$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft File: sejBHBQOD6dR6L-mWlnHFd1-HFM.mft (raw, json) Hash identifier: zzRueEb8+6stz5o4CB/SkCZWa42bX5xyN7x/v6CKCtU= Subject key identifier: 92:A7:E8:AB:10:DC:0E:0C:DE:CB:12:06:5B:D8:C0:D4:C5:C1:DD:E7 Authority key identifier: B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53 Certificate issuer: /CN=A91AE9F6/serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft Manifest number: C5 Signing time: Fri 13 Jun 2025 04:44:00 +0000 Manifest this update: Fri 13 Jun 2025 04:43:58 +0000 Manifest next update: Fri 20 Jun 2025 04:43:58 +0000 Files and hashes: 1: sejBHBQOD6dR6L-mWlnHFd1-HFM.crl (hash: IEle+HPIk7rzW2J0OBRDvTV8q86h6X3GfJhwEa+C+KI=) 2: 4D45F08C1E3B11EFB02B0184C4F9AE02.roa (hash: +50v3mlEKF+ZCfC1CHUDd+fzqudaC4LTsu2ANTG7KU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F6, serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53 Validity Not Before: Jun 13 04:43:58 2025 GMT Not After : Jun 20 04:43:58 2025 GMT Subject: CN=684bac8f-252d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:11:94:46:04:34:61:dc:46:69:dc:24:df: 0c:89:7a:6e:b4:fc:31:e9:8c:fd:f5:dd:95:73:7d: a8:06:1d:66:52:3b:23:74:7b:4a:a7:cb:cb:17:9b: c1:6f:68:bd:c5:9d:23:18:e1:20:d8:25:0d:cc:10: 3d:f9:a1:61:04:2b:34:9d:09:38:0e:5d:ab:4a:b0: 9d:06:b8:28:f2:23:2e:b4:1a:0f:f2:61:da:bd:06: 90:26:b0:5e:84:90:4b:b2:0d:34:4c:e1:2f:f5:34: 21:27:ca:48:cf:69:a2:e4:95:67:ae:e3:fc:d1:90: e4:96:37:10:56:58:f4:70:da:d3:ea:ba:29:4d:07: b7:5f:3b:2a:a0:c3:d5:09:72:f9:9d:6e:4f:a1:f8: 52:ac:64:63:5c:de:1a:a4:48:c1:c7:21:7c:fd:6a: 51:e6:12:70:a5:27:c6:b8:7d:20:bb:8b:49:ac:96: 84:a4:bb:11:9e:fc:17:42:05:6e:7e:8b:78:7e:fa: 1f:82:96:34:03:0e:62:d4:70:0d:fb:25:bf:47:14: 8a:07:32:a8:f6:bf:23:cc:13:c6:61:c3:df:de:d5: 7a:98:c4:77:01:88:98:23:f7:50:fb:8c:e0:0a:6b: 1f:ad:53:68:1d:c7:16:67:1e:34:b8:ab:18:12:33: 11:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A7:E8:AB:10:DC:0E:0C:DE:CB:12:06:5B:D8:C0:D4:C5:C1:DD:E7 X509v3 Authority Key Identifier: keyid:B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cf:a3:da:4b:f5:55:97:cd:90:49:69:44:6a:31:b5:25:2d: 6b:e0:e6:6e:c9:fa:05:4e:7b:fc:52:fe:56:4a:56:9c:45:b8: 1d:3b:bd:42:04:26:f3:dd:26:bf:8a:ab:c1:63:59:45:c8:75: 89:77:90:6b:86:bb:41:4e:cd:f1:69:dd:3a:d6:6a:b9:ee:2b: 61:3c:04:3f:3b:82:10:95:65:1f:1f:6c:27:fd:5d:64:12:d4: db:49:3b:1f:0c:a9:f2:e2:5c:f8:d2:42:e1:91:33:28:be:2a: cd:81:8f:fb:72:d4:60:cd:ea:22:41:d2:33:e4:15:80:af:ed: a5:10:3b:d7:5c:11:fe:b3:3d:76:de:cd:03:72:d6:92:0a:c2: 9a:08:a1:b2:d3:1b:c4:e9:93:b6:4e:f2:be:0e:7a:3a:b5:1a: b1:da:c8:57:d8:01:35:a1:8a:87:1d:13:67:4d:8c:c2:f8:cb: 1e:90:59:72:c8:30:9e:e8:c4:f2:88:c5:fd:81:d6:54:1a:34: 7c:99:dc:3a:e2:f1:73:eb:14:1b:f9:ba:c8:41:10:43:71:82: 13:03:37:47:8b:8a:0f:cd:ca:df:28:54:c4:7f:4e:82:d0:bd: 0c:f4:bc:24:74:47:7a:ea:68:14:b2:81:54:dd:54:c6:da:1d: 2d:9b:b3:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjYxMTAvBgNVBAUTKEIxRThDMTFDMTQwRTBGQTc1MUU4QkZBNjVBNTlDNzE1 REQ3RTFDNTMwHhcNMjUwNjEzMDQ0MzU4WhcNMjUwNjIwMDQ0MzU4WjAYMRYwFAYD VQQDEw02ODRiYWM4Zi0yNTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCIRlEYENGHcRmncJN8MiXputPwx6Yz99d2Vc32oBh1mUjsjdHtKp8vLF5vB b2i9xZ0jGOEg2CUNzBA9+aFhBCs0nQk4Dl2rSrCdBrgo8iMutBoP8mHavQaQJrBe hJBLsg00TOEv9TQhJ8pIz2mi5JVnruP80ZDkljcQVlj0cNrT6ropTQe3XzsqoMPV CXL5nW5PofhSrGRjXN4apEjBxyF8/WpR5hJwpSfGuH0gu4tJrJaEpLsRnvwXQgVu fot4fvofgpY0Aw5i1HAN+yW/RxSKBzKo9r8jzBPGYcPf3tV6mMR3AYiYI/dQ+4zg CmsfrVNoHccWZx40uKsYEjMRjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKn6KsQ 3A4M3ssSBlvYwNTFwd3nMB8GA1UdIwQYMBaAFLHowRwUDg+nUei/plpZxxXdfhxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNi84RjIzQ0U4NDFE NUYxMUVGQjgzNzREM0RDNEY5QUUwMi9zZWpCSEJRT0Q2ZFI2TC1tV2xuSEZkMS1I Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlakJIQlFPRDZkUjZMLW1XbG5IRmQxLUhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNi84RjIzQ0U4NDFENUYxMUVGQjgzNzREM0RDNEY5QUUwMi9zZWpCSEJRT0Q2 ZFI2TC1tV2xuSEZkMS1IRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMz6PaS/VVl82QSWlEajG1JS1r4OZuyfoFTnv8Uv5WSlacRbgdO71C BCbz3Sa/iqvBY1lFyHWJd5BrhrtBTs3xad061mq57ithPAQ/O4IQlWUfH2wn/V1k EtTbSTsfDKny4lz40kLhkTMovirNgY/7ctRgzeoiQdIz5BWAr+2lEDvXXBH+sz12 3s0DctaSCsKaCKGy0xvE6ZO2TvK+Dno6tRqx2shX2AE1oYqHHRNnTYzC+MsekFly yDCe6MTyiMX9gdZUGjR8mdw64vFz6xQb+brIQRBDcYITAzdHi4oPzcrfKFTEf06C 0L0M9LwkdEd66mgUsoFU3VTG2h0tm7PE -----END CERTIFICATE-----Generated at Sat Jun 14 22:57:34 2025 by rpki-client