$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft File: sejBHBQOD6dR6L-mWlnHFd1-HFM.mft (raw, json) Hash identifier: x2x/iqqgU0BA8Mqu3UTgNNUy44CNYqlx1yDiPUP72V4= Subject key identifier: 06:5C:9D:12:B8:23:37:B1:7E:AC:2D:E0:12:DA:3C:01:2A:CF:A0:01 Authority key identifier: B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53 Certificate issuer: /CN=A91AE9F6/serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft Manifest number: E0 Signing time: Tue 05 Aug 2025 05:57:13 +0000 Manifest this update: Tue 05 Aug 2025 05:57:12 +0000 Manifest next update: Tue 12 Aug 2025 05:57:12 +0000 Files and hashes: 1: sejBHBQOD6dR6L-mWlnHFd1-HFM.crl (hash: Fd5BThfA4uPa0wveAORdBeZ4G43t3CGt52dq7QekWZ4=) 2: 4D45F08C1E3B11EFB02B0184C4F9AE02.roa (hash: +50v3mlEKF+ZCfC1CHUDd+fzqudaC4LTsu2ANTG7KU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F6, serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53 Validity Not Before: Aug 5 05:57:12 2025 GMT Not After : Aug 12 05:57:12 2025 GMT Subject: CN=68919d38-f9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:2f:65:9b:cb:e0:c2:5e:43:00:0a:d2:a0: a2:6f:99:f9:30:21:49:3d:c5:81:ea:87:c5:53:66: 60:5b:29:b3:21:40:60:ff:b4:01:6b:0f:77:06:f0: 94:b7:30:3d:1b:6b:96:87:8d:df:82:71:87:bd:73: bb:d4:d4:cc:01:ab:57:12:a4:88:58:8b:53:23:ce: ea:c6:0f:16:db:e2:14:73:16:46:eb:f9:c1:36:87: 50:19:5d:b7:2e:ad:5a:c4:d6:5e:bd:25:5f:6d:7e: 5d:ef:c3:1c:a6:ec:36:12:53:4f:2d:5d:5f:a4:2a: 40:15:b3:8c:cb:4d:17:78:51:94:6e:82:2c:70:97: 72:dc:2e:16:78:e2:30:91:e7:30:75:77:c1:d0:bf: d8:f1:cd:a1:c6:7f:8b:09:a7:cd:8b:d4:90:bf:be: c9:1c:1f:3d:e1:58:76:44:4b:8c:30:b5:9a:4d:94: 4a:5e:f5:53:7d:d3:5d:47:76:e0:4d:5e:76:94:49: 9f:8f:3f:30:82:35:13:21:60:d0:fa:54:8b:21:d1: 82:bf:6c:24:5a:22:70:52:73:af:6c:c0:dc:99:0d: 4c:20:07:95:c4:50:23:f6:a2:b0:c1:86:08:6b:e3: 6f:51:ac:17:9a:da:31:8b:5c:ef:3c:55:13:de:0e: ce:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5C:9D:12:B8:23:37:B1:7E:AC:2D:E0:12:DA:3C:01:2A:CF:A0:01 X509v3 Authority Key Identifier: keyid:B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:e9:38:cc:31:66:7f:bb:3d:4c:e1:8e:3f:30:3e:24:61:32: bf:bf:c6:1a:a9:33:1b:1b:39:05:49:31:f6:7a:2a:55:3f:4c: 68:12:0c:0b:f3:23:1f:fd:3a:28:d3:1b:12:99:ad:23:74:60: bc:32:b5:60:fd:1c:94:b5:72:c6:e9:84:83:2a:76:51:94:92: df:6b:6d:d7:4a:80:1c:6f:c6:4f:ea:43:cb:9e:ac:37:31:73: 59:06:89:af:d4:66:d7:e5:a5:89:bc:4d:cb:ae:98:a0:97:02: 72:d5:12:2a:6f:64:57:01:9a:1c:12:e9:7f:f7:13:fb:a9:07: 25:82:45:ef:d1:16:0c:1e:2e:14:7b:ad:e7:07:af:78:73:57: ce:d1:92:bc:d7:2e:30:81:fe:ea:d7:a9:72:a9:e7:70:51:7a: d0:f5:e6:f9:84:63:56:50:51:c6:7e:a0:70:0d:43:36:a7:57: d2:c3:b8:b2:bc:4a:b2:d8:6c:88:61:42:86:77:1d:9e:61:e8: cd:e0:37:90:57:bb:3c:45:e1:05:f7:2b:b6:d6:3c:9e:51:13: e8:be:ea:7c:e5:9d:37:25:6a:60:34:d5:c7:f0:6d:58:af:f2: 83:a5:29:ce:d5:56:61:ea:0e:ec:13:b6:07:01:aa:39:62:b5: 29:6d:16:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjYxMTAvBgNVBAUTKEIxRThDMTFDMTQwRTBGQTc1MUU4QkZBNjVBNTlDNzE1 REQ3RTFDNTMwHhcNMjUwODA1MDU1NzEyWhcNMjUwODEyMDU1NzEyWjAYMRYwFAYD VQQDEw02ODkxOWQzOC1mOWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxYvZZvL4MJeQwAK0qCib5n5MCFJPcWB6ofFU2ZgWymzIUBg/7QBaw93BvCU tzA9G2uWh43fgnGHvXO71NTMAatXEqSIWItTI87qxg8W2+IUcxZG6/nBNodQGV23 Lq1axNZevSVfbX5d78Mcpuw2ElNPLV1fpCpAFbOMy00XeFGUboIscJdy3C4WeOIw kecwdXfB0L/Y8c2hxn+LCafNi9SQv77JHB894Vh2REuMMLWaTZRKXvVTfdNdR3bg TV52lEmfjz8wgjUTIWDQ+lSLIdGCv2wkWiJwUnOvbMDcmQ1MIAeVxFAj9qKwwYYI a+NvUawXmtoxi1zvPFUT3g7OUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZcnRK4 Izexfqwt4BLaPAEqz6ABMB8GA1UdIwQYMBaAFLHowRwUDg+nUei/plpZxxXdfhxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNi84RjIzQ0U4NDFE NUYxMUVGQjgzNzREM0RDNEY5QUUwMi9zZWpCSEJRT0Q2ZFI2TC1tV2xuSEZkMS1I Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlakJIQlFPRDZkUjZMLW1XbG5IRmQxLUhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNi84RjIzQ0U4NDFENUYxMUVGQjgzNzREM0RDNEY5QUUwMi9zZWpCSEJRT0Q2 ZFI2TC1tV2xuSEZkMS1IRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS6TjMMWZ/uz1M4Y4/MD4kYTK/v8YaqTMbGzkFSTH2eipVP0xoEgwL 8yMf/Too0xsSma0jdGC8MrVg/RyUtXLG6YSDKnZRlJLfa23XSoAcb8ZP6kPLnqw3 MXNZBomv1GbX5aWJvE3LrpiglwJy1RIqb2RXAZocEul/9xP7qQclgkXv0RYMHi4U e63nB694c1fO0ZK81y4wgf7q16lyqedwUXrQ9eb5hGNWUFHGfqBwDUM2p1fSw7iy vEqy2GyIYUKGdx2eYejN4DeQV7s8ReEF9yu21jyeURPovup85Z03JWpgNNXH8G1Y r/KDpSnO1VZh6g7sE7YHAao5YrUpbRYf -----END CERTIFICATE-----Generated at Wed Aug 6 11:20:09 2025 by rpki-client