$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft File: sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json) Hash identifier: hMXYyYibDXRtZFHEX/rBxkp3anoiziFviy2dKWw1Xl8= Subject key identifier: E6:5C:B6:06:D7:79:60:32:B0:09:41:D7:E4:EF:5F:1A:67:23:64:77 Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Certificate serial: 0A76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft Manifest number: 0A22 Signing time: Sun 08 Jun 2025 19:41:54 +0000 Manifest this update: Sun 08 Jun 2025 19:41:53 +0000 Manifest next update: Sun 15 Jun 2025 19:41:53 +0000 Files and hashes: 1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: 1hTARG15DbBOYjDM2uqH+7kzbzosNQF/rTf7BtrYuU4=) 2: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: 22LIWUXosTT/OY7Jf14A0mShYYmd8KbB6SWbnrDhxl0=) 3: 2FDA4F26E20711EF9B64614EC4F9AE02.roa (hash: 7UVWm9Qr3Gv2ae5STGc5B8NNM4GCnnFd4M5ZD/G8r78=) 4: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: f/v3Xwc+xZ+WS064/YX626UlguQk/j0d0TefoOG0b4E=) 5: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: o9QERY8vMjvb/oZ9N6XYdwqY3j9St5pMLYz81Y7dm5M=) 6: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: wADd79J5phMFz2zI3JBs2QdPJS+vVjZaqYNnTd8Gn4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 19:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2678 (0xa76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Validity Not Before: Jun 8 19:41:53 2025 GMT Not After : Jun 15 19:41:53 2025 GMT Subject: CN=6845e781-376a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:bc:14:00:1e:85:22:86:0b:f5:ba:8e:cd: 1a:df:b9:80:bd:bf:11:40:6b:fb:d1:34:64:c6:b1: 46:14:79:10:c6:76:3c:7d:d2:c4:c2:71:e8:be:f8: 73:b8:f3:78:f1:b7:d3:a8:48:b6:01:9b:e8:a4:b9: 44:9e:68:dd:7a:96:06:46:69:ec:41:25:09:b0:b3: 13:d5:e8:11:4f:f6:a2:c4:d4:fa:49:49:09:35:ea: 29:70:ed:05:65:da:c2:c4:0a:a0:bc:c5:4c:08:55: 02:f6:62:6d:47:5e:13:30:e5:49:d4:07:99:b4:d2: 84:d3:d0:9a:84:79:7d:87:b5:4f:f6:4e:a2:42:78: 4d:3a:b6:cd:40:12:83:e0:48:7d:1f:2f:fe:00:7e: 93:41:2c:52:c9:42:88:ec:2b:63:39:a1:fc:41:0e: 4f:57:8a:10:06:0c:f2:7e:cd:57:c8:0e:7d:b9:0b: 3e:ce:d3:ce:d7:58:d8:08:a0:9f:3c:74:c5:9c:a9: 2a:36:fa:b4:ce:0a:67:0b:aa:be:44:5f:db:5d:e3: 1c:2c:23:d2:aa:69:4d:d4:72:9e:65:5f:94:73:03: 4f:79:86:41:12:cf:24:d5:10:60:d8:4f:1e:1f:51: 75:89:c1:02:81:97:54:ed:e2:aa:11:ad:55:52:2f: 9f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5C:B6:06:D7:79:60:32:B0:09:41:D7:E4:EF:5F:1A:67:23:64:77 X509v3 Authority Key Identifier: keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b4:e7:27:b6:f8:e4:6d:58:ca:cd:82:be:a6:36:bc:a0:9e: c0:8b:96:56:1b:8e:e6:a2:21:c8:ed:21:d0:55:16:e9:de:d6: 3f:39:2b:9e:f0:fa:47:eb:f3:92:9d:18:68:07:94:10:13:a5: 3f:82:fc:1f:9b:d4:64:4e:76:e9:e8:b9:19:b4:10:f4:61:a5: 95:59:cd:e3:81:2d:9a:72:98:75:f9:9e:93:09:89:99:59:b2: a2:74:cc:06:8c:88:31:93:08:b0:bd:2a:0f:c2:53:0b:86:0c: 33:5d:52:7a:cf:d1:76:95:05:d8:fb:c4:67:ff:af:af:19:12: 58:5e:68:24:e7:a1:b1:fa:71:c4:34:66:40:92:62:56:da:8b: 5e:88:31:9f:8f:1a:e5:c4:6d:64:94:24:c7:98:b4:d0:84:0e: ec:1f:ca:12:14:7d:96:be:43:a7:a5:13:da:8b:49:7e:72:f1: c3:8e:27:d6:cf:32:9c:0c:db:52:96:f9:b4:ce:59:69:f0:42: b3:19:02:a6:2e:8c:31:f6:18:a6:fb:ed:8b:4e:f5:20:7f:c3: 3e:fe:82:33:ad:bd:10:6c:df:b7:cd:47:3f:81:fa:34:39:e8: 59:09:d9:74:29:4f:c4:75:a5:8d:93:d4:db:8c:d0:32:74:32: 69:eb:65:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEIxRTg0RkFDRkFDQkMwQjc4Mzg1NjFFRjIxRTI4RjJG QUNGNURGRUMwHhcNMjUwNjA4MTk0MTUzWhcNMjUwNjE1MTk0MTUzWjAYMRYwFAYD VQQDEw02ODQ1ZTc4MS0zNzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVW8FAAehSKGC/W6js0a37mAvb8RQGv70TRkxrFGFHkQxnY8fdLEwnHovvhz uPN48bfTqEi2AZvopLlEnmjdepYGRmnsQSUJsLMT1egRT/aixNT6SUkJNeopcO0F ZdrCxAqgvMVMCFUC9mJtR14TMOVJ1AeZtNKE09CahHl9h7VP9k6iQnhNOrbNQBKD 4Eh9Hy/+AH6TQSxSyUKI7CtjOaH8QQ5PV4oQBgzyfs1XyA59uQs+ztPO11jYCKCf PHTFnKkqNvq0zgpnC6q+RF/bXeMcLCPSqmlN1HKeZV+UcwNPeYZBEs8k1RBg2E8e H1F1icECgZdU7eKqEa1VUi+fnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZctgbX eWAysAlB1+TvXxpnI2R3MB8GA1UdIwQYMBaAFLHoT6z6y8C3g4Vh7yHijy+s9d/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8zNjg3MkE1RTgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdMZURoV0h2SWVLUEw2ejEz LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlaFByUHJMd0xlRGhXSHZJZUtQTDZ6MTMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2RC8zNjg3MkE1RTgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdM ZURoV0h2SWVLUEw2ejEzLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBytOcntvjkbVjKzYK+pja8oJ7Ai5ZWG47moiHI7SHQVRbp3tY/OSue 8PpH6/OSnRhoB5QQE6U/gvwfm9RkTnbp6LkZtBD0YaWVWc3jgS2acph1+Z6TCYmZ WbKidMwGjIgxkwiwvSoPwlMLhgwzXVJ6z9F2lQXY+8Rn/6+vGRJYXmgk56Gx+nHE NGZAkmJW2oteiDGfjxrlxG1klCTHmLTQhA7sH8oSFH2WvkOnpRPai0l+cvHDjifW zzKcDNtSlvm0zllp8EKzGQKmLowx9him++2LTvUgf8M+/oIzrb0QbN+3zUc/gfo0 OehZCdl0KU/EdaWNk9TbjNAydDJp62WV -----END CERTIFICATE-----Generated at Tue Jun 10 14:24:27 2025 by rpki-client