$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft File: snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft (raw, json) Hash identifier: En1vz8I6z9ASB2VzP/FCvkk6L0BzmlJ/9ukqQbK37Lo= Subject key identifier: 6D:09:32:8D:D0:30:43:DB:9C:47:FE:98:8C:A2:10:92:81:20:FA:AA Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 Certificate issuer: /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft Manifest number: 0647 Signing time: Mon 30 Jun 2025 22:58:34 +0000 Manifest this update: Mon 30 Jun 2025 22:58:34 +0000 Manifest next update: Mon 07 Jul 2025 22:58:34 +0000 Files and hashes: 1: snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl (hash: 97wjUrkAeaEDhba0uNJUmLrJBahgnqQ8ZN4hpsJGIWI=) 2: 4179AAF0011111F083725446C4F9AE02.roa (hash: Xzs1XHWlFEfF6WrK0eTZDv2ieAflcHwBqgLNzvmzLEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39D, serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Validity Not Before: Jun 30 22:58:34 2025 GMT Not After : Jul 7 22:58:34 2025 GMT Subject: CN=6863169a-ef3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:44:df:0a:69:bb:9b:f0:36:f0:ec:a5:c0: ad:da:1a:f3:c6:41:b5:c5:8a:1b:1c:fe:ab:80:e8: e4:56:b6:fd:9f:db:5f:70:a5:d1:65:00:5f:8b:de: 69:2b:37:16:32:eb:70:31:81:26:76:a1:71:69:69: 9a:b5:a4:dc:fc:a7:bd:45:11:e6:07:30:f5:04:69: d0:43:26:57:01:b2:a0:1f:62:4d:a2:f6:50:fa:f7: fa:73:db:88:c8:78:19:1f:6a:77:c4:e2:f7:14:a8: ba:27:f3:23:0c:4b:b4:cc:e0:f5:50:3e:91:23:2f: 41:1f:4e:b4:fe:12:32:68:93:fc:3c:e0:b8:e8:25: cd:92:48:ab:9b:b7:5d:8b:79:f0:af:dc:9d:ec:e4: 75:8a:94:5b:4e:fe:6b:71:11:65:1e:3c:50:f5:fa: 4e:fe:bd:d5:b3:dc:5a:4e:0b:b6:44:b0:7b:1a:98: 8e:8c:27:5e:d9:6a:5e:78:ca:4c:5b:a3:d7:3d:43: 4c:97:fb:aa:f4:75:79:8c:5c:bd:e0:3b:e9:bf:49: 7b:bf:ef:2c:9e:a4:6d:ea:87:ad:9b:48:ba:13:5c: c2:46:5f:e8:0a:19:ca:b7:db:f7:7f:b5:35:7e:14: ef:52:f3:ed:02:e5:3e:45:c2:b8:31:7b:b1:de:11: 6b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:09:32:8D:D0:30:43:DB:9C:47:FE:98:8C:A2:10:92:81:20:FA:AA X509v3 Authority Key Identifier: keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a9:84:62:56:02:f0:77:6c:82:6b:ec:50:b8:03:95:88:63: e2:a3:18:b9:84:bf:8c:d7:d1:9a:7f:fa:8e:f5:14:13:59:ca: f0:96:ff:d3:23:19:a9:b4:e2:70:22:94:18:a8:c8:d3:75:30: 9d:31:41:04:fb:87:06:51:97:af:69:b8:4b:ed:cf:55:d6:67: df:57:2f:dc:63:9d:8b:bc:0b:5f:e8:e4:65:d8:03:3b:d6:cb: 11:f8:1e:a1:a2:79:ab:95:59:c8:65:e3:68:fa:f4:54:29:8e: 5e:45:7a:df:e3:8b:90:16:90:cd:49:ea:ed:45:ef:39:4a:92: 11:7d:05:fb:a6:03:a2:6f:b5:59:27:fb:6b:e0:e4:a8:9a:94: cb:32:c2:1c:36:80:a4:a9:67:ec:ac:f7:60:dc:c5:a2:03:61: b7:1f:0f:08:21:f8:15:51:7a:36:5a:ac:02:f1:3f:6c:e0:63: ff:6d:4f:8e:1c:5e:c2:99:21:09:14:41:10:d8:4d:63:2d:01: b7:72:65:de:c7:0f:63:d6:38:ef:ab:67:75:4b:b4:08:75:c5: 01:bd:94:74:0a:e6:c1:af:21:97:06:e4:0c:7f:51:90:ee:f4: bd:f2:fe:e0:b9:3a:55:b9:83:2d:c7:3d:ca:40:e3:63:58:13: 82:9a:3f:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUQxMTAvBgNVBAUTKEIyNzlEMzRGRTMwOEVDNEFCRjQyMDExMTE5QzhEMjJD QjZGNjFBQzQwHhcNMjUwNjMwMjI1ODM0WhcNMjUwNzA3MjI1ODM0WjAYMRYwFAYD VQQDEw02ODYzMTY5YS1lZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2xE3wppu5vwNvDspcCt2hrzxkG1xYobHP6rgOjkVrb9n9tfcKXRZQBfi95p KzcWMutwMYEmdqFxaWmataTc/Ke9RRHmBzD1BGnQQyZXAbKgH2JNovZQ+vf6c9uI yHgZH2p3xOL3FKi6J/MjDEu0zOD1UD6RIy9BH060/hIyaJP8POC46CXNkkirm7dd i3nwr9yd7OR1ipRbTv5rcRFlHjxQ9fpO/r3Vs9xaTgu2RLB7GpiOjCde2WpeeMpM W6PXPUNMl/uq9HV5jFy94Dvpv0l7v+8snqRt6oetm0i6E1zCRl/oChnKt9v3f7U1 fhTvUvPtAuU+RcK4MXux3hFrdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0JMo3Q MEPbnEf+mIyiEJKBIPqqMB8GA1UdIwQYMBaAFLJ500/jCOxKv0IBERnI0iy29hrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5RC80NjdDMDNCMDkz MUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdFcV9RZ0VSR2NqU0xMYjJH c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NublRULU1JN0VxX1FnRVJHY2pTTExiMkdzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5RC80NjdDMDNCMDkzMUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdF cV9RZ0VSR2NqU0xMYjJHc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRqYRiVgLwd2yCa+xQuAOViGPioxi5hL+M19Gaf/qO9RQTWcrwlv/T IxmptOJwIpQYqMjTdTCdMUEE+4cGUZevabhL7c9V1mffVy/cY52LvAtf6ORl2AM7 1ssR+B6honmrlVnIZeNo+vRUKY5eRXrf44uQFpDNSertRe85SpIRfQX7pgOib7VZ J/tr4OSompTLMsIcNoCkqWfsrPdg3MWiA2G3Hw8IIfgVUXo2WqwC8T9s4GP/bU+O HF7CmSEJFEEQ2E1jLQG3cmXexw9j1jjvq2d1S7QIdcUBvZR0CubBryGXBuQMf1GQ 7vS98v7guTpVuYMtxz3KQONjWBOCmj/y -----END CERTIFICATE-----Generated at Wed Jul 2 20:52:40 2025 by rpki-client