$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json) Hash identifier: a6MzaXcANCMXOLxlEQzBHVw325erGeKZPHPvEsLauBM= Subject key identifier: DB:C9:DD:BF:FC:A9:B3:2C:43:4F:73:2C:0C:80:65:FF:6E:3B:44:FF Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 07B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft Manifest number: 07AE Signing time: Mon 30 Jun 2025 21:29:13 +0000 Manifest this update: Mon 30 Jun 2025 21:29:12 +0000 Manifest next update: Mon 07 Jul 2025 21:29:12 +0000 Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: ErMxv8EeRDAScdZNAK0ulas4EoxraDJCPuya4iyD9yE=) 2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: nzgpiC5NFO3V3nVcBmKQWNZmNLyB+jOBtWw1RfrIB+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1975 (0x7b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: Jun 30 21:29:12 2025 GMT Not After : Jul 7 21:29:12 2025 GMT Subject: CN=686301a8-0c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:78:d0:2a:c4:e9:6b:46:2e:e3:d6:c4:fb:ce: dd:c9:ea:5a:a0:21:11:c2:d7:ea:5e:b3:37:01:eb: c3:05:f8:d6:4b:83:e9:69:1d:6b:76:c5:ca:7c:ae: cc:f0:30:ab:fd:b6:bb:0c:60:3c:85:4f:70:af:ce: d5:b5:1b:3a:f2:f6:a8:13:f6:99:d5:75:d7:78:11: 2a:75:52:22:23:9a:11:f4:e8:8d:26:42:25:2d:e9: 44:2d:92:89:0d:ff:1d:fc:cf:55:f6:f7:b6:35:42: 6c:36:18:b4:54:56:35:9c:c3:68:8c:c3:ee:e1:4e: 65:8f:29:39:eb:a5:21:40:4a:27:1d:f4:95:c6:82: f4:9b:32:cd:af:ee:03:91:35:57:79:ba:b5:41:c9: 22:df:76:2e:d1:79:45:a1:22:c6:bb:73:20:0e:6e: ad:88:40:89:d2:58:4c:64:9e:fc:5d:bb:81:28:bc: 57:33:70:42:f6:b5:19:a0:b0:b4:c5:2e:38:be:07: a2:f9:53:47:02:11:61:ff:8e:39:79:69:40:03:42: b5:4f:5f:b3:72:d7:71:ad:bc:fd:3b:44:4c:20:89: eb:cf:de:8f:fa:c2:83:65:dc:d8:fd:13:cb:2d:48: 3c:07:c1:fa:31:9e:50:1c:59:e0:3d:1c:8a:3f:e9: af:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C9:DD:BF:FC:A9:B3:2C:43:4F:73:2C:0C:80:65:FF:6E:3B:44:FF X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:5d:33:af:05:2e:4a:42:7d:1d:b2:21:fe:d7:0d:42:ae:34: 67:36:37:e9:91:f7:1f:b3:4a:62:d9:9a:d3:8b:8e:59:ed:d9: 39:8d:ef:dc:e8:f0:4a:f2:60:36:14:0d:98:48:51:75:4c:98: b9:85:f6:9f:58:45:00:ad:21:48:15:5e:f3:69:af:ff:66:35: 0b:0b:24:3a:71:48:17:b3:8c:4a:bd:1c:f4:1c:e6:f0:13:ab: 1b:3e:90:e1:ec:80:1a:ad:b1:17:af:80:6b:4c:b8:f9:e4:71: 13:4f:48:12:6e:e6:92:21:71:5b:22:37:13:53:78:6b:1f:65: aa:06:9a:22:91:c9:de:ca:0b:3c:42:f2:72:07:8e:fe:9f:0f: 20:b6:a5:1a:c4:37:4f:8b:18:18:7b:39:63:63:2c:d8:15:a3: 9f:b8:ce:66:50:f1:a9:69:97:03:0d:90:0e:0e:43:86:6e:80: 6b:59:2d:10:07:c2:2b:6a:fb:05:46:1f:39:47:fa:55:9e:5a: 74:f5:dd:8d:6a:d4:47:cd:2e:a9:fa:4c:99:d9:cf:6d:63:8b: a4:2f:ce:61:0e:e6:20:06:30:cc:7c:b0:c2:75:f7:d4:26:84: 88:f7:46:1e:83:20:ca:d3:d5:6c:50:8b:43:bc:07:c8:9e:59: 67:65:59:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjUwNjMwMjEyOTEyWhcNMjUwNzA3MjEyOTEyWjAYMRYwFAYD VQQDEw02ODYzMDFhOC0wYzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXjQKsTpa0Yu49bE+87dyepaoCERwtfqXrM3AevDBfjWS4PpaR1rdsXKfK7M 8DCr/ba7DGA8hU9wr87VtRs68vaoE/aZ1XXXeBEqdVIiI5oR9OiNJkIlLelELZKJ Df8d/M9V9ve2NUJsNhi0VFY1nMNojMPu4U5ljyk566UhQEonHfSVxoL0mzLNr+4D kTVXebq1Qcki33Yu0XlFoSLGu3MgDm6tiECJ0lhMZJ78XbuBKLxXM3BC9rUZoLC0 xS44vgei+VNHAhFh/445eWlAA0K1T1+zctdxrbz9O0RMIInrz96P+sKDZdzY/RPL LUg8B8H6MZ5QHFngPRyKP+mvqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvJ3b/8 qbMsQ09zLAyAZf9uO0T/MB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD Tld4ZmlCY0JqejJmSUo5QjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2XTOvBS5KQn0dsiH+1w1CrjRnNjfpkfcfs0pi2ZrTi45Z7dk5je/c 6PBK8mA2FA2YSFF1TJi5hfafWEUArSFIFV7zaa//ZjULCyQ6cUgXs4xKvRz0HObw E6sbPpDh7IAarbEXr4BrTLj55HETT0gSbuaSIXFbIjcTU3hrH2WqBpoikcneygs8 QvJyB47+nw8gtqUaxDdPixgYezljYyzYFaOfuM5mUPGpaZcDDZAODkOGboBrWS0Q B8IravsFRh85R/pVnlp09d2NatRHzS6p+kyZ2c9tY4ukL85hDuYgBjDMfLDCdffU JoSI90YegyDK09VsUItDvAfInllnZVmr -----END CERTIFICATE-----Generated at Wed Jul 2 20:03:04 2025 by rpki-client