$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft File: snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft (raw, json) Hash identifier: vU/jgwhOOC8BB8h+MC9qojMtZqPOKTXGumPiz9BoI+Y= Subject key identifier: 56:C3:0B:79:ED:5C:EF:FA:64:D2:22:B2:BD:E0:0E:60:5D:48:E2:57 Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 Certificate issuer: /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Certificate serial: 0664 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft Manifest number: 0661 Signing time: Wed 20 Aug 2025 22:38:12 +0000 Manifest this update: Wed 20 Aug 2025 22:38:11 +0000 Manifest next update: Wed 27 Aug 2025 22:38:11 +0000 Files and hashes: 1: snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl (hash: ZVHg3HEqUNyV0WVgHQaJwYRxsg0vi+2BxQlh8SYby6I=) 2: 4179AAF0011111F083725446C4F9AE02.roa (hash: Xzs1XHWlFEfF6WrK0eTZDv2ieAflcHwBqgLNzvmzLEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39D, serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Validity Not Before: Aug 20 22:38:11 2025 GMT Not After : Aug 27 22:38:11 2025 GMT Subject: CN=68a64e53-41a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:ef:ea:f2:51:b1:8f:3d:2f:d5:b6:ae:1c: e6:0a:f7:97:0e:38:ce:fd:6b:24:07:da:b7:fc:bc: de:03:14:8c:ee:e5:d4:98:50:04:e9:79:e3:fa:14: bc:55:8b:67:97:78:f4:f1:48:77:5c:c3:53:1e:d3: 22:cc:58:d1:86:0d:b4:2d:d5:23:b4:2b:d4:fe:03: 4e:64:1a:1c:90:3d:5b:18:8c:4f:55:ba:bd:a4:9e: 20:f0:bc:80:96:c5:7e:0a:d3:5d:f4:25:ac:43:df: f4:c5:fb:0a:0e:46:b3:fd:4e:13:de:f7:47:3c:a4: c3:5a:6f:96:f8:9b:8f:23:27:c0:45:c9:c1:6e:fa: c0:ac:8a:55:8b:9d:af:99:65:fc:47:03:06:23:75: 2e:b8:57:19:9a:f9:c7:ec:4c:18:7a:d0:b3:d4:96: a0:a0:ed:1e:31:8f:36:61:81:68:02:b3:eb:47:a1: 05:2b:07:06:ab:17:fc:c9:cb:19:9a:05:1b:b5:22: 4d:af:99:39:1b:7b:66:9f:ec:64:60:7d:e0:a8:2d: 39:7f:ad:21:6b:29:f0:05:ce:be:94:61:74:58:17: 20:48:3b:34:9f:68:07:64:ee:a4:ee:ae:f2:2d:26: db:ea:37:d8:55:56:9a:c8:5f:50:65:07:6d:b6:38: 30:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C3:0B:79:ED:5C:EF:FA:64:D2:22:B2:BD:E0:0E:60:5D:48:E2:57 X509v3 Authority Key Identifier: keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:80:55:9e:a8:d1:dc:e2:0a:3a:ed:a4:78:e2:ee:b9:87:a6: 95:44:4e:7f:14:ac:ef:50:6d:e0:56:87:67:54:8b:a0:db:68: 36:b1:19:2c:75:be:42:7f:23:8f:78:7a:48:49:78:40:c9:02: f0:74:0c:8b:a9:d4:c6:96:d5:db:9e:d3:e5:91:e1:00:8c:04: a7:41:3a:6a:24:b1:3e:ca:f5:e5:a5:89:43:a4:58:02:79:ec: 12:4a:c1:04:52:3c:cb:c8:66:66:25:27:00:58:61:66:b0:86: 3c:19:dd:11:b6:f1:b4:a8:92:13:28:0a:f6:95:32:b1:38:d6: 3e:d7:a3:57:97:0d:80:f8:66:76:e2:43:2a:bf:84:20:0a:c6: ec:ca:36:61:7c:2b:c4:23:7e:c1:f0:21:b0:1f:2b:2c:43:0c: ab:ba:55:f0:6c:f4:f1:70:b0:30:c5:99:fb:03:50:e8:77:dd: f9:bb:9e:f7:82:26:05:db:7f:a6:8c:ee:2f:0b:1a:00:d6:52: 5c:3a:be:72:a4:d9:d8:bb:31:1e:1b:97:f1:4e:9b:f9:b3:df: 82:b8:24:2f:e5:42:5c:01:4c:c0:21:49:06:4e:2a:65:72:9b: f5:fb:4e:6d:6e:d1:57:c1:0b:14:2a:10:5e:6c:00:31:41:1a: 66:ce:1e:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUQxMTAvBgNVBAUTKEIyNzlEMzRGRTMwOEVDNEFCRjQyMDExMTE5QzhEMjJD QjZGNjFBQzQwHhcNMjUwODIwMjIzODExWhcNMjUwODI3MjIzODExWjAYMRYwFAYD VQQDEw02OGE2NGU1My00MWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFHv6vJRsY89L9W2rhzmCveXDjjO/WskB9q3/LzeAxSM7uXUmFAE6Xnj+hS8 VYtnl3j08Uh3XMNTHtMizFjRhg20LdUjtCvU/gNOZBockD1bGIxPVbq9pJ4g8LyA lsV+CtNd9CWsQ9/0xfsKDkaz/U4T3vdHPKTDWm+W+JuPIyfARcnBbvrArIpVi52v mWX8RwMGI3UuuFcZmvnH7EwYetCz1JagoO0eMY82YYFoArPrR6EFKwcGqxf8ycsZ mgUbtSJNr5k5G3tmn+xkYH3gqC05f60haynwBc6+lGF0WBcgSDs0n2gHZO6k7q7y LSbb6jfYVVaayF9QZQdttjgw/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbDC3nt XO/6ZNIisr3gDmBdSOJXMB8GA1UdIwQYMBaAFLJ500/jCOxKv0IBERnI0iy29hrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5RC80NjdDMDNCMDkz MUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdFcV9RZ0VSR2NqU0xMYjJH c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NublRULU1JN0VxX1FnRVJHY2pTTExiMkdzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5RC80NjdDMDNCMDkzMUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdF cV9RZ0VSR2NqU0xMYjJHc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5gFWeqNHc4go67aR44u65h6aVRE5/FKzvUG3gVodnVIug22g2sRks db5CfyOPeHpISXhAyQLwdAyLqdTGltXbntPlkeEAjASnQTpqJLE+yvXlpYlDpFgC eewSSsEEUjzLyGZmJScAWGFmsIY8Gd0RtvG0qJITKAr2lTKxONY+16NXlw2A+GZ2 4kMqv4QgCsbsyjZhfCvEI37B8CGwHyssQwyrulXwbPTxcLAwxZn7A1Dod935u573 giYF23+mjO4vCxoA1lJcOr5ypNnYuzEeG5fxTpv5s9+CuCQv5UJcAUzAIUkGTipl cpv1+05tbtFXwQsUKhBebAAxQRpmzh51 -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:04 2025 by rpki-client