$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: kTPgwEzKkQuiJbjDSyC0BayZPCMjhzy1CJZvWaX3aPc= Subject key identifier: 6D:AD:14:D8:72:8D:66:3F:5C:1E:84:C6:3C:F0:31:1C:DF:42:28:41 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 353E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 352F Signing time: Sat 04 Apr 2026 14:34:47 +0000 Manifest this update: Sat 04 Apr 2026 14:34:46 +0000 Manifest next update: Sat 11 Apr 2026 14:34:46 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: 9A0vAKZwt2Y49yithaEK6FjV852s2HNC9kq/EIq1V5s=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: Z7MnSNSHBqpmgGDUQHMm4xL2DZm8ZBR3qNJ9ominL6g=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: a8UAQgdr5YefPf6e/FxqB3qO2kRWk0And4FOBUzigKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13630 (0x353e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Apr 4 14:34:46 2026 GMT Not After : Apr 11 14:34:46 2026 GMT Subject: CN=69d12187-abcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ee:6b:f0:8e:83:a2:a2:b2:73:73:9a:05:f4: f7:37:f6:fe:b6:57:75:b5:34:52:3a:69:55:ca:b9: 38:b8:92:65:c7:bd:20:7b:39:f8:e8:95:f1:8b:e0: 61:d0:2a:98:fa:74:a9:31:36:68:f8:0d:03:c0:c1: d9:c2:79:a2:ea:64:99:ee:97:a6:dd:f3:1d:04:e0: ad:a8:27:ac:56:df:70:f5:fb:8b:ee:9b:0d:49:6d: 71:45:a9:ca:a3:a2:9a:da:ec:85:56:5c:b4:79:d2: bc:cc:b1:e7:4b:5f:61:ab:0b:23:1b:30:ab:ec:05: ea:2d:e2:ef:77:93:c8:4e:ab:e1:8a:69:11:bc:8e: b1:a0:b8:e3:c0:eb:ed:3f:75:22:60:c0:34:43:6d: 63:7d:ed:e1:6f:69:98:3d:f7:57:ad:61:2d:c4:da: db:9d:4b:bb:3a:4c:1f:f5:65:94:85:d9:ca:35:48: 11:62:c5:12:78:ae:64:ed:7c:74:5f:95:c6:7d:4f: 3d:29:27:9e:69:0a:93:6a:81:12:71:08:ee:91:3e: d7:8c:0e:bd:ca:1a:5a:9f:00:b3:da:3c:5f:d4:0e: 44:57:2a:fc:51:cd:ed:1e:cf:7e:a5:9e:a6:f2:d9: f5:9f:d5:6c:1e:da:4b:3e:04:57:87:d3:a1:87:e9: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AD:14:D8:72:8D:66:3F:5C:1E:84:C6:3C:F0:31:1C:DF:42:28:41 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e5:c7:1a:87:c2:2f:39:f6:ba:dd:eb:88:93:03:6c:c0:fb: 30:5e:25:af:ba:7f:6a:d2:a4:5f:be:a8:65:8a:e2:55:0d:7b: ed:3c:6d:dd:ef:83:b4:a9:20:4e:33:3d:3d:3e:d5:37:23:05: 21:de:4b:5a:fd:9a:ec:d4:fb:fa:82:12:32:b8:20:56:9e:92: de:5f:8f:1d:6d:df:dc:22:61:87:2f:7d:1e:ef:98:c0:22:f4: e3:0b:c9:f1:cf:9f:dc:38:8f:fd:46:41:13:f8:a6:6a:6a:18: a6:c9:9f:82:cc:c4:26:ec:ce:f5:25:06:ce:4f:3e:0f:6f:b3: fd:90:40:53:10:21:c7:67:df:6d:65:57:2a:6a:8d:7b:79:f8: ee:c5:2e:44:b9:1c:60:d9:35:1e:24:6c:2c:e9:e5:66:90:08: 31:fe:86:e7:18:32:61:bf:b0:7c:b9:d8:5b:77:94:a6:01:81: d4:99:78:31:42:fd:05:c8:f6:da:b1:23:c3:43:b3:32:0c:50: c6:64:ad:6a:25:b0:5e:cb:b3:0e:d7:c1:81:be:6d:9a:ce:36: 19:21:53:f1:e8:2e:99:db:21:e7:cb:ba:39:f3:2a:51:7c:3e: 24:37:f2:a3:ac:20:1f:d7:97:fa:54:17:10:58:7d:93:07:54: e0:48:a4:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjYwNDA0MTQzNDQ2WhcNMjYwNDExMTQzNDQ2WjAYMRYwFAYD VQQDEw02OWQxMjE4Ny1hYmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyu5r8I6DoqKyc3OaBfT3N/b+tld1tTRSOmlVyrk4uJJlx70gezn46JXxi+Bh 0CqY+nSpMTZo+A0DwMHZwnmi6mSZ7pem3fMdBOCtqCesVt9w9fuL7psNSW1xRanK o6Ka2uyFVly0edK8zLHnS19hqwsjGzCr7AXqLeLvd5PITqvhimkRvI6xoLjjwOvt P3UiYMA0Q21jfe3hb2mYPfdXrWEtxNrbnUu7Okwf9WWUhdnKNUgRYsUSeK5k7Xx0 X5XGfU89KSeeaQqTaoEScQjukT7XjA69yhpanwCz2jxf1A5EVyr8Uc3tHs9+pZ6m 8tn1n9VsHtpLPgRXh9Ohh+lsbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2tFNhy jWY/XB6ExjzwMRzfQihBMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjOXHGofCLzn2ut3riJMDbMD7MF4lr7p/atKkX76oZYriVQ177Txt3e+DtKkg TjM9PT7VNyMFId5LWv2a7NT7+oISMrggVp6S3l+PHW3f3CJhhy99Hu+YwCL04wvJ 8c+f3DiP/UZBE/imamoYpsmfgszEJuzO9SUGzk8+D2+z/ZBAUxAhx2ffbWVXKmqN e3n47sUuRLkcYNk1HiRsLOnlZpAIMf6G5xgyYb+wfLnYW3eUpgGB1Jl4MUL9Bcj2 2rEjw0OzMgxQxmStaiWwXsuzDtfBgb5tms42GSFT8egumdsh58u6OfMqUXw+JDfy o6wgH9eX+lQXEFh9kwdU4Eikkg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:50 2026 by rpki-client