$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft File: snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft (raw, json) Hash identifier: u8jfCw8Rx8uHUGMMM0nxfPleXeQgID3sLygDwY+uK2w= Subject key identifier: 15:22:D0:74:9F:C9:F0:D2:1E:89:6D:B0:CB:65:B8:9B:7B:62:55:4B Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 Certificate issuer: /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft Manifest number: 063D Signing time: Tue 10 Jun 2025 22:34:29 +0000 Manifest this update: Tue 10 Jun 2025 22:34:28 +0000 Manifest next update: Tue 17 Jun 2025 22:34:28 +0000 Files and hashes: 1: snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl (hash: lDucCyrI8XlXvFZ1UMB+dnQsMxWoAYjGrkjTr7KFwig=) 2: 4179AAF0011111F083725446C4F9AE02.roa (hash: Xzs1XHWlFEfF6WrK0eTZDv2ieAflcHwBqgLNzvmzLEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 22:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39D, serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Validity Not Before: Jun 10 22:34:28 2025 GMT Not After : Jun 17 22:34:28 2025 GMT Subject: CN=6848b2f4-596d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:83:46:52:9f:ef:8b:a8:fd:e9:ad:3b:44:c8: f1:0b:6d:26:16:8b:b9:ab:15:f1:e9:f8:91:90:1f: 0e:6e:42:2f:71:4c:94:39:27:70:cc:46:3b:a8:12: f2:0e:69:7a:19:85:15:34:8f:b2:87:8b:6f:07:f3: a1:cf:9b:72:ad:3f:1b:09:37:02:0d:2f:35:62:7d: 70:ec:94:32:db:ce:85:e6:fc:08:81:2f:c9:72:09: f2:13:1c:a4:92:51:cb:7b:61:09:04:13:a4:2a:61: 54:27:f8:be:1c:e7:45:84:52:35:f9:01:27:60:45: 5b:0f:ef:83:65:a9:4f:fb:86:6c:22:a4:11:1b:00: 5f:85:80:a9:f7:b8:ea:7f:1c:6d:63:35:a1:f5:27: a9:34:19:d3:10:93:18:ec:e7:3b:bf:1a:d4:f7:9f: c1:66:91:7d:57:49:5c:ce:49:f5:87:83:db:5e:9e: 5e:16:20:29:db:40:7c:c5:c9:98:ff:97:75:b4:fe: 7a:12:6f:9b:92:11:e4:04:02:db:48:e6:ea:9e:39: 79:c8:cf:6b:4b:87:4b:76:e2:2c:dd:9a:54:53:8c: 85:38:d0:d6:67:4d:63:8a:2c:3c:1b:1c:7a:65:7c: 76:e7:7a:19:5a:59:20:69:71:2f:b4:13:f7:b5:91: 01:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:22:D0:74:9F:C9:F0:D2:1E:89:6D:B0:CB:65:B8:9B:7B:62:55:4B X509v3 Authority Key Identifier: keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:c6:f4:27:1e:7d:f9:9c:d8:6f:72:0f:87:3c:b1:60:d8:96: 2c:51:04:5d:62:60:4e:69:4f:c2:dc:f6:0e:78:df:11:56:35: 2c:01:bd:36:13:b9:51:50:35:c6:ee:5a:30:7e:d9:b4:b6:13: 09:1d:19:b0:09:56:99:1f:94:c8:ac:9a:a3:aa:7a:99:08:b1: 27:8d:62:de:90:c1:53:1e:34:9a:ed:69:fe:dc:d7:15:45:24: f0:da:c2:6b:6a:20:5c:6e:61:13:92:0c:6e:11:8c:f9:be:3b: ee:06:55:13:10:71:68:88:7f:d8:4f:16:9b:14:c1:b1:0b:d0: c9:99:23:ec:db:3b:4a:59:f2:78:eb:83:f2:ab:87:d4:95:69: a4:c5:e7:69:6d:7c:9c:73:6d:bf:b7:2c:44:49:ad:d9:18:cc: 58:6a:2c:7f:6f:45:9c:68:99:16:5a:1f:a9:10:74:9c:1a:29: d3:03:98:e3:c0:a4:45:f5:12:e9:d7:c7:6c:a5:72:b3:8c:f3: 3c:cc:d9:b9:08:e5:27:c8:09:e3:19:95:20:fe:c2:c2:42:bf: ba:8a:3e:2e:24:b1:58:b6:35:a9:cf:f7:39:97:1a:d4:6e:af: fc:28:09:6b:0b:ec:46:8f:a0:a2:85:6b:a4:63:89:81:c5:28: 85:0f:67:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUQxMTAvBgNVBAUTKEIyNzlEMzRGRTMwOEVDNEFCRjQyMDExMTE5QzhEMjJD QjZGNjFBQzQwHhcNMjUwNjEwMjIzNDI4WhcNMjUwNjE3MjIzNDI4WjAYMRYwFAYD VQQDEw02ODQ4YjJmNC01OTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqINGUp/vi6j96a07RMjxC20mFou5qxXx6fiRkB8ObkIvcUyUOSdwzEY7qBLy Dml6GYUVNI+yh4tvB/Ohz5tyrT8bCTcCDS81Yn1w7JQy286F5vwIgS/JcgnyExyk klHLe2EJBBOkKmFUJ/i+HOdFhFI1+QEnYEVbD++DZalP+4ZsIqQRGwBfhYCp97jq fxxtYzWh9SepNBnTEJMY7Oc7vxrU95/BZpF9V0lczkn1h4PbXp5eFiAp20B8xcmY /5d1tP56Em+bkhHkBALbSObqnjl5yM9rS4dLduIs3ZpUU4yFONDWZ01jiiw8Gxx6 ZXx253oZWlkgaXEvtBP3tZEBfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUi0HSf yfDSHoltsMtluJt7YlVLMB8GA1UdIwQYMBaAFLJ500/jCOxKv0IBERnI0iy29hrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5RC80NjdDMDNCMDkz MUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdFcV9RZ0VSR2NqU0xMYjJH c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NublRULU1JN0VxX1FnRVJHY2pTTExiMkdzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5RC80NjdDMDNCMDkzMUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdF cV9RZ0VSR2NqU0xMYjJHc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5xvQnHn35nNhvcg+HPLFg2JYsUQRdYmBOaU/C3PYOeN8RVjUsAb02 E7lRUDXG7lowftm0thMJHRmwCVaZH5TIrJqjqnqZCLEnjWLekMFTHjSa7Wn+3NcV RSTw2sJraiBcbmETkgxuEYz5vjvuBlUTEHFoiH/YTxabFMGxC9DJmSPs2ztKWfJ4 64Pyq4fUlWmkxedpbXycc22/tyxESa3ZGMxYaix/b0WcaJkWWh+pEHScGinTA5jj wKRF9RLp18dspXKzjPM8zNm5COUnyAnjGZUg/sLCQr+6ij4uJLFYtjWpz/c5lxrU bq/8KAlrC+xGj6CihWukY4mBxSiFD2dm -----END CERTIFICATE-----Generated at Thu Jun 12 13:58:35 2025 by rpki-client