$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json) Hash identifier: 5/wQm1nGpF9C0HWcKYBWIpBl9fFgs8gI+pMtvcGzLfk= Subject key identifier: A0:56:58:C5:CD:48:D9:9B:87:AC:A7:6D:20:F8:02:D6:C9:1D:B0:16 Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 07CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft Manifest number: 07C2 Signing time: Fri 08 Aug 2025 21:35:30 +0000 Manifest this update: Fri 08 Aug 2025 21:35:30 +0000 Manifest next update: Fri 15 Aug 2025 21:35:30 +0000 Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: k6V28EGeT5Q3FfqjPrZclnBT/wsKpvJ0ZhEET4+w9s0=) 2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: nzgpiC5NFO3V3nVcBmKQWNZmNLyB+jOBtWw1RfrIB+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1995 (0x7cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: Aug 8 21:35:30 2025 GMT Not After : Aug 15 21:35:30 2025 GMT Subject: CN=68966da2-baef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:20:3a:81:c8:40:b2:22:3d:67:33:d6:c0:29: 06:c5:b0:97:9c:f6:f7:c5:df:e1:f8:fc:c1:8c:63: 18:a4:c3:52:a4:3d:98:9d:cb:36:45:9e:90:99:c4: c4:51:14:87:6d:f0:ae:e6:91:75:04:7f:a1:6c:3a: fe:5e:97:d4:2e:a4:fb:b7:6a:20:84:c4:ac:ad:fc: bf:36:dd:48:1f:37:d3:61:c6:35:7d:df:42:23:91: 95:b4:8a:4c:2b:a3:25:a3:2b:97:2f:1e:be:ba:f0: c6:41:07:2f:a1:f2:0b:bd:f6:24:db:60:c4:31:54: 43:67:fd:38:54:f3:a1:49:2b:da:0a:1e:af:00:b9: 47:99:e6:60:03:3a:9c:25:cd:6d:c0:28:2c:e2:44: af:b2:87:e9:f9:84:b5:a2:40:a7:58:a2:e6:57:cf: 2d:6e:fd:0e:46:a6:39:64:27:c4:4e:4c:01:b5:14: 9e:e2:7c:75:e5:9a:70:6f:ef:67:57:60:8c:2c:34: 04:5a:45:ed:09:4c:2a:ed:79:3b:0f:48:ed:d5:50: c6:2c:62:c0:14:1a:16:db:c8:e3:9d:4b:5f:13:8d: 3f:33:a6:90:d7:a6:f5:3e:d7:28:40:8d:06:77:fe: 7e:68:9e:17:69:ab:1f:98:b8:d0:d7:1b:10:2f:37: 47:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:56:58:C5:CD:48:D9:9B:87:AC:A7:6D:20:F8:02:D6:C9:1D:B0:16 X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:63:6e:12:47:ab:1e:8c:da:02:29:46:4f:85:c2:cd:f7:6d: 4e:fd:84:f9:d4:d6:c4:8f:f3:fd:b9:3f:cf:27:b7:98:9b:cf: df:66:6b:59:ff:ef:d5:7b:16:92:fa:9d:45:08:66:ed:cf:bd: 5c:26:34:a0:01:98:8f:71:55:97:df:07:f4:46:2d:d6:fe:b6: dd:d3:7c:22:88:ea:af:5b:b8:3c:7a:4f:04:55:c0:ff:3e:6a: eb:bc:78:d5:c6:bc:a8:fe:0c:59:d8:c2:f1:77:34:e9:9f:ba: e0:ca:d4:57:e2:16:20:45:7c:56:5c:59:09:0d:b7:bb:62:80: 77:d6:0d:be:c2:12:5b:d1:57:28:39:b1:65:24:92:1e:94:26: e3:e5:3d:f5:57:69:c8:2c:64:71:a9:13:ae:cc:c6:a5:0b:72: 62:72:c0:78:04:34:19:f1:b8:bf:b7:27:9b:f1:e1:63:3b:30: 04:00:6f:93:e5:44:a5:07:1e:68:02:5a:aa:a6:f1:5c:0e:5b: 71:fc:43:51:7c:3e:d6:55:a1:3b:1d:d0:c5:99:53:e2:13:f1: d7:39:09:b5:4e:a9:0b:e4:2f:fe:64:45:ab:01:4a:e2:00:13: 58:31:05:b7:1a:f0:2a:be:12:99:ba:fe:9e:e9:c6:bc:c6:0c: ab:4e:45:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjUwODA4MjEzNTMwWhcNMjUwODE1MjEzNTMwWjAYMRYwFAYD VQQDEw02ODk2NmRhMi1iYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCA6gchAsiI9ZzPWwCkGxbCXnPb3xd/h+PzBjGMYpMNSpD2Yncs2RZ6QmcTE URSHbfCu5pF1BH+hbDr+XpfULqT7t2oghMSsrfy/Nt1IHzfTYcY1fd9CI5GVtIpM K6MloyuXLx6+uvDGQQcvofILvfYk22DEMVRDZ/04VPOhSSvaCh6vALlHmeZgAzqc Jc1twCgs4kSvsofp+YS1okCnWKLmV88tbv0ORqY5ZCfETkwBtRSe4nx15Zpwb+9n V2CMLDQEWkXtCUwq7Xk7D0jt1VDGLGLAFBoW28jjnUtfE40/M6aQ16b1PtcoQI0G d/5+aJ4XaasfmLjQ1xsQLzdHyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBWWMXN SNmbh6ynbSD4AtbJHbAWMB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD Tld4ZmlCY0JqejJmSUo5QjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsY24SR6sejNoCKUZPhcLN921O/YT51NbEj/P9uT/PJ7eYm8/fZmtZ /+/VexaS+p1FCGbtz71cJjSgAZiPcVWX3wf0Ri3W/rbd03wiiOqvW7g8ek8EVcD/ PmrrvHjVxryo/gxZ2MLxdzTpn7rgytRX4hYgRXxWXFkJDbe7YoB31g2+whJb0Vco ObFlJJIelCbj5T31V2nILGRxqROuzMalC3JicsB4BDQZ8bi/tyeb8eFjOzAEAG+T 5USlBx5oAlqqpvFcDltx/ENRfD7WVaE7HdDFmVPiE/HXOQm1TqkL5C/+ZEWrAUri ABNYMQW3GvAqvhKZuv6e6ca8xgyrTkUr -----END CERTIFICATE-----Generated at Sat Aug 9 14:22:20 2025 by rpki-client