$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: B7xBRmIqsTR6QijHgx8bZU6RMIMVfPMStWdp0vsBIOI= Subject key identifier: A3:FF:36:AD:A9:C9:A9:D0:98:0C:86:2C:CB:04:E1:10:54:BE:41:02 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 34A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 349D Signing time: Wed 02 Jul 2025 14:36:16 +0000 Manifest this update: Wed 02 Jul 2025 14:36:15 +0000 Manifest next update: Wed 09 Jul 2025 14:36:15 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: vUmqstgheVfTB6aydu3roULsX+9ZtqL6VRddUn3bqQA=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: LYYe0/ugE0YWppDV9+N/oSDl4IKiJUQFEaZM88DJJ/s=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: JwlADxU15y3Ux/pBiI3TitQwzPcxeHG3v1ZhXPEpRug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13478 (0x34a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Jul 2 14:36:15 2025 GMT Not After : Jul 9 14:36:15 2025 GMT Subject: CN=686543e0-eb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bb:55:81:75:52:f1:a5:14:9e:4f:ec:8f:22: 78:16:8d:80:ae:13:94:79:ef:c4:e7:2c:b3:35:5c: 77:45:e3:d5:43:7b:c1:5c:82:c6:61:5f:f6:12:86: c7:a6:23:ff:70:be:02:15:f6:b3:05:22:ee:5e:d6: 93:c5:96:ba:9b:fe:db:76:37:54:5e:11:0c:76:d0: 06:33:76:e7:cf:87:db:73:8d:15:14:2b:a9:5e:5a: 48:f0:08:33:be:bb:ed:d9:10:63:d0:8a:ba:5c:fa: 6c:d6:3a:c7:8f:62:6a:de:3f:44:52:f9:38:2c:14: bf:30:3c:c0:77:16:65:e0:0e:3b:ff:9f:9d:61:8d: 4d:e0:51:af:68:29:1e:c1:67:74:ac:4d:27:6d:72: ce:43:de:66:a2:0a:1b:6f:4b:b8:89:e6:99:d1:b4: 90:69:28:d0:ac:42:5c:1d:66:ce:aa:02:35:56:d9: 0c:d7:86:14:a8:59:f6:07:76:09:67:fb:20:5d:29: 91:5c:5d:35:f0:18:85:d7:38:59:47:47:9b:61:5f: 10:5d:9a:d9:9f:ac:dd:52:77:5f:cf:bf:88:af:f9: 75:7e:ca:79:af:8a:f0:09:cc:c2:f6:9f:58:02:5f: 89:53:d5:36:64:76:75:93:8e:96:e3:c3:17:28:1b: f3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FF:36:AD:A9:C9:A9:D0:98:0C:86:2C:CB:04:E1:10:54:BE:41:02 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:fd:34:62:76:c7:ca:2d:ed:19:0d:13:20:77:f3:e2:c9:67: 7d:0f:f0:78:58:18:48:2d:eb:71:10:84:15:3f:a3:c5:43:a7: 59:02:dd:fe:c3:13:96:e0:74:82:69:d7:8c:4c:69:90:8c:25: 37:e5:04:b4:ae:bd:c4:dc:5d:70:96:b0:9f:37:ca:08:c2:18: d6:9d:71:6c:b5:93:8d:10:8d:2b:9b:a6:60:f3:68:3d:57:e5: 12:68:2c:c9:3b:5b:cb:26:ce:cc:d3:1f:19:f4:44:98:16:4a: 64:d2:66:e8:e6:8f:d8:bd:99:76:f1:78:62:e5:43:7b:4b:61: d6:7d:fd:3f:e1:60:1d:57:dd:0d:11:4a:c3:ae:be:21:3f:6e: 67:4f:0d:f3:de:c6:0b:c1:b2:3f:43:a5:92:c7:28:b7:30:1e: 39:d5:84:dd:b8:aa:54:ec:f5:c9:18:fb:89:ca:5d:47:12:2b: da:35:74:90:e1:f1:e1:40:0b:75:66:5d:2d:6d:0a:87:b0:dc: e5:0a:76:f4:74:b1:91:e5:14:ac:3d:8e:9e:43:67:65:4b:6e: 78:27:79:8e:3b:c9:cd:08:fa:df:1c:2f:c6:e7:cb:c3:b7:fd: bf:b1:dd:75:e0:96:c1:e9:49:41:6e:26:8b:c5:50:71:fd:2c: 41:36:b3:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjUwNzAyMTQzNjE1WhcNMjUwNzA5MTQzNjE1WjAYMRYwFAYD VQQDEw02ODY1NDNlMC1lYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8btVgXVS8aUUnk/sjyJ4Fo2ArhOUee/E5yyzNVx3RePVQ3vBXILGYV/2EobH piP/cL4CFfazBSLuXtaTxZa6m/7bdjdUXhEMdtAGM3bnz4fbc40VFCupXlpI8Agz vrvt2RBj0Iq6XPps1jrHj2Jq3j9EUvk4LBS/MDzAdxZl4A47/5+dYY1N4FGvaCke wWd0rE0nbXLOQ95mogobb0u4ieaZ0bSQaSjQrEJcHWbOqgI1VtkM14YUqFn2B3YJ Z/sgXSmRXF018BiF1zhZR0ebYV8QXZrZn6zdUndfz7+Ir/l1fsp5r4rwCczC9p9Y Al+JU9U2ZHZ1k46W48MXKBvzFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKP/Nq2p yanQmAyGLMsE4RBUvkECMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG/TRidsfKLe0ZDRMgd/PiyWd9D/B4WBhILetxEIQVP6PFQ6dZAt3+ wxOW4HSCadeMTGmQjCU35QS0rr3E3F1wlrCfN8oIwhjWnXFstZONEI0rm6Zg82g9 V+USaCzJO1vLJs7M0x8Z9ESYFkpk0mbo5o/YvZl28Xhi5UN7S2HWff0/4WAdV90N EUrDrr4hP25nTw3z3sYLwbI/Q6WSxyi3MB451YTduKpU7PXJGPuJyl1HEivaNXSQ 4fHhQAt1Zl0tbQqHsNzlCnb0dLGR5RSsPY6eQ2dlS254J3mOO8nNCPrfHC/G58vD t/2/sd114JbB6UlBbiaLxVBx/SxBNrPd -----END CERTIFICATE-----Generated at Thu Jul 3 08:57:34 2025 by rpki-client