$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: 4OD6Z1j5jPgFbNQ1YbT8fxX7JQ25oT99tF3r9o5odrQ= Subject key identifier: 46:05:B4:E4:38:60:60:5C:CC:65:79:1F:BF:8F:F4:D2:B0:D2:EC:24 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 34CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 34C4 Signing time: Tue 16 Sep 2025 14:34:50 +0000 Manifest this update: Tue 16 Sep 2025 14:34:49 +0000 Manifest next update: Tue 23 Sep 2025 14:34:49 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: M4QAG//2RibPG1iDYNq3AxwjBxbCBQC/iJO2wM4GpAA=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: LYYe0/ugE0YWppDV9+N/oSDl4IKiJUQFEaZM88DJJ/s=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: JwlADxU15y3Ux/pBiI3TitQwzPcxeHG3v1ZhXPEpRug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 14:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13517 (0x34cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Sep 16 14:34:49 2025 GMT Not After : Sep 23 14:34:49 2025 GMT Subject: CN=68c97589-45e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fe:09:9b:ec:c3:af:7f:84:ec:7c:5f:96:e3: 14:06:54:74:5f:73:a1:81:7a:ea:5f:c3:46:4d:97: 20:0b:6c:60:2b:35:12:59:33:7f:e7:8c:d6:59:de: 2d:f7:50:f2:6e:26:80:8e:0a:b0:ca:e2:ab:1e:10: b9:2c:54:65:29:47:d9:61:68:dc:83:95:95:45:e5: 20:4a:a3:8b:b0:74:00:0c:a7:34:c9:49:fc:69:1e: ee:29:a6:a5:09:d2:66:3c:e3:96:19:d2:e4:9a:70: 49:c5:32:4c:36:87:73:cb:c5:a9:53:26:77:0f:a8: 5f:d3:a6:80:9d:b6:90:bf:9c:ad:13:7f:83:d1:38: 5c:0b:6f:a6:c3:ef:1b:4d:82:ac:8d:cc:35:94:d8: 77:ab:ad:c4:e1:dd:a7:7a:6c:77:64:61:97:97:21: d1:7f:74:f0:5a:a9:d7:23:e0:50:90:8c:65:26:b2: d9:4e:f5:67:d0:08:e2:e6:4e:2a:67:a2:09:25:a5: 6f:bf:e4:c3:ca:b2:d6:f6:e7:f1:6b:b2:75:df:04: 09:9e:b5:f3:67:90:51:c5:f9:97:22:3a:9e:58:3f: 6d:7a:99:ce:d3:dc:d0:38:8e:78:02:de:78:de:73: 9d:b0:80:a2:9f:e1:08:e5:e1:7d:34:1b:38:21:7b: 73:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:05:B4:E4:38:60:60:5C:CC:65:79:1F:BF:8F:F4:D2:B0:D2:EC:24 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f7:2f:86:d3:a9:6b:a5:9c:bd:40:a3:fc:a7:c2:c2:78:8c: eb:42:51:8e:84:13:04:4b:4d:f7:22:6f:6d:9c:f0:6f:3b:c7: b0:67:97:aa:33:af:98:ea:a8:25:7f:01:b7:a1:59:dd:bf:40: d8:27:56:73:da:0a:58:2d:f4:d2:c7:2a:47:3d:ea:12:57:6e: 2a:c2:dc:8f:f7:c2:b2:f3:bb:61:20:f9:c3:91:2d:e6:a9:50: 4b:e1:27:23:42:42:17:89:1c:c3:e5:84:18:29:04:bb:21:dc: 77:40:32:42:4f:6b:eb:40:59:df:4e:a3:d6:57:0f:56:97:bb: 0a:94:46:c7:29:ab:c3:ab:d9:24:b1:7a:09:03:73:a7:38:29: b1:71:c8:ce:6f:06:05:44:ab:ac:b1:06:b5:09:f2:d3:dd:89: a8:a2:4a:cc:df:68:ef:a9:90:8f:22:bd:ab:e2:e1:f5:6e:a8: 99:33:b5:3f:91:a7:9c:a2:97:1b:ed:00:9d:37:cd:14:b6:7b: 75:77:90:fa:e3:de:ca:63:b1:75:8c:e8:06:eb:cc:17:4c:e8: c4:8f:9c:b0:ad:26:71:7d:bf:b1:00:2e:7d:be:bf:fe:df:e5: 7c:5b:4b:3b:ea:6e:3b:b7:90:00:25:ab:9f:4c:76:74:ff:07: 30:9c:61:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjUwOTE2MTQzNDQ5WhcNMjUwOTIzMTQzNDQ5WjAYMRYwFAYD VQQDEw02OGM5NzU4OS00NWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwf4Jm+zDr3+E7HxfluMUBlR0X3OhgXrqX8NGTZcgC2xgKzUSWTN/54zWWd4t 91DybiaAjgqwyuKrHhC5LFRlKUfZYWjcg5WVReUgSqOLsHQADKc0yUn8aR7uKaal CdJmPOOWGdLkmnBJxTJMNodzy8WpUyZ3D6hf06aAnbaQv5ytE3+D0ThcC2+mw+8b TYKsjcw1lNh3q63E4d2nemx3ZGGXlyHRf3TwWqnXI+BQkIxlJrLZTvVn0Aji5k4q Z6IJJaVvv+TDyrLW9ufxa7J13wQJnrXzZ5BRxfmXIjqeWD9tepnO09zQOI54At54 3nOdsICin+EI5eF9NBs4IXtzIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYFtOQ4 YGBczGV5H7+P9NKw0uwkMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB9y+G06lrpZy9QKP8p8LCeIzrQlGOhBMES033Im9tnPBvO8ewZ5eq M6+Y6qglfwG3oVndv0DYJ1Zz2gpYLfTSxypHPeoSV24qwtyP98Ky87thIPnDkS3m qVBL4ScjQkIXiRzD5YQYKQS7Idx3QDJCT2vrQFnfTqPWVw9Wl7sKlEbHKavDq9kk sXoJA3OnOCmxccjObwYFRKussQa1CfLT3YmookrM32jvqZCPIr2r4uH1bqiZM7U/ kaecopcb7QCdN80Utnt1d5D6497KY7F1jOgG68wXTOjEj5ywrSZxfb+xAC59vr/+ 3+V8W0s76m47t5AAJaufTHZ0/wcwnGFB -----END CERTIFICATE-----Generated at Thu Sep 18 00:54:39 2025 by rpki-client