$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft File: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft (raw, json) Hash identifier: 5uBEDJOkQDBOYfliyiWapWM2VzFCNhE+xeCMsqRjbLI= Subject key identifier: 2E:DD:F4:6F:9F:C1:96:A7:0F:03:68:F4:CB:70:72:5D:21:AA:8B:08 Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D Certificate issuer: /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft Manifest number: 14 Signing time: Fri 05 Sep 2025 08:33:12 +0000 Manifest this update: Fri 05 Sep 2025 08:33:11 +0000 Manifest next update: Fri 12 Sep 2025 08:33:11 +0000 Files and hashes: 1: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl (hash: sB2M0p0D7GySfIXaGGuhEUvNcLJ17nPDBtOoAaWTN90=) 2: 707ABBBE73F811F0B8A9582CC4F9AE02.roa (hash: J1DqxnoENL3lRHLKjDYZRI0kV9ABA98ydy0Zc/t3Fg8=) 3: 7013EE7A73F811F0B8A9582CC4F9AE02.roa (hash: ckP5BxcHxNFbdmi2/GsSqI6AzRvAVZrOdnnQHyfARKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D Validity Not Before: Sep 5 08:33:11 2025 GMT Not After : Sep 12 08:33:11 2025 GMT Subject: CN=68baa047-7353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:fc:61:3b:6d:eb:14:3f:89:95:24:b1:48: 95:40:2e:6b:88:00:33:47:8d:63:98:bb:56:7c:60: 5f:08:12:1c:22:f1:1d:f7:78:ce:12:fe:4d:94:26: 95:ec:06:8c:c3:0a:73:bb:9a:ce:f2:55:95:0c:1c: 89:49:72:70:4a:e9:31:7c:f2:36:c9:4e:43:c0:7b: 34:dd:c3:69:86:19:f0:c9:ba:60:6f:d0:eb:6e:d4: 06:ed:6a:0f:85:83:ec:87:dc:cb:cd:e8:e2:ee:7e: 81:69:f6:72:aa:f8:6a:b6:dc:80:40:25:e0:ad:ef: 59:10:25:b0:4b:e4:ac:a5:66:b1:a0:f1:84:6b:8b: 31:c3:f6:1a:66:06:d8:12:c7:ab:fb:b1:c8:9b:eb: ac:a1:6d:ec:e4:26:5a:d5:e1:4d:91:60:90:10:80: 8b:b5:3d:30:bd:34:d1:7b:3d:34:49:9b:50:67:47: 1a:44:03:39:90:49:27:8c:71:3f:f2:44:d4:56:76: 24:52:ad:64:cf:3a:f0:a5:7e:90:06:6b:f1:ba:14: 55:3b:54:2f:eb:8b:a7:47:5d:97:4b:31:ef:a5:c0: 19:f5:f4:f7:d5:bd:71:1b:12:07:ed:dc:9d:37:a5: 13:43:2c:19:09:f0:8f:b9:cf:15:82:39:52:15:92: e4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DD:F4:6F:9F:C1:96:A7:0F:03:68:F4:CB:70:72:5D:21:AA:8B:08 X509v3 Authority Key Identifier: keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:77:aa:6e:c2:2e:a0:41:c0:cd:4b:c2:cf:c8:39:6a:b4:24: 9a:1c:e9:2a:0c:18:80:ce:39:1c:21:3e:0c:46:4c:73:7a:51: ab:7c:6e:e3:c9:38:ce:a6:31:d0:7c:51:78:a3:54:48:06:1d: 0d:86:3c:d0:0c:0c:4a:f5:67:b4:5e:48:b4:ba:9e:c2:5b:d1: 05:a2:12:21:57:4a:a8:90:2a:c8:00:a8:f3:13:47:7d:ac:83: b0:6a:7f:8d:dd:fb:15:e2:56:21:14:86:13:c6:9f:42:51:a7: 57:4b:e2:bc:50:6f:5e:5e:84:10:70:95:ba:30:b8:8e:f8:d5: ae:bb:b1:79:88:df:9f:8f:f3:9a:8c:73:c3:9d:9b:b1:dd:c4: 61:57:9d:5d:b2:2e:9d:07:af:62:af:67:e1:c3:e8:34:68:2e: 83:c7:43:6a:5a:71:ff:1a:7a:6a:08:c7:ac:9b:00:56:c4:b8: 98:b8:31:a4:ca:e2:51:78:6f:63:26:38:59:82:32:bf:00:ea: 42:4e:d4:b2:30:dd:ca:12:3d:71:ae:5c:c9:55:f6:13:43:c1: 9a:1b:06:13:f3:2c:de:3a:33:41:3c:06:02:d3:31:bd:d9:3c: 9f:00:7f:e9:e7:7f:41:6c:69:1b:25:3f:32:c4:47:cb:b6:ea: 0f:2c:bd:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 N0MzRjExMC8GA1UEBRMoRTUyMTA3RjRDMURFMDY0NTNFQkQ2RTY5QjRCRjgyNDQ3 MzE2QUExRDAeFw0yNTA5MDUwODMzMTFaFw0yNTA5MTIwODMzMTFaMBgxFjAUBgNV BAMTDTY4YmFhMDQ3LTczNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4qfxhO23rFD+JlSSxSJVALmuIADNHjWOYu1Z8YF8IEhwi8R33eM4S/k2UJpXs BozDCnO7ms7yVZUMHIlJcnBK6TF88jbJTkPAezTdw2mGGfDJumBv0Otu1Abtag+F g+yH3MvN6OLufoFp9nKq+Gq23IBAJeCt71kQJbBL5KylZrGg8YRrizHD9hpmBtgS x6v7scib66yhbezkJlrV4U2RYJAQgIu1PTC9NNF7PTRJm1BnRxpEAzmQSSeMcT/y RNRWdiRSrWTPOvClfpAGa/G6FFU7VC/ri6dHXZdLMe+lwBn19PfVvXEbEgft3J03 pRNDLBkJ8I+5zxWCOVIVkuQVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULt30b5/B lqcPA2j0y3ByXSGqiwgwHwYDVR0jBBgwFoAU5SEH9MHeBkU+vW5ptL+CRHMWqh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QzNGL0NEQjM2QTNBNzMz MzExRjA4MzlDREM4M0M0RjlBRTAyLzVTRUg5TUhlQmtVLXZXNXB0TC1DUkhNV3Fo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNVNFSDlNSGVCa1Utdlc1cHRMLUNSSE1XcWgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 QzNGL0NEQjM2QTNBNzMzMzExRjA4MzlDREM4M0M0RjlBRTAyLzVTRUg5TUhlQmtV LXZXNXB0TC1DUkhNV3FoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABB3qm7CLqBBwM1Lws/IOWq0JJoc6SoMGIDOORwhPgxGTHN6Uat8buPJ OM6mMdB8UXijVEgGHQ2GPNAMDEr1Z7ReSLS6nsJb0QWiEiFXSqiQKsgAqPMTR32s g7Bqf43d+xXiViEUhhPGn0JRp1dL4rxQb15ehBBwlbowuI741a67sXmI35+P85qM c8Odm7HdxGFXnV2yLp0Hr2KvZ+HD6DRoLoPHQ2pacf8aemoIx6ybAFbEuJi4MaTK 4lF4b2MmOFmCMr8A6kJO1LIw3coSPXGuXMlV9hNDwZobBhPzLN46M0E8BgLTMb3Z PJ8Af+nnf0FsaRslPzLER8u26g8svXQ= -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:08 2025 by rpki-client