$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft File: sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json) Hash identifier: 0AZE9oRMjFVyjvoPSg8Cd5LRS80fMBHWIZlGtcjdO84= Subject key identifier: 24:11:E9:18:A7:74:9F:D9:C6:8C:12:08:D6:82:57:CB:1F:F2:D3:4B Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Certificate serial: 0AC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft Manifest number: 0A6A Signing time: Wed 22 Oct 2025 20:29:24 +0000 Manifest this update: Wed 22 Oct 2025 20:29:23 +0000 Manifest next update: Wed 29 Oct 2025 20:29:23 +0000 Files and hashes: 1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: pzmxB6MhjY/0qnmMw0fcLxOrD1Ng2kQDgmR7zbPJ5TQ=) 2: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: 22LIWUXosTT/OY7Jf14A0mShYYmd8KbB6SWbnrDhxl0=) 3: 36C13562946211F0A915C35EC4F9AE02.roa (hash: eWXrwTNf70qYfKUKT84LBuZigeywl7Y1ZgrqiqsEslY=) 4: 2FDA4F26E20711EF9B64614EC4F9AE02.roa (hash: 7UVWm9Qr3Gv2ae5STGc5B8NNM4GCnnFd4M5ZD/G8r78=) 5: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: f/v3Xwc+xZ+WS064/YX626UlguQk/j0d0TefoOG0b4E=) 6: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: o9QERY8vMjvb/oZ9N6XYdwqY3j9St5pMLYz81Y7dm5M=) 7: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: JBBQP0K67WdCWLZg5hsxTdVEIVYUz0SAm7vkyl5/wZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2752 (0xac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Validity Not Before: Oct 22 20:29:23 2025 GMT Not After : Oct 29 20:29:23 2025 GMT Subject: CN=68f93ea4-bcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fc:b5:23:3c:e6:44:00:0f:e0:95:04:a5:d1: bb:cb:b5:68:04:66:9a:dd:38:91:3a:67:71:77:21: 67:af:f4:04:b4:2e:fc:f5:22:c0:95:91:52:14:64: f2:d8:44:b8:0e:c9:47:3f:f3:67:41:95:56:8f:26: 1c:c5:de:11:be:8f:2d:9d:6a:c2:76:c4:42:36:32: 40:89:21:b9:fc:53:87:78:18:64:5d:cb:8b:9a:76: 91:0c:bd:8d:6e:ca:d1:92:8c:f5:fa:bb:fc:e6:e5: c8:dd:6f:fd:8d:b0:50:65:f2:9e:76:5c:88:2c:43: 87:79:83:18:25:e3:fd:87:7f:cf:0e:f2:61:80:a6: 5b:64:d1:33:06:89:2e:e1:6a:6a:1c:a4:81:e3:96: 37:df:ca:32:7a:9e:4b:d2:15:a7:0e:22:92:b1:34: 40:cf:64:c7:49:4e:f8:6c:90:a3:32:c1:4f:fd:c8: 61:80:ba:91:f7:9c:68:d1:a4:aa:9c:bb:e7:ac:8b: d5:03:e5:4b:f6:cc:5b:68:b2:59:fb:f4:2a:1d:51: 63:1a:76:33:34:85:5f:46:f8:31:de:c7:96:fe:56: ee:bb:13:ed:ae:51:75:13:42:e1:33:a5:95:b0:27: 5b:c6:40:bd:36:ee:be:3a:04:49:8f:26:aa:1f:6e: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:11:E9:18:A7:74:9F:D9:C6:8C:12:08:D6:82:57:CB:1F:F2:D3:4B X509v3 Authority Key Identifier: keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:76:c0:e9:8d:77:01:93:df:68:e5:94:81:7e:c1:a3:b6:a6: cf:95:73:51:8b:f1:8d:75:91:08:c3:90:d5:bf:4b:12:9f:a1: 50:a6:3e:14:d1:c8:61:2a:3d:7f:33:a6:2d:27:88:2a:ab:15: 2f:32:49:3d:24:86:11:3c:b7:d4:e8:30:f5:8a:a6:8f:1d:2a: 36:0c:96:f0:6b:b1:2a:4c:26:66:9b:4b:ed:eb:e7:5f:2e:24: 0b:24:4b:76:8a:3d:12:17:d4:e0:0b:a4:36:49:1c:ad:76:d1: f8:d2:f1:03:4b:6b:df:23:bd:b5:5a:3e:e6:33:75:1e:6b:25: 74:0c:32:d8:46:67:dd:56:65:9b:57:53:98:da:0b:09:03:1d: 4d:56:92:c4:86:a5:39:e5:be:5e:56:93:e8:ec:58:84:2a:2d: 1f:7b:f5:d7:63:a7:ed:22:95:c4:b1:78:9b:1e:9b:2f:86:5b: 61:b6:e0:1d:01:6e:9b:ce:a3:0b:09:4a:21:f2:a9:13:1a:77: 68:1a:02:c5:1d:17:a4:96:b4:8a:29:d3:0e:77:fe:8a:b9:ed: 96:15:fc:da:a5:93:9d:10:a6:c5:a9:4e:79:61:e7:17:46:1f: b8:be:cf:f1:04:33:0c:6d:0e:ed:a1:9f:fd:cf:b4:c8:e1:7c: 3a:4a:65:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEIxRTg0RkFDRkFDQkMwQjc4Mzg1NjFFRjIxRTI4RjJG QUNGNURGRUMwHhcNMjUxMDIyMjAyOTIzWhcNMjUxMDI5MjAyOTIzWjAYMRYwFAYD VQQDEw02OGY5M2VhNC1iY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfy1IzzmRAAP4JUEpdG7y7VoBGaa3TiROmdxdyFnr/QEtC789SLAlZFSFGTy 2ES4DslHP/NnQZVWjyYcxd4Rvo8tnWrCdsRCNjJAiSG5/FOHeBhkXcuLmnaRDL2N bsrRkoz1+rv85uXI3W/9jbBQZfKedlyILEOHeYMYJeP9h3/PDvJhgKZbZNEzBoku 4WpqHKSB45Y338oyep5L0hWnDiKSsTRAz2THSU74bJCjMsFP/chhgLqR95xo0aSq nLvnrIvVA+VL9sxbaLJZ+/QqHVFjGnYzNIVfRvgx3seW/lbuuxPtrlF1E0LhM6WV sCdbxkC9Nu6+OgRJjyaqH27+kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQR6Rin dJ/ZxowSCNaCV8sf8tNLMB8GA1UdIwQYMBaAFLHoT6z6y8C3g4Vh7yHijy+s9d/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8zNjg3MkE1RTgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdMZURoV0h2SWVLUEw2ejEz LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlaFByUHJMd0xlRGhXSHZJZUtQTDZ6MTMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2RC8zNjg3MkE1RTgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdM ZURoV0h2SWVLUEw2ejEzLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUdsDpjXcBk99o5ZSBfsGjtqbPlXNRi/GNdZEIw5DVv0sSn6FQpj4U 0chhKj1/M6YtJ4gqqxUvMkk9JIYRPLfU6DD1iqaPHSo2DJbwa7EqTCZmm0vt6+df LiQLJEt2ij0SF9TgC6Q2SRytdtH40vEDS2vfI721Wj7mM3UeayV0DDLYRmfdVmWb V1OY2gsJAx1NVpLEhqU55b5eVpPo7FiEKi0fe/XXY6ftIpXEsXibHpsvhlthtuAd AW6bzqMLCUoh8qkTGndoGgLFHReklrSKKdMOd/6Kue2WFfzapZOdEKbFqU55YecX Rh+4vs/xBDMMbQ7toZ/9z7TI4Xw6SmWn -----END CERTIFICATE-----Generated at Thu Oct 23 12:08:28 2025 by rpki-client