$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: deN9sWZ3jjA7UnGSA8bMYD+9ptMWDKmgBVuo5tbjjyA= Subject key identifier: 1C:2F:BC:3E:02:1B:1B:DF:7E:0E:EE:B4:44:45:46:78:84:54:07:DF Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 3496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 348D Signing time: Sat 31 May 2025 14:33:52 +0000 Manifest this update: Sat 31 May 2025 14:33:51 +0000 Manifest next update: Sat 07 Jun 2025 14:33:51 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: PDx2Hxve6MxDo32Bqie5b3V7giOv9HvaOQNxfpeDysc=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: LYYe0/ugE0YWppDV9+N/oSDl4IKiJUQFEaZM88DJJ/s=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: JwlADxU15y3Ux/pBiI3TitQwzPcxeHG3v1ZhXPEpRug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13462 (0x3496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: May 31 14:33:51 2025 GMT Not After : Jun 7 14:33:51 2025 GMT Subject: CN=683b1350-9ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:d3:9e:36:ab:d1:44:fa:a5:b6:77:db:e5: f5:1e:70:09:3c:82:fa:de:9e:9b:a3:5c:08:3a:e6: 55:c6:55:29:f3:32:b9:04:38:c0:07:53:56:4f:19: 9b:ee:bf:0b:40:54:26:3a:7e:1a:4d:ed:dd:59:b6: d2:fb:ac:8b:47:e0:45:21:ec:ee:87:cd:37:b7:a0: da:9c:99:6c:fd:fd:67:9a:e9:09:0d:75:06:ed:67: 9f:79:01:bb:9c:72:5b:6a:43:16:76:03:8a:17:79: 9e:53:83:4a:d2:ab:2c:11:0f:3e:4a:de:f9:81:cf: bc:c6:9c:df:15:bb:f2:65:07:e4:a1:25:2c:9b:3d: c7:ac:b7:6a:59:84:d8:4e:e8:a9:77:fd:08:bf:77: 00:9a:60:23:fa:29:3c:1c:ce:c3:53:d1:44:ef:0a: d7:86:40:2a:7e:fb:ec:c2:af:dc:df:19:12:5b:84: 2a:9d:5c:cd:9d:1f:45:57:66:eb:f8:37:e1:3d:61: 0f:9e:48:30:74:49:ea:66:8b:1e:81:b5:45:b2:81: 88:ae:d2:3d:95:59:ae:81:09:45:27:49:c1:c1:98: fb:9b:38:fc:5d:e5:ba:8b:c1:2f:cc:4c:69:37:8d: ca:fe:e8:63:63:f7:20:2d:91:64:8a:ff:02:5e:62: b5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2F:BC:3E:02:1B:1B:DF:7E:0E:EE:B4:44:45:46:78:84:54:07:DF X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:cc:61:d1:ad:23:9e:ae:96:aa:49:6b:db:d9:e3:cb:33:5b: df:46:b9:43:aa:c3:62:8d:34:0b:d0:42:57:00:12:61:fa:6e: 51:f3:9c:62:92:06:a7:51:df:b2:e6:c4:35:c0:87:07:a0:c3: 21:88:33:53:88:b2:2b:02:b6:c5:5c:c2:bd:cd:b8:89:b9:d6: 8d:ba:7d:3b:7e:2e:43:a4:25:ba:66:f6:da:e0:07:c7:91:ee: bf:45:76:03:59:a7:97:2e:59:60:60:a0:d4:7d:9d:f4:33:a0: ab:d6:5e:a7:d5:1a:9c:6d:e0:66:fd:28:60:98:58:e7:7f:46: e0:0f:e0:8c:53:e4:c9:81:3c:77:c8:a6:0b:20:4e:05:81:37: 0a:80:2a:34:3f:77:f6:3c:4d:63:88:de:e0:26:c4:01:cc:a3: 3f:15:de:a4:d1:c5:70:21:87:80:0b:02:79:9f:9a:64:71:74: 98:81:b5:b1:76:23:72:df:26:5e:67:e8:58:04:f3:02:24:d2: e0:fc:d1:fb:95:c6:a5:40:04:05:5f:9a:cb:2f:71:62:1d:7a: b1:07:6d:46:d1:b5:4d:28:c4:5b:fb:9e:42:4a:d7:df:e1:87: ac:a7:00:57:e0:af:f0:66:04:98:39:5d:05:75:53:26:b7:25: 9b:e2:a2:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjUwNTMxMTQzMzUxWhcNMjUwNjA3MTQzMzUxWjAYMRYwFAYD VQQDEw02ODNiMTM1MC05YWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1F3Tnjar0UT6pbZ32+X1HnAJPIL63p6bo1wIOuZVxlUp8zK5BDjAB1NWTxmb 7r8LQFQmOn4aTe3dWbbS+6yLR+BFIezuh803t6DanJls/f1nmukJDXUG7WefeQG7 nHJbakMWdgOKF3meU4NK0qssEQ8+St75gc+8xpzfFbvyZQfkoSUsmz3HrLdqWYTY Tuipd/0Iv3cAmmAj+ik8HM7DU9FE7wrXhkAqfvvswq/c3xkSW4QqnVzNnR9FV2br +DfhPWEPnkgwdEnqZosegbVFsoGIrtI9lVmugQlFJ0nBwZj7mzj8XeW6i8EvzExp N43K/uhjY/cgLZFkiv8CXmK1swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwvvD4C Gxvffg7utERFRniEVAffMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3zGHRrSOerpaqSWvb2ePLM1vfRrlDqsNijTQL0EJXABJh+m5R85xi kganUd+y5sQ1wIcHoMMhiDNTiLIrArbFXMK9zbiJudaNun07fi5DpCW6Zvba4AfH ke6/RXYDWaeXLllgYKDUfZ30M6Cr1l6n1RqcbeBm/ShgmFjnf0bgD+CMU+TJgTx3 yKYLIE4FgTcKgCo0P3f2PE1jiN7gJsQBzKM/Fd6k0cVwIYeACwJ5n5pkcXSYgbWx diNy3yZeZ+hYBPMCJNLg/NH7lcalQAQFX5rLL3FiHXqxB21G0bVNKMRb+55CStff 4YespwBX4K/wZgSYOV0FdVMmtyWb4qJQ -----END CERTIFICATE-----Generated at Sat May 31 17:37:45 2025 by rpki-client