$ rpki-client -vvf rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft File: SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft (raw, json) Hash identifier: sYbJ73+m0Ma2vmnCbBhbC/hwLKoKlPn/tuTdEPHcfMo= Subject key identifier: 8F:3F:77:4A:A2:DC:75:60:7F:CF:C5:B0:3B:EA:40:8A:84:1C:D1:6F Authority key identifier: 49:E6:84:D5:0D:8B:D7:8C:18:1E:07:41:8C:6D:12:02:32:93:E9:94 Certificate issuer: /CN=A9177A7E/serialNumber=49E684D50D8BD78C181E07418C6D12023293E994 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft Manifest number: 7C Signing time: Fri 25 Apr 2025 05:44:02 +0000 Manifest this update: Fri 25 Apr 2025 05:44:01 +0000 Manifest next update: Fri 02 May 2025 05:44:01 +0000 Files and hashes: 1: SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl (hash: OF1LQ28gXC0xpNSzbhwnh+tlIdubNgwrHXiou0kNtYo=) 2: 228CC738816611EFA8852945C4F9AE02.roa (hash: rdEM/CyFmpFNhOKo2qBDJWFaCiXo+v07SKBD5Apef/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177A7E, serialNumber=49E684D50D8BD78C181E07418C6D12023293E994 Validity Not Before: Apr 25 05:44:01 2025 GMT Not After : May 2 05:44:01 2025 GMT Subject: CN=680b2122-429f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:f8:da:01:49:77:d7:5b:05:a8:b6:c0:f3: a8:61:5d:53:1a:ae:bd:88:22:d0:21:bb:94:57:e8: 3e:d7:b7:5e:16:73:9a:8a:ac:47:69:2a:00:8d:1d: 23:66:ba:01:34:c8:e8:c3:7e:b6:03:42:0b:90:e6: 15:c1:3c:1f:c6:7d:b2:b6:8b:d2:28:b9:c3:af:e0: 78:69:95:fe:cc:6c:4a:ce:55:98:d8:1d:07:03:57: e3:e0:14:4c:42:d1:d4:55:ff:1e:62:98:2a:cb:35: 64:ce:3b:99:e7:b5:ca:03:bf:f1:4b:02:81:d5:db: 51:eb:25:61:78:a9:53:61:d3:28:66:18:f2:23:08: 4f:9b:23:9f:e9:40:89:32:f6:f5:f8:ba:74:f6:f8: 1d:48:30:1e:58:4e:10:c2:3d:07:d3:f9:59:ea:08: b2:49:ee:f8:2c:57:74:15:06:be:ea:2c:ff:39:2b: 2d:7a:ae:19:7e:2f:02:30:f5:13:67:f7:4d:f1:d7: 2a:af:15:1d:f2:c1:5e:38:63:07:45:ff:8b:89:a0: a3:67:d8:26:20:ee:c1:6c:98:58:22:79:57:99:16: 14:f5:20:f4:74:b0:c5:8a:9c:bf:d1:f5:67:ae:77: 98:16:eb:d0:a3:4c:71:ac:ef:91:39:75:70:f9:8c: 9c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3F:77:4A:A2:DC:75:60:7F:CF:C5:B0:3B:EA:40:8A:84:1C:D1:6F X509v3 Authority Key Identifier: keyid:49:E6:84:D5:0D:8B:D7:8C:18:1E:07:41:8C:6D:12:02:32:93:E9:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d9:ea:ec:16:2b:03:c9:1e:9c:69:48:eb:65:23:cf:91:96: d2:41:ca:3a:76:fe:5a:b0:04:d3:12:d6:9f:7d:d3:cf:a5:a3: 6a:e4:90:1c:c0:87:5a:1a:b4:1b:e7:f3:6b:57:64:a7:13:2a: 24:21:75:e6:83:66:d4:a8:3d:4a:49:cd:0a:99:f5:92:40:8a: 1f:de:4a:14:0f:3e:cf:e6:5f:53:c3:f5:c1:05:4b:5f:8a:9b: 0e:98:2b:98:00:f9:88:39:15:03:fb:37:34:44:06:26:d0:c6: c5:26:59:c7:f7:d0:ea:ad:1f:39:c6:f5:3d:9e:dc:0e:0b:86: dc:7e:91:85:ab:ec:c7:6f:12:a0:50:14:fd:39:ac:d6:35:81: 79:51:f6:79:24:b5:5b:d8:50:79:e8:09:7d:64:95:36:74:99: b6:91:fb:3b:f1:b1:14:c4:4b:bc:8d:ae:03:62:74:ff:d2:09: bf:88:00:bd:36:b9:6f:ad:ed:77:bf:6c:40:6e:46:3a:12:61: 69:11:b7:97:2e:40:01:5a:02:ad:d9:59:28:33:91:0a:4a:94: 15:65:25:7e:be:97:87:6e:cc:ce:4d:19:1e:8c:cc:db:1a:fc: 3e:09:32:77:54:5d:ed:d9:3f:08:a2:24:b8:7d:b3:36:d4:08: bb:ea:1d:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 N0E3RTExMC8GA1UEBRMoNDlFNjg0RDUwRDhCRDc4QzE4MUUwNzQxOEM2RDEyMDIz MjkzRTk5NDAeFw0yNTA0MjUwNTQ0MDFaFw0yNTA1MDIwNTQ0MDFaMBgxFjAUBgNV BAMTDTY4MGIyMTIyLTQyOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiXfjaAUl311sFqLbA86hhXVMarr2IItAhu5RX6D7Xt14Wc5qKrEdpKgCNHSNm ugE0yOjDfrYDQguQ5hXBPB/GfbK2i9IoucOv4Hhplf7MbErOVZjYHQcDV+PgFExC 0dRV/x5imCrLNWTOO5nntcoDv/FLAoHV21HrJWF4qVNh0yhmGPIjCE+bI5/pQIky 9vX4unT2+B1IMB5YThDCPQfT+VnqCLJJ7vgsV3QVBr7qLP85Ky16rhl+LwIw9RNn 903x1yqvFR3ywV44YwdF/4uJoKNn2CYg7sFsmFgieVeZFhT1IPR0sMWKnL/R9Weu d5gW69CjTHGs75E5dXD5jJxpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjz93SqLc dWB/z8WwO+pAioQc0W8wHwYDVR0jBBgwFoAUSeaE1Q2L14wYHgdBjG0SAjKT6ZQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QTdFLzMwMzUzQjhBNkE2 RjExRUZCRjNGMTEzNkM0RjlBRTAyL1NlYUUxUTJMMTR3WUhnZEJqRzBTQWpLVDZa US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2VhRTFRMkwxNHdZSGdkQmpHMFNBaktUNlpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 QTdFLzMwMzUzQjhBNkE2RjExRUZCRjNGMTEzNkM0RjlBRTAyL1NlYUUxUTJMMTR3 WUhnZEJqRzBTQWpLVDZaUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIjZ6uwWKwPJHpxpSOtlI8+RltJByjp2/lqwBNMS1p9908+lo2rkkBzA h1oatBvn82tXZKcTKiQhdeaDZtSoPUpJzQqZ9ZJAih/eShQPPs/mX1PD9cEFS1+K mw6YK5gA+Yg5FQP7NzREBibQxsUmWcf30OqtHznG9T2e3A4Lhtx+kYWr7MdvEqBQ FP05rNY1gXlR9nkktVvYUHnoCX1klTZ0mbaR+zvxsRTES7yNrgNidP/SCb+IAL02 uW+t7Xe/bEBuRjoSYWkRt5cuQAFaAq3ZWSgzkQpKlBVlJX6+l4duzM5NGR6MzNsa /D4JMndUXe3ZPwiiJLh9szbUCLvqHWo= -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:14 2025 by rpki-client