$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: rfQN775aH4BD7uyOI58Be5WETdLf7ybftUkDvcFz3Gw= Subject key identifier: E6:B7:6C:F1:5D:68:E5:DD:2E:DF:AC:C2:B1:6D:F8:85:5B:24:D4:61 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 3581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 3570 Signing time: Thu 06 Aug 2026 14:35:10 +0000 Manifest this update: Thu 06 Aug 2026 14:35:09 +0000 Manifest next update: Thu 13 Aug 2026 14:35:09 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: 9EmHki2q7+KXyi6UsKEwzctWtRnmZqn90vgAzBuy3Dk=) 2: 532313EE89FB11F1A2C97EB45E11F970.roa (hash: ONFD8eO0BeKQA05+Fmoa39A39KmAUsRQvy6sAW3EDUA=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: a8UAQgdr5YefPf6e/FxqB3qO2kRWk0And4FOBUzigKo=) 4: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: Z7MnSNSHBqpmgGDUQHMm4xL2DZm8ZBR3qNJ9ominL6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Aug 2026 14:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13697 (0x3581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Aug 6 14:35:09 2026 GMT Not After : Aug 13 14:35:09 2026 GMT Subject: CN=6a749b9e-28b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:2b:aa:e5:78:35:3d:48:1d:02:21:cf:7d: 9c:3d:42:01:40:a8:56:f8:72:47:34:4f:c3:75:4b: 22:15:4d:46:c8:a7:38:63:dc:5c:ea:d4:11:f2:d6: 48:38:6f:3b:40:e3:cf:d0:dd:65:58:9c:89:95:ea: 61:ee:ae:75:0a:c9:22:e8:4d:87:1b:ca:ff:33:be: a5:77:9d:e8:98:a2:98:5d:b9:32:4d:4a:c6:83:28: e3:a5:ba:da:9b:3f:9f:ea:e3:4a:02:b9:25:d8:aa: a7:eb:59:db:ac:8c:ce:56:a8:3c:66:bb:3a:2c:3b: b4:5e:83:2e:3c:81:f1:c0:d9:bd:19:f9:58:ce:ba: 91:f2:ca:d2:12:14:fa:ca:07:a9:63:52:ef:45:64: cf:7c:0e:36:47:c3:2e:4d:5a:98:65:eb:a3:68:f3: 5f:d0:83:1d:9e:42:e8:ab:a0:a2:98:d6:75:1a:a6: ba:38:1c:7d:70:b0:b0:62:db:8a:41:a5:8f:21:22: 93:d0:fc:87:20:f8:bd:b2:db:20:70:b6:83:8a:6d: 67:84:d3:89:81:85:9f:c0:18:5f:ba:7b:c1:f5:c3: 43:59:47:0f:bc:43:a2:65:fd:ff:60:4b:5f:21:28: e1:ad:77:99:2e:6e:8f:6c:03:9f:66:4f:4e:54:99: a0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B7:6C:F1:5D:68:E5:DD:2E:DF:AC:C2:B1:6D:F8:85:5B:24:D4:61 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:fb:43:82:bb:87:87:d5:0c:bb:82:c6:e4:03:ee:d6:b8:e2: bf:49:80:39:b2:77:bb:8b:22:29:03:16:2b:86:63:bb:89:af: f2:30:ff:63:10:c0:23:16:ab:5c:a8:58:4a:4f:12:6a:7b:f8: 22:7d:b6:80:99:9d:f7:41:ef:2e:f0:33:06:98:52:cb:c3:b4: 0b:b4:84:0f:99:7a:b7:51:35:6e:55:ee:54:59:f4:dd:0a:41: 0f:00:db:f7:66:17:ad:8e:46:34:bb:51:a2:da:7c:9b:bf:27: 3d:25:6b:31:d4:af:69:31:2b:54:d7:6f:83:9f:b0:b1:d7:0d: e0:cd:61:15:6a:3c:80:e1:15:6a:1b:5c:69:6b:d3:4f:19:38: 38:49:97:ae:15:8c:cb:1a:53:e5:c1:fa:bf:43:70:10:66:61: 88:3e:77:1a:06:2a:97:9a:cf:f0:5c:5b:93:b9:d8:c2:65:9d: 75:af:0c:2f:20:3d:a9:7c:76:51:4f:33:39:43:0e:2b:25:10: 80:dd:3b:81:dd:38:e1:6e:7c:3a:c6:5d:7a:bb:56:d0:95:23: 05:11:e3:16:36:30:48:11:57:ee:81:98:b3:72:d3:ce:ab:88: a3:c4:ce:b6:1d:42:4e:4a:6c:6a:54:ea:83:ff:81:c8:a6:8b: 28:bb:56:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjYwODA2MTQzNTA5WhcNMjYwODEzMTQzNTA5WjAYMRYwFAYD VQQDEw02YTc0OWI5ZS0yOGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmHgrquV4NT1IHQIhz32cPUIBQKhW+HJHNE/DdUsiFU1GyKc4Y9xc6tQR8tZI OG87QOPP0N1lWJyJleph7q51Cski6E2HG8r/M76ld53omKKYXbkyTUrGgyjjpbra mz+f6uNKArkl2Kqn61nbrIzOVqg8Zrs6LDu0XoMuPIHxwNm9GflYzrqR8srSEhT6 ygepY1LvRWTPfA42R8MuTVqYZeujaPNf0IMdnkLoq6CimNZ1Gqa6OBx9cLCwYtuK QaWPISKT0PyHIPi9stsgcLaDim1nhNOJgYWfwBhfunvB9cNDWUcPvEOiZf3/YEtf ISjhrXeZLm6PbAOfZk9OVJmgeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOa3bPFd aOXdLt+swrFt+IVbJNRhMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlftDgruHh9UMu4LG5APu1rjiv0mAObJ3u4siKQMWK4Zju4mv8jD/YxDAIxar XKhYSk8Sanv4In22gJmd90HvLvAzBphSy8O0C7SED5l6t1E1blXuVFn03QpBDwDb 92YXrY5GNLtRotp8m78nPSVrMdSvaTErVNdvg5+wsdcN4M1hFWo8gOEVahtcaWvT Txk4OEmXrhWMyxpT5cH6v0NwEGZhiD53GgYql5rP8Fxbk7nYwmWdda8MLyA9qXx2 UU8zOUMOKyUQgN07gd044W58OsZdertW0JUjBRHjFjYwSBFX7oGYs3LTzquIo8TO th1CTkpsalTqg/+ByKaLKLtWcw== -----END CERTIFICATE-----Generated at Thu Aug 6 20:53:14 2026 by rpki-client