$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft File: snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft (raw, json) Hash identifier: l9Pmh2fTGsrwmSk56Yx1ed9P8v0qHeMQbMnLhBK+7LQ= Subject key identifier: 1E:BA:96:B5:A8:A3:D0:A3:0A:12:A0:24:DD:FF:E7:F3:31:3D:FC:52 Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 Certificate issuer: /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft Manifest number: 0687 Signing time: Tue 04 Nov 2025 22:31:41 +0000 Manifest this update: Tue 04 Nov 2025 22:31:40 +0000 Manifest next update: Tue 11 Nov 2025 22:31:40 +0000 Files and hashes: 1: snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl (hash: iU2VCxjlKMQoXJZZjrvxNfHnrUklxKvqOG6l3ZilpxM=) 2: 4179AAF0011111F083725446C4F9AE02.roa (hash: Xzs1XHWlFEfF6WrK0eTZDv2ieAflcHwBqgLNzvmzLEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39D, serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Validity Not Before: Nov 4 22:31:40 2025 GMT Not After : Nov 11 22:31:40 2025 GMT Subject: CN=690a7ecd-3ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:95:10:87:f1:e5:a4:08:ba:08:62:c1:49:d8: 41:1a:4a:5e:5c:72:3d:3f:64:f1:4f:21:53:74:97: 14:9a:4e:2c:65:42:5c:72:da:0b:b8:e1:79:ac:38: 7f:ee:05:f5:73:9f:8d:eb:02:be:d1:b5:42:96:1e: 4c:d7:ed:14:78:ad:4e:57:19:56:cc:d5:72:0e:7e: 57:22:8d:28:06:4f:4c:03:3b:27:10:72:84:ab:8a: fc:ef:0b:9d:b6:f3:41:ee:40:e7:40:4b:06:25:73: 33:b3:78:ae:a4:08:23:94:78:03:3c:4e:43:44:1b: f0:13:d1:08:ed:da:40:75:6d:36:aa:26:b8:2b:5e: 96:60:a3:c0:9b:51:39:08:4e:2d:47:c8:fe:8a:b2: 02:ab:40:9b:ec:74:4c:a6:53:78:8b:e7:0c:0e:73: 63:75:30:73:47:20:1e:93:09:54:ff:fb:6a:47:48: 5e:59:f6:c6:7a:90:8d:05:90:e1:24:21:f5:a1:2b: 79:ab:0d:c9:21:99:c6:e6:c4:2e:5a:1c:2e:99:9c: 09:bf:e7:73:c3:79:64:70:a6:b4:fc:27:f9:61:74: 00:e9:7d:5f:4c:a3:8d:1a:4d:d7:45:84:a0:41:98: 59:50:35:28:69:5a:e4:9e:73:d9:38:75:8e:e7:85: a4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BA:96:B5:A8:A3:D0:A3:0A:12:A0:24:DD:FF:E7:F3:31:3D:FC:52 X509v3 Authority Key Identifier: keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f6:43:f4:da:90:23:4a:88:98:2e:50:2a:61:af:c0:36:b5: 68:ec:4b:0c:ee:3b:fd:b1:ae:68:3e:8f:6b:5c:7d:b0:b4:3a: 92:d5:cf:97:d4:c6:16:d6:ec:01:3d:19:10:80:f4:64:c4:c2: f5:90:18:f8:9e:85:17:24:cc:4f:e2:26:0f:64:7d:32:05:a5: 6e:80:2c:38:1d:8c:a6:9e:aa:eb:a9:89:31:e9:9d:f2:52:31: fd:c4:df:7a:6d:67:3e:63:ca:da:ed:2f:9f:8e:69:1e:f1:c5: 42:f8:30:3c:94:75:2f:1a:ce:44:57:99:a3:25:10:e8:bb:af: 20:d3:b8:78:c1:60:9c:55:7a:fd:23:4e:96:33:a3:72:c7:30: 8a:0c:2c:18:41:35:2a:72:30:20:60:4f:f7:88:57:d8:f5:05: 35:85:9b:05:51:bc:1a:1f:06:7e:8c:c8:46:69:54:16:92:11: e1:e1:42:23:cd:23:b1:11:d1:1c:7e:a4:14:8d:21:91:81:35: d5:31:74:0e:5b:15:6c:8c:6d:e4:8c:5d:48:d1:a0:f3:ed:10: 94:c3:49:42:66:54:63:0e:25:b0:b8:f6:1e:36:57:83:8d:17: 39:fe:0c:b3:e1:d4:af:78:99:e6:6b:2a:d5:39:6b:e0:d5:fb: 76:a2:23:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUQxMTAvBgNVBAUTKEIyNzlEMzRGRTMwOEVDNEFCRjQyMDExMTE5QzhEMjJD QjZGNjFBQzQwHhcNMjUxMTA0MjIzMTQwWhcNMjUxMTExMjIzMTQwWjAYMRYwFAYD VQQDEw02OTBhN2VjZC0zY2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15UQh/HlpAi6CGLBSdhBGkpeXHI9P2TxTyFTdJcUmk4sZUJcctoLuOF5rDh/ 7gX1c5+N6wK+0bVClh5M1+0UeK1OVxlWzNVyDn5XIo0oBk9MAzsnEHKEq4r87wud tvNB7kDnQEsGJXMzs3iupAgjlHgDPE5DRBvwE9EI7dpAdW02qia4K16WYKPAm1E5 CE4tR8j+irICq0Cb7HRMplN4i+cMDnNjdTBzRyAekwlU//tqR0heWfbGepCNBZDh JCH1oSt5qw3JIZnG5sQuWhwumZwJv+dzw3lkcKa0/Cf5YXQA6X1fTKONGk3XRYSg QZhZUDUoaVrknnPZOHWO54WkswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB66lrWo o9CjChKgJN3/5/MxPfxSMB8GA1UdIwQYMBaAFLJ500/jCOxKv0IBERnI0iy29hrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5RC80NjdDMDNCMDkz MUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdFcV9RZ0VSR2NqU0xMYjJH c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NublRULU1JN0VxX1FnRVJHY2pTTExiMkdzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5RC80NjdDMDNCMDkzMUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdF cV9RZ0VSR2NqU0xMYjJHc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs9kP02pAjSoiYLlAqYa/ANrVo7EsM7jv9sa5oPo9rXH2wtDqS1c+X 1MYW1uwBPRkQgPRkxML1kBj4noUXJMxP4iYPZH0yBaVugCw4HYymnqrrqYkx6Z3y UjH9xN96bWc+Y8ra7S+fjmke8cVC+DA8lHUvGs5EV5mjJRDou68g07h4wWCcVXr9 I06WM6NyxzCKDCwYQTUqcjAgYE/3iFfY9QU1hZsFUbwaHwZ+jMhGaVQWkhHh4UIj zSOxEdEcfqQUjSGRgTXVMXQOWxVsjG3kjF1I0aDz7RCUw0lCZlRjDiWwuPYeNleD jRc5/gyz4dSveJnmayrVOWvg1ft2oiO5 -----END CERTIFICATE-----Generated at Wed Nov 5 17:03:37 2025 by rpki-client