$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json) Hash identifier: c2KyI4S7Wy9+VVB1UoD4TARUuHPB/+1g7xZycJ9Wxkc= Subject key identifier: DE:E0:56:23:54:C1:9E:0B:92:94:5F:05:DB:E3:57:1F:2E:25:07:71 Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft Manifest number: 0A59 Signing time: Sat 18 Oct 2025 20:40:07 +0000 Manifest this update: Sat 18 Oct 2025 20:40:07 +0000 Manifest next update: Sat 25 Oct 2025 20:40:07 +0000 Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: QIr+W6JyoBEgzbOvQYXUB6FFVkk+sxrP5Qw98PcaqOU=) 2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: c+KKdUiE40XaCCosVDJRN/ivdbzY7AEBYwh4rejWgD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Validity Not Before: Oct 18 20:40:07 2025 GMT Not After : Oct 25 20:40:07 2025 GMT Subject: CN=68f3fb27-e70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:46:10:f5:b5:e7:2d:92:e0:70:4c:18:53:82: 83:6a:75:c2:5c:77:0e:af:d0:2b:30:84:9b:3d:3b: 1c:cb:3e:c7:08:6a:12:28:b1:4c:ab:4e:88:ef:72: 4b:ec:1e:dd:ec:23:8a:9e:e4:6b:3b:a2:59:fa:97: c9:fb:a7:73:6f:0d:b8:3b:7d:a3:9c:c4:80:a8:22: ce:45:6e:ac:3b:df:26:96:45:1f:88:2c:73:d9:20: 62:00:28:83:69:f3:35:5d:07:0c:ba:07:5c:08:52: 45:51:77:c0:6e:2c:5f:6c:b9:77:1c:8d:00:68:bb: b7:c7:5c:43:26:5b:73:68:47:d6:a1:3e:30:dc:a5: 6f:79:78:85:59:24:56:62:80:d9:e9:69:4d:06:61: 79:0a:91:fd:67:c9:65:c9:07:80:3e:03:ff:ce:29: ac:01:8f:14:ca:09:e2:10:b3:ff:e9:24:c4:58:8a: c7:28:2c:0a:93:f8:97:4a:b3:ea:a3:33:9b:74:ca: 19:9b:d9:e4:5f:30:a3:9c:c6:c5:39:55:e0:13:69: a0:cc:2a:48:a1:a6:d1:ef:07:75:47:57:15:9e:f5: 72:33:35:9b:17:38:62:9c:b5:22:77:2f:a2:3e:f6: c9:d0:5a:8e:47:a3:ce:18:87:98:50:24:34:0a:a0: e0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E0:56:23:54:C1:9E:0B:92:94:5F:05:DB:E3:57:1F:2E:25:07:71 X509v3 Authority Key Identifier: keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3f:5e:a1:11:b5:85:16:30:f8:ae:f6:01:8c:4f:06:55:61: 1a:89:63:32:2f:67:9a:cc:8c:d2:15:05:88:cc:a5:69:c2:97: 74:bd:3b:e6:5a:1b:55:43:bb:7e:41:a7:bc:e3:41:8d:c8:88: 99:02:98:dc:7d:a6:59:43:14:0b:58:b3:8c:df:98:7c:c5:27: 28:69:03:ea:3d:43:23:70:d6:48:ae:dc:62:51:4a:66:aa:ea: d0:c1:a5:13:ab:9b:2c:7e:06:07:18:20:8a:bb:a8:42:08:a7: 14:45:11:fc:6f:70:36:8c:5a:16:f4:1f:2f:de:d6:36:7c:38: f4:ff:df:d9:25:8b:9c:24:e5:b1:db:59:81:91:a3:5d:2a:4b: 14:30:ea:d0:93:56:45:46:41:7f:d9:4d:fc:31:48:df:94:40: 72:b2:dc:b5:77:60:0a:7a:84:1d:ee:71:3a:2e:95:d7:d0:a8: 48:05:d0:1a:3c:2f:cc:9b:15:b7:9a:ce:2a:84:67:13:a2:ba: d5:e2:5e:f2:29:b9:b4:97:e8:c5:7c:73:6d:d7:3f:83:b9:63: 6a:74:04:9f:2e:1a:7d:14:d4:ac:7b:b1:51:82:45:fd:5f:3d: 1a:5c:65:61:16:b5:e4:9f:f8:51:10:65:8d:af:85:2e:a1:c7: 88:a4:91:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3 ODNFOEFDQkYwHhcNMjUxMDE4MjA0MDA3WhcNMjUxMDI1MjA0MDA3WjAYMRYwFAYD VQQDEw02OGYzZmIyNy1lNzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UYQ9bXnLZLgcEwYU4KDanXCXHcOr9ArMISbPTscyz7HCGoSKLFMq06I73JL 7B7d7COKnuRrO6JZ+pfJ+6dzbw24O32jnMSAqCLORW6sO98mlkUfiCxz2SBiACiD afM1XQcMugdcCFJFUXfAbixfbLl3HI0AaLu3x1xDJltzaEfWoT4w3KVveXiFWSRW YoDZ6WlNBmF5CpH9Z8llyQeAPgP/zimsAY8UygniELP/6STEWIrHKCwKk/iXSrPq ozObdMoZm9nkXzCjnMbFOVXgE2mgzCpIoabR7wd1R1cVnvVyMzWbFzhinLUidy+i PvbJ0FqOR6POGIeYUCQ0CqDg4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7gViNU wZ4LkpRfBdvjVx8uJQdxMB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDc3QS9DODI4OTQzMjczRTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsx MmFXWGhwcktreDU0UG9yTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkP16hEbWFFjD4rvYBjE8GVWEaiWMyL2eazIzSFQWIzKVpwpd0vTvm WhtVQ7t+Qae840GNyIiZApjcfaZZQxQLWLOM35h8xScoaQPqPUMjcNZIrtxiUUpm qurQwaUTq5ssfgYHGCCKu6hCCKcURRH8b3A2jFoW9B8v3tY2fDj0/9/ZJYucJOWx 21mBkaNdKksUMOrQk1ZFRkF/2U38MUjflEBysty1d2AKeoQd7nE6LpXX0KhIBdAa PC/MmxW3ms4qhGcTorrV4l7yKbm0l+jFfHNt1z+DuWNqdASfLhp9FNSse7FRgkX9 Xz0aXGVhFrXkn/hREGWNr4UuoceIpJG4 -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:14 2025 by rpki-client