$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json) Hash identifier: zOhTo8rJhj1WCXpR8SEMt5RlyktWpYJ0bWMpyFUmvVU= Subject key identifier: C2:F4:51:90:55:24:08:BD:91:CD:44:7B:5F:82:92:F1:FB:BA:0B:DA Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 07EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft Manifest number: 07E6 Signing time: Sat 18 Oct 2025 22:22:42 +0000 Manifest this update: Sat 18 Oct 2025 22:22:41 +0000 Manifest next update: Sat 25 Oct 2025 22:22:41 +0000 Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: Dq8YSlWypw3ltm8wRHyZwAAzT3cSK4yj25NHc2ekoGE=) 2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: nzgpiC5NFO3V3nVcBmKQWNZmNLyB+jOBtWw1RfrIB+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2031 (0x7ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: Oct 18 22:22:41 2025 GMT Not After : Oct 25 22:22:41 2025 GMT Subject: CN=68f41331-2daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:63:44:fe:e2:a0:69:1d:e8:00:bb:19:89: e8:24:36:6d:2d:09:05:ca:97:2a:70:07:1f:4f:54: d9:bb:e6:9b:9b:9c:5d:f5:5d:05:61:43:f3:ed:c5: 2b:b5:b4:e8:dc:57:cb:dd:79:b2:f1:bf:d1:76:22: 30:53:e6:ea:42:95:44:11:78:bb:74:e6:3a:06:79: c3:20:0a:54:7b:07:3b:cb:29:3d:3c:67:8d:4b:04: b9:c7:ce:5e:1b:ed:a8:b1:55:11:76:ba:89:c6:da: ee:1b:35:df:40:60:be:5c:b9:dd:78:61:83:89:49: a9:1a:a3:7e:2c:78:19:8f:98:f0:08:56:56:88:f6: c3:1e:37:a1:97:3d:fa:fc:47:4a:ca:d9:e3:d3:22: c4:86:c9:08:9a:e1:83:bb:d6:a8:d3:43:6d:37:e6: 05:59:a7:87:8f:35:8b:b0:11:53:5c:70:c9:20:e8: d5:d1:ed:78:67:b1:d0:4d:9e:73:a7:ea:ec:77:27: 9a:11:6e:f7:97:b4:b5:84:40:bd:19:1e:67:83:56: 03:49:bd:35:25:c9:e3:22:94:b3:98:4c:93:ea:1b: b6:52:9b:2c:a3:d9:57:bb:18:63:0f:9c:58:3a:9a: 5e:d1:1d:3f:fe:df:22:97:ce:e3:61:42:40:80:54: 85:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F4:51:90:55:24:08:BD:91:CD:44:7B:5F:82:92:F1:FB:BA:0B:DA X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:08:9e:06:e0:30:20:d6:1b:5d:80:ff:78:93:fc:0e:95:4e: 22:2f:ae:cf:2e:0d:dc:98:e5:7c:fc:bb:91:d3:c0:9a:dc:a2: 79:6c:44:66:9f:4a:74:3d:c8:e0:88:7c:7c:1f:13:f3:b5:98: 71:1b:ab:a9:5c:c1:fa:15:6e:43:92:6b:ca:0e:ea:8d:85:cc: e6:1b:c8:84:64:06:10:a4:04:52:28:6f:ea:e3:41:d8:47:8e: d2:c1:1e:47:88:82:39:4c:1a:90:af:4e:0f:2b:ab:1c:68:d9: 4c:e3:06:52:3e:3d:61:8b:7a:7e:0e:33:60:00:dc:38:23:e1: 30:f0:8c:7a:a3:47:2b:43:a8:6d:40:42:13:35:46:f0:7a:4d: 3a:89:b5:68:c9:c1:c7:6b:49:ba:b9:4a:b6:16:b4:d4:f8:63: 74:e3:d9:b6:ea:e6:78:62:4f:13:c1:8e:c3:31:22:48:ea:14: 9c:ce:b7:15:3d:42:f9:c4:0a:e4:d3:49:f7:2f:ad:73:bd:99: eb:8a:ea:62:96:f3:21:c3:57:f6:cd:07:d2:b7:f5:58:bc:24: 3f:a6:5e:ef:d9:d9:96:a8:2c:27:dd:10:a0:21:61:b4:89:a4: d4:66:8b:93:7f:e1:df:15:9d:13:1b:76:f5:2f:10:0b:03:ed: 3c:eb:54:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjUxMDE4MjIyMjQxWhcNMjUxMDI1MjIyMjQxWjAYMRYwFAYD VQQDEw02OGY0MTMzMS0yZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHtjRP7ioGkd6AC7GYnoJDZtLQkFypcqcAcfT1TZu+abm5xd9V0FYUPz7cUr tbTo3FfL3Xmy8b/RdiIwU+bqQpVEEXi7dOY6BnnDIApUewc7yyk9PGeNSwS5x85e G+2osVURdrqJxtruGzXfQGC+XLndeGGDiUmpGqN+LHgZj5jwCFZWiPbDHjehlz36 /EdKytnj0yLEhskImuGDu9ao00NtN+YFWaeHjzWLsBFTXHDJIOjV0e14Z7HQTZ5z p+rsdyeaEW73l7S1hEC9GR5ng1YDSb01JcnjIpSzmEyT6hu2Upsso9lXuxhjD5xY Oppe0R0//t8il87jYUJAgFSFAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFML0UZBV JAi9kc1Ee1+CkvH7ugvaMB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD Tld4ZmlCY0JqejJmSUo5QjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPCJ4G4DAg1htdgP94k/wOlU4iL67PLg3cmOV8/LuR08Ca3KJ5bERm n0p0PcjgiHx8HxPztZhxG6upXMH6FW5DkmvKDuqNhczmG8iEZAYQpARSKG/q40HY R47SwR5HiII5TBqQr04PK6scaNlM4wZSPj1hi3p+DjNgANw4I+Ew8Ix6o0crQ6ht QEITNUbwek06ibVoycHHa0m6uUq2FrTU+GN049m26uZ4Yk8TwY7DMSJI6hSczrcV PUL5xArk00n3L61zvZnriupilvMhw1f2zQfSt/VYvCQ/pl7v2dmWqCwn3RCgIWG0 iaTUZouTf+HfFZ0TG3b1LxALA+0861Rm -----END CERTIFICATE-----Generated at Mon Oct 20 04:45:36 2025 by rpki-client