$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: 52n59npBm94GXveyoB8KzLYfgTAUSbyEqnXV+D3jZVQ= Subject key identifier: 14:C8:E7:1E:9B:AD:42:DB:3E:62:5F:E9:61:14:A3:C0:51:B2:40:15 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 34B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 34AC Signing time: Thu 31 Jul 2025 14:34:46 +0000 Manifest this update: Thu 31 Jul 2025 14:34:46 +0000 Manifest next update: Thu 07 Aug 2025 14:34:46 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: QXYn0VcEAGF7ihlzjHut+HYpAe3oxn+JFsGopM6AXDw=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: LYYe0/ugE0YWppDV9+N/oSDl4IKiJUQFEaZM88DJJ/s=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: JwlADxU15y3Ux/pBiI3TitQwzPcxeHG3v1ZhXPEpRug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 14:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13493 (0x34b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Jul 31 14:34:46 2025 GMT Not After : Aug 7 14:34:46 2025 GMT Subject: CN=688b7f06-7326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:f4:56:a0:ef:e7:bc:35:2e:fd:37:3e:32: 3e:d1:0f:37:4c:17:9a:88:0b:2d:0a:32:ec:6e:f4: 80:3e:fa:b1:19:88:4f:a7:56:25:15:91:3d:c8:f1: 8f:7a:50:6e:ce:8d:59:be:9d:d2:25:78:9f:62:a5: 79:71:39:b0:c7:fe:93:e2:b8:3a:81:ad:2e:fc:4b: 76:c5:a5:9c:2d:97:77:fe:b8:2b:83:79:e7:23:d0: 5a:38:4a:be:b3:59:d3:b8:d2:00:a2:c9:a8:4d:ea: 9b:8a:e0:06:be:90:07:e4:1c:41:a9:d6:31:40:63: 3c:48:e5:ce:35:aa:7e:da:09:86:a0:37:8f:46:13: b5:24:7c:40:07:af:44:ac:34:99:27:bb:c3:11:78: 6c:1b:72:bc:1a:47:7c:c4:17:85:91:c1:8a:e6:c0: 41:4d:2f:86:22:27:24:7f:d9:e6:d8:46:fa:c6:7c: 72:25:3a:9d:4d:80:14:2a:4b:2d:11:67:c4:83:4a: 96:12:2c:ba:e0:2f:07:85:a9:a5:e7:0d:32:01:c2: d3:ff:ec:73:af:38:48:3b:99:46:8e:48:38:80:14: 00:df:63:1f:13:a3:51:cf:66:f1:6f:f6:1c:05:d7: 29:56:03:b4:5a:b3:a5:a4:e4:8f:fd:63:14:d1:ad: 39:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C8:E7:1E:9B:AD:42:DB:3E:62:5F:E9:61:14:A3:C0:51:B2:40:15 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7e:63:51:46:b0:09:78:9b:6a:8a:df:50:84:9a:e6:9d:6c: f1:83:8e:87:8a:22:96:b0:c9:e4:06:3e:39:ce:be:64:6f:c2: 69:09:7e:b9:53:b9:f1:94:5b:b7:94:d1:11:e1:c2:ee:da:3d: 01:14:07:fc:ac:7f:0b:fd:bc:3d:4e:41:52:e5:a4:ae:e1:ff: 84:ea:1e:d5:6d:0c:32:bd:ea:5b:13:72:7f:20:a0:dc:bb:b1: 38:a2:7a:4c:40:fd:14:ac:ea:cd:c7:c1:27:ea:d3:c4:1f:b1: 33:f2:a3:65:97:b9:e9:67:d4:77:81:eb:4c:91:6d:3e:00:5c: 2d:c9:cd:9e:58:ec:36:da:cf:b2:e3:3e:0c:c6:56:46:8c:f0: 84:29:d8:0b:49:1e:91:47:05:88:cd:ef:6a:23:03:52:60:c6: fb:f9:06:96:09:f4:2b:49:d5:c9:03:58:57:6d:cb:40:49:fe: f4:42:c8:c6:ae:64:3b:3b:e5:bf:02:a8:2d:ca:f4:f5:7a:b2: 8e:12:81:34:0d:84:12:02:7b:9e:a2:96:30:9e:aa:fb:07:82: af:8a:74:39:4c:9c:b5:ae:7e:b1:73:06:32:b1:83:6e:3b:e6: a3:01:6d:0e:81:de:ed:67:b7:83:82:be:84:67:06:09:ea:1a: e7:ed:7a:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjUwNzMxMTQzNDQ2WhcNMjUwODA3MTQzNDQ2WjAYMRYwFAYD VQQDEw02ODhiN2YwNi03MzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLj0VqDv57w1Lv03PjI+0Q83TBeaiAstCjLsbvSAPvqxGYhPp1YlFZE9yPGP elBuzo1Zvp3SJXifYqV5cTmwx/6T4rg6ga0u/Et2xaWcLZd3/rgrg3nnI9BaOEq+ s1nTuNIAosmoTeqbiuAGvpAH5BxBqdYxQGM8SOXONap+2gmGoDePRhO1JHxAB69E rDSZJ7vDEXhsG3K8Gkd8xBeFkcGK5sBBTS+GIickf9nm2Eb6xnxyJTqdTYAUKkst EWfEg0qWEiy64C8Hhaml5w0yAcLT/+xzrzhIO5lGjkg4gBQA32MfE6NRz2bxb/Yc BdcpVgO0WrOlpOSP/WMU0a059QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTI5x6b rULbPmJf6WEUo8BRskAVMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8fmNRRrAJeJtqit9QhJrmnWzxg46HiiKWsMnkBj45zr5kb8JpCX65 U7nxlFu3lNER4cLu2j0BFAf8rH8L/bw9TkFS5aSu4f+E6h7VbQwyvepbE3J/IKDc u7E4onpMQP0UrOrNx8En6tPEH7Ez8qNll7npZ9R3getMkW0+AFwtyc2eWOw22s+y 4z4MxlZGjPCEKdgLSR6RRwWIze9qIwNSYMb7+QaWCfQrSdXJA1hXbctASf70QsjG rmQ7O+W/AqgtyvT1erKOEoE0DYQSAnueopYwnqr7B4KvinQ5TJy1rn6xcwYysYNu O+ajAW0Ogd7tZ7eDgr6EZwYJ6hrn7XoZ -----END CERTIFICATE-----Generated at Fri Aug 1 23:42:11 2025 by rpki-client