$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json) Hash identifier: qS1ZhTVlyoeXYruNyTrJBW94LCUfH1S6akpn0H6R/gk= Subject key identifier: 86:29:5C:AC:9B:23:F1:14:71:81:C8:3C:4D:97:B1:C6:CC:87:8D:63 Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Certificate serial: 0C7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft Manifest number: 0C6B Signing time: Fri 22 Aug 2025 18:35:30 +0000 Manifest this update: Fri 22 Aug 2025 18:35:29 +0000 Manifest next update: Fri 29 Aug 2025 18:35:29 +0000 Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: E8JEwoUSXFRcA44dV9FrFAGlnJ3vuSQgF+KN/VpMy4I=) 2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: gCE8sQKb8A6qpKcLfMZ4C7XBMwBoNFAnuYIqxIqfFSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3195 (0xc7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Validity Not Before: Aug 22 18:35:29 2025 GMT Not After : Aug 29 18:35:29 2025 GMT Subject: CN=68a8b871-0309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:37:f1:c1:e5:ad:14:28:b1:c3:c9:49:22:ef: 79:64:ac:c0:ba:d3:f8:02:c6:d8:c0:30:41:83:d4: 42:95:27:52:a3:26:03:bf:fe:46:e5:8a:6e:05:41: d6:9c:63:2f:1d:5c:94:b2:ba:03:09:73:36:aa:97: d8:24:3a:9a:18:1a:ee:ed:bd:c0:b2:0c:b5:ad:d4: 9b:da:1a:33:1f:02:a6:97:67:76:3e:2a:2a:50:c5: cb:18:62:e1:43:78:87:28:d3:f6:48:e4:82:34:29: e8:5c:ef:20:a9:ec:99:be:87:28:e3:ff:7d:ca:53: 5a:39:54:cc:08:9c:db:5a:c3:9c:a0:59:a1:4f:b5: f4:ce:4d:30:5f:8f:73:9e:93:c4:b1:a2:1d:f7:8c: ab:8b:27:5f:36:6c:b0:bd:63:e6:fd:4d:96:86:1e: 66:7e:5a:ec:7d:bf:3b:f7:74:85:5b:24:2e:d8:4e: f7:23:fc:4e:d7:ab:b8:0c:a0:ad:9d:45:f0:10:20: 20:c6:8d:bd:e1:19:32:25:30:f8:a7:d2:6f:48:c6: ce:1b:ab:16:b2:42:27:a1:c7:60:86:5e:1d:a6:00: 94:39:a6:79:80:40:d4:df:cc:62:74:b8:95:f1:f9: 23:64:83:11:80:91:f6:c8:8f:7f:49:e8:62:4d:7f: a3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:29:5C:AC:9B:23:F1:14:71:81:C8:3C:4D:97:B1:C6:CC:87:8D:63 X509v3 Authority Key Identifier: keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:95:c7:b9:f4:d0:2b:2b:0c:c3:a9:1d:e1:18:89:3c:b8:e2: 6b:60:11:a4:d2:88:10:0e:02:e3:51:8f:4b:f3:f6:a9:ee:ae: 75:65:bb:a0:06:76:ec:83:60:91:0a:4c:54:ae:49:38:72:d6: 8e:bd:bc:d9:0c:ba:10:ba:7c:dd:01:e5:49:59:c0:a5:7d:09: 9a:f1:9d:9d:82:94:a8:47:34:54:ae:00:36:48:6d:d5:62:40: 23:d7:79:ce:22:55:35:7d:bb:32:65:a7:7b:0a:58:3b:2f:af: 08:50:1b:49:61:dd:99:75:0f:7b:3c:d2:14:f5:4e:42:15:ba: 5e:99:00:73:ed:3b:eb:98:19:31:9c:24:59:75:24:17:50:78: 14:b1:9b:a4:a6:50:6a:1d:7c:cf:d1:63:d9:56:20:35:cc:8e: a1:8a:c4:08:ad:5f:da:31:d1:68:c6:d6:28:8c:04:14:ee:fd: d0:21:4a:fb:db:e9:d4:fc:c8:b5:48:c6:34:18:90:2d:f1:e5: bd:91:da:30:75:69:cc:2e:84:e6:c5:5c:cd:a9:8e:ab:7b:5a: 3a:41:7a:03:3a:73:b9:9a:10:44:64:fe:be:09:c0:a0:ec:2f: f2:99:ed:1c:06:99:62:e5:b9:58:ba:40:43:3a:71:e2:5d:5b: 54:2e:77:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2MkYxMTAvBgNVBAUTKERGQjY3MjM2NzIxNTFFQzJDNDZDRDA0RTcxQzU5Rjkx NjlDQUU2RjgwHhcNMjUwODIyMTgzNTI5WhcNMjUwODI5MTgzNTI5WjAYMRYwFAYD VQQDEw02OGE4Yjg3MS0wMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjfxweWtFCixw8lJIu95ZKzAutP4AsbYwDBBg9RClSdSoyYDv/5G5YpuBUHW nGMvHVyUsroDCXM2qpfYJDqaGBru7b3Asgy1rdSb2hozHwKml2d2PioqUMXLGGLh Q3iHKNP2SOSCNCnoXO8gqeyZvoco4/99ylNaOVTMCJzbWsOcoFmhT7X0zk0wX49z npPEsaId94yriydfNmywvWPm/U2Whh5mflrsfb8793SFWyQu2E73I/xO16u4DKCt nUXwECAgxo294RkyJTD4p9JvSMbOG6sWskInocdghl4dpgCUOaZ5gEDU38xidLiV 8fkjZIMRgJH2yI9/SehiTX+jZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYpXKyb I/EUcYHIPE2XscbMh41jMB8GA1UdIwQYMBaAFN+2cjZyFR7CxGzQTnHFn5Fpyub4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyRi8xQ0Y5ODcyNjA4 NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhzTEViTkJPY2NXZmtXbks1 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3WnlObklWSHNMRWJOQk9jY1dma1duSzV2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTYyRi8xQ0Y5ODcyNjA4NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhz TEViTkJPY2NXZmtXbks1dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQlce59NArKwzDqR3hGIk8uOJrYBGk0ogQDgLjUY9L8/ap7q51Zbug Bnbsg2CRCkxUrkk4ctaOvbzZDLoQunzdAeVJWcClfQma8Z2dgpSoRzRUrgA2SG3V YkAj13nOIlU1fbsyZad7Clg7L68IUBtJYd2ZdQ97PNIU9U5CFbpemQBz7TvrmBkx nCRZdSQXUHgUsZukplBqHXzP0WPZViA1zI6hisQIrV/aMdFoxtYojAQU7v3QIUr7 2+nU/Mi1SMY0GJAt8eW9kdowdWnMLoTmxVzNqY6re1o6QXoDOnO5mhBEZP6+CcCg 7C/yme0cBpli5blYukBDOnHiXVtULnc1 -----END CERTIFICATE-----Generated at Sun Aug 24 00:11:21 2025 by rpki-client