$ rpki-client -vvvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: uwMtxuEy+0muUyK/+Vf09RPPqca71/aTNCpdtaSQc1U= Subject key identifier: C9:96:A2:1C:73:D2:05:A6:CA:C4:87:0F:4D:09:6A:03:76:BF:1A:1A Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 3598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 3587 Signing time: Sun 20 Sep 2026 14:33:59 +0000 Manifest this update: Sun 20 Sep 2026 14:33:59 +0000 Manifest next update: Sun 27 Sep 2026 14:33:59 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: EnMaSazw0+M/vjYk9bSUKdZQE6glWo+qRIC8FepQhvc=) 2: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: a8UAQgdr5YefPf6e/FxqB3qO2kRWk0And4FOBUzigKo=) 3: 532313EE89FB11F1A2C97EB45E11F970.roa (hash: ONFD8eO0BeKQA05+Fmoa39A39KmAUsRQvy6sAW3EDUA=) 4: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: Z7MnSNSHBqpmgGDUQHMm4xL2DZm8ZBR3qNJ9ominL6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13720 (0x3598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Sep 20 14:33:59 2026 GMT Not After : Sep 27 14:33:59 2026 GMT Subject: CN=6aafeed7-26a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:d5:a3:cb:f5:20:dc:b9:8e:5d:0c:98:b9: e3:6c:e6:80:62:7e:91:59:25:c0:3a:2e:cc:57:7d: 77:1d:6a:1f:0d:60:09:e3:d5:f8:a2:1a:12:ee:e4: e8:b3:ea:db:38:56:2f:fa:a3:16:eb:ca:08:ff:f1: 63:fa:a3:52:33:d9:a0:d4:2e:1d:8c:2c:65:3d:df: ad:24:4c:57:98:84:de:fb:18:6c:1e:90:89:85:41: aa:0f:fe:66:76:c6:e5:e6:e1:ea:e2:c3:ff:f5:bc: 71:0d:6f:f3:8b:e8:05:2d:f2:26:57:99:8b:6a:7b: 96:ca:7b:de:dc:e5:20:e4:57:6c:22:ed:7d:28:5d: a7:9f:6c:e4:6d:d5:02:ee:0d:9a:05:c1:94:8f:48: 94:e4:f6:6e:b7:19:bb:9f:c7:cc:68:73:0f:34:71: a0:4f:3d:31:78:a0:a3:28:b2:fc:e5:93:e6:0b:a6: bb:ef:fd:80:fc:31:28:7d:d2:26:68:47:ad:f4:ff: 5a:5e:db:3e:38:8b:bf:ad:55:98:73:25:cd:a3:bd: c9:cd:7a:19:8d:16:9b:51:cf:cf:c9:b8:fb:fb:00: 65:a4:e9:98:ae:82:17:40:06:79:f6:00:89:13:db: 2e:4b:b3:62:c7:67:eb:73:e4:fe:74:bd:4e:db:f0: bc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:96:A2:1C:73:D2:05:A6:CA:C4:87:0F:4D:09:6A:03:76:BF:1A:1A X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:98:26:ee:75:2a:92:52:5e:10:13:08:27:6a:d9:a2:73:07: ed:af:fd:e2:91:5b:1c:1a:94:ca:4d:44:24:4d:b8:35:eb:a5: 94:4f:60:be:29:b1:8b:f5:51:47:9d:12:53:75:73:3a:08:e7: 31:ec:32:7d:4c:67:26:90:aa:c3:78:f5:62:5b:b1:97:69:10: 38:84:a5:19:94:61:f8:5d:8d:c3:bb:fc:38:22:76:7f:e8:4a: be:35:7d:07:07:a6:b3:65:13:b1:29:23:7a:03:ce:6a:17:45: 3b:64:fd:42:c2:19:9d:32:74:a5:fe:14:26:61:38:9e:5c:e5: 48:5d:2f:b2:e2:8c:41:ce:93:b5:d4:db:f8:4f:be:a0:1b:37: 89:6d:01:4b:d3:e4:be:43:4d:18:08:8f:94:8f:cc:17:c5:dc: 2f:a0:82:7c:6f:9c:33:16:bf:4f:70:40:12:f0:29:57:37:79: 88:45:9c:d1:99:d5:8b:5a:8f:16:a2:1e:3a:c8:28:dd:12:3b: 3c:20:ce:70:1e:a5:1b:36:32:a7:0e:f7:2a:38:fc:e8:2b:4d: 04:a2:85:48:c0:f1:e1:c5:31:48:b1:87:93:e8:78:8f:9a:1e: ab:fa:9e:3f:08:83:32:be:f7:00:a8:29:30:6b:13:55:b1:e0: 03:90:cd:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjYwOTIwMTQzMzU5WhcNMjYwOTI3MTQzMzU5WjAYMRYwFAYD VQQDEw02YWFmZWVkNy0yNmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgzVo8v1INy5jl0MmLnjbOaAYn6RWSXAOi7MV313HWofDWAJ49X4ohoS7uTo s+rbOFYv+qMW68oI//Fj+qNSM9mg1C4djCxlPd+tJExXmITe+xhsHpCJhUGqD/5m dsbl5uHq4sP/9bxxDW/zi+gFLfImV5mLanuWynve3OUg5FdsIu19KF2nn2zkbdUC 7g2aBcGUj0iU5PZutxm7n8fMaHMPNHGgTz0xeKCjKLL85ZPmC6a77/2A/DEofdIm aEet9P9aXts+OIu/rVWYcyXNo73JzXoZjRabUc/Pybj7+wBlpOmYroIXQAZ59gCJ E9suS7Nix2frc+T+dL1O2/C8nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMmWohxz 0gWmysSHD00JagN2vxoaMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj5gm7nUqklJeEBMIJ2rZonMH7a/94pFbHBqUyk1EJE24NeullE9gvimxi/VR R50SU3VzOgjnMewyfUxnJpCqw3j1Yluxl2kQOISlGZRh+F2Nw7v8OCJ2f+hKvjV9 Bwems2UTsSkjegPOahdFO2T9QsIZnTJ0pf4UJmE4nlzlSF0vsuKMQc6TtdTb+E++ oBs3iW0BS9PkvkNNGAiPlI/MF8XcL6CCfG+cMxa/T3BAEvApVzd5iEWc0ZnVi1qP FqIeOsgo3RI7PCDOcB6lGzYypw73Kjj86CtNBKKFSMDx4cUxSLGHk+h4j5oeq/qe PwiDMr73AKgpMGsTVbHgA5DNXA== -----END CERTIFICATE-----Generated at Tue Sep 22 01:08:27 2026 by rpki-client