$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft File: sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json) Hash identifier: AgFe5L4jX7CcSkKVJ7zkOHdVibHbEmeyPJnVa5Ckax4= Subject key identifier: CF:EC:45:32:5A:2F:A3:26:A8:B5:BA:47:5F:F0:49:77:89:76:7B:BF Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Certificate serial: 0ABE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft Manifest number: 0A68 Signing time: Sat 18 Oct 2025 20:49:41 +0000 Manifest this update: Sat 18 Oct 2025 20:49:40 +0000 Manifest next update: Sat 25 Oct 2025 20:49:40 +0000 Files and hashes: 1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: tE3hR6z941744p843W0WN/AADoq8kqGStcuBUvmKK3k=) 2: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: 22LIWUXosTT/OY7Jf14A0mShYYmd8KbB6SWbnrDhxl0=) 3: 36C13562946211F0A915C35EC4F9AE02.roa (hash: eWXrwTNf70qYfKUKT84LBuZigeywl7Y1ZgrqiqsEslY=) 4: 2FDA4F26E20711EF9B64614EC4F9AE02.roa (hash: 7UVWm9Qr3Gv2ae5STGc5B8NNM4GCnnFd4M5ZD/G8r78=) 5: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: f/v3Xwc+xZ+WS064/YX626UlguQk/j0d0TefoOG0b4E=) 6: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: o9QERY8vMjvb/oZ9N6XYdwqY3j9St5pMLYz81Y7dm5M=) 7: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: JBBQP0K67WdCWLZg5hsxTdVEIVYUz0SAm7vkyl5/wZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2750 (0xabe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Validity Not Before: Oct 18 20:49:40 2025 GMT Not After : Oct 25 20:49:40 2025 GMT Subject: CN=68f3fd65-a0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:dd:14:80:91:06:57:b4:fb:60:3b:41:f1: 77:69:e1:0e:a1:34:d9:9c:48:b7:d1:79:da:a1:6b: ae:99:f4:b8:76:27:27:7a:f4:4c:9e:e0:b7:95:a8: 98:7c:77:6c:f7:33:34:3f:d2:dc:d3:5c:0e:b5:5f: c4:f7:4a:e3:b1:58:36:c4:78:be:ac:d9:81:c5:ae: 59:c7:7c:9e:4c:c3:2b:eb:ef:1d:ba:fe:87:09:42: fc:a0:54:7e:04:82:d5:9a:2d:ab:94:17:3d:fd:66: fa:f3:8f:13:b8:d0:2e:58:b5:7b:f4:4c:e9:b6:b7: a8:98:cd:50:37:d0:85:68:49:2a:61:a1:63:e1:3e: 8b:c1:cc:cc:20:03:b5:15:ca:ad:48:d6:30:e6:61: c9:97:78:a8:72:26:ad:ae:de:03:18:ff:28:3f:5f: 58:b3:6c:2c:59:e2:0f:51:43:92:d3:13:bc:8e:62: b6:55:7b:dc:5e:99:58:1b:9e:cb:0d:ec:a0:7a:1e: 1c:2d:b9:f1:40:58:f8:9c:de:c9:87:73:ed:91:43: 89:91:43:f6:41:15:11:35:fb:5f:23:d3:52:3c:de: f2:10:79:0a:34:c3:b1:2c:8d:f9:e8:7e:dc:69:f7: 98:b7:a0:e9:39:67:cf:1b:8b:21:6a:25:db:33:7a: e3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EC:45:32:5A:2F:A3:26:A8:B5:BA:47:5F:F0:49:77:89:76:7B:BF X509v3 Authority Key Identifier: keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:d7:37:db:c0:78:e4:5a:c3:a6:9f:5e:61:68:8d:bf:2f:45: 4f:c1:5e:6a:3d:28:c5:0a:3f:62:85:ab:59:fe:3d:b7:4d:b4: 1f:85:25:a3:b1:e4:c6:59:d3:f6:96:ee:60:ac:ae:4d:0e:6c: 0f:ad:2f:bc:52:b5:f2:bb:e3:2d:c5:2c:82:e7:57:d3:88:09: 97:b7:0c:17:8f:ff:c1:7c:5c:ea:5e:e7:95:fc:50:65:68:5e: 16:52:fc:88:c0:bc:be:20:07:ba:d8:1d:af:f2:da:ca:42:39: 8a:6c:54:7f:3d:51:3d:2c:84:4a:2f:5d:f3:05:4b:52:29:6b: e3:8d:5d:6d:01:b4:29:28:b7:18:4f:a0:46:57:59:c9:f0:8a: be:0d:a7:15:29:0f:63:de:1b:81:b0:d1:ea:cb:e2:0c:d7:ac: 8b:18:c2:d8:02:77:15:2b:8b:33:b3:ed:27:e1:d9:99:50:2d: 8b:1c:78:f2:c4:8f:6e:4f:cf:d6:54:61:95:44:ea:56:b8:86: 97:a3:98:39:62:29:f9:91:b9:f4:91:82:a3:99:a7:c5:01:e4: 35:71:95:7f:c7:b0:be:e5:54:4f:9d:8a:6d:fa:b6:63:47:a3: 81:90:7a:7f:e9:23:fd:b5:43:69:2a:65:ce:23:7c:79:07:2d: 9c:41:bd:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEIxRTg0RkFDRkFDQkMwQjc4Mzg1NjFFRjIxRTI4RjJG QUNGNURGRUMwHhcNMjUxMDE4MjA0OTQwWhcNMjUxMDI1MjA0OTQwWjAYMRYwFAYD VQQDEw02OGYzZmQ2NS1hMGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbLdFICRBle0+2A7QfF3aeEOoTTZnEi30XnaoWuumfS4dicnevRMnuC3laiY fHds9zM0P9Lc01wOtV/E90rjsVg2xHi+rNmBxa5Zx3yeTMMr6+8duv6HCUL8oFR+ BILVmi2rlBc9/Wb6848TuNAuWLV79EzptreomM1QN9CFaEkqYaFj4T6LwczMIAO1 FcqtSNYw5mHJl3iociatrt4DGP8oP19Ys2wsWeIPUUOS0xO8jmK2VXvcXplYG57L Deygeh4cLbnxQFj4nN7Jh3PtkUOJkUP2QRURNftfI9NSPN7yEHkKNMOxLI356H7c afeYt6DpOWfPG4shaiXbM3rjpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/sRTJa L6MmqLW6R1/wSXeJdnu/MB8GA1UdIwQYMBaAFLHoT6z6y8C3g4Vh7yHijy+s9d/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8zNjg3MkE1RTgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdMZURoV0h2SWVLUEw2ejEz LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlaFByUHJMd0xlRGhXSHZJZUtQTDZ6MTMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2RC8zNjg3MkE1RTgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdM ZURoV0h2SWVLUEw2ejEzLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx1zfbwHjkWsOmn15haI2/L0VPwV5qPSjFCj9ihatZ/j23TbQfhSWj seTGWdP2lu5grK5NDmwPrS+8UrXyu+MtxSyC51fTiAmXtwwXj//BfFzqXueV/FBl aF4WUvyIwLy+IAe62B2v8trKQjmKbFR/PVE9LIRKL13zBUtSKWvjjV1tAbQpKLcY T6BGV1nJ8Iq+DacVKQ9j3huBsNHqy+IM16yLGMLYAncVK4szs+0n4dmZUC2LHHjy xI9uT8/WVGGVROpWuIaXo5g5Yin5kbn0kYKjmafFAeQ1cZV/x7C+5VRPnYpt+rZj R6OBkHp/6SP9tUNpKmXOI3x5By2cQb1C -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:06 2025 by rpki-client