$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft File: sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json) Hash identifier: kdi8jdT4Qevwr3tPUo5M24sQirOEn5jfwuzuue7ydXk= Subject key identifier: 72:A7:13:9A:99:95:88:56:F0:BB:64:C9:6A:CC:B3:06:D2:EB:94:E6 Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Certificate serial: 0A3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft Manifest number: 09E9 Signing time: Fri 14 Feb 2025 20:59:46 +0000 Manifest this update: Fri 14 Feb 2025 20:59:45 +0000 Manifest next update: Fri 21 Feb 2025 20:59:45 +0000 Files and hashes: 1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: Y2tdKKeIAu98QZHcmgib3Oc5mn9nXToBpwpFuFEgrh8=) 2: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: 22LIWUXosTT/OY7Jf14A0mShYYmd8KbB6SWbnrDhxl0=) 3: 2FDA4F26E20711EF9B64614EC4F9AE02.roa (hash: 7UVWm9Qr3Gv2ae5STGc5B8NNM4GCnnFd4M5ZD/G8r78=) 4: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: f/v3Xwc+xZ+WS064/YX626UlguQk/j0d0TefoOG0b4E=) 5: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: o9QERY8vMjvb/oZ9N6XYdwqY3j9St5pMLYz81Y7dm5M=) 6: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: wADd79J5phMFz2zI3JBs2QdPJS+vVjZaqYNnTd8Gn4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2621 (0xa3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D Validity Not Before: Feb 14 20:59:45 2025 GMT Not After : Feb 21 20:59:45 2025 GMT Subject: CN=67afaec1-b3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:2c:fa:bf:0e:10:bf:a4:ef:6b:09:06:4b: 0a:21:13:8d:4e:03:4c:b7:1c:8c:07:95:87:ef:e3: 17:e3:7b:50:dd:81:f0:c1:da:68:0b:27:65:00:1a: 91:73:1e:5f:65:1e:f7:22:64:e4:2c:13:5b:e7:85: 5a:4e:c8:3e:ba:fd:7e:19:78:08:a9:8f:ef:96:90: 40:34:91:2f:27:ea:e5:fd:e2:6f:56:15:b1:49:5d: ab:de:cf:03:64:da:83:83:67:c6:a0:d6:02:ac:f1: 6b:da:55:33:c4:e4:7b:27:00:7f:48:25:58:d1:85: c6:70:09:02:43:3c:50:e8:38:51:89:f3:c9:9f:a2: 33:b0:e8:15:d6:23:28:e8:46:df:c2:11:69:b5:f6: c1:b6:1b:d9:e2:ec:fb:6e:1d:60:91:b7:d1:ee:3d: 06:e8:d6:a2:b7:07:83:6a:79:23:35:fe:a7:01:4b: 58:1d:11:80:57:11:1d:0f:53:cf:55:76:c5:6b:30: 73:e3:de:b8:1f:d7:6d:7e:94:6e:df:e1:36:63:18: 78:c9:a0:0c:ae:7d:40:10:89:0e:b3:79:42:ac:23: a9:16:bd:f8:33:8b:ca:e9:d5:e6:66:32:ef:25:e1: 3b:c2:cc:7b:c1:f8:c5:0f:9a:7b:c8:3d:a7:48:3d: de:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A7:13:9A:99:95:88:56:F0:BB:64:C9:6A:CC:B3:06:D2:EB:94:E6 X509v3 Authority Key Identifier: keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:4e:47:80:a5:0e:bb:ad:5b:48:5c:72:0f:55:6e:ac:89:fa: 06:07:e8:0d:cd:68:79:d5:f5:d8:6c:d3:d7:9b:54:c2:ff:b7: d2:3f:d9:ac:35:f0:df:6b:5c:ca:a8:f6:81:6a:d3:a7:81:6c: 01:4e:d7:66:8b:92:08:f8:61:c1:a0:94:f0:fd:3b:d6:c1:c2: c3:06:db:53:7c:79:5a:f9:a3:1d:c8:04:6b:e4:3c:eb:f3:cf: 0a:cb:4c:ca:f5:b1:f9:b3:6f:7f:a2:bb:55:69:66:62:53:0d: e6:77:dc:0a:00:98:fc:0f:0c:40:93:b0:27:60:34:d4:ec:ff: 7b:00:8c:2c:a2:78:35:a0:30:2e:14:f9:38:f4:9e:86:d6:88: dc:d8:02:51:f9:27:bc:81:2e:72:1c:1e:30:91:38:85:07:d8: b2:89:72:3d:5b:b8:c5:30:8e:2f:98:5d:1c:b6:0b:83:44:c3: 55:4f:ac:af:16:ed:8c:5b:e7:bb:d0:de:f0:3a:7f:70:51:59: a0:cc:46:a7:37:77:73:67:47:34:49:bf:4f:79:cd:ba:bb:65: 9c:aa:d6:a3:4d:67:df:91:dd:c3:5e:70:8b:5a:a0:b4:0e:0c: 34:8a:a4:8c:ff:06:8c:1a:ea:b7:b8:d3:7a:74:b5:86:9d:44: b9:1d:38:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEIxRTg0RkFDRkFDQkMwQjc4Mzg1NjFFRjIxRTI4RjJG QUNGNURGRUMwHhcNMjUwMjE0MjA1OTQ1WhcNMjUwMjIxMjA1OTQ1WjAYMRYwFAYD VQQDEw02N2FmYWVjMS1iM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgQs+r8OEL+k72sJBksKIRONTgNMtxyMB5WH7+MX43tQ3YHwwdpoCydlABqR cx5fZR73ImTkLBNb54VaTsg+uv1+GXgIqY/vlpBANJEvJ+rl/eJvVhWxSV2r3s8D ZNqDg2fGoNYCrPFr2lUzxOR7JwB/SCVY0YXGcAkCQzxQ6DhRifPJn6IzsOgV1iMo 6EbfwhFptfbBthvZ4uz7bh1gkbfR7j0G6NaitweDankjNf6nAUtYHRGAVxEdD1PP VXbFazBz4964H9dtfpRu3+E2Yxh4yaAMrn1AEIkOs3lCrCOpFr34M4vK6dXmZjLv JeE7wsx7wfjFD5p7yD2nSD3eBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKnE5qZ lYhW8LtkyWrMswbS65TmMB8GA1UdIwQYMBaAFLHoT6z6y8C3g4Vh7yHijy+s9d/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8zNjg3MkE1RTgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdMZURoV0h2SWVLUEw2ejEz LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlaFByUHJMd0xlRGhXSHZJZUtQTDZ6MTMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2RC8zNjg3MkE1RTgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdM ZURoV0h2SWVLUEw2ejEzLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHTkeApQ67rVtIXHIPVW6sifoGB+gNzWh51fXYbNPXm1TC/7fSP9ms NfDfa1zKqPaBatOngWwBTtdmi5II+GHBoJTw/TvWwcLDBttTfHla+aMdyARr5Dzr 888Ky0zK9bH5s29/ortVaWZiUw3md9wKAJj8DwxAk7AnYDTU7P97AIwsong1oDAu FPk49J6G1ojc2AJR+Se8gS5yHB4wkTiFB9iyiXI9W7jFMI4vmF0ctguDRMNVT6yv Fu2MW+e70N7wOn9wUVmgzEanN3dzZ0c0Sb9Pec26u2WcqtajTWffkd3DXnCLWqC0 Dgw0iqSM/waMGuq3uNN6dLWGnUS5HTif -----END CERTIFICATE-----Generated at Sun Feb 16 20:14:36 2025 by rpki-client