$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft File: sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json) Hash identifier: QAJ2/7CzrtBM4SwX4uc5krFsMPrf1nhLSWmMpHhNIFY= Subject key identifier: 47:FF:32:7C:4D:D1:E2:5E:3D:2E:EA:BC:58:17:3A:A6:F4:72:6B:DF Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Certificate serial: 0A5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft Manifest number: 0A08 Signing time: Wed 16 Apr 2025 19:49:32 +0000 Manifest this update: Wed 16 Apr 2025 19:49:32 +0000 Manifest next update: Wed 23 Apr 2025 19:49:32 +0000 Files and hashes: 1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: eft87gJZkdXkKm0sh81Az51I1jLiER7gn6mO/rpIvPk=) 2: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: 22LIWUXosTT/OY7Jf14A0mShYYmd8KbB6SWbnrDhxl0=) 3: 2FDA4F26E20711EF9B64614EC4F9AE02.roa (hash: 7UVWm9Qr3Gv2ae5STGc5B8NNM4GCnnFd4M5ZD/G8r78=) 4: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: f/v3Xwc+xZ+WS064/YX626UlguQk/j0d0TefoOG0b4E=) 5: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: o9QERY8vMjvb/oZ9N6XYdwqY3j9St5pMLYz81Y7dm5M=) 6: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: wADd79J5phMFz2zI3JBs2QdPJS+vVjZaqYNnTd8Gn4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 19:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2652 (0xa5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Validity Not Before: Apr 16 19:49:32 2025 GMT Not After : Apr 23 19:49:32 2025 GMT Subject: CN=680009cc-a01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:92:17:ac:39:88:2a:ab:92:e8:f0:cd:66: c4:28:82:fe:50:9d:90:30:36:ff:32:3d:17:9e:2a: 1b:8d:50:dc:cb:54:04:14:82:93:c4:d3:15:f1:9e: dc:ef:c2:df:11:7b:65:b6:5e:4b:6c:5b:b1:d6:31: 72:a0:c0:92:bd:7c:e8:9a:38:25:e3:71:89:9d:d5: bc:c5:45:25:b9:cf:42:62:a2:0a:98:ba:60:14:89: 56:66:00:cf:38:4b:1b:9e:03:3a:9e:76:6e:0a:f9: d6:a9:0b:d9:57:d4:8b:cd:d4:bb:35:19:75:a4:c3: d1:cc:cd:1d:5a:3c:36:ba:62:0f:6d:41:2a:ee:25: 72:60:68:7e:3d:76:b1:52:86:89:02:99:34:10:59: 8e:90:28:86:07:29:7e:bd:0e:47:ad:32:a8:81:1d: f5:97:c6:f0:87:b9:ca:c0:99:fb:90:db:ce:ee:82: 11:0c:e6:12:ba:91:57:72:3c:89:f7:b6:ca:24:5a: 3a:71:f0:31:ff:81:dc:15:68:f9:a4:2f:a8:3e:f5: 9d:d3:c6:ad:9b:6e:a3:10:08:4b:f5:47:ca:1d:f8: d5:33:9b:22:f8:fc:64:ed:f1:81:1f:c1:42:d4:30: 85:47:82:67:0f:4c:1f:bc:bf:5e:7d:b1:30:00:7e: 0b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FF:32:7C:4D:D1:E2:5E:3D:2E:EA:BC:58:17:3A:A6:F4:72:6B:DF X509v3 Authority Key Identifier: keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:05:ff:88:74:16:43:e5:c8:5b:0a:a2:15:af:a3:80:ef:7a: e5:aa:86:ce:78:b7:f6:83:a7:da:12:8c:a3:dc:df:df:1b:05: dc:e9:4b:c7:99:b4:4b:8f:ee:a9:92:e8:61:4d:51:d4:d8:24: 87:8f:16:dc:f5:17:da:d8:f5:57:10:b3:76:e6:b2:62:4f:1b: de:fa:f1:8b:dc:a9:1b:c0:9c:a3:8b:da:04:5c:18:62:f6:8e: f8:63:59:45:06:47:dc:04:a5:5e:eb:98:87:c7:59:ce:86:e5: fa:cf:6a:6b:17:fd:8f:e1:8c:3e:fb:88:f2:56:c6:fe:14:74: df:ad:ce:b9:78:80:ae:df:73:3d:55:6e:35:93:bd:0a:d9:a5: 2e:78:9f:8c:e5:97:2f:80:95:e1:d3:cf:b2:54:ed:64:5c:a8: 20:23:ab:44:af:43:91:1c:20:5c:1f:5d:e0:2f:82:21:fe:0c: 3d:fb:e8:ba:d0:61:21:75:9b:4a:87:10:6f:e4:40:76:a3:5f: 2f:70:17:4a:6c:0d:1a:42:3b:fa:c9:6f:5c:bc:bb:5d:bc:41: fa:f7:8d:4b:9b:bb:cf:b5:3e:0c:02:a7:a0:2a:51:bf:a8:d6: fe:2d:1b:56:a1:7f:fc:0e:27:46:10:37:eb:40:3d:4d:49:f6: 30:2b:96:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEIxRTg0RkFDRkFDQkMwQjc4Mzg1NjFFRjIxRTI4RjJG QUNGNURGRUMwHhcNMjUwNDE2MTk0OTMyWhcNMjUwNDIzMTk0OTMyWjAYMRYwFAYD VQQDEw02ODAwMDljYy1hMDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0aSF6w5iCqrkujwzWbEKIL+UJ2QMDb/Mj0XniobjVDcy1QEFIKTxNMV8Z7c 78LfEXtltl5LbFux1jFyoMCSvXzomjgl43GJndW8xUUluc9CYqIKmLpgFIlWZgDP OEsbngM6nnZuCvnWqQvZV9SLzdS7NRl1pMPRzM0dWjw2umIPbUEq7iVyYGh+PXax UoaJApk0EFmOkCiGByl+vQ5HrTKogR31l8bwh7nKwJn7kNvO7oIRDOYSupFXcjyJ 97bKJFo6cfAx/4HcFWj5pC+oPvWd08atm26jEAhL9UfKHfjVM5si+Pxk7fGBH8FC 1DCFR4JnD0wfvL9efbEwAH4LKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEf/MnxN 0eJePS7qvFgXOqb0cmvfMB8GA1UdIwQYMBaAFLHoT6z6y8C3g4Vh7yHijy+s9d/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8zNjg3MkE1RTgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdMZURoV0h2SWVLUEw2ejEz LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlaFByUHJMd0xlRGhXSHZJZUtQTDZ6MTMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2RC8zNjg3MkE1RTgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdM ZURoV0h2SWVLUEw2ejEzLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjBf+IdBZD5chbCqIVr6OA73rlqobOeLf2g6faEoyj3N/fGwXc6UvH mbRLj+6pkuhhTVHU2CSHjxbc9Rfa2PVXELN25rJiTxve+vGL3KkbwJyji9oEXBhi 9o74Y1lFBkfcBKVe65iHx1nOhuX6z2prF/2P4Yw++4jyVsb+FHTfrc65eICu33M9 VW41k70K2aUueJ+M5ZcvgJXh08+yVO1kXKggI6tEr0ORHCBcH13gL4Ih/gw9++i6 0GEhdZtKhxBv5EB2o18vcBdKbA0aQjv6yW9cvLtdvEH6941Lm7vPtT4MAqegKlG/ qNb+LRtWoX/8DidGEDfrQD1NSfYwK5ZL -----END CERTIFICATE-----Generated at Thu Apr 17 07:38:37 2025 by rpki-client