$ rpki-client -vvf rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft File: SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft (raw, json) Hash identifier: bWllsIEh2MWsTRucTKx7HUgnbO2ys4VZ2zRJp33stng= Subject key identifier: AD:75:43:F4:AF:55:D7:6A:BD:AB:F0:D7:5E:1C:21:4B:AF:BF:F2:33 Authority key identifier: 49:E6:84:D5:0D:8B:D7:8C:18:1E:07:41:8C:6D:12:02:32:93:E9:94 Certificate issuer: /CN=A9177A7E/serialNumber=49E684D50D8BD78C181E07418C6D12023293E994 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft Manifest number: D7 Signing time: Sun 19 Oct 2025 08:42:45 +0000 Manifest this update: Sun 19 Oct 2025 08:42:44 +0000 Manifest next update: Sun 26 Oct 2025 08:42:44 +0000 Files and hashes: 1: SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl (hash: Nk+tgmluwRmrsHyyowClbCfDvjqMZahg19MoEnxtQvI=) 2: 228CC738816611EFA8852945C4F9AE02.roa (hash: lUgXyzv98aIYZZo+UF95hDGgwVOo27vHGN5bli84jD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177A7E, serialNumber=49E684D50D8BD78C181E07418C6D12023293E994 Validity Not Before: Oct 19 08:42:44 2025 GMT Not After : Oct 26 08:42:44 2025 GMT Subject: CN=68f4a485-5070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d1:3e:3b:a0:7e:80:84:30:f4:97:1f:77:66: d1:51:52:2c:52:c6:f7:43:d2:6d:d7:f4:0a:73:f6: a4:d1:10:0a:fa:d8:41:3b:3f:b4:fa:d3:e5:f5:e7: 22:0f:4a:ab:ea:ae:a0:63:1c:3d:a9:41:5d:d0:3e: fd:78:5f:a7:7f:bb:90:08:9a:8b:75:8a:13:3a:51: f8:0d:d7:d6:84:71:01:90:fd:51:dd:4b:d2:a2:02: e7:00:a3:a2:36:09:53:97:27:e0:c5:3c:6a:d3:23: f7:a1:09:dc:bb:8a:d0:4b:95:95:c3:29:5e:4f:40: 07:99:e5:34:47:8e:c1:15:80:f8:56:14:96:43:02: c2:b3:61:06:79:af:05:ee:c2:a3:69:d1:fe:59:db: c7:0e:df:04:d4:c0:7c:22:ca:48:96:9d:9f:01:e4: ce:b9:6e:ac:71:92:c8:82:21:cf:b1:bf:bc:f7:37: 3c:28:09:eb:e1:73:b8:87:af:68:69:9a:c0:6d:7f: e6:4e:e6:b6:62:1a:db:23:2f:06:8d:0d:75:e9:ce: c0:ca:90:6d:1e:e8:4f:da:64:bb:4d:2c:36:1c:10: 6f:69:19:84:d4:eb:bd:c8:82:91:57:93:4d:ad:2a: 86:01:ad:ca:1b:bc:ba:32:88:ac:ab:c0:4b:6e:89: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:75:43:F4:AF:55:D7:6A:BD:AB:F0:D7:5E:1C:21:4B:AF:BF:F2:33 X509v3 Authority Key Identifier: keyid:49:E6:84:D5:0D:8B:D7:8C:18:1E:07:41:8C:6D:12:02:32:93:E9:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:23:f9:d1:ee:62:59:3f:7f:4e:4a:9c:84:50:6e:7b:53:80: cd:92:db:b9:73:db:77:f0:70:f3:e9:fb:25:1c:02:a3:62:0b: 86:a5:a2:bf:5e:29:26:48:ba:cf:82:8b:87:3e:d1:e4:d3:d7: 81:2d:c6:f9:d3:ce:a0:3c:df:a4:3a:a9:37:18:82:76:f8:44: 38:ba:aa:3e:b7:d8:52:c0:d3:bf:75:fa:32:93:29:41:1a:c2: c0:03:e3:9b:dd:fa:08:9b:a9:65:88:ea:f9:e4:9d:df:12:cd: b5:d2:d7:b5:7a:33:b1:9e:1d:55:04:46:01:08:1c:95:c0:85: a4:66:96:d9:75:37:1f:3e:e7:ef:a0:80:ba:2d:51:c6:f4:06: 58:ea:cb:3b:f1:20:9a:18:c7:cf:66:97:32:59:3a:16:fc:88: 1e:38:72:0b:ce:c0:c7:21:67:a5:88:88:11:81:84:eb:24:ca: 5e:e4:8a:78:e8:38:76:54:f4:2f:64:c9:7e:b8:b3:1c:ee:62: a1:5b:1c:3f:60:7b:b9:ea:d0:5d:52:8c:bb:56:74:c6:90:73: f7:d5:aa:f3:95:7f:ec:09:45:83:79:ee:b1:5e:f3:20:23:56: e7:97:93:5e:cf:6c:17:64:48:28:8b:ea:97:0a:fc:a6:9f:4f: 94:ee:8c:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdBN0UxMTAvBgNVBAUTKDQ5RTY4NEQ1MEQ4QkQ3OEMxODFFMDc0MThDNkQxMjAy MzI5M0U5OTQwHhcNMjUxMDE5MDg0MjQ0WhcNMjUxMDI2MDg0MjQ0WjAYMRYwFAYD VQQDEw02OGY0YTQ4NS01MDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9E+O6B+gIQw9Jcfd2bRUVIsUsb3Q9Jt1/QKc/ak0RAK+thBOz+0+tPl9eci D0qr6q6gYxw9qUFd0D79eF+nf7uQCJqLdYoTOlH4DdfWhHEBkP1R3UvSogLnAKOi NglTlyfgxTxq0yP3oQncu4rQS5WVwyleT0AHmeU0R47BFYD4VhSWQwLCs2EGea8F 7sKjadH+WdvHDt8E1MB8IspIlp2fAeTOuW6scZLIgiHPsb+89zc8KAnr4XO4h69o aZrAbX/mTua2YhrbIy8GjQ116c7AypBtHuhP2mS7TSw2HBBvaRmE1Ou9yIKRV5NN rSqGAa3KG7y6Moisq8BLbol3vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK11Q/Sv Vddqvavw114cIUuvv/IzMB8GA1UdIwQYMBaAFEnmhNUNi9eMGB4HQYxtEgIyk+mU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0E3RS8zMDM1M0I4QTZB NkYxMUVGQkYzRjExMzZDNEY5QUUwMi9TZWFFMVEyTDE0d1lIZ2RCakcwU0FqS1Q2 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NlYUUxUTJMMTR3WUhnZEJqRzBTQWpLVDZaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0E3RS8zMDM1M0I4QTZBNkYxMUVGQkYzRjExMzZDNEY5QUUwMi9TZWFFMVEyTDE0 d1lIZ2RCakcwU0FqS1Q2WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuI/nR7mJZP39OSpyEUG57U4DNktu5c9t38HDz6fslHAKjYguGpaK/ XikmSLrPgouHPtHk09eBLcb5086gPN+kOqk3GIJ2+EQ4uqo+t9hSwNO/dfoykylB GsLAA+Ob3foIm6lliOr55J3fEs210te1ejOxnh1VBEYBCByVwIWkZpbZdTcfPufv oIC6LVHG9AZY6ss78SCaGMfPZpcyWToW/IgeOHILzsDHIWeliIgRgYTrJMpe5Ip4 6Dh2VPQvZMl+uLMc7mKhWxw/YHu56tBdUoy7VnTGkHP31arzlX/sCUWDee6xXvMg I1bnl5Nez2wXZEgoi+qXCvymn0+U7owx -----END CERTIFICATE-----Generated at Mon Oct 20 21:54:12 2025 by rpki-client