$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: TJv7LP6/59oKJD8799p4fmvGtLYAeBDBaHGSq5/vORk= Subject key identifier: CF:70:F1:76:E0:B4:A9:1F:CE:1E:12:6C:9B:3C:FA:3A:2D:9D:77:25 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 34E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 34D6 Signing time: Sat 18 Oct 2025 14:50:49 +0000 Manifest this update: Sat 18 Oct 2025 14:50:48 +0000 Manifest next update: Sat 25 Oct 2025 14:50:48 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: aIhXVCmtg7ByNeLOmOCZ5WtqGAJ2WECVZdA9vjXVRwU=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: RA6RFmE6k5HO1bBqRafgilu2yoyhiNE9rjZysYl9t3k=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: APLkO/9VQDMo8Mg1BILGpzlcs8IiIyqCJfnR8QGrWEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13537 (0x34e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Oct 18 14:50:48 2025 GMT Not After : Oct 25 14:50:48 2025 GMT Subject: CN=68f3a948-8dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:8a:ff:0a:30:6a:c6:2b:b1:ec:30:bf:66: 41:03:02:36:c1:3f:80:fa:92:0e:38:81:b5:89:e9: 80:55:83:42:f4:55:56:5d:70:c6:3e:fd:53:6d:e5: 27:db:bc:d2:ff:1b:a4:78:b2:90:96:90:e5:89:ec: b3:09:ef:3d:9f:23:c7:04:70:7f:b3:8f:31:ff:d0: 91:7f:18:f2:e3:8e:e9:3b:99:9f:9d:d2:f3:bb:2f: 7e:03:3e:8d:1c:52:10:4e:15:74:23:a8:17:6e:a7: 05:2d:0b:b0:30:7e:8f:70:04:2f:f7:71:83:f9:05: 40:ad:cd:ff:d9:4b:01:33:dd:f1:44:bc:d3:b4:81: d2:d8:82:f0:6d:5a:9b:15:78:ba:d0:f5:8c:ef:c3: 41:9f:75:96:47:6b:46:40:53:2a:a4:19:97:cf:3f: d9:43:23:29:20:c0:af:dd:e8:d3:19:65:d8:9d:31: 4c:14:2a:d2:1c:c1:03:57:1b:30:49:de:4a:29:8f: ae:ad:e6:f3:0a:34:e7:02:65:d3:0e:4d:8b:2c:89: 4c:a8:f3:e9:15:58:7a:9c:dc:4a:80:01:1f:8e:1c: f2:d8:3a:1f:88:a6:7f:4a:65:34:4a:af:0f:c1:31: 31:97:ed:be:3b:5e:23:97:58:a3:3c:bb:d7:6b:82: 33:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:70:F1:76:E0:B4:A9:1F:CE:1E:12:6C:9B:3C:FA:3A:2D:9D:77:25 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:eb:c6:e8:77:5b:d3:68:06:b3:b6:5f:b3:a0:82:47:26:30: 57:12:7d:46:c3:bd:aa:2d:1d:8a:dd:5d:19:17:fa:ad:9a:7a: d2:aa:12:6a:c7:58:23:42:2d:14:2b:33:b9:58:f1:2f:1a:1e: 47:ca:d0:62:d8:89:cf:b2:ec:40:6e:d0:8e:29:5a:27:97:2a: 66:52:3e:83:e2:13:9a:ff:de:7c:0a:9a:d3:8d:1c:00:d2:a6: ae:fe:87:cb:bf:94:4a:24:c7:0c:5a:74:8b:7a:3c:c4:9c:4a: f5:ae:7a:2e:de:68:17:63:51:44:33:d5:f8:4d:8f:6e:8f:ed: 78:54:64:4a:5b:0f:83:79:52:33:6d:86:ce:98:60:9c:18:ea: a3:0c:6f:fe:fe:f6:87:6c:b7:db:0c:33:7a:2d:b5:30:a8:c1: f1:be:d9:08:92:c1:58:0f:36:57:6f:d0:7c:84:18:e6:f6:54: 3f:3b:15:ec:a2:9c:a0:79:ef:0b:1c:2e:78:43:db:0a:00:43: c1:af:40:18:f8:89:47:4f:fa:c4:6b:7b:aa:12:9d:3d:b2:35: 8e:ed:1c:84:ed:b4:29:65:23:29:9b:4e:38:1b:7b:06:ba:44: 97:47:4c:b0:d9:41:5c:aa:0d:08:e1:23:cc:f1:2a:2b:e6:4b: 02:42:09:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjUxMDE4MTQ1MDQ4WhcNMjUxMDI1MTQ1MDQ4WjAYMRYwFAYD VQQDEw02OGYzYTk0OC04ZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva+K/wowasYrsewwv2ZBAwI2wT+A+pIOOIG1iemAVYNC9FVWXXDGPv1TbeUn 27zS/xukeLKQlpDlieyzCe89nyPHBHB/s48x/9CRfxjy447pO5mfndLzuy9+Az6N HFIQThV0I6gXbqcFLQuwMH6PcAQv93GD+QVArc3/2UsBM93xRLzTtIHS2ILwbVqb FXi60PWM78NBn3WWR2tGQFMqpBmXzz/ZQyMpIMCv3ejTGWXYnTFMFCrSHMEDVxsw Sd5KKY+urebzCjTnAmXTDk2LLIlMqPPpFVh6nNxKgAEfjhzy2DofiKZ/SmU0Sq8P wTExl+2+O14jl1ijPLvXa4IzJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9w8Xbg tKkfzh4SbJs8+jotnXclMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm68bod1vTaAaztl+zoIJHJjBXEn1Gw72qLR2K3V0ZF/qtmnrSqhJq x1gjQi0UKzO5WPEvGh5HytBi2InPsuxAbtCOKVonlypmUj6D4hOa/958CprTjRwA 0qau/ofLv5RKJMcMWnSLejzEnEr1rnou3mgXY1FEM9X4TY9uj+14VGRKWw+DeVIz bYbOmGCcGOqjDG/+/vaHbLfbDDN6LbUwqMHxvtkIksFYDzZXb9B8hBjm9lQ/OxXs opygee8LHC54Q9sKAEPBr0AY+IlHT/rEa3uqEp09sjWO7RyE7bQpZSMpm044G3sG ukSXR0yw2UFcqg0I4SPM8Sor5ksCQglI -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:06 2025 by rpki-client