$ rpki-client -vvf rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft File: SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft (raw, json) Hash identifier: IzVxdOr1G19j8hPuqwkCDYUnBUHDYQCt4T6lp30vjXY= Subject key identifier: 21:F3:62:81:25:7E:C3:0E:94:7E:89:0B:02:CC:45:4E:15:FB:00:1D Authority key identifier: 49:E6:84:D5:0D:8B:D7:8C:18:1E:07:41:8C:6D:12:02:32:93:E9:94 Certificate issuer: /CN=A9177A7E/serialNumber=49E684D50D8BD78C181E07418C6D12023293E994 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft Manifest number: B9 Signing time: Thu 21 Aug 2025 06:12:32 +0000 Manifest this update: Thu 21 Aug 2025 06:12:31 +0000 Manifest next update: Thu 28 Aug 2025 06:12:31 +0000 Files and hashes: 1: SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl (hash: mQ1jpeF0X7lEdKgdr4v5GWeC1TTIcK+PucETLdsK3d4=) 2: 228CC738816611EFA8852945C4F9AE02.roa (hash: lUgXyzv98aIYZZo+UF95hDGgwVOo27vHGN5bli84jD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177A7E, serialNumber=49E684D50D8BD78C181E07418C6D12023293E994 Validity Not Before: Aug 21 06:12:31 2025 GMT Not After : Aug 28 06:12:31 2025 GMT Subject: CN=68a6b8cf-c9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4d:05:c4:13:4e:bd:ec:22:7a:a6:c8:40:8b: c1:b3:ec:ec:f2:11:5c:20:2e:e7:ec:bd:e6:95:b0: 3b:92:8d:ab:87:42:cb:91:d4:ad:ab:2c:1f:b8:8c: 4d:21:5b:e6:c8:8e:94:80:f1:06:77:06:40:5f:42: 18:5e:07:ce:4f:c6:c9:29:60:5a:15:83:87:77:aa: 40:b6:db:a7:c4:4a:18:93:89:dd:07:e1:84:e4:58: 17:fb:67:d2:a7:9a:2d:5e:e4:37:3e:bc:4a:2f:f6: b4:63:c0:26:93:fe:58:49:09:6c:60:b8:ca:bb:e6: c0:5c:5a:2b:a2:3f:0e:68:9a:8a:fc:79:59:42:3c: 92:13:ac:25:2f:2c:00:d9:5c:95:4b:43:f9:73:88: e5:53:12:a4:de:de:69:db:46:28:4a:e5:c0:cc:1c: 7f:05:1c:35:16:3c:ec:e8:91:1b:18:66:c2:2c:dc: b2:9c:32:cd:56:7c:91:2b:10:c3:98:d6:8c:39:ed: 89:93:8f:22:de:13:f2:a6:dc:bf:4a:76:38:03:6d: d6:7a:86:37:cd:62:1f:31:c8:99:32:e8:d4:bf:c9: bc:23:0d:4a:e9:3a:02:6a:9a:81:87:d9:ea:7e:e0: 1c:1e:1f:ad:91:01:69:24:82:d3:61:71:1a:78:7e: e9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F3:62:81:25:7E:C3:0E:94:7E:89:0B:02:CC:45:4E:15:FB:00:1D X509v3 Authority Key Identifier: keyid:49:E6:84:D5:0D:8B:D7:8C:18:1E:07:41:8C:6D:12:02:32:93:E9:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:3b:5c:5e:b0:2c:b6:53:68:9d:14:4b:3c:09:25:65:23:85: e7:8a:91:01:a7:44:7c:d1:01:1c:5f:de:29:69:8d:78:98:5e: dc:ac:62:ec:a5:ab:f6:2a:69:7d:50:b5:fd:6c:52:3a:c5:b9: 83:d0:91:ff:94:a4:0f:a3:93:7d:6c:e7:77:91:4b:44:c8:41: fd:ef:e6:5b:88:08:57:60:ea:9f:e1:9c:1e:fd:1c:46:cf:e1: 46:a6:43:2b:8f:90:a0:d3:ef:40:76:3a:b5:eb:95:aa:2f:44: 69:21:a7:f0:97:d4:cd:d4:51:98:f0:d8:11:ee:87:c7:3f:f1: 6c:e6:67:20:5c:84:11:0d:d7:dd:a6:8b:45:3b:b2:f2:67:5c: 3a:6b:65:d3:9f:22:75:27:18:a2:52:0c:eb:84:8f:bf:8c:f3: 93:62:29:72:6f:35:29:6e:a8:3a:e7:59:94:86:3c:44:90:e2: b7:86:d8:fd:fd:dd:82:b2:c8:f0:d1:2a:a8:26:78:bb:d0:55: 14:5d:fc:3c:c3:25:0b:fa:8c:e7:c7:83:d5:75:2e:b6:f8:78: 7b:a8:90:53:a1:24:47:e8:af:08:f0:35:79:8d:83:e1:37:f2: 48:ec:19:d8:93:6f:95:5d:24:8c:68:0e:34:86:cf:c3:92:b0: ea:ba:07:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdBN0UxMTAvBgNVBAUTKDQ5RTY4NEQ1MEQ4QkQ3OEMxODFFMDc0MThDNkQxMjAy MzI5M0U5OTQwHhcNMjUwODIxMDYxMjMxWhcNMjUwODI4MDYxMjMxWjAYMRYwFAYD VQQDEw02OGE2YjhjZi1jOWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6E0FxBNOvewieqbIQIvBs+zs8hFcIC7n7L3mlbA7ko2rh0LLkdStqywfuIxN IVvmyI6UgPEGdwZAX0IYXgfOT8bJKWBaFYOHd6pAttunxEoYk4ndB+GE5FgX+2fS p5otXuQ3PrxKL/a0Y8Amk/5YSQlsYLjKu+bAXForoj8OaJqK/HlZQjySE6wlLywA 2VyVS0P5c4jlUxKk3t5p20YoSuXAzBx/BRw1Fjzs6JEbGGbCLNyynDLNVnyRKxDD mNaMOe2Jk48i3hPypty/SnY4A23WeoY3zWIfMciZMujUv8m8Iw1K6ToCapqBh9nq fuAcHh+tkQFpJILTYXEaeH7pOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHzYoEl fsMOlH6JCwLMRU4V+wAdMB8GA1UdIwQYMBaAFEnmhNUNi9eMGB4HQYxtEgIyk+mU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0E3RS8zMDM1M0I4QTZB NkYxMUVGQkYzRjExMzZDNEY5QUUwMi9TZWFFMVEyTDE0d1lIZ2RCakcwU0FqS1Q2 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NlYUUxUTJMMTR3WUhnZEJqRzBTQWpLVDZaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0E3RS8zMDM1M0I4QTZBNkYxMUVGQkYzRjExMzZDNEY5QUUwMi9TZWFFMVEyTDE0 d1lIZ2RCakcwU0FqS1Q2WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACO1xesCy2U2idFEs8CSVlI4XnipEBp0R80QEcX94paY14mF7crGLs pav2Kml9ULX9bFI6xbmD0JH/lKQPo5N9bOd3kUtEyEH97+ZbiAhXYOqf4Zwe/RxG z+FGpkMrj5Cg0+9Adjq165WqL0RpIafwl9TN1FGY8NgR7ofHP/Fs5mcgXIQRDdfd potFO7LyZ1w6a2XTnyJ1JxiiUgzrhI+/jPOTYilybzUpbqg651mUhjxEkOK3htj9 /d2Cssjw0SqoJni70FUUXfw8wyUL+oznx4PVdS62+Hh7qJBToSRH6K8I8DV5jYPh N/JI7BnYk2+VXSSMaA40hs/DkrDqugdx -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:22 2025 by rpki-client