$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json) Hash identifier: RzfigcCWR8d7xLadGpGKgn9naT7U6erxct0Rx6TXsMY= Subject key identifier: 29:6F:45:A4:50:82:DF:79:E1:2E:67:6B:19:F2:BB:12:87:D1:4D:37 Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 07C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft Manifest number: 07B8 Signing time: Sun 20 Jul 2025 21:22:01 +0000 Manifest this update: Sun 20 Jul 2025 21:22:01 +0000 Manifest next update: Sun 27 Jul 2025 21:22:01 +0000 Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: MwRTvPL3ZCuLEiLYgUB0YrJuLnuCjXE2V1ZuaygM5DI=) 2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: nzgpiC5NFO3V3nVcBmKQWNZmNLyB+jOBtWw1RfrIB+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1985 (0x7c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: Jul 20 21:22:01 2025 GMT Not After : Jul 27 21:22:01 2025 GMT Subject: CN=687d5df9-bf4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5d:15:3b:d4:71:e5:7d:e2:42:37:f3:b9:ff: fb:c0:e9:49:10:9b:41:7a:87:1b:4b:3c:0f:28:28: b1:2c:95:78:df:19:e5:f6:c4:e8:ec:b8:82:cf:d6: f6:c8:3b:c6:f0:a3:70:4b:a6:ab:9f:18:4e:e3:7d: bc:d1:78:07:c7:f1:41:dc:dc:b1:f4:e1:36:75:9d: bf:2a:14:87:d8:16:cb:6c:6c:b0:80:cb:cd:91:94: 56:2e:05:c8:be:2e:6c:ac:ca:66:fb:91:11:32:6e: 2c:a7:55:fa:61:29:64:d9:b7:d1:77:27:bb:70:9a: 1d:c0:ef:70:3f:2e:81:a9:b6:7e:38:a6:92:a9:a1: 51:e0:13:97:7c:9f:e5:9d:60:bb:ae:f8:f2:da:dd: c6:88:25:af:59:50:06:51:50:c6:b8:ab:70:94:e8: 33:81:b5:b8:ed:db:74:40:73:8e:5b:58:91:da:c6: 38:51:d0:b8:7f:a6:a0:0f:3e:2e:bd:ae:8a:af:24: da:9b:45:a3:af:ef:df:0d:be:14:5c:5f:d1:53:60: ff:39:aa:f2:f2:cf:91:bf:fa:77:78:c9:4e:ad:12: d2:92:87:8f:a9:58:9b:68:49:a5:e6:e2:f3:56:2a: 11:db:58:5d:5b:19:cd:48:ce:8a:2b:6f:8c:35:30: 95:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6F:45:A4:50:82:DF:79:E1:2E:67:6B:19:F2:BB:12:87:D1:4D:37 X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:a3:86:92:b3:10:64:4e:0b:1a:1c:ab:9e:b2:9c:f5:dd:85: 59:b4:ea:39:3e:a4:04:d4:94:e5:1c:72:4d:ac:91:bc:25:2e: bc:c7:f4:69:5c:35:9f:b5:2a:7a:44:fe:11:e4:fc:39:25:a5: 77:0b:a1:6a:ad:a8:09:df:18:a2:d8:96:e1:05:fe:b1:6c:25: 11:70:02:4e:1c:0c:57:cb:cd:ca:c9:53:22:2d:7a:87:8e:af: 99:d3:5c:ba:d9:34:d4:68:a3:63:85:73:ad:0c:1c:db:45:d1: f4:de:3b:28:34:c0:d1:ce:0e:be:88:6c:89:34:e2:d4:c2:5d: 7e:22:56:4a:d8:c2:9d:2d:b3:8a:e4:a5:d4:b4:56:cf:15:c7: d9:f6:66:64:7f:85:c8:49:71:14:60:90:a9:31:69:5c:5f:9a: 8f:df:11:39:65:73:3f:a8:37:01:cf:1c:ca:c2:0f:c8:e0:68: 3b:ed:fb:f0:b1:1f:e0:9d:f5:f4:bc:1b:fe:7c:8a:fa:3c:8f: 0e:26:8d:aa:44:70:9e:36:a2:8e:d3:dc:c8:ec:2b:d0:33:cd: e4:2d:79:cb:85:8c:a3:4b:ea:b5:26:00:d1:1e:50:95:38:21: ad:13:71:a4:14:43:04:bc:4f:6f:92:06:27:30:f2:2c:c1:6a: b9:13:e9:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjUwNzIwMjEyMjAxWhcNMjUwNzI3MjEyMjAxWjAYMRYwFAYD VQQDEw02ODdkNWRmOS1iZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy10VO9Rx5X3iQjfzuf/7wOlJEJtBeocbSzwPKCixLJV43xnl9sTo7LiCz9b2 yDvG8KNwS6arnxhO43280XgHx/FB3Nyx9OE2dZ2/KhSH2BbLbGywgMvNkZRWLgXI vi5srMpm+5ERMm4sp1X6YSlk2bfRdye7cJodwO9wPy6BqbZ+OKaSqaFR4BOXfJ/l nWC7rvjy2t3GiCWvWVAGUVDGuKtwlOgzgbW47dt0QHOOW1iR2sY4UdC4f6agDz4u va6KryTam0Wjr+/fDb4UXF/RU2D/Oary8s+Rv/p3eMlOrRLSkoePqVibaEml5uLz VioR21hdWxnNSM6KK2+MNTCVVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClvRaRQ gt954S5naxnyuxKH0U03MB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD Tld4ZmlCY0JqejJmSUo5QjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUo4aSsxBkTgsaHKuespz13YVZtOo5PqQE1JTlHHJNrJG8JS68x/Rp XDWftSp6RP4R5Pw5JaV3C6FqragJ3xii2JbhBf6xbCURcAJOHAxXy83KyVMiLXqH jq+Z01y62TTUaKNjhXOtDBzbRdH03jsoNMDRzg6+iGyJNOLUwl1+IlZK2MKdLbOK 5KXUtFbPFcfZ9mZkf4XISXEUYJCpMWlcX5qP3xE5ZXM/qDcBzxzKwg/I4Gg77fvw sR/gnfX0vBv+fIr6PI8OJo2qRHCeNqKO09zI7CvQM83kLXnLhYyjS+q1JgDRHlCV OCGtE3GkFEMEvE9vkgYnMPIswWq5E+lK -----END CERTIFICATE-----Generated at Mon Jul 21 12:46:10 2025 by rpki-client