$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft File: Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft (raw, json) Hash identifier: NqNHFe8qci4HEQPNjIMRm7sIoWWDtRQ3fums9cx0Yl8= Subject key identifier: BB:B9:4A:37:C7:4B:E7:49:B0:F1:FC:A8:B0:07:14:9B:00:14:FB:BE Authority key identifier: 12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA Certificate issuer: /CN=A916DFDD/serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft Manifest number: 0B Signing time: Thu 03 Jul 2025 08:23:54 +0000 Manifest this update: Thu 03 Jul 2025 08:23:54 +0000 Manifest next update: Thu 10 Jul 2025 08:23:54 +0000 Files and hashes: 1: Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl (hash: jcRK2fvT9DzZvFbbEehvPTw+xQi0cV2kZOTbhrXk4BQ=) 2: 3D44173A4A9111F085C19317C4F9AE02.roa (hash: FwH/enA0/FsCkLYjV+LnJ4sOG3fwQvbOVp0WkLtMY2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DFDD, serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA Validity Not Before: Jul 3 08:23:54 2025 GMT Not After : Jul 10 08:23:54 2025 GMT Subject: CN=68663e1a-6db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:65:80:19:8c:8c:a1:d3:9e:f5:44:53:b3: 53:ce:a1:32:51:bd:e2:e8:92:15:01:ef:aa:ae:b8: 4c:07:75:7e:99:c4:6a:44:4a:91:61:b9:54:d2:49: 68:9f:f2:53:5b:aa:ae:d4:9b:1e:9d:0e:f6:b9:2f: 2a:45:c2:52:2a:79:2e:c9:4c:c5:74:28:07:c8:15: 0f:a0:3a:15:94:62:40:1d:46:13:3f:59:f8:4e:c8: ee:93:eb:72:1c:5f:b0:d2:5e:27:a4:d2:8f:93:8d: 4f:80:e3:71:37:2b:43:94:3d:79:1e:3f:83:51:b7: 6b:0d:e5:36:39:77:32:72:af:68:67:45:ac:7f:8a: ee:58:2f:a3:ed:8c:e9:b9:86:e1:1e:b9:5e:33:fe: 6a:92:7e:8d:b3:dc:97:a1:cd:55:61:16:27:70:2a: 4a:57:9d:7a:f4:35:bc:d4:e4:5a:ef:4f:b2:ab:6f: 10:ae:44:54:0a:be:81:09:5e:f5:24:0b:21:c6:ed: 5b:b5:f7:37:97:fa:dc:03:2d:22:53:d9:bf:5a:8b: f1:5a:91:22:fe:35:2f:3b:89:3f:60:e0:a1:2a:f4: f6:16:8a:84:6b:c9:2e:0c:42:8a:af:8f:ae:4d:34: 76:30:73:1a:b8:e2:3f:c0:ea:01:c9:19:73:84:cb: 87:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B9:4A:37:C7:4B:E7:49:B0:F1:FC:A8:B0:07:14:9B:00:14:FB:BE X509v3 Authority Key Identifier: keyid:12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:95:c7:ed:fc:1f:08:7c:8b:e3:8f:bc:3e:49:61:05:ef:4b: 7b:54:ae:15:98:c2:8c:27:3d:e5:de:a3:41:a7:14:25:d9:8e: ec:a8:db:c1:48:f4:9c:3c:9d:45:3e:ca:6c:db:15:f5:e5:2d: e8:15:92:e8:8b:ba:e0:d2:b1:07:90:f2:06:9e:83:42:b9:91: 55:43:6c:15:44:cc:a8:3f:00:60:e3:2b:05:1b:80:46:31:00: 37:12:7b:45:f2:ed:9c:06:b0:e8:e0:42:f5:50:ef:39:e9:1a: 2f:62:7e:a3:df:5b:9c:27:d2:1c:35:b7:69:45:7a:f2:39:13: 08:bc:2a:2b:ee:fd:6c:2f:92:f0:5c:6c:17:b7:48:29:f3:40: 33:08:73:05:87:d4:9a:35:59:ac:55:22:68:92:3d:4f:9a:89: 28:6b:2f:ba:67:6a:34:6d:db:ac:d8:f7:19:fb:ab:62:99:be: 77:6b:43:d2:68:ee:6f:8b:1c:bc:32:95:c0:cc:f7:9e:a6:fd: a4:8d:30:a9:0f:28:dd:cd:7d:4d:1b:ed:5a:30:96:84:52:2e: 7e:bd:85:a6:88:40:b4:19:09:3b:e9:ce:92:c3:8d:ba:b7:7f: 57:29:dd:47:f8:c4:7a:25:3a:1d:b8:e3:3a:b8:81:bd:bf:cc: 6a:f2:59:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REZERDExMC8GA1UEBRMoMTI1OUJGMkNFMkUxNkVERTRCQjY1NTkxMzA0MTgxNTU2 MTRCQTNFQTAeFw0yNTA3MDMwODIzNTRaFw0yNTA3MTAwODIzNTRaMBgxFjAUBgNV BAMTDTY4NjYzZTFhLTZkYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa9WWAGYyModOe9URTs1POoTJRveLokhUB76quuEwHdX6ZxGpESpFhuVTSSWif 8lNbqq7Umx6dDva5LypFwlIqeS7JTMV0KAfIFQ+gOhWUYkAdRhM/WfhOyO6T63Ic X7DSXiek0o+TjU+A43E3K0OUPXkeP4NRt2sN5TY5dzJyr2hnRax/iu5YL6PtjOm5 huEeuV4z/mqSfo2z3JehzVVhFidwKkpXnXr0NbzU5FrvT7KrbxCuRFQKvoEJXvUk CyHG7Vu19zeX+twDLSJT2b9ai/FakSL+NS87iT9g4KEq9PYWioRryS4MQoqvj65N NHYwcxq44j/A6gHJGXOEy4dpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu7lKN8dL 50mw8fyosAcUmwAU+74wHwYDVR0jBBgwFoAUElm/LOLhbt5LtlWRMEGBVWFLo+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERkRELzk3RUUwQUMwNEE5 MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1THRsV1JNRUdCVldGTG8t by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWxtX0xPTGhidDVMdGxXUk1FR0JWV0ZMby1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RkRELzk3RUUwQUMwNEE5MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1 THRsV1JNRUdCVldGTG8tby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMSVx+38Hwh8i+OPvD5JYQXvS3tUrhWYwownPeXeo0GnFCXZjuyo28FI 9Jw8nUU+ymzbFfXlLegVkuiLuuDSsQeQ8gaeg0K5kVVDbBVEzKg/AGDjKwUbgEYx ADcSe0Xy7ZwGsOjgQvVQ7znpGi9ifqPfW5wn0hw1t2lFevI5Ewi8Kivu/WwvkvBc bBe3SCnzQDMIcwWH1Jo1WaxVImiSPU+aiShrL7pnajRt26zY9xn7q2KZvndrQ9Jo 7m+LHLwylcDM956m/aSNMKkPKN3NfU0b7VowloRSLn69haaIQLQZCTvpzpLDjbq3 f1cp3Uf4xHolOh244zq4gb2/zGryWZ0= -----END CERTIFICATE-----Generated at Thu Jul 3 17:30:10 2025 by rpki-client