$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json) Hash identifier: txzQQQJBA0GgJZEBe15EFraoCQnMwXhP1lSWBYcnESw= Subject key identifier: 25:72:3C:F4:A5:B1:AF:00:8B:66:1B:E6:85:A6:10:D6:1A:E4:34:CB Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Certificate serial: 0A2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft Manifest number: 0A23 Signing time: Fri 04 Jul 2025 20:09:55 +0000 Manifest this update: Fri 04 Jul 2025 20:09:54 +0000 Manifest next update: Fri 11 Jul 2025 20:09:54 +0000 Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: wde12ZeObR/Ng3vhKB9Wlop9r+MyB7QDMnTD//U44WU=) 2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: c+KKdUiE40XaCCosVDJRN/ivdbzY7AEBYwh4rejWgD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2604 (0xa2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Validity Not Before: Jul 4 20:09:54 2025 GMT Not After : Jul 11 20:09:54 2025 GMT Subject: CN=68683513-4285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c4:d3:7a:4d:09:94:b5:1e:9c:3d:2f:e8:36: f5:2a:3b:7c:f0:fa:7a:df:0c:e8:d3:b3:d6:04:d5: eb:be:e9:75:27:c3:0f:82:1e:6c:7a:63:76:10:cd: 2c:9d:00:f6:b0:41:0d:b4:70:ea:bc:68:a6:7d:6c: e8:d5:e1:91:ff:b6:49:c6:1b:b9:e6:0a:98:b4:ad: 37:f0:e2:ac:c4:b7:a4:89:6a:09:cc:87:46:66:6c: 37:ad:41:d6:0e:bf:70:fa:69:79:7c:68:df:4c:f7: 2e:96:ca:49:e8:82:2b:62:80:4b:24:56:04:c6:a6: 5a:e3:81:2d:07:27:0b:f2:dc:fe:be:10:da:78:5a: ff:71:4b:77:cd:7f:a4:84:dd:c0:27:a6:fe:eb:e2: fa:df:51:8e:68:cb:fb:09:45:6b:30:e7:1d:dc:50: b7:ff:1e:ff:a1:0a:14:bd:94:c4:c0:f5:37:40:3b: 57:f0:21:56:8b:e1:99:60:2e:1e:af:e3:89:c4:32: d8:a2:c5:5b:be:7e:1a:6c:d6:0f:34:33:98:26:78: ef:0c:5d:57:af:e6:64:6c:f0:57:06:1f:c7:a4:d6: 98:e4:92:47:4f:a5:93:66:46:89:cd:9f:4e:7e:96: b7:07:4a:b6:ab:ae:f7:0d:6b:a2:ec:bf:16:b0:50: ea:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:72:3C:F4:A5:B1:AF:00:8B:66:1B:E6:85:A6:10:D6:1A:E4:34:CB X509v3 Authority Key Identifier: keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:17:ea:7c:d7:68:bf:0f:8d:61:ee:1a:06:d7:7f:06:cd:20: c2:38:bc:6a:d8:97:18:39:17:86:cc:57:37:21:21:b2:dc:dc: 30:2f:28:11:fb:ea:7b:39:c9:47:83:4c:05:86:13:18:cd:01: 07:b2:44:79:06:86:03:61:77:35:b4:64:02:b4:03:a4:f1:1d: fe:5e:17:2d:f8:d8:6f:ed:a6:3d:b1:40:9c:48:74:e3:ba:cf: cc:e1:89:10:73:78:bd:8d:3b:9e:29:e7:cd:2f:0a:01:10:a4: 98:c0:db:d8:49:a3:6a:e6:54:8c:55:19:37:de:eb:98:33:53: 52:27:d2:3f:13:1d:61:0b:16:22:9f:33:a7:ef:17:53:93:83: 98:1f:86:ef:7d:66:62:80:b7:24:b2:6d:7a:fa:7b:b5:3a:0a: 3c:0f:d7:06:55:46:0b:57:4d:78:6d:71:50:7a:1a:85:a7:4e: 4f:ba:df:a1:0a:7e:57:91:21:90:a7:a4:9c:f1:f8:90:d7:ad: 4f:e6:80:5d:d1:4a:8a:92:ac:6b:c0:5f:73:42:46:4f:b8:25: d6:99:4a:4e:f5:f4:a8:be:ad:04:55:41:5b:cc:cf:1b:8f:46: 60:6a:87:3c:3f:15:dc:10:3b:e8:20:d3:fd:14:d6:a8:14:39: e7:76:64:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3 ODNFOEFDQkYwHhcNMjUwNzA0MjAwOTU0WhcNMjUwNzExMjAwOTU0WjAYMRYwFAYD VQQDEw02ODY4MzUxMy00Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7cTTek0JlLUenD0v6Db1Kjt88Pp63wzo07PWBNXrvul1J8MPgh5semN2EM0s nQD2sEENtHDqvGimfWzo1eGR/7ZJxhu55gqYtK038OKsxLekiWoJzIdGZmw3rUHW Dr9w+ml5fGjfTPculspJ6IIrYoBLJFYExqZa44EtBycL8tz+vhDaeFr/cUt3zX+k hN3AJ6b+6+L631GOaMv7CUVrMOcd3FC3/x7/oQoUvZTEwPU3QDtX8CFWi+GZYC4e r+OJxDLYosVbvn4abNYPNDOYJnjvDF1Xr+ZkbPBXBh/HpNaY5JJHT6WTZkaJzZ9O fpa3B0q2q673DWui7L8WsFDqpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVyPPSl sa8Ai2Yb5oWmENYa5DTLMB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDc3QS9DODI4OTQzMjczRTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsx MmFXWGhwcktreDU0UG9yTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvF+p812i/D41h7hoG138GzSDCOLxq2JcYOReGzFc3ISGy3NwwLygR ++p7OclHg0wFhhMYzQEHskR5BoYDYXc1tGQCtAOk8R3+Xhct+Nhv7aY9sUCcSHTj us/M4YkQc3i9jTueKefNLwoBEKSYwNvYSaNq5lSMVRk33uuYM1NSJ9I/Ex1hCxYi nzOn7xdTk4OYH4bvfWZigLcksm16+nu1Ogo8D9cGVUYLV014bXFQehqFp05Put+h Cn5XkSGQp6Sc8fiQ161P5oBd0UqKkqxrwF9zQkZPuCXWmUpO9fSovq0EVUFbzM8b j0Zgaoc8PxXcEDvoINP9FNaoFDnndmSc -----END CERTIFICATE-----Generated at Sun Jul 6 06:11:07 2025 by rpki-client