$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: i4o4G6XJUSSgsWhFU+rZRHJFp0S0g/EGA2FVjYLadRg= Subject key identifier: B0:C4:46:6B:41:B1:C6:58:A9:39:24:83:D3:CD:AF:C4:0F:FA:97:37 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 34C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 34B7 Signing time: Fri 22 Aug 2025 14:34:21 +0000 Manifest this update: Fri 22 Aug 2025 14:34:21 +0000 Manifest next update: Fri 29 Aug 2025 14:34:21 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: zZIckbPbUVj79QWrd+XsZVsqL3HrcWJU+YyycR1l8Y4=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: LYYe0/ugE0YWppDV9+N/oSDl4IKiJUQFEaZM88DJJ/s=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: JwlADxU15y3Ux/pBiI3TitQwzPcxeHG3v1ZhXPEpRug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13504 (0x34c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Aug 22 14:34:21 2025 GMT Not After : Aug 29 14:34:21 2025 GMT Subject: CN=68a87fed-7b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:75:b1:8c:69:88:4b:69:8d:5b:91:4f:c7:7b: d2:f5:20:ed:de:f7:cc:16:49:ae:99:81:b0:d1:dd: bf:26:50:6b:f4:32:c7:1e:45:fa:ef:25:b6:51:46: 70:72:ab:71:5d:1e:57:2e:ec:2f:db:9f:c4:21:d5: 9e:d5:91:4f:b4:9e:11:2f:a9:6b:9d:66:76:9e:42: 5a:c1:02:20:d7:0c:63:90:0f:2a:1e:13:36:b9:c2: e6:a2:34:4d:c1:1e:44:03:89:43:0f:47:55:d9:66: 0c:07:5d:e9:54:6e:c8:00:97:db:2d:bb:15:93:44: 0d:72:7b:6a:76:d2:d8:16:79:08:04:6d:9e:ed:30: 7f:ef:eb:0c:f5:32:b5:e3:f8:0c:ac:eb:ed:2f:79: 41:be:d5:46:38:b3:54:e5:25:4a:88:9e:e4:3e:83: b3:cf:24:87:df:24:6d:55:51:a2:dd:96:45:58:7d: d4:8c:a3:58:e4:5a:c5:c9:07:95:49:0c:e5:b5:16: 0f:6e:ba:57:12:b1:88:91:46:1c:f3:89:bc:b6:cf: a7:dd:c7:84:3d:61:c7:5a:f9:45:2a:75:02:25:e4: 1b:58:e7:fc:38:73:cf:bc:f2:20:78:00:96:e7:f6: 4c:35:b0:a5:7c:96:bf:ce:d5:a2:23:40:ae:e0:41: bf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C4:46:6B:41:B1:C6:58:A9:39:24:83:D3:CD:AF:C4:0F:FA:97:37 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:54:8b:f2:08:22:2f:8b:42:ae:5c:f3:b7:86:e2:5f:e0:6a: 6c:e2:e1:f7:40:cf:3e:5f:0f:9c:f2:a9:bd:81:2c:34:ee:1d: a0:fa:5e:b9:94:f9:da:f7:7a:0c:c0:57:02:81:84:66:49:07: d2:24:35:8b:c2:2c:a5:d2:b0:3d:32:82:fe:5f:df:90:5f:6b: 00:23:d5:03:aa:d8:c1:2a:01:a9:b5:fe:c7:a6:e7:17:78:9f: 06:18:90:e5:de:f9:a2:98:09:53:99:de:f4:ac:45:40:e8:99: 2b:53:75:8b:f0:4b:30:08:33:4a:be:f8:67:98:13:c6:e2:af: 5b:5d:87:2a:c3:b3:b7:d3:ab:ad:e5:03:f8:07:5a:71:47:f0: ee:64:8b:a5:27:db:3c:72:75:f2:d6:d4:de:b7:14:6f:5d:4e: 76:a5:61:fb:c9:2c:ad:8b:6d:a7:ba:24:48:d5:31:1b:2b:31: 5a:f7:db:ef:87:11:06:9e:41:2f:3e:1e:79:5f:e7:af:44:68: 79:be:24:df:07:18:ad:6c:0a:23:4e:34:69:79:95:a0:d6:de: de:ca:93:9a:79:df:f6:37:7e:3f:eb:ed:d4:c4:49:b8:68:49: 6d:f8:e4:69:ef:a4:76:4d:50:95:d5:4f:76:d4:85:48:78:77: c4:3e:1a:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjUwODIyMTQzNDIxWhcNMjUwODI5MTQzNDIxWjAYMRYwFAYD VQQDEw02OGE4N2ZlZC03Yjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5XWxjGmIS2mNW5FPx3vS9SDt3vfMFkmumYGw0d2/JlBr9DLHHkX67yW2UUZw cqtxXR5XLuwv25/EIdWe1ZFPtJ4RL6lrnWZ2nkJawQIg1wxjkA8qHhM2ucLmojRN wR5EA4lDD0dV2WYMB13pVG7IAJfbLbsVk0QNcntqdtLYFnkIBG2e7TB/7+sM9TK1 4/gMrOvtL3lBvtVGOLNU5SVKiJ7kPoOzzySH3yRtVVGi3ZZFWH3UjKNY5FrFyQeV SQzltRYPbrpXErGIkUYc84m8ts+n3ceEPWHHWvlFKnUCJeQbWOf8OHPPvPIgeACW 5/ZMNbClfJa/ztWiI0Cu4EG/hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDERmtB scZYqTkkg9PNr8QP+pc3MB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+VIvyCCIvi0KuXPO3huJf4Gps4uH3QM8+Xw+c8qm9gSw07h2g+l65 lPna93oMwFcCgYRmSQfSJDWLwiyl0rA9MoL+X9+QX2sAI9UDqtjBKgGptf7HpucX eJ8GGJDl3vmimAlTmd70rEVA6JkrU3WL8EswCDNKvvhnmBPG4q9bXYcqw7O306ut 5QP4B1pxR/DuZIulJ9s8cnXy1tTetxRvXU52pWH7ySyti22nuiRI1TEbKzFa99vv hxEGnkEvPh55X+evRGh5viTfBxitbAojTjRpeZWg1t7eypOaed/2N34/6+3UxEm4 aElt+ORp76R2TVCV1U921IVIeHfEPhp8 -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:32 2025 by rpki-client