$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: D8NrFUFVce60ypanpWnuwo/SiPRlV+wBeP1n2sVifbY= Subject key identifier: 86:1D:04:63:D5:7D:AE:DD:0B:7A:0F:F5:3C:90:37:41:07:AE:75:1E Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 348E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 3485 Signing time: Wed 14 May 2025 14:34:57 +0000 Manifest this update: Wed 14 May 2025 14:34:56 +0000 Manifest next update: Wed 21 May 2025 14:34:56 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: yBOlHHQjaRbLzDuTaPTDC9FzkBhVM5muDokarmwbido=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: LYYe0/ugE0YWppDV9+N/oSDl4IKiJUQFEaZM88DJJ/s=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: JwlADxU15y3Ux/pBiI3TitQwzPcxeHG3v1ZhXPEpRug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13454 (0x348e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: May 14 14:34:56 2025 GMT Not After : May 21 14:34:56 2025 GMT Subject: CN=6824aa10-e510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:07:3b:89:76:8d:c2:03:87:f7:0b:de:28:b8: 6c:52:aa:14:25:21:75:e1:ec:fc:e6:e0:82:c6:00: 4f:e4:75:7c:4e:56:53:91:5b:e7:98:b9:48:72:71: 93:52:a1:aa:0c:30:ff:e1:87:3f:d8:50:4b:f9:33: d3:1d:d5:41:fa:a1:cd:a0:2b:46:8d:93:a6:7b:86: 61:e6:8d:14:76:29:88:07:1c:62:44:e4:2d:a9:34: 4f:5a:3e:72:7c:2f:f8:85:8a:8a:07:4a:7d:25:d8: c8:fa:8d:65:5c:ea:c7:06:40:ab:aa:4f:bf:29:6e: b9:e1:d2:49:74:9d:e2:1d:a5:f2:93:d1:1d:f5:14: fd:e2:cd:c6:f9:3b:fd:f4:34:d6:35:30:f6:a2:b5: f0:95:56:40:3e:b0:e3:b9:d2:97:57:af:34:e9:52: 40:64:37:74:a6:b2:a6:01:2e:de:da:b1:92:15:96: 53:0a:b8:3e:9e:c0:fd:2a:3e:cf:a7:46:27:2f:1d: 6c:7a:31:a8:a4:31:a7:c9:1b:1a:cc:68:7f:d4:f7: 65:32:0b:7f:94:09:f8:f1:a1:4c:fe:45:bc:eb:94: 00:15:8a:b0:f3:fb:8a:1b:b5:b5:3a:e2:56:f7:75: 05:db:fb:99:c2:97:38:72:35:4a:95:71:fc:49:97: 05:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1D:04:63:D5:7D:AE:DD:0B:7A:0F:F5:3C:90:37:41:07:AE:75:1E X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:7b:8b:a9:59:07:88:fd:a9:29:91:c7:60:56:4f:a6:b0:97: 9f:45:7a:85:ab:d4:bc:b7:2d:11:98:fd:28:1c:01:de:53:39: d4:3e:11:26:b0:69:e6:5d:5d:7d:46:c9:b5:c7:2e:5e:94:c4: b5:e7:63:58:26:e1:bc:c5:b0:4a:d6:06:b0:f5:02:6e:b9:28: bf:73:e4:0e:02:9f:f3:65:f9:f4:97:2f:24:a1:af:7d:cd:fa: dd:e4:ee:56:53:25:46:be:c8:4b:d4:3c:d3:1e:a5:89:a6:30: da:d1:59:99:12:86:77:0d:05:2c:f2:b4:dc:95:4d:f2:89:24: b3:2e:53:02:8e:e4:0f:4b:dc:f9:1a:b5:2e:05:2d:2f:31:e0: 25:25:f9:4a:9c:dd:c0:4f:d2:40:0c:b2:93:44:ef:e0:17:89: df:9c:2a:19:ea:a9:2b:32:59:4f:45:06:01:23:54:da:4f:1a: 04:3f:db:f0:1d:53:df:de:5e:fc:37:14:2a:5e:b9:d0:f3:cb: 2a:a5:4e:87:03:72:95:a4:f6:83:25:bd:d0:7b:76:c6:af:1b: 23:1e:2d:a3:48:73:98:d5:19:d1:57:1f:91:4a:dc:6a:cb:2e: 9f:ec:82:eb:c8:c1:dd:b9:4c:d3:f9:21:0d:55:41:75:f4:4d: 68:04:8e:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjUwNTE0MTQzNDU2WhcNMjUwNTIxMTQzNDU2WjAYMRYwFAYD VQQDEw02ODI0YWExMC1lNTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAc7iXaNwgOH9wveKLhsUqoUJSF14ez85uCCxgBP5HV8TlZTkVvnmLlIcnGT UqGqDDD/4Yc/2FBL+TPTHdVB+qHNoCtGjZOme4Zh5o0UdimIBxxiROQtqTRPWj5y fC/4hYqKB0p9JdjI+o1lXOrHBkCrqk+/KW654dJJdJ3iHaXyk9Ed9RT94s3G+Tv9 9DTWNTD2orXwlVZAPrDjudKXV6806VJAZDd0prKmAS7e2rGSFZZTCrg+nsD9Kj7P p0YnLx1sejGopDGnyRsazGh/1PdlMgt/lAn48aFM/kW865QAFYqw8/uKG7W1OuJW 93UF2/uZwpc4cjVKlXH8SZcFSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYdBGPV fa7dC3oP9TyQN0EHrnUeMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCve4upWQeI/akpkcdgVk+msJefRXqFq9S8ty0RmP0oHAHeUznUPhEm sGnmXV19Rsm1xy5elMS152NYJuG8xbBK1gaw9QJuuSi/c+QOAp/zZfn0ly8koa99 zfrd5O5WUyVGvshL1DzTHqWJpjDa0VmZEoZ3DQUs8rTclU3yiSSzLlMCjuQPS9z5 GrUuBS0vMeAlJflKnN3AT9JADLKTRO/gF4nfnCoZ6qkrMllPRQYBI1TaTxoEP9vw HVPf3l78NxQqXrnQ88sqpU6HA3KVpPaDJb3Qe3bGrxsjHi2jSHOY1RnRVx+RStxq yy6f7ILryMHduUzT+SENVUF19E1oBI5U -----END CERTIFICATE-----Generated at Fri May 16 12:41:10 2025 by rpki-client