$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json) Hash identifier: 3iIx5rYOScHBI/rq+1CRKyjVoFNvTN/kXKcG1azLBVY= Subject key identifier: 9B:12:85:BE:69:B0:66:9E:A4:81:CD:96:84:2D:1D:04:5D:69:39:5B Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Certificate serial: 0CF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft Manifest number: 0CE1 Signing time: Sat 04 Apr 2026 18:10:59 +0000 Manifest this update: Sat 04 Apr 2026 18:10:59 +0000 Manifest next update: Sat 11 Apr 2026 18:10:59 +0000 Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: 28cNf9e/fnM0UyCuOdPE5B5z59Jnki1YWidzzQ5Twto=) 2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: Ljx7IsxKp3SSCVlf/kifFj6AmtovPD1vTrmVMoxhp1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3315 (0xcf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Validity Not Before: Apr 4 18:10:59 2026 GMT Not After : Apr 11 18:10:59 2026 GMT Subject: CN=69d15433-352e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1d:0b:aa:bd:7e:be:4e:70:95:89:49:d7:0e: 22:2f:37:a9:d9:14:69:9f:2c:ea:33:03:bc:92:cb: 65:c1:4f:9e:9b:e3:e7:ad:99:72:b3:99:e4:f9:16: d0:76:eb:60:b4:3e:17:62:50:4b:45:68:d1:c2:8c: 00:fd:bd:54:18:5c:ac:d4:1c:12:55:f2:28:ea:6a: 2d:de:12:d5:9e:98:9a:b3:0c:85:94:a4:a9:5d:bb: ec:fc:e6:dd:01:0f:f2:fc:89:c7:a1:0c:b3:1a:71: d5:3d:da:2d:f6:7c:2b:2f:3e:3c:68:34:e6:3e:7d: 12:0d:1f:72:67:d3:67:38:30:c7:af:7c:bb:4e:7e: 92:e4:92:98:44:59:b1:e2:5f:93:e6:9b:02:5d:71: f6:7b:49:1d:88:2e:a8:5a:ca:4b:3f:43:45:7a:05: e9:9a:46:84:3e:c4:2e:93:27:b6:db:c4:52:b6:c0: 1b:45:74:22:13:8e:8b:46:ec:1d:98:40:b0:cd:ae: a4:dc:25:d7:12:49:b0:fc:1f:a3:82:af:67:d3:38: 09:73:84:c7:ee:c7:50:78:61:68:2f:20:86:a6:4b: 30:8e:ff:35:ac:bd:76:aa:16:fe:87:3c:e9:1c:14: 14:3c:5c:53:2d:0d:83:5b:10:85:0e:66:c1:de:1e: cc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:12:85:BE:69:B0:66:9E:A4:81:CD:96:84:2D:1D:04:5D:69:39:5B X509v3 Authority Key Identifier: keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:5b:9b:09:45:38:0d:9c:54:75:f7:1c:e7:96:bc:ef:8b:18: de:7b:75:3c:78:c6:e7:e8:c9:65:4d:e4:b6:e3:2c:f9:e3:ce: 32:6d:1d:e1:b3:12:41:01:47:b7:f1:f2:ae:a9:a7:08:d1:a3: 9f:3f:a1:82:44:a3:42:7e:13:8e:e1:4c:cf:d7:eb:b2:41:2a: b1:c8:35:e2:4d:5a:28:cc:b8:0a:66:d2:be:4c:4b:39:a9:cc: 52:5c:54:2b:3c:a6:81:0d:dd:87:a1:f9:5f:93:6e:bb:e6:18: e6:99:fd:2e:90:ec:bd:60:c9:fc:a0:4c:cd:a6:df:79:cc:7a: cd:a6:00:2b:ef:41:f8:19:06:6d:dd:33:12:be:66:7c:f9:ec: 9d:fa:b3:33:3e:b0:a7:3f:8a:49:de:4f:30:0e:62:c4:2f:4a: cc:22:9c:08:0d:4d:f7:50:d4:0e:66:00:de:41:c4:ec:05:56: 8d:4a:16:85:be:86:30:e4:30:d6:6f:c4:07:93:1b:89:34:a9: 74:b9:9b:46:ea:bf:e2:af:f0:99:fd:18:a6:3f:2c:26:57:58: 23:4c:5e:76:a2:1f:7e:5c:07:f9:db:50:14:28:98:ce:bd:a7: 36:c2:74:67:89:3b:1b:32:76:60:95:17:32:14:e9:ba:69:a9: f1:9a:c8:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2MkYxMTAvBgNVBAUTKERGQjY3MjM2NzIxNTFFQzJDNDZDRDA0RTcxQzU5Rjkx NjlDQUU2RjgwHhcNMjYwNDA0MTgxMDU5WhcNMjYwNDExMTgxMDU5WjAYMRYwFAYD VQQDEw02OWQxNTQzMy0zNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAih0Lqr1+vk5wlYlJ1w4iLzep2RRpnyzqMwO8kstlwU+em+PnrZlys5nk+RbQ dutgtD4XYlBLRWjRwowA/b1UGFys1BwSVfIo6mot3hLVnpiaswyFlKSpXbvs/Obd AQ/y/InHoQyzGnHVPdot9nwrLz48aDTmPn0SDR9yZ9NnODDHr3y7Tn6S5JKYRFmx 4l+T5psCXXH2e0kdiC6oWspLP0NFegXpmkaEPsQukye228RStsAbRXQiE46LRuwd mECwza6k3CXXEkmw/B+jgq9n0zgJc4TH7sdQeGFoLyCGpkswjv81rL12qhb+hzzp HBQUPFxTLQ2DWxCFDmbB3h7M3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJsShb5p sGaepIHNloQtHQRdaTlbMB8GA1UdIwQYMBaAFN+2cjZyFR7CxGzQTnHFn5Fpyub4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyRi8xQ0Y5ODcyNjA4 NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhzTEViTkJPY2NXZmtXbks1 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3WnlObklWSHNMRWJOQk9jY1dma1duSzV2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTYyRi8xQ0Y5ODcyNjA4NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhz TEViTkJPY2NXZmtXbks1dmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzVubCUU4DZxUdfcc55a874sY3nt1PHjG5+jJZU3ktuMs+ePOMm0d4bMSQQFH t/HyrqmnCNGjnz+hgkSjQn4TjuFMz9frskEqscg14k1aKMy4CmbSvkxLOanMUlxU KzymgQ3dh6H5X5Nuu+YY5pn9LpDsvWDJ/KBMzabfecx6zaYAK+9B+BkGbd0zEr5m fPnsnfqzMz6wpz+KSd5PMA5ixC9KzCKcCA1N91DUDmYA3kHE7AVWjUoWhb6GMOQw 1m/EB5MbiTSpdLmbRuq/4q/wmf0Ypj8sJldYI0xedqIfflwH+dtQFCiYzr2nNsJ0 Z4k7GzJ2YJUXMhTpummp8ZrI1Q== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:20 2026 by rpki-client