$ rpki-client -vvvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: OtKQEHMwhCk80uLzkfk3n6vwUZ8vTHLxy0MZ6QRwS5Y= Subject key identifier: 37:81:73:F8:60:5F:86:8D:01:9C:CB:A6:F8:B5:25:B3:45:70:7F:F3 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 359B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 358A Signing time: Sat 26 Sep 2026 14:34:55 +0000 Manifest this update: Sat 26 Sep 2026 14:34:55 +0000 Manifest next update: Sat 03 Oct 2026 14:34:55 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: wmDoHykMbS7RekBbwg7D9fMmlCXRIHFaxTe4MASV7js=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: Z7MnSNSHBqpmgGDUQHMm4xL2DZm8ZBR3qNJ9ominL6g=) 3: 532313EE89FB11F1A2C97EB45E11F970.roa (hash: ONFD8eO0BeKQA05+Fmoa39A39KmAUsRQvy6sAW3EDUA=) 4: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: a8UAQgdr5YefPf6e/FxqB3qO2kRWk0And4FOBUzigKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13723 (0x359b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Sep 26 14:34:55 2026 GMT Not After : Oct 3 14:34:55 2026 GMT Subject: CN=6ab7d80f-dd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0e:eb:2d:49:ef:f5:3b:50:28:6b:89:54:93: b1:ee:f5:76:00:ad:a0:5c:6e:ee:11:9e:e2:f8:72: 02:28:b8:5d:0a:f3:51:98:23:3d:22:77:ae:9b:13: fe:fe:2f:4a:ce:fe:79:02:af:a0:77:aa:4b:cd:3e: 03:b3:0b:68:84:32:9b:dd:ba:e8:e7:22:ef:4e:3f: 51:f3:95:83:a5:df:98:39:c9:4a:ca:85:53:8f:f2: 1b:aa:e6:9b:80:74:ed:91:d4:86:df:f7:15:d2:1b: a7:27:b9:c7:30:18:93:85:94:33:77:38:ea:c3:95: db:58:23:c2:32:42:e3:0a:88:25:00:92:69:10:44: f1:ec:d4:53:70:0e:68:29:80:00:0d:f6:54:79:9b: 5a:ae:75:de:e2:2e:b8:f2:cf:17:8b:0c:82:16:4f: e0:91:4d:95:c1:76:85:c4:66:e3:bd:43:31:6e:8b: cd:d0:fd:e5:5f:4c:ee:91:84:56:f3:66:18:03:24: 5e:94:c9:14:91:a3:ab:76:d1:5d:b8:cd:c8:79:21: b7:ff:c0:ad:16:f6:85:3a:67:c4:94:af:30:02:4d: 9a:4a:ae:be:d7:cc:50:23:8b:19:69:39:b4:19:94: f5:43:56:cf:94:ef:2c:c2:aa:bb:f0:0d:8d:27:d1: b4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:81:73:F8:60:5F:86:8D:01:9C:CB:A6:F8:B5:25:B3:45:70:7F:F3 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:65:05:6d:4d:27:cd:02:74:70:65:8f:23:63:f2:f5:39:e0: 05:72:7f:a3:a5:d2:0c:3d:b7:fd:dc:a0:55:5d:55:15:08:1a: c9:77:ec:94:dc:85:5d:3c:a0:cb:6a:d8:db:99:0c:ac:0f:68: 7e:23:8a:b5:b1:4c:a6:8f:6d:2b:ac:db:a0:c3:17:9d:80:d1: 32:29:59:3d:1b:14:1c:4a:6b:5f:87:88:4c:a8:31:9b:f9:36: af:c2:75:20:7d:be:43:ba:88:cb:f0:93:dc:31:00:b6:df:88: 75:45:27:34:78:04:86:f3:6f:e6:45:42:fe:c3:99:3a:2d:30: b5:7a:14:ae:55:02:7b:04:9e:d4:f1:52:0a:dd:4e:98:92:df: e9:f0:17:68:63:15:1e:cd:b3:b5:19:36:7f:ee:f7:c3:20:88: 37:2e:97:c4:38:32:a7:a6:cd:98:f9:ab:1b:cf:92:51:87:c1: ef:9d:3c:0c:d5:26:d5:91:a6:5d:91:56:0c:e1:a7:38:90:19: 3a:27:4a:ee:81:c4:9a:ad:83:70:9a:8b:8b:26:a7:d6:90:bb: b4:0c:36:52:8a:d2:33:d5:06:e6:d2:ee:2a:4f:c2:d3:0a:3a: 77:fc:a7:4c:a4:ca:72:74:99:5a:db:61:68:4c:1c:c2:68:52: cb:a1:9a:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjYwOTI2MTQzNDU1WhcNMjYxMDAzMTQzNDU1WjAYMRYwFAYD VQQDEw02YWI3ZDgwZi1kZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0A7rLUnv9TtQKGuJVJOx7vV2AK2gXG7uEZ7i+HICKLhdCvNRmCM9IneumxP+ /i9Kzv55Aq+gd6pLzT4DswtohDKb3bro5yLvTj9R85WDpd+YOclKyoVTj/Ibquab gHTtkdSG3/cV0hunJ7nHMBiThZQzdzjqw5XbWCPCMkLjCoglAJJpEETx7NRTcA5o KYAADfZUeZtarnXe4i648s8XiwyCFk/gkU2VwXaFxGbjvUMxbovN0P3lX0zukYRW 82YYAyRelMkUkaOrdtFduM3IeSG3/8CtFvaFOmfElK8wAk2aSq6+18xQI4sZaTm0 GZT1Q1bPlO8swqq78A2NJ9G0PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDeBc/hg X4aNAZzLpvi1JbNFcH/zMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD2UFbU0nzQJ0cGWPI2Py9TngBXJ/o6XSDD23/dygVV1VFQgayXfslNyFXTyg y2rY25kMrA9ofiOKtbFMpo9tK6zboMMXnYDRMilZPRsUHEprX4eITKgxm/k2r8J1 IH2+Q7qIy/CT3DEAtt+IdUUnNHgEhvNv5kVC/sOZOi0wtXoUrlUCewSe1PFSCt1O mJLf6fAXaGMVHs2ztRk2f+73wyCINy6XxDgyp6bNmPmrG8+SUYfB7508DNUm1ZGm XZFWDOGnOJAZOidK7oHEmq2DcJqLiyan1pC7tAw2UorSM9UG5tLuKk/C0wo6d/yn TKTKcnSZWtthaEwcwmhSy6Ga7w== -----END CERTIFICATE-----Generated at Sun Sep 27 08:34:49 2026 by rpki-client