$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json) Hash identifier: uA6cLD7GDTwTwsL3/f/bSaVNRKaaT8eyv8uXvT4auO8= Subject key identifier: 4D:1A:2A:D7:00:A1:37:45:13:CB:43:23:D4:2F:B1:AA:1A:B1:A6:22 Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 08B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft Manifest number: 08A5 Signing time: Tue 20 Oct 2026 20:46:30 +0000 Manifest this update: Tue 20 Oct 2026 20:46:29 +0000 Manifest next update: Tue 27 Oct 2026 20:46:29 +0000 Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: 0iz2mktHTQ9eSoQieIMkXwdKGdE1TcIolcbKRR94kEQ=) 2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: qtMYIEnbiq7hnTXu83dyb1pR6Ew8tkioJCqNAvjo/dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 20:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2224 (0x8b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: Oct 20 20:46:29 2026 GMT Not After : Oct 27 20:46:29 2026 GMT Subject: CN=6ad7d326-9c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:b0:fc:a1:92:76:f4:9d:0c:90:9e:db:22: 6d:0a:4d:26:3d:62:bc:06:fc:a2:9c:79:65:53:5c: 3b:57:59:83:b5:8c:78:25:38:ae:e1:fa:4f:ee:b0: fa:99:ba:fc:62:5b:95:30:c0:55:5f:05:07:39:35: fc:26:2a:69:5a:4d:66:4c:4e:d2:2f:6d:c3:3c:60: 4d:c8:84:0b:1c:95:ac:ec:16:06:fd:4e:a5:1f:50: d4:20:ca:26:44:78:67:5a:fd:aa:a4:f8:37:4b:f2: 2c:f9:2e:c4:d4:06:7b:86:5b:19:64:09:4e:5e:c8: 67:4e:32:f0:4a:24:dd:6e:cc:ab:2e:2a:2f:0b:ce: d1:a7:18:ed:51:03:a6:37:1d:37:e0:4f:c4:e1:df: 07:61:74:fb:08:a8:bb:35:32:b9:f0:0f:4c:4d:65: d9:d6:c6:92:7d:59:8e:2d:20:80:52:e0:e3:3d:52: d0:54:8d:8c:3f:53:61:8c:02:33:a1:35:20:61:25: 9d:f4:1d:b0:60:15:50:92:62:4d:1b:9b:65:51:68: af:a5:96:17:33:1a:b2:c1:32:d2:08:b6:f5:2d:64: c0:d0:cb:d5:0a:04:2a:0a:dd:6c:02:39:10:f7:f4: 65:c9:c4:7b:23:65:26:7e:a3:b8:11:a3:27:12:84: 05:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1A:2A:D7:00:A1:37:45:13:CB:43:23:D4:2F:B1:AA:1A:B1:A6:22 X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1a:8b:46:96:fb:e0:3a:31:96:56:eb:c0:31:cb:85:cb:42: 8e:d2:d2:5c:b4:85:0a:f1:34:46:31:93:c7:11:02:d5:26:07: 97:00:9b:d3:2a:d2:be:73:bd:61:4a:4d:6d:dd:f6:18:5d:16: 1a:f0:42:1e:83:b4:3b:4d:7f:d1:05:a0:98:ea:1b:cd:1c:fa: dd:b7:ac:28:4a:d9:ac:40:21:b7:52:1e:b8:d1:31:80:d9:31: fd:5a:db:1b:a9:2c:56:6f:08:7f:27:5a:bc:fe:62:a4:3b:31: f2:32:09:02:83:2b:c4:23:f1:03:49:46:c6:d8:3d:91:a2:2d: 95:2e:48:a4:49:e3:ec:aa:33:62:e2:1c:26:02:40:42:b6:ca: 64:5a:00:b2:05:6f:95:2f:5f:ca:b3:02:dc:b1:e7:94:4d:dd: b2:d0:82:7e:04:e2:3e:ab:6d:92:da:2c:6d:61:11:80:89:f6: c3:de:cd:ad:9f:1f:6c:ab:ce:c8:c5:9c:44:15:c0:20:ff:15: 1e:17:58:5b:85:82:02:c7:25:db:57:eb:c9:42:ce:2a:38:1b: ae:ea:e9:51:42:1c:75:c5:8f:be:ba:10:03:ee:53:87:05:ba: 9c:ec:b4:e8:f6:95:dd:65:71:db:f8:34:20:81:29:07:fa:b5: fa:da:94:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjYxMDIwMjA0NjI5WhcNMjYxMDI3MjA0NjI5WjAYMRYwFAYD VQQDEw02YWQ3ZDMyNi05YzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiiw/KGSdvSdDJCe2yJtCk0mPWK8BvyinHllU1w7V1mDtYx4JTiu4fpP7rD6 mbr8YluVMMBVXwUHOTX8JippWk1mTE7SL23DPGBNyIQLHJWs7BYG/U6lH1DUIMom RHhnWv2qpPg3S/Is+S7E1AZ7hlsZZAlOXshnTjLwSiTdbsyrLiovC87RpxjtUQOm Nx034E/E4d8HYXT7CKi7NTK58A9MTWXZ1saSfVmOLSCAUuDjPVLQVI2MP1NhjAIz oTUgYSWd9B2wYBVQkmJNG5tlUWivpZYXMxqywTLSCLb1LWTA0MvVCgQqCt1sAjkQ 9/RlycR7I2UmfqO4EaMnEoQF4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0aKtcA oTdFE8tDI9QvsaoasaYiMB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD Tld4ZmlCY0JqejJmSUo5QjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnxqLRpb74DoxllbrwDHLhctCjtLSXLSFCvE0RjGTxxEC1SYHlwCb0yrSvnO9 YUpNbd32GF0WGvBCHoO0O01/0QWgmOobzRz63besKErZrEAht1IeuNExgNkx/Vrb G6ksVm8IfydavP5ipDsx8jIJAoMrxCPxA0lGxtg9kaItlS5IpEnj7KozYuIcJgJA QrbKZFoAsgVvlS9fyrMC3LHnlE3dstCCfgTiPqttktosbWERgIn2w97NrZ8fbKvO yMWcRBXAIP8VHhdYW4WCAscl21fryULOKjgbrurpUUIcdcWPvroQA+5ThwW6nOy0 6PaV3WVx2/g0IIEpB/q1+tqUSQ== -----END CERTIFICATE-----Generated at Wed Oct 21 10:14:19 2026 by rpki-client