$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json) Hash identifier: P+gT+tbuW8vvi3v0fMJneM9E9rgL7f8ws9Rvw8AgUqw= Subject key identifier: A9:C0:5E:78:4F:33:F8:8C:EA:0F:1A:BB:01:F4:F0:8A:DF:E5:3A:7A Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 0842 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft Manifest number: 0838 Signing time: Tue 24 Mar 2026 20:40:21 +0000 Manifest this update: Tue 24 Mar 2026 20:40:21 +0000 Manifest next update: Tue 31 Mar 2026 20:40:21 +0000 Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: EBQb4V2dJlXfQ+bOxaoh1Wt5ZzAAYpB+U0B2l9hj/Us=) 2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: ofQHrXKIXpON7nwkCVzz/fxJZ831mKwy1TbIVQC8ThE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2114 (0x842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: Mar 24 20:40:21 2026 GMT Not After : Mar 31 20:40:21 2026 GMT Subject: CN=69c2f6b5-5d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:02:6f:cc:65:6f:9b:99:bf:4d:5c:16:5f:eb: 01:18:12:00:bf:0b:2c:4d:1b:78:7b:77:3f:06:86: 6c:e8:99:8e:0b:e9:cb:87:c2:2b:82:5c:6d:21:ce: 79:6d:fa:da:f1:a7:d7:a4:2d:29:cd:41:4f:bd:4a: 47:d6:2d:11:90:17:54:e9:2b:4f:ac:ce:37:b7:c6: ab:30:26:20:a8:92:4b:c6:66:1a:00:7b:74:ce:02: f0:69:49:b6:94:cc:f7:bf:23:94:1f:ec:a8:58:f4: 73:e7:14:8a:d7:fd:5a:87:13:e4:8d:7c:27:1a:b4: 17:1c:d6:f6:68:44:c5:f4:2a:b9:4c:31:72:9f:0f: ab:12:f7:7c:93:50:d6:ba:7b:0b:25:8a:75:9e:a8: 15:d5:8d:9d:a1:5f:d5:2b:9b:bb:aa:68:d6:50:64: ff:43:42:66:ec:5b:2e:3e:fc:62:57:e8:20:c9:7f: e2:93:d5:c3:18:93:ac:97:78:6f:37:d7:e2:30:35: 4b:01:7a:57:16:8f:c9:a5:9a:b1:77:b9:dd:af:e0: 6f:a4:82:68:23:cc:79:7c:20:14:73:88:57:04:d0: 6a:7d:45:57:6d:8d:35:db:05:fd:51:51:8d:57:2a: 55:07:6f:b3:e6:35:6a:50:ef:8d:1c:aa:a4:77:8a: 32:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C0:5E:78:4F:33:F8:8C:EA:0F:1A:BB:01:F4:F0:8A:DF:E5:3A:7A X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0d:51:b8:73:92:b9:2c:e8:46:74:70:9d:9d:26:1a:cc:87: 89:d8:b5:3a:8a:2e:4f:5d:9b:56:9d:07:34:dd:77:fc:d6:96: df:04:04:b6:fd:e3:66:42:2b:f7:1f:e4:2b:d1:e0:dd:85:21: 99:b5:24:35:8a:e3:9d:09:ef:57:b5:6b:7e:de:f2:3b:2c:98: 7f:f1:f7:b5:86:a1:44:55:ba:a5:13:e5:8f:ea:3b:95:3a:cb: 0f:f1:ff:68:9c:ef:be:d0:47:f7:e7:ed:35:ed:42:eb:c7:00: 7f:9b:6d:52:44:1a:d9:d6:21:54:8a:13:cb:a4:1b:2b:cc:a3: 05:9f:c3:0b:46:9f:ac:45:5b:e5:38:21:72:34:a1:48:85:4b: 25:e3:cb:8d:79:f8:64:60:98:41:71:50:b4:d9:e5:c5:99:44: 06:d1:6f:7d:9e:4a:1d:a6:4a:0c:4c:7d:b9:a3:9f:f0:b2:64: a5:f6:af:b4:0a:77:34:e5:8b:f7:f9:ea:62:9a:cc:4b:90:c3: fc:43:1d:d2:d8:e8:dc:68:48:af:b3:f3:70:ca:61:38:28:52: 70:10:9c:ba:6f:ef:b2:25:26:a5:9e:8b:b7:9e:6e:53:bf:72: d5:49:b5:d6:7d:c1:83:45:a7:e6:10:94:0f:ff:91:71:bc:df: 6d:5b:95:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjYwMzI0MjA0MDIxWhcNMjYwMzMxMjA0MDIxWjAYMRYwFAYD VQQDEw02OWMyZjZiNS01ZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gJvzGVvm5m/TVwWX+sBGBIAvwssTRt4e3c/BoZs6JmOC+nLh8IrglxtIc55 bfra8afXpC0pzUFPvUpH1i0RkBdU6StPrM43t8arMCYgqJJLxmYaAHt0zgLwaUm2 lMz3vyOUH+yoWPRz5xSK1/1ahxPkjXwnGrQXHNb2aETF9Cq5TDFynw+rEvd8k1DW unsLJYp1nqgV1Y2doV/VK5u7qmjWUGT/Q0Jm7FsuPvxiV+ggyX/ik9XDGJOsl3hv N9fiMDVLAXpXFo/JpZqxd7ndr+BvpIJoI8x5fCAUc4hXBNBqfUVXbY012wX9UVGN VypVB2+z5jVqUO+NHKqkd4oyUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnAXnhP M/iM6g8auwH08Irf5Tp6MB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD Tld4ZmlCY0JqejJmSUo5QjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfA1RuHOSuSzoRnRwnZ0mGsyHidi1OoouT12bVp0HNN13/NaW3wQEtv3jZkIr 9x/kK9Hg3YUhmbUkNYrjnQnvV7Vrft7yOyyYf/H3tYahRFW6pRPlj+o7lTrLD/H/ aJzvvtBH9+ftNe1C68cAf5ttUkQa2dYhVIoTy6QbK8yjBZ/DC0afrEVb5TghcjSh SIVLJePLjXn4ZGCYQXFQtNnlxZlEBtFvfZ5KHaZKDEx9uaOf8LJkpfavtAp3NOWL 9/nqYprMS5DD/EMd0tjo3GhIr7PzcMphOChScBCcum/vsiUmpZ6Lt55uU79y1Um1 1n3Bg0Wn5hCUD/+RcbzfbVuVOQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:10:31 2026 by rpki-client