$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json) Hash identifier: zNX5bDf7A1piAaaykjxD7nAmZMiiy30qt6FKfCrDWnU= Subject key identifier: 46:AC:EA:C7:99:69:5F:5E:EE:EA:27:1B:A8:07:EB:89:57:29:84:BA Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 08A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft Manifest number: 0897 Signing time: Tue 22 Sep 2026 20:29:22 +0000 Manifest this update: Tue 22 Sep 2026 20:29:21 +0000 Manifest next update: Tue 29 Sep 2026 20:29:21 +0000 Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: Is4LjBJbOiWwnKdlJbulexAGU9PrselsVQkrfTEuQP8=) 2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: qtMYIEnbiq7hnTXu83dyb1pR6Ew8tkioJCqNAvjo/dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2210 (0x8a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: Sep 22 20:29:21 2026 GMT Not After : Sep 29 20:29:21 2026 GMT Subject: CN=6ab2e521-b73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:49:20:ca:0a:82:39:b6:d9:2f:bb:b7:3c:7e: 32:a4:1f:56:40:03:1f:6b:28:b5:35:51:68:a6:be: c2:f3:42:e7:b0:07:f6:ff:8f:94:69:6b:04:ed:1d: 1f:c2:55:2a:ef:d3:cf:fd:da:6f:66:12:34:3b:85: 06:60:8b:80:ac:70:d4:7e:d4:5b:21:e0:c3:d9:5c: 5b:08:08:9f:7a:fa:16:99:b1:3e:e0:fb:1a:c9:6a: 4f:71:a3:57:0c:76:5c:a0:1d:69:9e:3b:e8:98:9b: 7f:7e:9a:10:f4:62:9c:fa:79:4f:ae:44:76:86:d4: 33:be:94:a5:31:99:d4:95:ec:80:40:e9:02:ef:38: 2c:43:10:a8:d2:8c:02:88:d2:c0:9a:b5:07:4c:85: 35:4e:d1:fa:97:87:8a:c0:12:74:e4:bc:e6:50:38: 33:4f:8b:87:06:07:bf:e5:f2:1c:b6:52:de:d2:88: 3b:b7:39:33:70:ed:82:c6:ba:c7:a6:30:05:6d:c1: 30:1d:52:98:3b:d4:d9:01:d9:d8:a6:f8:d9:cf:2b: 06:d0:f5:28:b4:ce:75:c7:b4:d3:5c:11:62:1f:07: 56:3f:16:d8:dd:8a:51:3e:59:fe:92:f5:e0:28:d5: bb:17:14:09:08:f8:b0:40:1b:0c:c0:f0:93:ff:26: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AC:EA:C7:99:69:5F:5E:EE:EA:27:1B:A8:07:EB:89:57:29:84:BA X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:88:fe:43:04:48:21:59:de:0b:56:6d:4f:98:3f:f0:54:97: e6:2b:e0:6a:f9:0b:64:b3:02:cf:4b:df:cd:19:8c:13:c5:47: ea:bf:62:0e:44:43:aa:27:95:07:c1:1e:13:d7:ed:86:ef:32: 81:e7:0c:a2:42:08:6f:ab:f0:43:02:a5:0d:8d:56:6d:13:98: 93:c7:44:9b:fd:7e:b2:ea:26:bb:ba:02:3f:ea:70:78:e5:4b: ef:8d:a9:1a:4d:19:3f:81:fd:c4:fe:c0:5d:0f:d9:40:a9:61: b1:6b:b8:59:85:b9:69:76:2e:86:a3:db:36:b8:e3:0a:d9:b1: cf:b7:fe:d4:2b:e4:70:7b:44:93:56:01:92:d8:e7:97:d0:2b: 25:0a:00:79:f2:0e:5d:d5:b2:93:c1:22:35:1d:dd:c2:ce:b9: e8:65:e8:cf:47:2a:d1:57:cc:0e:cf:13:c6:0d:22:8d:54:62: d0:7a:5a:76:d1:d2:a0:6e:ca:51:71:91:78:6a:44:c0:53:2e: bb:9b:65:8f:36:53:9f:c6:85:e7:a7:2c:93:da:8c:8e:17:6b: a1:9c:00:69:7e:8a:a1:25:77:85:7e:93:b9:83:de:db:83:95: fe:75:83:19:05:00:ce:72:1c:ad:0f:86:73:78:0d:a4:aa:2b: d9:35:f7:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjYwOTIyMjAyOTIxWhcNMjYwOTI5MjAyOTIxWjAYMRYwFAYD VQQDEw02YWIyZTUyMS1iNzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUkgygqCObbZL7u3PH4ypB9WQAMfayi1NVFopr7C80LnsAf2/4+UaWsE7R0f wlUq79PP/dpvZhI0O4UGYIuArHDUftRbIeDD2VxbCAifevoWmbE+4PsayWpPcaNX DHZcoB1pnjvomJt/fpoQ9GKc+nlPrkR2htQzvpSlMZnUleyAQOkC7zgsQxCo0owC iNLAmrUHTIU1TtH6l4eKwBJ05LzmUDgzT4uHBge/5fIctlLe0og7tzkzcO2CxrrH pjAFbcEwHVKYO9TZAdnYpvjZzysG0PUotM51x7TTXBFiHwdWPxbY3YpRPln+kvXg KNW7FxQJCPiwQBsMwPCT/ybJQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEas6seZ aV9e7uonG6gH64lXKYS6MB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD Tld4ZmlCY0JqejJmSUo5QjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO4j+QwRIIVneC1ZtT5g/8FSX5ivgavkLZLMCz0vfzRmME8VH6r9iDkRDqieV B8EeE9fthu8ygecMokIIb6vwQwKlDY1WbROYk8dEm/1+suomu7oCP+pweOVL742p Gk0ZP4H9xP7AXQ/ZQKlhsWu4WYW5aXYuhqPbNrjjCtmxz7f+1CvkcHtEk1YBktjn l9ArJQoAefIOXdWyk8EiNR3dws656GXoz0cq0VfMDs8Txg0ijVRi0HpadtHSoG7K UXGReGpEwFMuu5tljzZTn8aF56csk9qMjhdroZwAaX6KoSV3hX6TuYPe24OV/nWD GQUAznIcrQ+Gc3gNpKor2TX3iQ== -----END CERTIFICATE-----Generated at Wed Sep 23 12:45:57 2026 by rpki-client