$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft File: snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft (raw, json) Hash identifier: oeGfM8qnztBTCLNQ71AjTtSqrdsuZQEl3czJ2aqXqxY= Subject key identifier: E7:F3:15:C8:9E:7E:0B:9B:FF:16:D6:88:62:EB:9C:8C:7F:81:87:E7 Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 Certificate issuer: /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft Manifest number: 0682 Signing time: Sun 26 Oct 2025 23:18:57 +0000 Manifest this update: Sun 26 Oct 2025 23:18:56 +0000 Manifest next update: Sun 02 Nov 2025 23:18:56 +0000 Files and hashes: 1: snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl (hash: q1ethVfyAiYSkInbsxzlfQLo9D6Rzf1EHgas7p/4L0w=) 2: 4179AAF0011111F083725446C4F9AE02.roa (hash: Xzs1XHWlFEfF6WrK0eTZDv2ieAflcHwBqgLNzvmzLEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 23:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39D, serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Validity Not Before: Oct 26 23:18:56 2025 GMT Not After : Nov 2 23:18:56 2025 GMT Subject: CN=68feac61-ee0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:57:7c:17:8d:46:59:35:e8:ca:e6:2b:29:71: 38:88:91:a3:5b:fb:ff:0f:f2:b8:a5:a9:7a:93:9f: 47:12:5c:fd:9b:b0:1a:42:ae:9a:d1:06:d0:77:ae: 8a:63:ed:d5:67:c1:50:56:ba:bb:f4:f7:9b:34:dc: 57:1f:61:27:20:86:d4:f3:3d:cb:78:bf:59:b8:c2: 7d:33:44:6d:2b:89:dd:e0:44:88:ad:f7:99:8d:c2: 5e:74:b3:32:57:da:26:b7:19:cf:0b:71:53:69:dc: 08:ee:4b:30:01:c2:cf:0c:12:1b:cc:6c:c3:ec:77: f8:a2:8c:f6:57:f3:f9:f5:20:16:20:27:47:38:86: ab:1a:b9:ab:e0:5c:2c:fe:d3:ce:e8:73:a8:0a:6a: b7:11:a5:02:42:f9:eb:4e:ba:2b:32:36:b2:bd:b8: 7e:00:19:18:7e:bd:37:69:fa:ab:98:24:0b:bd:26: 4a:e4:bf:bc:a4:b5:28:da:99:b6:47:37:a0:82:d5: 03:4a:6b:b1:a2:f7:ce:d4:34:e1:ad:12:da:95:36: de:91:2c:dc:83:12:71:14:5f:c4:0b:a7:3f:07:3c: ec:6f:91:da:2c:db:26:3f:90:6e:7f:93:31:c0:eb: 10:8f:b0:f0:1c:d2:b1:21:8b:12:b3:a3:1a:61:1e: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F3:15:C8:9E:7E:0B:9B:FF:16:D6:88:62:EB:9C:8C:7F:81:87:E7 X509v3 Authority Key Identifier: keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:8b:8b:77:b6:ed:2e:6f:f6:92:c5:84:16:7a:fc:cc:2c:2c: 04:fd:e3:05:73:4d:15:c5:d0:1e:72:5a:c7:68:63:82:72:3a: 98:5e:cd:8a:cf:8e:3d:11:7e:bc:f0:62:36:b1:9b:2f:d4:a6: 68:aa:59:f9:41:62:5a:5f:37:dd:3f:7b:fb:97:39:04:69:f3: c4:74:08:56:f4:c3:e4:ac:d0:82:72:0b:3d:32:36:18:86:81: ce:70:78:ce:2b:04:48:5b:ea:cc:b4:83:3a:62:e3:e7:ae:9d: 2c:60:21:f9:af:5f:0c:59:49:a5:f0:d5:1b:c1:d6:48:52:93: bf:a0:ef:49:90:13:0d:25:16:0f:2b:8a:61:a6:d1:88:b9:0c: 7a:ae:cb:c4:3a:24:d7:95:a4:7f:6a:ff:03:1d:8a:1b:bb:8f: b4:95:c3:90:5c:74:2f:83:57:9c:e3:c5:40:ce:66:37:c9:7f: 7a:43:dc:33:cf:76:fd:9a:ea:e1:85:a7:4e:9b:f0:59:6b:da: 27:97:87:cd:f2:2d:72:9f:aa:1a:91:72:1e:9b:d2:57:f4:52: 61:fa:f4:e0:91:92:9a:37:bc:8e:f1:b8:65:8c:6e:c9:cd:f6: 5a:d7:a1:c3:5c:2e:25:ce:9e:17:15:43:d6:c0:21:b0:a5:37: 67:23:49:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUQxMTAvBgNVBAUTKEIyNzlEMzRGRTMwOEVDNEFCRjQyMDExMTE5QzhEMjJD QjZGNjFBQzQwHhcNMjUxMDI2MjMxODU2WhcNMjUxMTAyMjMxODU2WjAYMRYwFAYD VQQDEw02OGZlYWM2MS1lZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ld8F41GWTXoyuYrKXE4iJGjW/v/D/K4pal6k59HElz9m7AaQq6a0QbQd66K Y+3VZ8FQVrq79PebNNxXH2EnIIbU8z3LeL9ZuMJ9M0RtK4nd4ESIrfeZjcJedLMy V9omtxnPC3FTadwI7kswAcLPDBIbzGzD7Hf4ooz2V/P59SAWICdHOIarGrmr4Fws /tPO6HOoCmq3EaUCQvnrTrorMjayvbh+ABkYfr03afqrmCQLvSZK5L+8pLUo2pm2 RzeggtUDSmuxovfO1DThrRLalTbekSzcgxJxFF/EC6c/Bzzsb5HaLNsmP5Buf5Mx wOsQj7DwHNKxIYsSs6MaYR5k1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfzFcie fgub/xbWiGLrnIx/gYfnMB8GA1UdIwQYMBaAFLJ500/jCOxKv0IBERnI0iy29hrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5RC80NjdDMDNCMDkz MUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdFcV9RZ0VSR2NqU0xMYjJH c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NublRULU1JN0VxX1FnRVJHY2pTTExiMkdzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5RC80NjdDMDNCMDkzMUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdF cV9RZ0VSR2NqU0xMYjJHc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYi4t3tu0ub/aSxYQWevzMLCwE/eMFc00VxdAeclrHaGOCcjqYXs2K z449EX688GI2sZsv1KZoqln5QWJaXzfdP3v7lzkEafPEdAhW9MPkrNCCcgs9MjYY hoHOcHjOKwRIW+rMtIM6YuPnrp0sYCH5r18MWUml8NUbwdZIUpO/oO9JkBMNJRYP K4phptGIuQx6rsvEOiTXlaR/av8DHYobu4+0lcOQXHQvg1ec48VAzmY3yX96Q9wz z3b9murhhadOm/BZa9onl4fN8i1yn6oakXIem9JX9FJh+vTgkZKaN7yO8bhljG7J zfZa16HDXC4lzp4XFUPWwCGwpTdnI0k5 -----END CERTIFICATE-----Generated at Tue Oct 28 16:21:41 2025 by rpki-client