$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: zEjS0p+5LlH5UqgRr7aYwrQ6mBZXCXmDtn82y/SrSCg= Subject key identifier: C8:49:6E:0E:4E:B7:A0:08:89:37:C6:48:D7:64:94:29:A1:A4:36:48 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 3575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 3566 Signing time: Wed 22 Jul 2026 14:36:14 +0000 Manifest this update: Wed 22 Jul 2026 14:36:13 +0000 Manifest next update: Wed 29 Jul 2026 14:36:13 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: vzptuNkpk500Bf/xFLYVj4WegxBzyUOcakCN716vgmI=) 2: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: a8UAQgdr5YefPf6e/FxqB3qO2kRWk0And4FOBUzigKo=) 3: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: Z7MnSNSHBqpmgGDUQHMm4xL2DZm8ZBR3qNJ9ominL6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13685 (0x3575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Jul 22 14:36:13 2026 GMT Not After : Jul 29 14:36:13 2026 GMT Subject: CN=6a60d55e-e971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5f:44:d5:d7:61:ef:49:b4:df:19:3c:2b:88: a7:bb:8a:2e:d3:d2:2d:b9:e7:0d:11:19:04:ca:91: 1a:42:24:2c:f8:bc:51:88:b1:2f:0f:75:4d:49:ed: 97:2f:80:92:4c:87:d7:7b:8a:6b:64:0a:fa:34:14: 20:56:b1:2a:14:47:f2:ef:3b:04:8d:c5:4a:fc:d7: 45:31:ff:c0:42:71:6c:a4:94:f9:79:08:df:2c:3c: c4:b0:a8:19:c1:2e:72:f9:88:e6:fd:f8:08:9c:f7: 5f:e1:e9:0c:1b:fc:40:1c:a2:33:8b:37:0b:28:26: cf:60:5e:10:a2:4e:b1:c2:c9:32:77:d4:0d:8f:99: 2f:84:88:05:69:9b:3c:73:07:71:8d:c6:1f:15:35: 11:dc:24:15:3c:23:f3:0f:10:8c:cd:91:6e:4f:c2: 33:ca:77:9b:d0:99:50:1f:25:ba:cd:95:9c:34:33: ef:e6:20:00:77:74:36:61:ca:17:7e:2f:81:bd:66: 03:44:e9:56:29:38:3f:fe:98:6a:6e:bd:6e:dc:7c: 0c:03:1a:3b:39:9b:cd:c5:77:bd:e2:20:42:bc:54: fb:b8:c0:8f:78:b2:5a:31:0f:29:a8:76:79:04:e5: cb:d9:3b:16:3c:2f:fb:f8:0c:a0:1c:20:7f:78:db: a9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:49:6E:0E:4E:B7:A0:08:89:37:C6:48:D7:64:94:29:A1:A4:36:48 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:fd:76:63:37:ea:56:3d:91:6b:b3:ca:d3:b4:7b:ca:b2:59: 2c:30:35:cc:62:81:b5:74:27:3c:0d:94:a7:b8:cf:64:97:13: 3e:47:02:80:95:fb:a0:15:a6:4d:9c:55:d0:1c:c0:d0:8f:e9: 9d:ef:c4:2f:e7:56:8a:d6:5e:4f:3e:49:da:e8:c3:c9:ac:10: e0:5a:d3:20:cd:35:32:4d:f2:a0:75:20:0b:1f:f5:6e:93:e2: 87:c5:9d:ce:8a:d4:63:6d:98:1b:da:78:5b:cc:5e:1c:8c:b1: 0c:76:92:ad:66:11:64:8b:44:f0:ec:93:62:31:86:35:e6:c1: 0e:84:0d:f5:01:5d:f6:87:aa:fc:18:b0:6e:97:07:12:8b:ca: 25:65:47:5d:e3:af:32:5a:54:38:a9:71:a9:5b:df:70:7b:e0: 7c:8f:7c:35:d6:65:93:60:87:95:ce:ee:21:9b:c9:cb:53:9a: 66:b3:26:d6:f7:a0:b0:54:95:8c:e8:54:31:b2:20:20:bd:0d: ab:40:1c:a9:bc:b6:22:01:b2:c6:e3:95:e6:53:b0:f9:87:2b: 3b:ad:d8:d3:a8:c3:ca:f6:5f:bc:af:8b:d8:f1:83:4f:e2:3f: 55:92:86:a4:f7:72:29:31:f4:59:32:d1:e3:c2:d7:da:dd:1f: ec:da:ac:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjYwNzIyMTQzNjEzWhcNMjYwNzI5MTQzNjEzWjAYMRYwFAYD VQQDEw02YTYwZDU1ZS1lOTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAll9E1ddh70m03xk8K4inu4ou09ItuecNERkEypEaQiQs+LxRiLEvD3VNSe2X L4CSTIfXe4prZAr6NBQgVrEqFEfy7zsEjcVK/NdFMf/AQnFspJT5eQjfLDzEsKgZ wS5y+Yjm/fgInPdf4ekMG/xAHKIzizcLKCbPYF4Qok6xwskyd9QNj5kvhIgFaZs8 cwdxjcYfFTUR3CQVPCPzDxCMzZFuT8Izyneb0JlQHyW6zZWcNDPv5iAAd3Q2YcoX fi+BvWYDROlWKTg//phqbr1u3HwMAxo7OZvNxXe94iBCvFT7uMCPeLJaMQ8pqHZ5 BOXL2TsWPC/7+AygHCB/eNupmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhJbg5O t6AIiTfGSNdklCmhpDZIMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARP12YzfqVj2Ra7PK07R7yrJZLDA1zGKBtXQnPA2Up7jPZJcTPkcCgJX7oBWm TZxV0BzA0I/pne/EL+dWitZeTz5J2ujDyawQ4FrTIM01Mk3yoHUgCx/1bpPih8Wd zorUY22YG9p4W8xeHIyxDHaSrWYRZItE8OyTYjGGNebBDoQN9QFd9oeq/BiwbpcH EovKJWVHXeOvMlpUOKlxqVvfcHvgfI98NdZlk2CHlc7uIZvJy1OaZrMm1vegsFSV jOhUMbIgIL0Nq0Acqby2IgGyxuOV5lOw+YcrO63Y06jDyvZfvK+L2PGDT+I/VZKG pPdyKTH0WTLR48LX2t0f7NqsJw== -----END CERTIFICATE-----Generated at Fri Jul 24 10:11:21 2026 by rpki-client