$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json) Hash identifier: KaXru2RHBBX+4hL63kh61xDdRdrhu22kYBbN2eZTqUY= Subject key identifier: D3:86:F4:B8:01:BE:1A:88:38:60:9F:EB:F4:BB:2E:B4:F2:DA:BF:81 Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 07DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft Manifest number: 07D1 Signing time: Sat 06 Sep 2025 21:25:31 +0000 Manifest this update: Sat 06 Sep 2025 21:25:30 +0000 Manifest next update: Sat 13 Sep 2025 21:25:30 +0000 Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: aQni7veXTqyPqIPQt8MeiHdlcHTZZkpW9OOBuSw7Vvg=) 2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: nzgpiC5NFO3V3nVcBmKQWNZmNLyB+jOBtWw1RfrIB+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2010 (0x7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: Sep 6 21:25:30 2025 GMT Not After : Sep 13 21:25:30 2025 GMT Subject: CN=68bca6cb-dbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:74:e6:88:99:3b:2e:9b:73:e2:2f:5d:3d: 85:9b:e7:e1:41:d9:aa:97:86:55:94:36:de:b3:5d: 2d:12:a5:61:c4:1c:d5:aa:62:61:78:fe:d0:f8:fc: b5:61:1f:ac:07:55:6f:8c:78:31:bc:08:ce:2b:40: 4f:d4:ed:26:91:3f:d8:35:98:00:31:21:56:8c:f6: 72:0c:98:1a:5e:63:0f:08:66:2c:31:fa:88:ba:1f: bf:8e:ba:41:3b:e2:6f:a0:64:89:3f:4f:98:01:75: d4:3e:1c:e4:08:19:42:e5:e1:02:37:59:cd:43:85: 8f:45:55:7a:04:09:6b:7a:2e:8d:31:e3:5d:0c:99: d1:11:af:64:e6:c0:8d:dc:7e:ed:3b:42:20:44:c3: 89:d1:6d:93:bd:e3:d2:44:5e:ac:ca:52:14:7a:e8: 64:5e:96:7c:e1:cf:f8:ca:8b:eb:62:ed:c1:60:60: 07:a2:08:94:f5:ce:34:24:44:fa:4e:36:d0:54:c0: f3:59:7a:2c:5d:b8:31:29:0f:05:7e:b1:38:71:8f: 28:f8:1d:06:6d:72:a4:55:eb:20:8a:18:4c:5f:e4: b3:1d:31:f8:51:ef:4a:c9:85:e5:b7:c3:6a:6c:ef: 06:e5:65:c6:e8:ec:ba:ab:c8:0f:e0:ea:5e:9a:a9: a6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:86:F4:B8:01:BE:1A:88:38:60:9F:EB:F4:BB:2E:B4:F2:DA:BF:81 X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b0:b8:b1:13:c3:92:32:3e:07:0e:1c:c6:1a:f4:7e:5e:be: b3:bd:f9:2c:16:68:67:56:38:c3:06:c5:44:1e:6b:3b:b8:d3: 15:53:b9:c9:60:41:a9:08:71:70:eb:10:04:b4:fc:9c:47:d6: e8:b4:76:9a:a2:6b:1e:29:f6:ad:a5:c1:68:b6:67:29:90:45: 3d:53:c9:9a:ab:57:a4:4d:03:bf:ef:22:a3:06:3a:6c:27:b4: 54:7c:80:f8:f1:ea:81:b0:54:99:eb:48:3c:b7:b3:e7:1a:eb: f2:b6:8d:52:aa:60:10:28:fb:6e:29:07:ac:f1:71:f2:74:e9: ec:cb:05:0b:a0:0a:ac:f4:a9:0d:8b:55:fd:62:50:75:cc:f7: 61:87:d9:02:80:47:59:d4:98:7e:46:bf:d8:fa:57:67:a6:a6: 08:fe:ba:02:01:99:d1:30:45:13:50:da:86:7d:52:ff:a4:37: 38:38:2f:d6:ce:44:d0:32:b7:c8:d1:a4:98:b4:98:81:af:43: 84:4e:a5:2a:d2:7f:22:27:40:60:ad:3b:8c:79:e5:cd:f8:c8: ca:dd:de:83:a9:23:66:f9:5c:33:7b:e6:39:1d:47:18:fd:cd: ea:22:de:ab:9d:2a:21:80:f3:44:cd:ea:53:a4:a8:96:5c:85: 24:c2:cc:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjUwOTA2MjEyNTMwWhcNMjUwOTEzMjEyNTMwWjAYMRYwFAYD VQQDEw02OGJjYTZjYi1kYmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lR05oiZOy6bc+IvXT2Fm+fhQdmql4ZVlDbes10tEqVhxBzVqmJheP7Q+Py1 YR+sB1VvjHgxvAjOK0BP1O0mkT/YNZgAMSFWjPZyDJgaXmMPCGYsMfqIuh+/jrpB O+JvoGSJP0+YAXXUPhzkCBlC5eECN1nNQ4WPRVV6BAlrei6NMeNdDJnREa9k5sCN 3H7tO0IgRMOJ0W2TvePSRF6sylIUeuhkXpZ84c/4yovrYu3BYGAHogiU9c40JET6 TjbQVMDzWXosXbgxKQ8FfrE4cY8o+B0GbXKkVesgihhMX+SzHTH4Ue9KyYXlt8Nq bO8G5WXG6Oy6q8gP4OpemqmmVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOG9LgB vhqIOGCf6/S7LrTy2r+BMB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD Tld4ZmlCY0JqejJmSUo5QjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmsLixE8OSMj4HDhzGGvR+Xr6zvfksFmhnVjjDBsVEHms7uNMVU7nJ YEGpCHFw6xAEtPycR9botHaaomseKfatpcFotmcpkEU9U8maq1ekTQO/7yKjBjps J7RUfID48eqBsFSZ60g8t7PnGuvyto1SqmAQKPtuKQes8XHydOnsywULoAqs9KkN i1X9YlB1zPdhh9kCgEdZ1Jh+Rr/Y+ldnpqYI/roCAZnRMEUTUNqGfVL/pDc4OC/W zkTQMrfI0aSYtJiBr0OETqUq0n8iJ0BgrTuMeeXN+MjK3d6DqSNm+Vwze+Y5HUcY /c3qIt6rnSohgPNEzepTpKiWXIUkwsze -----END CERTIFICATE-----Generated at Sun Sep 7 14:24:48 2025 by rpki-client