:e3:73:13:fb:1e:2a:b7:de: a9:20:21:9b:9e:47:a3:f8:89:7c:95:6a:ae:e5:95: e9:c5:70:5b:5c:5e:ee:85:61:82:a0:3f:da:7b:01: 4a:55:09:62:10:e6:07:e3:74:7e:5f:ab:50:d8:6b: 80:b9:a0:45:0b:2a:63:d7:67:d9:38:99:f6:f6:84: 5f:20:d1:0e:42:62:e3:b7:69:c7:df:29:5c:bd:0f: 9f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:47:DD:9D:D3:B2:C6:87:5C:99:50:53:20:15:CC:8C:A6:17:A0:1D X509v3 Authority Key Identifier: keyid:12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c1:e8:bb:c3:49:92:59:52:80:78:74:42:13:8a:80:39:b6: e6:56:b6:da:15:20:76:b3:59:70:86:b0:ed:98:60:a5:cf:39: 2f:0a:42:fb:40:d7:56:3c:4c:92:55:52:e3:df:aa:a2:97:d6: 80:fc:cd:ba:f0:48:7f:de:59:af:8c:6e:ac:48:54:38:bf:e4: 79:89:65:6a:6a:ec:f0:19:16:cf:29:b6:e6:9f:14:8b:c9:1d: 44:fb:dd:e9:c8:49:92:49:01:51:4f:76:fb:ed:ac:fc:07:1a: f6:6a:a3:52:9c:17:0c:7c:3e:50:1c:5e:d9:16:45:b9:96:32: 9c:a3:45:48:07:e2:65:53:37:bd:d3:43:fe:3e:ef:f4:45:60: 79:f5:d0:27:d8:74:f0:74:50:6c:b6:aa:43:90:1b:68:81:95: 75:35:ec:1f:ae:c2:d6:1f:b6:ff:bb:be:41:35:ab:c9:7d:63: eb:97:e9:50:f1:e3:4d:16:81:4b:86:aa:8a:1b:2f:6e:1c:29: 8f:99:56:0b:0f:8a:c9:53:87:5e:34:58:40:a9:8b:b8:0c:61: c1:f6:e2:0c:ad:d1:fd:e5:d1:fb:d9:07:6d:32:33:7e:30:99: 7d:6d:ff:6e:91:8d:34:95:0f:5d:60:42:fb:02:d5:a8:05:61: 82:ce:90:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REZERDExMC8GA1UEBRMoMTI1OUJGMkNFMkUxNkVERTRCQjY1NTkxMzA0MTgxNTU2 MTRCQTNFQTAeFw0yNTEwMTkxMDUyNTdaFw0yNTEwMjYxMDUyNTdaMBgxFjAUBgNV BAMTDTY4ZjRjMzA5LWZiZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJzw6T9kVDc5T8HxZfjbr2f6DQSQ5R3kuPHqI7+7mvzw/eu1c3f4EYcn1StpoO /OSHu/RsB9dt+8PN5xFlYNNgnc3SzNTPD69JBOO40p7a6eNLgPBr7Hr+JDlWW5TU YJH+f4T7OzsoI1+SDHhadc9i7e+RwGjZm9wVhbJKeFby6h8Dm5C7V0VlBvjQnnTz xTCBjyPSs3JmJ9IuxeCUpSMObj1j2ecPicKGUrvjcxP7Hiq33qkgIZueR6P4iXyV aq7llenFcFtcXu6FYYKgP9p7AUpVCWIQ5gfjdH5fq1DYa4C5oEULKmPXZ9k4mfb2 hF8g0Q5CYuO3acffKVy9D5+fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVkfdndOy xodcmVBTIBXMjKYXoB0wHwYDVR0jBBgwFoAUElm/LOLhbt5LtlWRMEGBVWFLo+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERkRELzk3RUUwQUMwNEE5 MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1THRsV1JNRUdCVldGTG8t by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWxtX0xPTGhidDVMdGxXUk1FR0JWV0ZMby1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RkRELzk3RUUwQUMwNEE5MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1 THRsV1JNRUdCVldGTG8tby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACjB6LvDSZJZUoB4dEITioA5tuZWttoVIHazWXCGsO2YYKXPOS8KQvtA 11Y8TJJVUuPfqqKX1oD8zbrwSH/eWa+MbqxIVDi/5HmJZWpq7PAZFs8ptuafFIvJ HUT73enISZJJAVFPdvvtrPwHGvZqo1KcFwx8PlAcXtkWRbmWMpyjRUgH4mVTN73T Q/4+7/RFYHn10CfYdPB0UGy2qkOQG2iBlXU17B+uwtYftv+7vkE1q8l9Y+uX6VDx 400WgUuGqoobL24cKY+ZVgsPislTh140WECpi7gMYcH24gyt0f3l0fvZB20yM34w mX1t/26RjTSVD11gQvsC1agFYYLOkKU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:55:07 2025 by rpki-client