$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json) Hash identifier: Q7NXxt/1V1NpgB4YUWD64bGDI2d6CqyCh3yD98kYqhI= Subject key identifier: 79:8A:EB:C8:11:8E:DA:FD:5B:EA:B2:73:C5:BF:EE:64:B5:8F:2D:4D Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Certificate serial: 0C98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft Manifest number: 0C88 Signing time: Sat 18 Oct 2025 19:11:08 +0000 Manifest this update: Sat 18 Oct 2025 19:11:08 +0000 Manifest next update: Sat 25 Oct 2025 19:11:08 +0000 Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: CIX6DqUhRTyfrHbEreOM3yAS5Z3EMSNsYr6pxIIENfo=) 2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: gCE8sQKb8A6qpKcLfMZ4C7XBMwBoNFAnuYIqxIqfFSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3224 (0xc98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Validity Not Before: Oct 18 19:11:08 2025 GMT Not After : Oct 25 19:11:08 2025 GMT Subject: CN=68f3e64c-99cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:60:06:fe:d0:09:26:3c:c7:8b:f1:43:13: df:33:e6:5b:04:31:ca:f0:50:e2:7e:dc:78:56:c8: 22:a3:bf:ae:fa:44:8f:d0:cc:54:40:23:e6:ec:3e: 95:dc:79:fb:6f:c8:62:63:30:ab:1f:59:f7:d2:2d: 76:e5:51:b4:93:b6:58:09:82:39:1d:bc:4e:eb:44: 80:eb:1d:7a:13:e7:19:3b:38:8c:df:9f:4b:56:86: a0:6d:8c:aa:7d:88:11:8c:3c:64:9d:21:34:6e:e9: bd:3a:58:9b:7c:12:41:67:8f:cf:10:e9:d8:ba:c1: ff:43:66:99:96:46:51:06:9f:11:dc:0b:e5:ce:56: 88:c6:cd:1d:b0:ca:c5:86:c9:45:46:3e:1f:e4:b4: 9a:a4:f5:eb:57:5e:5b:a8:9e:72:f3:ce:37:4c:fc: ee:d7:82:2e:1f:30:4a:32:75:cf:d5:cb:c8:4d:ca: cb:16:42:f7:dc:7b:72:ef:4e:34:90:2f:9a:98:87: 3a:d0:c1:9d:8f:b8:59:c6:a6:cb:c8:a7:b4:ce:6a: 94:f2:bd:e0:f0:4b:df:07:13:8e:28:d5:6d:e6:71: d2:78:bf:2b:af:d0:12:3a:4f:e9:d5:90:79:2e:68: be:73:b4:ce:e4:c6:46:46:5d:0f:d8:ad:1a:47:00: 59:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8A:EB:C8:11:8E:DA:FD:5B:EA:B2:73:C5:BF:EE:64:B5:8F:2D:4D X509v3 Authority Key Identifier: keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:77:c4:4b:9f:3e:59:70:95:22:d2:b0:f4:84:3f:ff:bd:7c: 78:bd:6e:0a:ec:d4:fa:80:87:66:40:81:d4:ae:00:b9:16:ee: cf:23:b5:fe:87:10:ec:0d:cf:e9:c9:75:71:94:6c:e2:2f:66: 70:21:90:8b:3b:a2:aa:a6:94:3d:cd:74:e3:70:d2:16:29:95: a5:7a:79:78:5a:7b:ee:a1:ad:f2:79:c4:19:4b:47:d9:52:85: 81:fb:66:30:1b:15:4a:88:1b:e8:7d:a1:16:29:65:bd:a4:54: e6:fa:cc:68:bc:f6:64:6f:38:cf:24:74:1e:38:f8:16:5e:24: 5b:a7:dc:50:9d:eb:ea:58:c8:30:32:bf:9b:96:6e:3e:2b:5a: 8d:06:28:e8:5b:b3:14:15:07:17:1f:6d:cd:b7:a4:2a:98:f6: 59:6f:9e:53:1f:98:ee:b9:04:35:6e:af:ad:ce:37:0c:93:dc: 6d:17:0e:6a:08:3f:17:90:69:cb:07:54:2a:cc:7c:bf:bf:c4: 43:7f:dc:33:a3:41:17:8b:c2:a9:a5:54:25:a3:3a:ff:73:6e: 82:ea:28:89:fb:f9:e5:7f:56:99:22:00:8b:60:45:45:3d:cf: 78:85:43:31:33:9b:29:fc:b5:7e:80:a6:29:86:d7:76:8f:d0: 01:40:04:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2MkYxMTAvBgNVBAUTKERGQjY3MjM2NzIxNTFFQzJDNDZDRDA0RTcxQzU5Rjkx NjlDQUU2RjgwHhcNMjUxMDE4MTkxMTA4WhcNMjUxMDI1MTkxMTA4WjAYMRYwFAYD VQQDEw02OGYzZTY0Yy05OWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxf5gBv7QCSY8x4vxQxPfM+ZbBDHK8FDiftx4Vsgio7+u+kSP0MxUQCPm7D6V 3Hn7b8hiYzCrH1n30i125VG0k7ZYCYI5HbxO60SA6x16E+cZOziM359LVoagbYyq fYgRjDxknSE0bum9OlibfBJBZ4/PEOnYusH/Q2aZlkZRBp8R3AvlzlaIxs0dsMrF hslFRj4f5LSapPXrV15bqJ5y8843TPzu14IuHzBKMnXP1cvITcrLFkL33Hty7040 kC+amIc60MGdj7hZxqbLyKe0zmqU8r3g8EvfBxOOKNVt5nHSeL8rr9ASOk/p1ZB5 Lmi+c7TO5MZGRl0P2K0aRwBZDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmK68gR jtr9W+qyc8W/7mS1jy1NMB8GA1UdIwQYMBaAFN+2cjZyFR7CxGzQTnHFn5Fpyub4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyRi8xQ0Y5ODcyNjA4 NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhzTEViTkJPY2NXZmtXbks1 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3WnlObklWSHNMRWJOQk9jY1dma1duSzV2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTYyRi8xQ0Y5ODcyNjA4NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhz TEViTkJPY2NXZmtXbks1dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhd8RLnz5ZcJUi0rD0hD//vXx4vW4K7NT6gIdmQIHUrgC5Fu7PI7X+ hxDsDc/pyXVxlGziL2ZwIZCLO6KqppQ9zXTjcNIWKZWlenl4Wnvuoa3yecQZS0fZ UoWB+2YwGxVKiBvofaEWKWW9pFTm+sxovPZkbzjPJHQeOPgWXiRbp9xQnevqWMgw Mr+blm4+K1qNBijoW7MUFQcXH23Nt6QqmPZZb55TH5juuQQ1bq+tzjcMk9xtFw5q CD8XkGnLB1QqzHy/v8RDf9wzo0EXi8KppVQlozr/c26C6iiJ+/nlf1aZIgCLYEVF Pc94hUMxM5sp/LV+gKYphtd2j9ABQAST -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:27 2025 by rpki-client