$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft File: snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft (raw, json) Hash identifier: j79NT3P30ULahryRjAvtrTleko76vnrMpkIbMyy+noY= Subject key identifier: 25:5B:B1:78:3C:36:A9:FA:32:85:B0:BF:79:BD:33:63:D8:1F:0A:9B Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 Certificate issuer: /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft Manifest number: 062E Signing time: Sat 10 May 2025 22:18:53 +0000 Manifest this update: Sat 10 May 2025 22:18:53 +0000 Manifest next update: Sat 17 May 2025 22:18:53 +0000 Files and hashes: 1: snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl (hash: /8AQklRowWLKKl9tP+Wt61wxNwXfea0bFlL8G6M85qY=) 2: 4179AAF0011111F083725446C4F9AE02.roa (hash: Xzs1XHWlFEfF6WrK0eTZDv2ieAflcHwBqgLNzvmzLEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39D, serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Validity Not Before: May 10 22:18:53 2025 GMT Not After : May 17 22:18:53 2025 GMT Subject: CN=681fd0cd-90f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:75:a6:18:3d:9d:98:ec:df:ee:e1:f0:a2:a4: 9c:9c:9b:ba:0c:fd:25:13:fe:e0:b5:46:be:55:ce: e0:d3:5c:90:cd:60:20:31:85:cf:03:85:9e:20:8b: 12:0f:28:49:2d:1f:3a:ca:e0:ed:62:19:cf:42:6e: aa:67:28:6c:5f:f5:3c:1f:54:27:f3:58:6e:bc:7d: a8:02:03:fe:2f:0e:7f:c3:03:e7:ea:0a:ff:ab:66: 43:ac:27:28:d7:a4:2f:c3:4b:d3:ff:c6:f8:9b:53: b0:30:f8:18:33:b5:e9:c5:ea:ed:67:63:6e:b3:65: 8d:85:d1:eb:64:77:17:f2:ea:a6:0f:dc:79:4e:07: ee:4b:a5:c1:62:c8:ee:03:f5:85:07:a9:41:ca:05: b4:ac:e5:1f:6a:fd:3a:67:f2:da:52:f0:87:c5:5d: 6f:c9:91:e1:97:b3:d5:8e:6c:60:10:71:10:30:37: d6:06:2a:df:d8:04:c1:f2:f2:b6:66:f7:73:56:0f: b0:0b:5d:5d:02:a6:cf:f5:7b:e7:8b:92:3c:1e:2b: 2e:45:02:c4:fe:49:ad:0a:7c:00:b4:58:df:76:2d: 79:67:de:6e:c2:26:71:01:3d:47:d7:52:b5:4d:9e: 33:8d:4e:58:fd:c6:b9:5b:54:4d:cc:f5:c7:31:3d: d5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5B:B1:78:3C:36:A9:FA:32:85:B0:BF:79:BD:33:63:D8:1F:0A:9B X509v3 Authority Key Identifier: keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:01:6d:10:26:a0:ae:f6:5b:f1:c0:e4:2f:a5:4b:3f:55:9b: 5e:30:8d:94:40:09:ea:60:40:64:59:c9:f2:1d:72:02:24:1a: 46:e5:3a:a9:14:cc:ff:27:0f:c4:bd:3b:fa:c6:59:47:15:d4: 54:11:91:00:4d:74:ba:3e:9c:b6:e0:50:c1:22:5e:c0:41:01: 67:fe:f4:eb:7c:21:e1:14:4b:5a:36:0e:43:22:24:12:bf:bc: 6c:cd:a5:70:35:1e:97:eb:2b:e5:a6:c6:5b:d3:3d:0d:43:b2: d0:ba:8f:6f:6c:91:d1:80:92:41:8c:e0:c7:12:77:cc:e6:2b: 7d:56:1d:3e:2f:98:e0:37:87:05:38:23:e1:eb:1b:31:f6:da: 89:c2:25:b4:eb:37:0f:27:63:1d:39:8b:d6:03:1b:bf:cc:f0: bb:6f:ee:dd:00:e7:7e:8d:e0:07:ff:8a:9e:85:c1:10:62:ad: ff:47:93:34:b1:fb:87:40:09:21:10:0c:2a:26:60:c7:1f:5a: 23:9c:35:48:67:76:72:ff:fb:2e:24:b6:53:f4:49:47:79:cd: ed:b1:0d:2d:af:48:93:ef:32:84:eb:f6:41:90:bf:e0:8f:66: c0:4d:df:3c:98:12:d2:0b:38:63:36:d8:e5:84:b9:16:65:3d: 99:24:63:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUQxMTAvBgNVBAUTKEIyNzlEMzRGRTMwOEVDNEFCRjQyMDExMTE5QzhEMjJD QjZGNjFBQzQwHhcNMjUwNTEwMjIxODUzWhcNMjUwNTE3MjIxODUzWjAYMRYwFAYD VQQDEw02ODFmZDBjZC05MGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3WmGD2dmOzf7uHwoqScnJu6DP0lE/7gtUa+Vc7g01yQzWAgMYXPA4WeIIsS DyhJLR86yuDtYhnPQm6qZyhsX/U8H1Qn81huvH2oAgP+Lw5/wwPn6gr/q2ZDrCco 16Qvw0vT/8b4m1OwMPgYM7XpxertZ2Nus2WNhdHrZHcX8uqmD9x5TgfuS6XBYsju A/WFB6lBygW0rOUfav06Z/LaUvCHxV1vyZHhl7PVjmxgEHEQMDfWBirf2ATB8vK2 ZvdzVg+wC11dAqbP9Xvni5I8HisuRQLE/kmtCnwAtFjfdi15Z95uwiZxAT1H11K1 TZ4zjU5Y/ca5W1RNzPXHMT3V8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVbsXg8 Nqn6MoWwv3m9M2PYHwqbMB8GA1UdIwQYMBaAFLJ500/jCOxKv0IBERnI0iy29hrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5RC80NjdDMDNCMDkz MUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdFcV9RZ0VSR2NqU0xMYjJH c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NublRULU1JN0VxX1FnRVJHY2pTTExiMkdzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5RC80NjdDMDNCMDkzMUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdF cV9RZ0VSR2NqU0xMYjJHc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2AW0QJqCu9lvxwOQvpUs/VZteMI2UQAnqYEBkWcnyHXICJBpG5Tqp FMz/Jw/EvTv6xllHFdRUEZEATXS6Ppy24FDBIl7AQQFn/vTrfCHhFEtaNg5DIiQS v7xszaVwNR6X6yvlpsZb0z0NQ7LQuo9vbJHRgJJBjODHEnfM5it9Vh0+L5jgN4cF OCPh6xsx9tqJwiW06zcPJ2MdOYvWAxu/zPC7b+7dAOd+jeAH/4qehcEQYq3/R5M0 sfuHQAkhEAwqJmDHH1ojnDVIZ3Zy//suJLZT9ElHec3tsQ0tr0iT7zKE6/ZBkL/g j2bATd88mBLSCzhjNtjlhLkWZT2ZJGN7 -----END CERTIFICATE-----Generated at Mon May 12 23:16:41 2025 by rpki-client