$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft File: snbxWm1Kl8SBkekr0WYfNovvIeQ.mft (raw, json) Hash identifier: th5iyZlmJ6b/qT84Acen49rSIg1cCQrAk7jm5pfXbKk= Subject key identifier: 41:F6:AA:D4:EB:D9:5B:FA:37:8A:E3:3F:3C:07:92:C7:66:87:8F:27 Authority key identifier: B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4 Certificate issuer: /CN=A91B37C4/serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft Manifest number: C9 Signing time: Mon 03 Nov 2025 05:49:59 +0000 Manifest this update: Mon 03 Nov 2025 05:49:59 +0000 Manifest next update: Mon 10 Nov 2025 05:49:59 +0000 Files and hashes: 1: snbxWm1Kl8SBkekr0WYfNovvIeQ.crl (hash: j5t6V5sDfGzBmFswqkTDKLvqtdeMpmXPiN4yb8/E/Oc=) 2: 3E4B01008BDA11EFA4A11684C4F9AE02.roa (hash: m+cTvWrh74cJIwtxb5YNKAjFtv2dZKfs+BjQs+Q2hMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37C4, serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4 Validity Not Before: Nov 3 05:49:59 2025 GMT Not After : Nov 10 05:49:59 2025 GMT Subject: CN=69084287-a4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d0:f3:90:4c:19:dc:cb:70:d8:87:88:92:64: c8:74:68:94:9f:d6:5e:b9:36:1f:48:ef:e2:27:ca: 6d:d9:b1:62:63:18:d5:74:51:1b:52:e2:34:16:31: 98:c8:1a:62:b8:24:9f:ba:85:46:a9:a7:ff:93:8f: 5d:d4:e6:91:9c:d7:a8:5a:c9:46:af:0e:3b:21:0d: a5:ea:47:da:ca:83:54:bd:3c:6a:56:1f:47:a8:59: d4:59:0f:1a:8a:c8:e5:b3:d2:e9:ed:9c:b0:dd:27: 02:78:ec:6e:6e:c0:47:0a:53:54:f9:72:7d:2c:98: 19:51:7e:f9:7e:7d:dd:d2:1b:d6:9d:97:6e:47:db: 6f:90:b6:e1:dd:86:a6:3f:9d:b1:c2:a2:c9:01:70: ad:37:58:af:cd:f4:88:56:5f:1f:ea:5e:e5:b1:58: 5a:e5:dd:37:41:4d:0d:de:58:9e:06:b6:96:69:50: b7:bc:83:9c:e3:35:6d:25:7d:ef:b2:6b:23:e4:7a: 24:f7:ba:45:5f:7d:bc:90:60:30:50:b3:ab:c3:e4: 7e:a6:b7:21:9d:88:e4:b8:30:a8:64:b2:27:e2:0a: b2:cd:7c:26:ec:8d:b0:65:42:87:d0:d1:bc:de:30: b3:a7:0f:fc:c1:19:81:2c:45:9f:1a:ba:ad:98:17: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F6:AA:D4:EB:D9:5B:FA:37:8A:E3:3F:3C:07:92:C7:66:87:8F:27 X509v3 Authority Key Identifier: keyid:B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:da:84:23:6a:aa:93:2d:6e:06:0e:9a:9a:ad:87:cb:e8:dd: 9e:95:2a:73:0b:8d:48:92:83:df:2b:95:cc:98:d0:9c:82:46: 3a:28:0d:03:b2:2e:15:81:3a:4a:3e:44:16:bb:1f:50:41:a8: 52:aa:6a:ae:4f:57:3c:9e:91:c0:25:ff:36:cc:ce:cf:6b:b8: b4:10:a8:4e:56:f7:78:6e:27:c0:8a:69:92:62:45:b3:2b:94: 34:cd:38:35:ef:c2:80:9f:9f:2d:1c:df:e2:5a:15:b6:af:e1: 00:49:f8:41:dc:5f:17:c5:b0:48:4f:c2:be:ad:af:c3:ef:82: ac:e2:41:ad:5e:3c:7f:d8:b9:40:d3:6d:48:c4:36:b1:77:6e: 76:00:80:9f:37:57:93:e7:ec:94:99:73:3f:48:0f:e7:87:5c: 68:1a:89:b0:14:d9:ac:38:88:00:69:dc:c8:dc:cb:b1:4b:4e: 1a:6e:99:c7:1d:f5:51:1e:3c:d2:73:05:63:d3:e9:a4:1c:db: c0:bc:6f:58:69:a3:2a:56:4b:f6:32:cc:a5:b0:10:7f:95:0f: a4:d5:b7:25:ab:56:55:e5:57:4a:7d:37:e3:c4:c5:c5:e2:1b: b9:7f:da:a9:80:fd:41:5b:2f:73:57:a2:62:74:81:e9:a1:72: 57:7a:a8:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3QzQxMTAvBgNVBAUTKEIyNzZGMTVBNkQ0QTk3QzQ4MTkxRTkyQkQxNjYxRjM2 OEJFRjIxRTQwHhcNMjUxMTAzMDU0OTU5WhcNMjUxMTEwMDU0OTU5WjAYMRYwFAYD VQQDEw02OTA4NDI4Ny1hNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79DzkEwZ3Mtw2IeIkmTIdGiUn9ZeuTYfSO/iJ8pt2bFiYxjVdFEbUuI0FjGY yBpiuCSfuoVGqaf/k49d1OaRnNeoWslGrw47IQ2l6kfayoNUvTxqVh9HqFnUWQ8a isjls9Lp7Zyw3ScCeOxubsBHClNU+XJ9LJgZUX75fn3d0hvWnZduR9tvkLbh3Yam P52xwqLJAXCtN1ivzfSIVl8f6l7lsVha5d03QU0N3lieBraWaVC3vIOc4zVtJX3v smsj5Hok97pFX328kGAwULOrw+R+prchnYjkuDCoZLIn4gqyzXwm7I2wZUKH0NG8 3jCzpw/8wRmBLEWfGrqtmBeJ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEH2qtTr 2Vv6N4rjPzwHksdmh48nMB8GA1UdIwQYMBaAFLJ28VptSpfEgZHpK9FmHzaL7yHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdDNC9BMkFCQTcyQzhC RDkxMUVGOUY5NkJBNEVDNEY5QUUwMi9zbmJ4V20xS2w4U0JrZWtyMFdZZk5vdnZJ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NuYnhXbTFLbDhTQmtla3IwV1lmTm92dkllUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzdDNC9BMkFCQTcyQzhCRDkxMUVGOUY5NkJBNEVDNEY5QUUwMi9zbmJ4V20xS2w4 U0JrZWtyMFdZZk5vdnZJZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz2oQjaqqTLW4GDpqarYfL6N2elSpzC41IkoPfK5XMmNCcgkY6KA0D si4VgTpKPkQWux9QQahSqmquT1c8npHAJf82zM7Pa7i0EKhOVvd4bifAimmSYkWz K5Q0zTg178KAn58tHN/iWhW2r+EASfhB3F8XxbBIT8K+ra/D74Ks4kGtXjx/2LlA 021IxDaxd252AICfN1eT5+yUmXM/SA/nh1xoGomwFNmsOIgAadzI3MuxS04abpnH HfVRHjzScwVj0+mkHNvAvG9YaaMqVkv2MsylsBB/lQ+k1bclq1ZV5VdKfTfjxMXF 4hu5f9qpgP1BWy9zV6JidIHpoXJXeqjA -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:14 2025 by rpki-client