$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft File: snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft (raw, json) Hash identifier: T/Q6sOnRhrP8BK7S8KjUS7FNOr3xXvXlgTobf+W4/ck= Subject key identifier: A8:4B:45:BE:07:44:2E:4D:8A:7F:4E:86:34:79:C0:1C:98:31:24:B8 Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 Certificate issuer: /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Certificate serial: 065E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft Manifest number: 065B Signing time: Fri 08 Aug 2025 22:59:08 +0000 Manifest this update: Fri 08 Aug 2025 22:59:07 +0000 Manifest next update: Fri 15 Aug 2025 22:59:07 +0000 Files and hashes: 1: snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl (hash: 3/BbfLJATICV0/kbBc2AdbnizhetesQqtB4Oznkh8KQ=) 2: 4179AAF0011111F083725446C4F9AE02.roa (hash: Xzs1XHWlFEfF6WrK0eTZDv2ieAflcHwBqgLNzvmzLEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1630 (0x65e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39D, serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Validity Not Before: Aug 8 22:59:07 2025 GMT Not After : Aug 15 22:59:07 2025 GMT Subject: CN=6896813b-5212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:46:21:44:99:97:cf:41:60:99:04:62:7a: ba:05:7c:f2:1b:5b:1f:c7:76:96:78:94:41:1b:66: 3c:df:5a:82:4b:3f:26:45:28:7b:f4:b2:ba:15:9b: d8:37:63:07:ac:cd:d4:05:5a:08:e0:dc:30:82:21: 37:50:e7:e4:86:2c:2c:d2:ae:59:ed:ec:7a:ab:54: b9:73:25:b6:17:04:7b:09:81:07:a8:a2:88:f2:6f: 41:e1:cf:68:2c:b3:2f:70:db:a7:34:aa:a1:8b:00: 4b:59:a7:3b:63:1e:b3:02:d7:11:9c:76:50:92:c3: 33:39:6c:dd:77:f8:ea:f6:d0:ae:58:60:e0:ae:50: bd:dc:fb:bf:9a:1a:bb:36:34:28:48:e5:25:40:c1: a5:15:59:e7:c2:1a:f4:75:52:e3:47:0b:40:4f:65: c9:67:e5:e5:b1:85:ce:15:81:41:ba:37:7d:af:11: d1:6f:c8:e6:cc:92:e1:47:e3:19:a0:5e:ef:74:c8: c5:6b:89:57:ab:b8:12:9b:48:1b:ba:50:cb:5f:d3: 1b:f8:69:13:1a:ef:a4:6a:e2:d7:d7:e4:18:68:d5: ed:44:9c:04:4c:92:6d:6b:4f:1d:cc:bd:9d:8a:26: 83:84:2a:eb:1c:c5:09:58:05:ca:ee:4c:da:d7:30: 48:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4B:45:BE:07:44:2E:4D:8A:7F:4E:86:34:79:C0:1C:98:31:24:B8 X509v3 Authority Key Identifier: keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:91:62:ec:6d:5b:97:5c:e5:20:b2:3a:de:ee:b1:8f:c7:69: 10:aa:f7:d4:f4:ae:ad:39:a0:c6:3c:9c:3b:25:36:d9:d6:06: 3d:a4:0f:f0:3b:88:d2:07:ab:e3:c0:82:00:df:a5:fb:fe:78: 74:e4:e7:69:5a:a5:5b:16:1b:4b:d0:6c:d6:dd:36:5c:bd:60: 4e:bd:bd:04:05:99:96:f9:a2:cd:b3:44:fd:00:81:a0:4f:11: 88:ec:b8:41:8b:73:93:c2:b1:d9:6c:5f:e7:43:74:18:d7:8c: 08:98:e7:df:c4:56:09:08:1e:d9:55:e8:4e:ca:28:06:12:86: 95:40:4d:ea:fd:66:ae:05:4c:17:05:27:b9:ef:c5:53:f3:30: 67:93:f5:11:f5:c3:f0:b9:97:f3:c4:c2:b0:eb:9a:59:99:60: 29:3e:11:bb:19:f4:4e:e9:58:eb:b7:3f:ac:81:f5:50:12:11: 3e:47:e1:a9:63:bd:6a:e3:70:bd:f4:0a:e8:b6:1a:76:f3:3a: 5d:05:9b:08:a0:78:10:7c:5b:e2:df:c0:91:7d:6c:9d:19:f6: 66:ce:95:b2:62:9d:8c:73:62:8c:04:5d:c8:96:cd:dc:2d:cb: 15:2c:87:39:6b:d4:27:4b:d9:d6:fb:d0:fb:64:f5:dd:ca:55: cc:09:7b:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUQxMTAvBgNVBAUTKEIyNzlEMzRGRTMwOEVDNEFCRjQyMDExMTE5QzhEMjJD QjZGNjFBQzQwHhcNMjUwODA4MjI1OTA3WhcNMjUwODE1MjI1OTA3WjAYMRYwFAYD VQQDEw02ODk2ODEzYi01MjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxRGIUSZl89BYJkEYnq6BXzyG1sfx3aWeJRBG2Y831qCSz8mRSh79LK6FZvY N2MHrM3UBVoI4NwwgiE3UOfkhiws0q5Z7ex6q1S5cyW2FwR7CYEHqKKI8m9B4c9o LLMvcNunNKqhiwBLWac7Yx6zAtcRnHZQksMzOWzdd/jq9tCuWGDgrlC93Pu/mhq7 NjQoSOUlQMGlFVnnwhr0dVLjRwtAT2XJZ+XlsYXOFYFBujd9rxHRb8jmzJLhR+MZ oF7vdMjFa4lXq7gSm0gbulDLX9Mb+GkTGu+kauLX1+QYaNXtRJwETJJta08dzL2d iiaDhCrrHMUJWAXK7kza1zBIKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhLRb4H RC5Nin9OhjR5wByYMSS4MB8GA1UdIwQYMBaAFLJ500/jCOxKv0IBERnI0iy29hrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5RC80NjdDMDNCMDkz MUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdFcV9RZ0VSR2NqU0xMYjJH c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NublRULU1JN0VxX1FnRVJHY2pTTExiMkdzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5RC80NjdDMDNCMDkzMUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdF cV9RZ0VSR2NqU0xMYjJHc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKkWLsbVuXXOUgsjre7rGPx2kQqvfU9K6tOaDGPJw7JTbZ1gY9pA/w O4jSB6vjwIIA36X7/nh05OdpWqVbFhtL0GzW3TZcvWBOvb0EBZmW+aLNs0T9AIGg TxGI7LhBi3OTwrHZbF/nQ3QY14wImOffxFYJCB7ZVehOyigGEoaVQE3q/WauBUwX BSe578VT8zBnk/UR9cPwuZfzxMKw65pZmWApPhG7GfRO6Vjrtz+sgfVQEhE+R+Gp Y71q43C99Arothp28zpdBZsIoHgQfFvi38CRfWydGfZmzpWyYp2Mc2KMBF3Ils3c LcsVLIc5a9QnS9nW+9D7ZPXdylXMCXvS -----END CERTIFICATE-----Generated at Sat Aug 9 15:08:48 2025 by rpki-client