$ rpki-client -vvvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: A2zr2oeeGLDBAaBvLTLww9DsBwekzR024Ep3hFM/MME= Subject key identifier: 6C:D1:DB:AF:31:DE:99:BE:90:91:E5:18:E5:5C:BF:31:4C:39:DA:A4 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 359A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 3589 Signing time: Thu 24 Sep 2026 14:34:26 +0000 Manifest this update: Thu 24 Sep 2026 14:34:26 +0000 Manifest next update: Thu 01 Oct 2026 14:34:26 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: qHf39gXnONoLYKUdxgyvETAg14w9ePEq2s9SepGJUIM=) 2: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: a8UAQgdr5YefPf6e/FxqB3qO2kRWk0And4FOBUzigKo=) 3: 532313EE89FB11F1A2C97EB45E11F970.roa (hash: ONFD8eO0BeKQA05+Fmoa39A39KmAUsRQvy6sAW3EDUA=) 4: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: Z7MnSNSHBqpmgGDUQHMm4xL2DZm8ZBR3qNJ9ominL6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13722 (0x359a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Sep 24 14:34:26 2026 GMT Not After : Oct 1 14:34:26 2026 GMT Subject: CN=6ab534f2-f11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:33:d0:11:3d:cf:93:b3:6d:8d:74:ae:70:b6: 1b:7f:d8:38:41:e3:61:45:a2:58:43:b3:6d:a7:fa: 43:9d:85:7d:d6:62:61:28:8a:fe:bb:a6:5d:b6:ba: b4:b4:d7:79:ba:f0:3d:3e:93:0b:fc:3b:56:7d:2c: 0c:08:0a:d8:74:8f:1b:20:91:9f:0c:ee:05:58:11: 80:ff:83:e9:4a:b0:9f:40:ed:c2:09:88:e9:93:3b: a2:b5:c4:f6:14:fd:be:7f:3b:13:03:1b:a4:cd:84: b7:47:a1:f3:91:bc:a6:5b:c1:e9:50:7e:85:f7:8c: e9:cf:cd:b3:b0:b9:6c:25:0f:3e:e6:b9:fa:6c:9a: 09:fa:11:d7:7b:10:6c:be:71:8b:5d:92:9f:e1:ea: a6:0d:d6:83:1e:77:58:bf:cb:e6:0b:9b:4f:0d:13: 94:1f:b9:be:de:af:2c:34:c0:30:54:98:2e:2f:fb: c2:c0:d1:b8:89:d8:a1:47:4c:5e:f7:24:79:b2:59: db:24:2b:ae:a6:1a:84:af:0a:c0:07:b2:36:e7:4b: a4:99:8d:72:f9:2f:8d:af:3d:6a:82:4c:de:b5:2e: 30:82:60:6d:3f:30:eb:3a:98:af:9f:be:5d:10:9d: 9d:df:6f:84:ea:4f:bd:46:f2:51:7a:2a:6e:74:3a: cb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D1:DB:AF:31:DE:99:BE:90:91:E5:18:E5:5C:BF:31:4C:39:DA:A4 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:3d:3a:83:5a:ea:7e:26:94:d9:4d:39:4d:b0:2c:52:05:09: 56:89:a1:66:21:46:b8:15:04:95:30:ba:f0:b2:da:af:7f:73: 2d:b7:e1:67:2d:cb:15:5c:ca:3d:5e:c0:41:05:4a:ec:bc:e4: 3b:b3:ca:09:99:bf:98:89:b2:b2:7c:65:2b:1c:01:14:e8:ff: b9:ed:f3:7b:ec:f9:ae:25:d6:59:82:e5:d6:8b:d0:31:45:0c: 25:9c:af:71:0e:0d:fa:6c:d4:6c:ea:0f:ec:a6:62:6b:ff:2e: 4c:b7:a0:10:a8:1c:d8:db:c8:89:dd:2b:e6:d4:41:c6:70:93: dd:ab:00:19:b7:67:ac:ad:26:57:75:d7:28:42:9d:b9:f1:be: de:f6:e8:4e:aa:f2:3f:94:06:79:1f:34:9b:ba:09:a2:c9:d3: 54:dd:0c:9d:2d:46:4d:d8:76:16:84:28:f0:fd:17:e6:91:b2: 0e:8a:28:45:c0:30:46:78:3e:9d:3b:12:6d:a2:08:0d:b4:72: 6c:fb:85:f7:53:5e:63:e1:67:c9:5b:8b:f2:42:3c:72:f1:c3: f6:40:bc:23:46:2c:5a:eb:94:01:36:e3:d2:56:74:a1:3a:32: 10:5b:d9:30:67:d8:c0:90:e3:4c:7d:4c:30:30:78:44:c7:7f: bc:6e:19:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjYwOTI0MTQzNDI2WhcNMjYxMDAxMTQzNDI2WjAYMRYwFAYD VQQDEw02YWI1MzRmMi1mMTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzPQET3Pk7NtjXSucLYbf9g4QeNhRaJYQ7Ntp/pDnYV91mJhKIr+u6Zdtrq0 tNd5uvA9PpML/DtWfSwMCArYdI8bIJGfDO4FWBGA/4PpSrCfQO3CCYjpkzuitcT2 FP2+fzsTAxukzYS3R6HzkbymW8HpUH6F94zpz82zsLlsJQ8+5rn6bJoJ+hHXexBs vnGLXZKf4eqmDdaDHndYv8vmC5tPDROUH7m+3q8sNMAwVJguL/vCwNG4idihR0xe 9yR5slnbJCuuphqErwrAB7I250ukmY1y+S+Nrz1qgkzetS4wgmBtPzDrOpivn75d EJ2d32+E6k+9RvJReipudDrLPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzR268x 3pm+kJHlGOVcvzFMOdqkMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACD06g1rqfiaU2U05TbAsUgUJVomhZiFGuBUElTC68LLar39zLbfhZy3LFVzK PV7AQQVK7LzkO7PKCZm/mImysnxlKxwBFOj/ue3ze+z5riXWWYLl1ovQMUUMJZyv cQ4N+mzUbOoP7KZia/8uTLegEKgc2NvIid0r5tRBxnCT3asAGbdnrK0mV3XXKEKd ufG+3vboTqryP5QGeR80m7oJosnTVN0MnS1GTdh2FoQo8P0X5pGyDoooRcAwRng+ nTsSbaIIDbRybPuF91NeY+FnyVuL8kI8cvHD9kC8I0YsWuuUATbj0lZ0oToyEFvZ MGfYwJDjTH1MMDB4RMd/vG4Z/A== -----END CERTIFICATE-----Generated at Sat Sep 26 10:27:55 2026 by rpki-client