$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json) Hash identifier: r1kXKHSv80348lTKMyrZdEk5jsSQ/xMkp38jUyRvR/Q= Subject key identifier: 91:CF:5E:2A:CC:D4:8B:CC:02:3F:82:E6:E3:3E:F5:75:8A:65:0A:6F Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Certificate serial: 0C7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft Manifest number: 0C6C Signing time: Sun 24 Aug 2025 18:26:33 +0000 Manifest this update: Sun 24 Aug 2025 18:26:33 +0000 Manifest next update: Sun 31 Aug 2025 18:26:33 +0000 Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: Yj5BlxsUfKebrnKKGio2aP3ILL5gtv0gNfrmyT+nQ4c=) 2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: gCE8sQKb8A6qpKcLfMZ4C7XBMwBoNFAnuYIqxIqfFSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Validity Not Before: Aug 24 18:26:33 2025 GMT Not After : Aug 31 18:26:33 2025 GMT Subject: CN=68ab5959-0c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fe:ca:13:8e:c3:25:e3:96:ee:88:fc:32:e0: c9:02:40:6b:b9:da:b6:75:ef:e9:a6:dc:b1:ea:9a: 50:f7:fd:41:4a:4e:97:dd:17:61:68:b4:fd:09:b8: ad:19:63:21:9e:68:05:ac:83:0c:4d:6b:ec:f5:85: ba:47:89:8d:07:2c:c8:f1:15:8a:72:3a:e5:86:46: 62:d2:86:67:3b:0d:a8:a7:39:87:8e:1f:37:ba:44: cf:45:3a:d1:ca:08:96:78:03:18:a1:dd:c2:ae:a2: 6c:54:85:d3:27:bf:b1:75:3f:dd:1f:d9:cc:3c:9a: 95:b9:63:c4:eb:8a:fd:95:cf:65:73:77:f2:4e:93: 9b:20:5e:a4:1d:d6:0d:7a:bb:9b:93:3e:36:0f:ca: 70:19:6a:27:ea:f3:52:01:0f:ed:7e:68:9a:b0:ed: 59:79:40:fc:d0:d7:ab:8f:e1:3a:c9:91:6b:3e:00: 33:7b:12:53:1a:f6:ca:c8:b9:0b:cf:56:71:a6:f9: 95:2f:d9:52:1b:21:fa:9b:c4:05:78:f2:c0:fa:32: 9b:8c:6f:52:79:b5:3f:2b:37:4b:1b:9e:21:b4:79: 64:c3:15:40:f3:c0:fe:a6:8b:91:bc:57:d2:2d:7c: 75:18:a3:ec:03:2b:d8:73:3d:84:24:36:63:66:9e: b6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CF:5E:2A:CC:D4:8B:CC:02:3F:82:E6:E3:3E:F5:75:8A:65:0A:6F X509v3 Authority Key Identifier: keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:4a:70:03:0d:1e:81:81:b3:f1:ab:83:f6:05:6e:1d:1b:63: 1b:7a:aa:f2:66:ed:40:3d:08:c5:36:b8:90:12:cf:44:a5:88: 75:8c:11:f8:3d:e8:f9:8b:21:b2:ee:f6:33:96:b3:b9:c2:19: ce:67:a4:c2:f4:94:bc:0d:19:53:1d:a4:f9:df:99:70:d5:e9: 84:83:23:a3:c1:49:a4:eb:f5:a9:3a:38:76:a8:c1:ef:f2:1d: 37:7f:b9:50:4f:15:7d:7d:cd:97:79:f6:a2:ba:7f:33:c2:57: 77:f4:88:7a:2c:d3:4f:58:7a:95:30:9a:ef:56:57:2d:50:f1: c3:16:de:c0:a3:0b:9d:73:c4:0a:64:bf:86:ae:57:ec:94:7f: 72:37:1d:a1:26:c3:77:a4:94:cd:50:40:4f:c2:76:3f:2d:86: f9:7a:33:4c:51:6f:41:79:19:d2:8e:7b:b5:a2:ca:01:b2:13: 44:3d:b0:ad:a9:ee:36:77:fb:f8:04:c4:3e:ed:d6:5d:85:9a: 71:a7:98:c4:f2:83:02:8a:6c:4a:94:bd:a8:3e:1f:89:c4:f8: 87:e4:38:eb:3b:39:23:c4:f5:57:ae:fd:9c:83:f3:74:26:dc: 82:e2:fa:55:ea:82:25:33:2f:34:a5:dc:11:e6:dd:a3:f4:6a: 31:b8:8f:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2MkYxMTAvBgNVBAUTKERGQjY3MjM2NzIxNTFFQzJDNDZDRDA0RTcxQzU5Rjkx NjlDQUU2RjgwHhcNMjUwODI0MTgyNjMzWhcNMjUwODMxMTgyNjMzWjAYMRYwFAYD VQQDEw02OGFiNTk1OS0wYzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApP7KE47DJeOW7oj8MuDJAkBrudq2de/pptyx6ppQ9/1BSk6X3RdhaLT9Cbit GWMhnmgFrIMMTWvs9YW6R4mNByzI8RWKcjrlhkZi0oZnOw2opzmHjh83ukTPRTrR ygiWeAMYod3CrqJsVIXTJ7+xdT/dH9nMPJqVuWPE64r9lc9lc3fyTpObIF6kHdYN erubkz42D8pwGWon6vNSAQ/tfmiasO1ZeUD80Nerj+E6yZFrPgAzexJTGvbKyLkL z1ZxpvmVL9lSGyH6m8QFePLA+jKbjG9SebU/KzdLG54htHlkwxVA88D+pouRvFfS LXx1GKPsAyvYcz2EJDZjZp625QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHPXirM 1IvMAj+C5uM+9XWKZQpvMB8GA1UdIwQYMBaAFN+2cjZyFR7CxGzQTnHFn5Fpyub4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyRi8xQ0Y5ODcyNjA4 NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhzTEViTkJPY2NXZmtXbks1 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3WnlObklWSHNMRWJOQk9jY1dma1duSzV2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTYyRi8xQ0Y5ODcyNjA4NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhz TEViTkJPY2NXZmtXbks1dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKSnADDR6BgbPxq4P2BW4dG2MbeqryZu1APQjFNriQEs9EpYh1jBH4 Pej5iyGy7vYzlrO5whnOZ6TC9JS8DRlTHaT535lw1emEgyOjwUmk6/WpOjh2qMHv 8h03f7lQTxV9fc2Xefaiun8zwld39Ih6LNNPWHqVMJrvVlctUPHDFt7Aowudc8QK ZL+GrlfslH9yNx2hJsN3pJTNUEBPwnY/LYb5ejNMUW9BeRnSjnu1osoBshNEPbCt qe42d/v4BMQ+7dZdhZpxp5jE8oMCimxKlL2oPh+JxPiH5DjrOzkjxPVXrv2cg/N0 JtyC4vpV6oIlMy80pdwR5t2j9GoxuI/r -----END CERTIFICATE-----Generated at Sun Aug 24 21:48:14 2025 by rpki-client