$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft File: snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft (raw, json) Hash identifier: PTma/rca84QJY0qrcdvj6xu7HEMGe38ri5SuXYJdpGo= Subject key identifier: 13:23:8D:37:59:81:73:00:6C:0C:7A:EC:F3:74:D7:82:93:53:8A:FD Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 Certificate issuer: /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Certificate serial: 0629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft Manifest number: 0626 Signing time: Thu 24 Apr 2025 22:31:33 +0000 Manifest this update: Thu 24 Apr 2025 22:31:32 +0000 Manifest next update: Thu 01 May 2025 22:31:32 +0000 Files and hashes: 1: snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl (hash: pLhRhGRxUcGHAMA0ECgS1u6ePTmlWONoCeB1YamMpz8=) 2: 4179AAF0011111F083725446C4F9AE02.roa (hash: Xzs1XHWlFEfF6WrK0eTZDv2ieAflcHwBqgLNzvmzLEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39D, serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Validity Not Before: Apr 24 22:31:32 2025 GMT Not After : May 1 22:31:32 2025 GMT Subject: CN=680abbc5-414a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:c3:f6:7c:47:a7:79:63:6d:2b:3c:e4:13: bd:4d:b1:94:69:ee:e9:29:b0:d4:d3:e7:02:b2:46: a4:36:df:f6:79:05:e5:d0:76:a3:8e:d8:73:17:f6: 2d:e9:99:e5:96:e6:14:2d:9a:2e:ef:df:4d:96:39: c7:1c:5e:8d:e2:c1:65:81:02:42:d9:a5:1d:a8:fb: 90:e8:15:60:a4:4b:e8:cb:6a:2b:d8:90:3b:be:aa: fd:29:b1:ff:e7:6d:53:0c:33:8b:6c:c8:bd:f0:3b: fd:d3:f5:c3:d1:1f:35:64:4c:7b:ce:6a:e9:6b:2f: 19:40:ad:f7:c0:55:b2:65:13:23:41:60:3a:c5:f7: bf:4d:fc:16:f7:11:78:90:60:27:af:45:5c:c1:d8: b5:e8:27:c6:f9:d9:52:12:46:11:e6:d2:92:cc:85: 16:67:03:e0:67:5a:d0:35:22:ad:7c:ff:dc:2c:85: dc:9b:28:83:67:d3:bc:4f:12:29:ef:c5:cd:4f:cd: 63:86:63:a3:8e:35:32:c0:53:3d:e0:d9:4e:3e:12: b9:57:c1:24:b7:7e:49:0e:e2:27:c6:8b:04:16:b9: 5f:77:45:8f:f7:04:f8:e4:51:a0:f0:8c:87:2a:ca: e7:79:7a:d7:b0:a8:f2:92:f4:50:cb:1c:3f:e9:c0: cf:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:23:8D:37:59:81:73:00:6C:0C:7A:EC:F3:74:D7:82:93:53:8A:FD X509v3 Authority Key Identifier: keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:72:18:db:b2:f1:94:f6:60:60:5b:fa:19:35:8c:4d:5f:28: a1:d0:e7:5b:77:41:6e:48:b5:c7:1d:02:36:f4:d3:d7:2b:a6: 05:c6:0e:97:26:61:21:f3:b9:61:69:6c:74:26:ab:1a:57:24: 73:09:91:85:cb:61:be:67:c9:0f:1d:69:c7:68:1a:ed:a7:f5: d3:05:3e:40:a9:d8:65:f7:fa:cc:d6:c1:21:79:bd:9f:89:e9: 5e:bd:a9:cf:06:79:c1:2a:2d:49:d3:c0:eb:cc:0d:d2:97:4f: e8:8b:06:89:4d:22:55:73:a2:11:6f:9d:a2:5c:55:fb:91:b8: 09:22:1c:5b:8d:d0:ed:5e:5a:17:cf:31:ef:cd:13:0f:d7:81: 23:a6:79:8a:08:5e:f9:e7:fe:32:f4:18:2e:f3:a9:3a:06:44: 2e:e0:17:12:8e:ed:c1:1a:71:c7:d9:78:d0:65:df:40:87:7c: f4:d4:75:b1:3e:21:85:94:3e:50:48:dc:de:8c:07:00:05:eb: 87:9c:9e:2d:c0:f6:7b:93:49:54:87:f2:db:44:8e:f5:09:76: 45:ec:ca:df:f2:a5:d4:97:91:5f:1c:e6:35:c9:19:45:07:07: a9:64:cd:c4:03:50:fe:dd:ad:be:11:b3:cd:cf:70:46:58:d6: 8c:29:4a:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUQxMTAvBgNVBAUTKEIyNzlEMzRGRTMwOEVDNEFCRjQyMDExMTE5QzhEMjJD QjZGNjFBQzQwHhcNMjUwNDI0MjIzMTMyWhcNMjUwNTAxMjIzMTMyWjAYMRYwFAYD VQQDEw02ODBhYmJjNS00MTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfDD9nxHp3ljbSs85BO9TbGUae7pKbDU0+cCskakNt/2eQXl0HajjthzF/Yt 6ZnlluYULZou799NljnHHF6N4sFlgQJC2aUdqPuQ6BVgpEvoy2or2JA7vqr9KbH/ 521TDDOLbMi98Dv90/XD0R81ZEx7zmrpay8ZQK33wFWyZRMjQWA6xfe/TfwW9xF4 kGAnr0Vcwdi16CfG+dlSEkYR5tKSzIUWZwPgZ1rQNSKtfP/cLIXcmyiDZ9O8TxIp 78XNT81jhmOjjjUywFM94NlOPhK5V8Ekt35JDuInxosEFrlfd0WP9wT45FGg8IyH KsrneXrXsKjykvRQyxw/6cDP9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMjjTdZ gXMAbAx67PN014KTU4r9MB8GA1UdIwQYMBaAFLJ500/jCOxKv0IBERnI0iy29hrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5RC80NjdDMDNCMDkz MUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdFcV9RZ0VSR2NqU0xMYjJH c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NublRULU1JN0VxX1FnRVJHY2pTTExiMkdzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5RC80NjdDMDNCMDkzMUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdF cV9RZ0VSR2NqU0xMYjJHc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwchjbsvGU9mBgW/oZNYxNXyih0Odbd0FuSLXHHQI29NPXK6YFxg6X JmEh87lhaWx0JqsaVyRzCZGFy2G+Z8kPHWnHaBrtp/XTBT5Aqdhl9/rM1sEheb2f ielevanPBnnBKi1J08DrzA3Sl0/oiwaJTSJVc6IRb52iXFX7kbgJIhxbjdDtXloX zzHvzRMP14EjpnmKCF755/4y9Bgu86k6BkQu4BcSju3BGnHH2XjQZd9Ah3z01HWx PiGFlD5QSNzejAcABeuHnJ4twPZ7k0lUh/LbRI71CXZF7Mrf8qXUl5FfHOY1yRlF BwepZM3EA1D+3a2+EbPNz3BGWNaMKUqW -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:58 2025 by rpki-client