$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft File: sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json) Hash identifier: KWtsOXnnueoXQ/y8sB8WgkpnDSNyO2DHWsN/XmKGVw8= Subject key identifier: C3:E8:F4:63:8B:5D:95:15:30:0F:4F:2C:A9:D8:11:3F:A4:C8:E8:BB Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Certificate serial: 0AC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft Manifest number: 0A70 Signing time: Sun 02 Nov 2025 19:45:52 +0000 Manifest this update: Sun 02 Nov 2025 19:45:51 +0000 Manifest next update: Sun 09 Nov 2025 19:45:51 +0000 Files and hashes: 1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: OtXdq2CzfQZAr5JJEOAPk2lheUWYZTdQZjc64a8Kc10=) 2: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: 22LIWUXosTT/OY7Jf14A0mShYYmd8KbB6SWbnrDhxl0=) 3: 36C13562946211F0A915C35EC4F9AE02.roa (hash: eWXrwTNf70qYfKUKT84LBuZigeywl7Y1ZgrqiqsEslY=) 4: 2FDA4F26E20711EF9B64614EC4F9AE02.roa (hash: 7UVWm9Qr3Gv2ae5STGc5B8NNM4GCnnFd4M5ZD/G8r78=) 5: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: f/v3Xwc+xZ+WS064/YX626UlguQk/j0d0TefoOG0b4E=) 6: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: o9QERY8vMjvb/oZ9N6XYdwqY3j9St5pMLYz81Y7dm5M=) 7: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: JBBQP0K67WdCWLZg5hsxTdVEIVYUz0SAm7vkyl5/wZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2758 (0xac6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Validity Not Before: Nov 2 19:45:51 2025 GMT Not After : Nov 9 19:45:51 2025 GMT Subject: CN=6907b4ef-5abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:df:63:d7:36:7c:68:ee:23:23:6f:bd:3c: cd:33:c6:ac:3a:d3:82:1f:a0:a9:6f:81:1c:a9:0e: d6:86:da:55:9b:67:f7:7e:c6:9d:96:8f:7b:53:03: 68:c6:bf:7e:9d:df:66:2d:d3:58:f3:4b:26:7a:c1: cb:7f:f6:d5:c0:55:b6:f0:85:fe:4a:3a:2e:38:ad: c7:fa:96:68:96:a0:f9:5d:83:40:5f:54:09:2f:b8: cc:9a:0e:73:ea:6d:25:01:ea:9f:b0:95:d9:0e:a5: d1:08:b2:86:43:cb:18:75:6a:6b:f5:22:72:00:e7: 15:75:46:2e:59:53:6d:b8:fe:8c:61:13:df:f4:e7: 7e:27:a9:00:f3:17:7b:16:09:49:ef:2f:f8:36:0d: c3:bc:48:f7:7e:25:fb:89:a1:99:32:64:ff:e6:0e: 58:f1:89:71:22:e2:c0:21:50:4e:8f:a5:15:e8:c4: 22:e3:cb:eb:64:37:95:97:79:c7:f5:ea:a6:f1:5a: f5:da:bb:98:3c:73:62:84:23:24:fe:64:98:d7:45: 03:9d:80:b9:b7:06:a2:d6:0e:70:90:e4:fc:7d:a6: fc:c7:b1:b7:8d:2b:b2:81:0f:39:36:88:7e:25:79: ed:5c:c8:bb:27:fd:c3:b3:04:8c:3c:a9:86:b2:38: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E8:F4:63:8B:5D:95:15:30:0F:4F:2C:A9:D8:11:3F:A4:C8:E8:BB X509v3 Authority Key Identifier: keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:6c:90:ed:23:0e:c1:14:93:3d:63:fc:be:96:8f:e5:59:dd: a7:e0:0e:68:69:cd:e0:cc:42:da:b4:b2:08:b3:44:93:f5:d0: 47:c1:22:de:15:88:16:6e:6a:1c:27:d6:dd:27:6b:c6:15:0b: 5c:7e:98:47:a8:57:dd:16:09:ee:09:5a:a6:00:f2:21:da:28: 81:6d:3e:44:6f:0e:4e:77:77:b0:34:9e:2e:90:75:d4:4c:e3: ad:fa:38:5e:14:5a:73:dc:7f:46:46:2f:b3:00:cb:81:f4:f1: 0c:1a:40:5d:65:f4:17:f4:0a:55:1c:40:11:0e:7a:17:ea:74: 0b:0f:3d:e6:09:88:5c:fa:34:1b:db:90:ae:8f:31:0c:dd:1c: 1a:8d:dc:23:82:97:82:24:41:20:37:c9:ea:e3:b0:66:fc:b5: 6e:cc:81:3e:64:b7:f3:3f:4f:ef:a0:d2:29:0a:05:3b:c4:8a: 1c:4c:bc:39:19:74:17:e7:41:fd:26:20:b0:f8:84:34:90:5f: 55:c5:f2:b7:a0:8b:7e:cd:4d:7a:df:d7:d2:65:b8:91:62:e3: 09:6e:25:7d:73:b1:42:f9:d1:2a:1b:7c:64:30:b3:c3:36:f9: fc:31:13:ec:2c:f5:24:57:74:6f:5e:76:f1:df:10:ab:e9:fd: e3:e4:ce:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEIxRTg0RkFDRkFDQkMwQjc4Mzg1NjFFRjIxRTI4RjJG QUNGNURGRUMwHhcNMjUxMTAyMTk0NTUxWhcNMjUxMTA5MTk0NTUxWjAYMRYwFAYD VQQDEw02OTA3YjRlZi01YWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+/fY9c2fGjuIyNvvTzNM8asOtOCH6Cpb4EcqQ7WhtpVm2f3fsadlo97UwNo xr9+nd9mLdNY80smesHLf/bVwFW28IX+SjouOK3H+pZolqD5XYNAX1QJL7jMmg5z 6m0lAeqfsJXZDqXRCLKGQ8sYdWpr9SJyAOcVdUYuWVNtuP6MYRPf9Od+J6kA8xd7 FglJ7y/4Ng3DvEj3fiX7iaGZMmT/5g5Y8YlxIuLAIVBOj6UV6MQi48vrZDeVl3nH 9eqm8Vr12ruYPHNihCMk/mSY10UDnYC5twai1g5wkOT8fab8x7G3jSuygQ85Noh+ JXntXMi7J/3DswSMPKmGsjirTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPo9GOL XZUVMA9PLKnYET+kyOi7MB8GA1UdIwQYMBaAFLHoT6z6y8C3g4Vh7yHijy+s9d/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8zNjg3MkE1RTgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdMZURoV0h2SWVLUEw2ejEz LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlaFByUHJMd0xlRGhXSHZJZUtQTDZ6MTMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2RC8zNjg3MkE1RTgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdM ZURoV0h2SWVLUEw2ejEzLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBobJDtIw7BFJM9Y/y+lo/lWd2n4A5oac3gzELatLIIs0ST9dBHwSLe FYgWbmocJ9bdJ2vGFQtcfphHqFfdFgnuCVqmAPIh2iiBbT5Ebw5Od3ewNJ4ukHXU TOOt+jheFFpz3H9GRi+zAMuB9PEMGkBdZfQX9ApVHEARDnoX6nQLDz3mCYhc+jQb 25CujzEM3RwajdwjgpeCJEEgN8nq47Bm/LVuzIE+ZLfzP0/voNIpCgU7xIocTLw5 GXQX50H9JiCw+IQ0kF9VxfK3oIt+zU1639fSZbiRYuMJbiV9c7FC+dEqG3xkMLPD Nvn8MRPsLPUkV3RvXnbx3xCr6f3j5M4H -----END CERTIFICATE-----Generated at Tue Nov 4 02:19:44 2025 by rpki-client