$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: wGdB6lywr38UZcnKUEh1/tm/LImEhIvIylR1hrs7a0M= Subject key identifier: F8:4F:07:24:5B:30:FC:BB:ED:81:99:58:8E:F5:F2:AA:0B:CE:8A:0E Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 3538 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 3529 Signing time: Tue 24 Mar 2026 14:34:25 +0000 Manifest this update: Tue 24 Mar 2026 14:34:25 +0000 Manifest next update: Tue 31 Mar 2026 14:34:25 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: qRhSBv14PyVexKZiaBziOSxzCHVg6HY2k66dPFMzRsU=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: Z7MnSNSHBqpmgGDUQHMm4xL2DZm8ZBR3qNJ9ominL6g=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: a8UAQgdr5YefPf6e/FxqB3qO2kRWk0And4FOBUzigKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13624 (0x3538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Mar 24 14:34:25 2026 GMT Not After : Mar 31 14:34:25 2026 GMT Subject: CN=69c2a0f1-afab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:39:e3:48:50:07:41:29:11:b3:90:05:29: b3:a2:f4:19:4a:4c:5f:ce:e2:ff:da:de:68:e4:c6: 9c:2c:08:5f:8b:1f:cd:aa:ce:62:6c:54:13:5d:88: 0d:c5:4b:a7:f0:65:60:ec:8c:8b:fc:1c:57:77:49: ed:49:6b:fb:23:84:3f:7a:05:f9:5f:64:f7:05:39: de:1b:e1:ad:b5:84:89:f5:6b:c8:7f:7b:11:f1:3c: fb:f8:6f:9c:a8:2e:5c:96:87:3e:39:7b:87:2e:02: 68:3e:6a:25:f1:98:36:c1:30:ef:2a:c3:43:fc:a2: 20:36:26:01:4f:1c:2b:2d:22:da:6f:80:f3:aa:39: 9d:d5:f4:70:2a:6d:59:62:26:93:99:53:4e:c4:bd: fd:24:b3:53:58:60:52:5f:a7:23:5a:a0:9b:3a:21: 71:fe:63:2d:4e:77:a0:6d:6c:2f:a0:64:54:bc:cf: 0d:b6:98:79:08:52:61:ae:a0:be:cc:37:6e:ee:d6: 5e:c3:35:fa:91:b2:24:09:d6:1c:07:fa:60:0e:18: 47:b1:a8:a0:83:90:6f:e7:ae:45:93:45:66:e1:a7: 5a:26:80:c7:c6:a4:e3:81:d2:30:9b:70:11:b3:aa: 1a:40:6f:5f:c3:5c:50:11:a1:f0:f2:ce:6a:8c:bf: b8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4F:07:24:5B:30:FC:BB:ED:81:99:58:8E:F5:F2:AA:0B:CE:8A:0E X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:af:7f:b6:af:d7:b6:f0:98:fa:0e:35:76:65:73:2a:92:65: e5:44:64:00:46:5f:7f:a8:d2:b6:35:97:94:73:fc:48:94:dd: 33:b5:f3:cf:ed:a3:d6:b8:52:98:e0:87:7c:f9:cf:58:80:29: d1:89:91:c4:ae:5a:9c:d4:68:d2:1b:c6:d5:b3:76:63:c0:eb: 9f:c5:d2:7a:44:35:aa:20:d8:23:74:b4:c3:ae:52:a4:4e:8a: 18:92:b0:91:51:b3:98:26:68:00:a8:b7:b0:08:7a:55:36:16: 52:d2:ce:86:c9:48:ce:5d:06:5c:94:eb:8b:fd:4d:a4:45:4b: b8:b0:bf:f7:f3:d4:12:75:c3:ea:fe:d4:33:38:04:ce:94:46: b9:0d:91:b1:75:31:aa:58:0c:c4:25:fd:ab:04:e9:e6:1e:27: fa:8c:51:f6:4c:f6:83:03:aa:83:53:ee:52:73:55:ee:a9:ff: 1d:61:b1:c4:14:02:12:d1:2f:a7:94:61:9d:8f:2a:fb:76:38: 43:08:8b:9d:df:f3:34:92:d1:73:08:be:b2:e4:2f:1d:d4:b1: a5:a0:66:ac:08:e8:5e:bf:f4:3f:f8:96:2f:51:38:66:7e:0b: a0:21:77:82:cb:2f:30:36:53:b9:4a:99:0a:ca:a5:c7:9a:7f: 65:37:bc:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjYwMzI0MTQzNDI1WhcNMjYwMzMxMTQzNDI1WjAYMRYwFAYD VQQDEw02OWMyYTBmMS1hZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJM540hQB0EpEbOQBSmzovQZSkxfzuL/2t5o5MacLAhfix/Nqs5ibFQTXYgN xUun8GVg7IyL/BxXd0ntSWv7I4Q/egX5X2T3BTneG+GttYSJ9WvIf3sR8Tz7+G+c qC5cloc+OXuHLgJoPmol8Zg2wTDvKsND/KIgNiYBTxwrLSLab4Dzqjmd1fRwKm1Z YiaTmVNOxL39JLNTWGBSX6cjWqCbOiFx/mMtTnegbWwvoGRUvM8Ntph5CFJhrqC+ zDdu7tZewzX6kbIkCdYcB/pgDhhHsaigg5Bv565Fk0Vm4adaJoDHxqTjgdIwm3AR s6oaQG9fw1xQEaHw8s5qjL+4oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPhPByRb MPy77YGZWI718qoLzooOMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC69/tq/XtvCY+g41dmVzKpJl5URkAEZff6jStjWXlHP8SJTdM7Xzz+2j1rhS mOCHfPnPWIAp0YmRxK5anNRo0hvG1bN2Y8Drn8XSekQ1qiDYI3S0w65SpE6KGJKw kVGzmCZoAKi3sAh6VTYWUtLOhslIzl0GXJTri/1NpEVLuLC/9/PUEnXD6v7UMzgE zpRGuQ2RsXUxqlgMxCX9qwTp5h4n+oxR9kz2gwOqg1PuUnNV7qn/HWGxxBQCEtEv p5RhnY8q+3Y4QwiLnd/zNJLRcwi+suQvHdSxpaBmrAjoXr/0P/iWL1E4Zn4LoCF3 gssvMDZTuUqZCsqlx5p/ZTe8mQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:50 2026 by rpki-client