$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json) Hash identifier: kXOzUyApJldrJkfX4xI+8Y8kEUl+7vztcW/es9RyO3c= Subject key identifier: B1:57:75:4F:40:6A:0A:92:86:5A:99:E0:0A:41:6E:36:AB:52:33:7B Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 085E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft Manifest number: 0853 Signing time: Tue 12 May 2026 20:55:45 +0000 Manifest this update: Tue 12 May 2026 20:55:44 +0000 Manifest next update: Tue 19 May 2026 20:55:44 +0000 Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: wRRO/WXjkiXHRxVIFy3JfsdQ4ZFHyn8zfR+B/76g13U=) 2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: qtMYIEnbiq7hnTXu83dyb1pR6Ew8tkioJCqNAvjo/dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2142 (0x85e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: May 12 20:55:44 2026 GMT Not After : May 19 20:55:44 2026 GMT Subject: CN=6a0393d0-0fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:2c:01:a0:0d:55:39:fe:ad:0e:d1:4a:4b: e7:0f:c1:06:b3:94:1c:28:39:01:83:3c:62:29:f6: 7f:1a:ba:02:51:95:1a:9d:2a:d3:88:2d:05:61:28: 17:fc:ce:fa:c2:d1:61:1c:8c:61:46:48:2a:8d:bc: 81:00:2e:1b:6e:67:9d:3e:12:19:25:58:07:7d:8a: 78:7e:03:db:58:1b:30:ce:e1:d3:ef:bd:be:67:15: 45:a9:bd:10:94:0e:44:30:7a:45:05:d3:7d:45:9a: ac:90:9c:ab:65:4d:f1:61:f8:05:cf:79:48:16:72: cb:23:f1:88:ef:aa:4c:f6:ec:4b:a0:72:e4:b1:dd: e9:76:95:22:57:a4:8b:14:f7:f6:10:bc:7f:a9:56: 76:4b:04:a7:08:f6:89:79:8a:e5:26:a4:75:1b:25: 06:76:e8:9f:1f:97:2e:08:ef:c2:d7:cd:07:2d:c7: 06:9c:ec:5c:bc:c6:70:ec:d7:44:64:4f:2c:09:43: 3b:a1:74:85:c1:35:ed:d5:77:d0:26:2f:a6:04:db: 86:02:01:83:81:29:34:72:1a:08:19:06:43:31:15: d9:f9:9a:be:a5:5c:46:07:19:46:8c:56:8d:8e:5b: 5e:11:58:36:7d:a9:20:12:88:fc:0f:b9:e4:09:c4: 95:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:57:75:4F:40:6A:0A:92:86:5A:99:E0:0A:41:6E:36:AB:52:33:7B X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:68:b4:c1:b9:d0:39:de:14:97:91:eb:7a:af:5d:6d:19:05: 9f:ca:5d:2e:8a:19:dd:c2:b5:f4:3c:1b:dc:c3:07:8a:55:65: 27:d0:01:8d:f1:df:66:5e:ff:b3:50:dc:e2:3f:31:93:dc:d7: 25:f4:af:c5:91:04:bb:1a:e8:9c:b5:10:8a:cd:e0:43:37:78: a3:ae:34:10:76:72:3d:79:ff:0c:80:49:b1:b6:02:d2:4d:2d: 4f:4c:d8:8f:db:a8:97:22:2d:56:83:69:22:31:4e:f3:af:c4: eb:6c:15:2a:79:81:f5:1b:76:ae:5d:8c:a3:e2:83:aa:d7:eb: 93:f6:55:0a:57:d5:73:67:0f:a9:d3:85:8e:98:75:4a:9a:16: dc:91:4a:03:13:62:55:05:5c:9b:a8:3d:2f:df:99:08:c6:87: b7:fb:4c:34:c5:e2:56:dd:52:a6:db:17:2f:88:7c:fe:4b:89: 06:4c:bc:fb:d7:75:be:d1:de:ec:de:6d:a1:89:8b:17:93:bd: 2d:d8:65:75:ae:b8:36:7b:31:de:58:2d:ac:a2:05:90:c9:f1: 91:8c:c8:8b:b3:fc:9b:01:3e:19:bb:07:c6:ee:99:77:3a:f4: ae:68:c9:77:b8:2c:d1:d1:26:71:4c:54:25:c6:0a:0e:50:1e: ef:61:58:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjYwNTEyMjA1NTQ0WhcNMjYwNTE5MjA1NTQ0WjAYMRYwFAYD VQQDEw02YTAzOTNkMC0wZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusAsAaANVTn+rQ7RSkvnD8EGs5QcKDkBgzxiKfZ/GroCUZUanSrTiC0FYSgX /M76wtFhHIxhRkgqjbyBAC4bbmedPhIZJVgHfYp4fgPbWBswzuHT772+ZxVFqb0Q lA5EMHpFBdN9RZqskJyrZU3xYfgFz3lIFnLLI/GI76pM9uxLoHLksd3pdpUiV6SL FPf2ELx/qVZ2SwSnCPaJeYrlJqR1GyUGduifH5cuCO/C180HLccGnOxcvMZw7NdE ZE8sCUM7oXSFwTXt1XfQJi+mBNuGAgGDgSk0choIGQZDMRXZ+Zq+pVxGBxlGjFaN jlteEVg2fakgEoj8D7nkCcSVzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLFXdU9A agqShlqZ4ApBbjarUjN7MB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD Tld4ZmlCY0JqejJmSUo5QjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAWi0wbnQOd4Ul5Hreq9dbRkFn8pdLooZ3cK19Dwb3MMHilVlJ9ABjfHfZl7/ s1Dc4j8xk9zXJfSvxZEEuxronLUQis3gQzd4o640EHZyPXn/DIBJsbYC0k0tT0zY j9uolyItVoNpIjFO86/E62wVKnmB9Rt2rl2Mo+KDqtfrk/ZVClfVc2cPqdOFjph1 SpoW3JFKAxNiVQVcm6g9L9+ZCMaHt/tMNMXiVt1SptsXL4h8/kuJBky8+9d1vtHe 7N5toYmLF5O9Ldhlda64Nnsx3lgtrKIFkMnxkYzIi7P8mwE+GbsHxu6Zdzr0rmjJ d7gs0dEmcUxUJcYKDlAe72FYFw== -----END CERTIFICATE-----Generated at Wed May 13 04:35:20 2026 by rpki-client