$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json) Hash identifier: bIY0qHVkk81OUlLaMQn9DhMJMs0uw1ICdLNOAe3I4EE= Subject key identifier: FC:38:25:14:EA:01:59:89:11:96:5E:43:C5:FF:05:22:30:BC:C0:10 Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 07F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft Manifest number: 07EE Signing time: Tue 04 Nov 2025 21:11:46 +0000 Manifest this update: Tue 04 Nov 2025 21:11:46 +0000 Manifest next update: Tue 11 Nov 2025 21:11:45 +0000 Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: UqSHss6U68BcYcwsdeLW4Gz4V2cilDk4MOWg06YhYdE=) 2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: nzgpiC5NFO3V3nVcBmKQWNZmNLyB+jOBtWw1RfrIB+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: Nov 4 21:11:46 2025 GMT Not After : Nov 11 21:11:45 2025 GMT Subject: CN=690a6c12-29db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:1c:4d:ea:24:ab:b4:06:4e:e5:17:b8:70: 3a:f0:4e:37:b0:37:bd:0f:a8:1a:62:28:56:c1:cf: 0d:7b:2a:55:49:70:07:c7:b8:2e:15:ff:c2:0d:b5: 87:c4:0c:0c:70:5a:ea:e8:e7:ce:b7:7c:12:c2:c3: 79:3e:51:0b:f7:b8:b5:61:6d:28:5b:5b:27:b6:1b: d1:a0:c6:2b:73:c2:6b:e6:86:a5:10:fb:b7:af:7b: 1c:fd:58:cf:2a:c4:03:e7:1f:7a:64:5a:24:6a:f4: 2d:d0:9e:0c:71:d5:83:c6:4d:c9:6b:d7:49:03:c9: 08:85:c0:28:92:94:1a:61:9b:4c:8a:da:f3:5d:4f: e3:6b:79:9f:5d:68:9f:bd:2a:29:db:37:f6:65:71: b5:9a:47:00:db:ec:48:67:66:d2:f5:dd:1d:b1:28: 3a:b3:a7:04:9e:b6:fa:c6:aa:8f:26:95:9a:f5:8b: c2:ee:a4:31:b3:01:dc:ee:c4:8c:63:09:aa:96:c9: 70:df:94:c5:b7:77:9c:1a:fd:d5:f8:1b:53:7d:3e: f7:38:c6:3e:61:0a:60:ba:d4:04:21:4f:7d:c4:f3: b9:83:4d:9c:be:ca:bd:10:6a:e8:10:44:b4:d7:3e: 73:bc:b9:04:c8:57:ac:64:10:db:0c:cc:42:c6:c2: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:38:25:14:EA:01:59:89:11:96:5E:43:C5:FF:05:22:30:BC:C0:10 X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:e6:3c:f5:8e:b9:9d:3b:2e:f3:83:0f:ba:ea:dd:b9:15:ac: 4d:8d:df:c2:d6:4e:78:0d:b2:56:2a:b3:00:2b:5e:97:c2:e2: 2b:a7:79:98:34:8d:2b:5c:88:ab:56:5c:c6:04:0c:7a:7e:ef: 97:9f:7b:ac:6e:82:c6:74:08:c2:b4:2f:5c:07:c6:5e:89:27: 33:11:08:12:87:38:63:b0:58:8b:e3:6d:e7:bb:9b:5e:e5:ac: d5:a4:e7:0c:bf:34:e0:e6:ef:ec:61:56:56:f2:82:c8:1c:75: 51:8e:b3:cf:b5:74:90:76:00:cb:f2:37:8f:8b:10:0a:3b:45: a9:f4:41:13:20:1d:f6:f8:a0:58:ad:ba:48:00:c0:2c:89:d9: d0:d1:45:ef:24:6d:3c:1d:f9:c4:26:e8:2d:8a:0b:84:68:95: 41:1c:27:10:37:a4:71:19:43:87:8b:5d:07:1b:f9:d4:6f:90: 48:98:be:ce:3f:15:ec:d7:ea:61:32:42:53:d1:65:bc:00:17: 94:48:93:93:77:5d:29:56:5d:d8:01:86:10:ab:1a:2f:bf:30: 3f:e2:53:db:43:58:c0:fc:ac:9e:77:9f:5c:0e:77:be:5b:3b: 6d:2e:63:cd:9e:fc:93:ea:4f:06:a7:1a:5d:2e:a8:e9:3c:1c: 0d:77:88:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjUxMTA0MjExMTQ2WhcNMjUxMTExMjExMTQ1WjAYMRYwFAYD VQQDEw02OTBhNmMxMi0yOWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvMcTeokq7QGTuUXuHA68E43sDe9D6gaYihWwc8NeypVSXAHx7guFf/CDbWH xAwMcFrq6OfOt3wSwsN5PlEL97i1YW0oW1snthvRoMYrc8Jr5oalEPu3r3sc/VjP KsQD5x96ZFokavQt0J4McdWDxk3Ja9dJA8kIhcAokpQaYZtMitrzXU/ja3mfXWif vSop2zf2ZXG1mkcA2+xIZ2bS9d0dsSg6s6cEnrb6xqqPJpWa9YvC7qQxswHc7sSM Ywmqlslw35TFt3ecGv3V+BtTfT73OMY+YQpgutQEIU99xPO5g02cvsq9EGroEES0 1z5zvLkEyFesZBDbDMxCxsLXGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw4JRTq AVmJEZZeQ8X/BSIwvMAQMB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD Tld4ZmlCY0JqejJmSUo5QjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT5jz1jrmdOy7zgw+66t25FaxNjd/C1k54DbJWKrMAK16XwuIrp3mY NI0rXIirVlzGBAx6fu+Xn3usboLGdAjCtC9cB8ZeiSczEQgShzhjsFiL423nu5te 5azVpOcMvzTg5u/sYVZW8oLIHHVRjrPPtXSQdgDL8jePixAKO0Wp9EETIB32+KBY rbpIAMAsidnQ0UXvJG08HfnEJugtiguEaJVBHCcQN6RxGUOHi10HG/nUb5BImL7O PxXs1+phMkJT0WW8ABeUSJOTd10pVl3YAYYQqxovvzA/4lPbQ1jA/Kyed59cDne+ WzttLmPNnvyT6k8GpxpdLqjpPBwNd4jr -----END CERTIFICATE-----Generated at Wed Nov 5 17:56:31 2025 by rpki-client