$ rpki-client -vvf rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft File: eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft (raw, json) Hash identifier: 3v/zXrZqk4gRA+f3YcW1Kk6Xgtaqyf4PW7wuaCxghAc= Subject key identifier: 06:36:D1:26:61:C9:08:8B:5E:5F:83:A1:05:CB:74:1D:65:42:86:06 Authority key identifier: 78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48 Certificate issuer: /CN=A91458BD/serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548 Certificate serial: 0599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft Manifest number: 0588 Signing time: Sun 20 Jul 2025 23:29:11 +0000 Manifest this update: Sun 20 Jul 2025 23:29:11 +0000 Manifest next update: Sun 27 Jul 2025 23:29:11 +0000 Files and hashes: 1: eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl (hash: tCcL6szDE1p9TkRy6siUKpTEmEWvYlIW+XFPHOF1r7w=) 2: 2B2AA83249DA11F0ADC32972C4F9AE02.roa (hash: ENQCCP1smLOBz6lkvyZXvu5GjJ9+TuN3CIZ9PkAQoUQ=) 3: 0A816CBA49DA11F09907E971C4F9AE02.roa (hash: wG78MZ6DvUZN1QM+z69f/6CHqJPulZ82YYhtj5h4cgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1433 (0x599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91458BD, serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548 Validity Not Before: Jul 20 23:29:11 2025 GMT Not After : Jul 27 23:29:11 2025 GMT Subject: CN=687d7bc7-5a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:47:38:c5:4b:89:ba:36:29:6d:65:78:a8: e1:9c:af:8e:97:9d:9a:bc:24:c4:a0:25:d8:e9:5c: ec:1c:f1:83:b2:c9:ba:f1:4f:39:7f:cc:12:e3:a5: 0a:b0:11:d8:a4:6f:0c:08:2d:d3:ee:d2:1b:f2:c7: 0e:be:ba:d1:02:c1:40:f1:07:bd:ec:99:4f:7d:c7: aa:72:a4:3a:42:09:70:6a:30:f1:6f:fc:52:d3:34: 64:d4:54:a3:77:27:e8:50:b1:c7:5d:11:37:c3:53: 90:15:c6:d7:8c:b3:22:92:38:10:b2:04:d8:61:6b: 4c:eb:e0:cd:6f:59:02:f0:d3:60:78:0d:c4:ae:78: c9:7c:8d:59:ac:9f:f1:32:bb:56:03:d1:ab:2a:a3: 3c:4a:55:72:72:35:a2:2f:ac:52:5c:7c:27:06:c8: c5:8c:4b:49:4c:10:f0:46:b3:f5:03:e3:1d:93:73: 90:fd:fa:11:0f:25:7f:a4:80:25:96:37:6d:43:1a: 55:0c:20:8f:ea:14:1e:a4:23:9b:1b:b4:3c:20:64: 63:26:6d:a6:30:96:1f:86:ec:02:aa:56:6c:4c:a2: 52:a1:3b:9d:d6:bf:7c:b9:7e:13:3f:77:84:46:77: b1:75:6f:18:79:d0:27:8e:8c:fe:ff:ec:73:fa:b8: 7f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:36:D1:26:61:C9:08:8B:5E:5F:83:A1:05:CB:74:1D:65:42:86:06 X509v3 Authority Key Identifier: keyid:78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:11:b2:d2:be:ce:9f:bf:00:86:0c:68:21:9b:44:ba:67:33: 6d:26:02:b1:1c:61:83:74:76:7c:0d:ee:6e:e3:ba:31:7d:9a: 5a:55:5a:ac:ea:96:18:61:96:8e:4e:f1:48:bb:a2:2c:9a:87: 02:38:40:93:d6:26:6b:db:c7:f3:f8:6c:00:66:97:15:3c:f7: 09:f2:5a:5d:9e:42:a8:78:a2:bc:b8:8b:3f:2b:59:51:54:20: 8b:8f:96:74:eb:af:0e:1f:0f:4e:90:ed:71:fc:7e:ef:83:68: d1:59:c2:af:66:32:05:21:35:1a:ef:1b:d4:2a:55:9e:51:2d: 54:00:d9:39:09:e0:7b:4d:a2:c4:40:0a:b0:64:b9:7b:44:f2: a3:dc:f0:d4:f9:c4:19:ca:86:09:b7:83:01:a3:58:50:36:b1: 2f:3a:3a:49:7d:85:41:07:fa:74:fb:4c:5b:ba:88:9b:cc:05: 12:2d:cb:c6:89:93:59:c3:e0:36:3c:21:d7:7e:27:9e:a4:fb: d3:79:de:84:78:1a:dd:1b:32:2c:05:0a:50:bb:28:e7:7a:02: 9c:7c:d2:ba:a9:38:d1:9a:49:89:29:b1:53:8f:bb:65:90:33: f0:29:87:92:6c:b6:17:24:24:89:98:cb:91:48:e2:61:55:22: de:56:a9:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU4QkQxMTAvBgNVBAUTKDc4QzQ5MTlFQ0Y5OTU5QkY3MTM0RTM1REQ1RTQyQ0RF QUI0MkQ1NDgwHhcNMjUwNzIwMjMyOTExWhcNMjUwNzI3MjMyOTExWjAYMRYwFAYD VQQDEw02ODdkN2JjNy01YTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyRHOMVLibo2KW1leKjhnK+Ol52avCTEoCXY6VzsHPGDssm68U85f8wS46UK sBHYpG8MCC3T7tIb8scOvrrRAsFA8Qe97JlPfceqcqQ6QglwajDxb/xS0zRk1FSj dyfoULHHXRE3w1OQFcbXjLMikjgQsgTYYWtM6+DNb1kC8NNgeA3ErnjJfI1ZrJ/x MrtWA9GrKqM8SlVycjWiL6xSXHwnBsjFjEtJTBDwRrP1A+Mdk3OQ/foRDyV/pIAl ljdtQxpVDCCP6hQepCObG7Q8IGRjJm2mMJYfhuwCqlZsTKJSoTud1r98uX4TP3eE RnexdW8YedAnjoz+/+xz+rh/yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAY20SZh yQiLXl+DoQXLdB1lQoYGMB8GA1UdIwQYMBaAFHjEkZ7PmVm/cTTjXdXkLN6rQtVI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NThCRC85MDIyRjMxNkU4 OUExMUVCOThDQUNBN0FDNEY5QUUwMi9lTVNSbnMtWldiOXhOT05kMWVRczNxdEMx VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VNU1Jucy1aV2I5eE5PTmQxZVFzM3F0QzFVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NThCRC85MDIyRjMxNkU4OUExMUVCOThDQUNBN0FDNEY5QUUwMi9lTVNSbnMtWldi OXhOT05kMWVRczNxdEMxVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjEbLSvs6fvwCGDGghm0S6ZzNtJgKxHGGDdHZ8De5u47oxfZpaVVqs 6pYYYZaOTvFIu6IsmocCOECT1iZr28fz+GwAZpcVPPcJ8lpdnkKoeKK8uIs/K1lR VCCLj5Z0668OHw9OkO1x/H7vg2jRWcKvZjIFITUa7xvUKlWeUS1UANk5CeB7TaLE QAqwZLl7RPKj3PDU+cQZyoYJt4MBo1hQNrEvOjpJfYVBB/p0+0xbuoibzAUSLcvG iZNZw+A2PCHXfieepPvTed6EeBrdGzIsBQpQuyjnegKcfNK6qTjRmkmJKbFTj7tl kDPwKYeSbLYXJCSJmMuRSOJhVSLeVqmJ -----END CERTIFICATE-----Generated at Mon Jul 21 12:44:25 2025 by rpki-client