$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft File: snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft (raw, json) Hash identifier: 7wmlOx/3zJy6ti5lLpAsIdNBtVOg5UUjroNqFkUeK7I= Subject key identifier: DE:B6:46:EF:96:7D:04:F8:3A:94:E0:E3:06:19:89:F2:FD:62:2D:50 Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 Certificate issuer: /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft Manifest number: 067F Signing time: Sat 18 Oct 2025 23:59:23 +0000 Manifest this update: Sat 18 Oct 2025 23:59:22 +0000 Manifest next update: Sat 25 Oct 2025 23:59:22 +0000 Files and hashes: 1: snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl (hash: 0vXdX4wqJR1OvGFDRbluBaX7+20uMq82P5spwxe9C/M=) 2: 4179AAF0011111F083725446C4F9AE02.roa (hash: Xzs1XHWlFEfF6WrK0eTZDv2ieAflcHwBqgLNzvmzLEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39D, serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Validity Not Before: Oct 18 23:59:22 2025 GMT Not After : Oct 25 23:59:22 2025 GMT Subject: CN=68f429db-3412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:67:5c:c8:e4:6f:2e:77:f1:15:de:95:65: 73:27:44:bf:a7:7c:c4:2e:40:e6:07:91:ad:59:22: 02:62:b2:a4:f8:bc:51:c8:e0:e9:b6:0c:a6:ef:8b: 88:53:b1:31:22:2b:c7:7e:c7:3f:c3:02:e3:98:49: a6:78:65:20:dc:f5:f6:12:c7:b8:12:55:4b:53:25: 52:96:25:d1:e0:05:95:ac:2b:18:d6:bf:af:a4:23: d6:ef:b6:0b:d0:20:f0:3a:1b:31:15:c7:7f:05:77: 7a:61:00:84:52:a0:48:66:e7:54:ee:04:18:02:46: 5f:91:4a:84:5b:fb:43:b4:34:c4:44:c0:84:60:f5: 6a:76:cd:e7:45:24:b6:21:6c:ee:08:4b:b9:61:7f: 9c:86:42:0f:f9:35:01:9f:32:ec:e0:0c:a0:23:c0: d6:45:de:f3:14:9d:2f:d0:57:37:71:00:5c:62:3f: 08:90:d2:f2:48:bc:c0:c5:f7:60:7c:7d:85:f2:5d: d9:a1:0f:b4:ec:33:12:98:bf:30:0a:40:bf:6c:cc: 9c:b3:7b:54:33:1b:f2:96:0f:1a:19:6d:37:a4:e1: fb:ca:f5:96:ee:30:f1:e0:44:86:ee:76:7e:47:10: 79:5f:23:58:73:1c:bc:96:e6:0a:e4:6f:ca:2f:cc: 99:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B6:46:EF:96:7D:04:F8:3A:94:E0:E3:06:19:89:F2:FD:62:2D:50 X509v3 Authority Key Identifier: keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5f:7a:65:6c:73:7c:03:e7:8c:26:16:d7:15:dd:93:b2:7f: dd:44:8c:f9:f7:f7:3c:a0:ff:3d:96:8e:1c:0e:1e:1f:93:e1: 27:be:f0:85:2f:a8:7d:87:5f:3d:1f:64:de:7b:e0:ab:54:f2: be:6b:db:12:ad:f6:52:5b:3d:c6:da:e9:4e:91:21:eb:de:60: da:7e:a3:fd:52:74:0d:90:79:14:1a:a0:ca:37:d3:46:56:24: 6d:4b:ab:db:c0:42:13:de:8d:ac:b7:b3:88:db:9c:01:c6:6b: c8:22:8a:53:5c:5c:c6:e9:ab:7c:f9:d5:eb:92:6a:a3:4b:a8: 93:4e:bb:88:1a:7d:09:ae:07:89:22:11:e4:0b:d9:83:47:78: ae:9f:b4:33:7f:4f:94:ab:0c:14:05:f3:d6:79:2a:6c:e8:d9: 64:b7:d6:46:5f:c4:0c:4c:c1:98:29:1e:d6:5d:3f:b9:65:b0: 2d:cb:c2:52:2a:90:6a:2d:08:8a:a3:90:e1:59:26:f2:59:57: ba:98:68:bc:e5:c6:dd:f9:db:d3:f3:77:e7:92:36:ef:8f:5d: 23:ef:34:4d:35:01:b1:c1:f3:98:fb:12:d2:5d:9f:d8:db:60: 70:8c:5b:82:38:69:5c:b7:11:e9:8e:82:21:0d:d8:a1:85:99: 12:91:0c:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUQxMTAvBgNVBAUTKEIyNzlEMzRGRTMwOEVDNEFCRjQyMDExMTE5QzhEMjJD QjZGNjFBQzQwHhcNMjUxMDE4MjM1OTIyWhcNMjUxMDI1MjM1OTIyWjAYMRYwFAYD VQQDEw02OGY0MjlkYi0zNDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzZnXMjkby538RXelWVzJ0S/p3zELkDmB5GtWSICYrKk+LxRyODptgym74uI U7ExIivHfsc/wwLjmEmmeGUg3PX2Ese4ElVLUyVSliXR4AWVrCsY1r+vpCPW77YL 0CDwOhsxFcd/BXd6YQCEUqBIZudU7gQYAkZfkUqEW/tDtDTERMCEYPVqds3nRSS2 IWzuCEu5YX+chkIP+TUBnzLs4AygI8DWRd7zFJ0v0Fc3cQBcYj8IkNLySLzAxfdg fH2F8l3ZoQ+07DMSmL8wCkC/bMycs3tUMxvylg8aGW03pOH7yvWW7jDx4ESG7nZ+ RxB5XyNYcxy8luYK5G/KL8yZgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN62Ru+W fQT4OpTg4wYZifL9Yi1QMB8GA1UdIwQYMBaAFLJ500/jCOxKv0IBERnI0iy29hrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5RC80NjdDMDNCMDkz MUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdFcV9RZ0VSR2NqU0xMYjJH c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NublRULU1JN0VxX1FnRVJHY2pTTExiMkdzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5RC80NjdDMDNCMDkzMUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdF cV9RZ0VSR2NqU0xMYjJHc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeX3plbHN8A+eMJhbXFd2Tsn/dRIz59/c8oP89lo4cDh4fk+EnvvCF L6h9h189H2Tee+CrVPK+a9sSrfZSWz3G2ulOkSHr3mDafqP9UnQNkHkUGqDKN9NG ViRtS6vbwEIT3o2st7OI25wBxmvIIopTXFzG6at8+dXrkmqjS6iTTruIGn0JrgeJ IhHkC9mDR3iun7Qzf0+UqwwUBfPWeSps6Nlkt9ZGX8QMTMGYKR7WXT+5ZbAty8JS KpBqLQiKo5DhWSbyWVe6mGi85cbd+dvT83fnkjbvj10j7zRNNQGxwfOY+xLSXZ/Y 22BwjFuCOGlctxHpjoIhDdihhZkSkQyB -----END CERTIFICATE-----Generated at Mon Oct 20 11:37:03 2025 by rpki-client