$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json) Hash identifier: 3Xo46HcYgZmgnO/S50Fo69p4Uwqgz7Ca3hGoGIm4NOI= Subject key identifier: 31:2E:68:01:7B:C0:9E:A9:F1:69:44:19:15:55:BB:08:38:B3:96:57 Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Certificate serial: 0CA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft Manifest number: 0C90 Signing time: Sun 02 Nov 2025 18:24:39 +0000 Manifest this update: Sun 02 Nov 2025 18:24:39 +0000 Manifest next update: Sun 09 Nov 2025 18:24:39 +0000 Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: aM25OYGJA8hzZR5HibVJzNUXeYVw+zQENDI8q9pJk1c=) 2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: gCE8sQKb8A6qpKcLfMZ4C7XBMwBoNFAnuYIqxIqfFSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Validity Not Before: Nov 2 18:24:39 2025 GMT Not After : Nov 9 18:24:39 2025 GMT Subject: CN=6907a1e7-1599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:75:d7:bb:2c:60:05:9a:ef:80:29:1b:6e: 4b:06:5d:ff:48:cb:1b:8e:28:57:c6:46:0a:c6:08: a3:a8:b7:e1:b1:fc:b0:b8:e9:08:ac:0f:15:e2:77: c5:e0:52:15:f7:f0:c2:78:92:3a:01:cc:2a:5d:e8: 10:6d:32:35:da:4e:f4:01:74:33:52:40:47:66:63: aa:66:06:c7:6d:be:7b:65:65:ce:b5:14:93:6e:51: 06:00:cc:6b:2e:ab:23:d9:32:dc:8a:c0:c5:3c:6a: 1b:95:96:28:98:4c:a8:48:b2:37:ef:a7:59:98:37: a5:1b:86:c0:1e:99:71:75:7a:91:ea:61:f7:06:03: a9:f8:87:86:64:a3:7e:d0:03:e5:7d:18:26:4c:05: c2:53:b6:f5:63:b7:93:cd:1d:59:a8:d6:ab:62:5f: a1:9a:4f:9c:33:e6:9f:89:9a:7e:a1:5b:8a:ed:7c: f2:96:f4:40:26:1e:e9:10:1d:48:ab:6f:a3:ad:1e: 53:00:a0:8c:bd:fe:6d:f4:63:42:07:c0:9b:ba:db: 1c:51:c8:2b:1c:01:37:e3:89:d7:18:d2:33:bb:d2: ea:cb:02:c1:8f:fd:51:12:39:50:dd:a8:7d:93:a5: b4:4f:b5:f1:67:46:0d:b8:f9:79:d5:e7:79:48:01: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2E:68:01:7B:C0:9E:A9:F1:69:44:19:15:55:BB:08:38:B3:96:57 X509v3 Authority Key Identifier: keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3a:56:bd:f7:a9:04:4f:49:c1:38:ca:1b:c8:31:a5:14:ad: 0a:0f:93:b9:f2:50:5e:8c:1d:c7:6b:ee:ea:8b:39:5f:1e:ff: f6:32:63:9c:c4:4a:89:f6:78:b3:15:09:14:5e:36:5a:8e:29: d4:6b:b4:8f:9a:db:0c:69:b3:49:36:e4:01:c9:4b:5e:b2:bd: 1a:c2:50:4e:cb:6e:f5:c8:09:9e:1c:98:ac:92:3d:50:b9:5b: e4:b6:21:2d:ba:a8:bd:91:18:8a:66:eb:91:a4:98:94:a2:e1: b9:b2:54:a6:c1:34:12:03:14:54:31:e2:5c:ea:1c:36:a9:2a: df:9f:4e:dd:33:f2:6c:07:0e:2c:db:38:87:4d:92:eb:0d:9b: 31:ba:09:a8:f1:8e:31:a2:f5:e7:88:14:93:c3:e5:97:67:0e: 89:63:8a:47:ee:16:14:cc:1a:c3:c3:9e:b4:2b:e3:d4:67:69: 54:c0:e0:c2:64:4c:cb:9b:92:03:c7:9b:55:8c:aa:d4:79:78: 99:02:43:5b:cf:b3:91:70:fc:e5:ae:48:f3:82:d4:96:2a:4e: fe:0d:c1:18:de:f3:9f:1c:81:44:fc:7c:27:03:67:24:be:f9: cd:e9:95:3e:c8:4d:e6:49:0c:c3:92:f9:b0:a4:87:db:dc:6d: 56:53:0f:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2MkYxMTAvBgNVBAUTKERGQjY3MjM2NzIxNTFFQzJDNDZDRDA0RTcxQzU5Rjkx NjlDQUU2RjgwHhcNMjUxMTAyMTgyNDM5WhcNMjUxMTA5MTgyNDM5WjAYMRYwFAYD VQQDEw02OTA3YTFlNy0xNTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySd117ssYAWa74ApG25LBl3/SMsbjihXxkYKxgijqLfhsfywuOkIrA8V4nfF 4FIV9/DCeJI6AcwqXegQbTI12k70AXQzUkBHZmOqZgbHbb57ZWXOtRSTblEGAMxr Lqsj2TLcisDFPGoblZYomEyoSLI376dZmDelG4bAHplxdXqR6mH3BgOp+IeGZKN+ 0APlfRgmTAXCU7b1Y7eTzR1ZqNarYl+hmk+cM+afiZp+oVuK7XzylvRAJh7pEB1I q2+jrR5TAKCMvf5t9GNCB8CbutscUcgrHAE344nXGNIzu9LqywLBj/1REjlQ3ah9 k6W0T7XxZ0YNuPl51ed5SAFKyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEuaAF7 wJ6p8WlEGRVVuwg4s5ZXMB8GA1UdIwQYMBaAFN+2cjZyFR7CxGzQTnHFn5Fpyub4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyRi8xQ0Y5ODcyNjA4 NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhzTEViTkJPY2NXZmtXbks1 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3WnlObklWSHNMRWJOQk9jY1dma1duSzV2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTYyRi8xQ0Y5ODcyNjA4NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhz TEViTkJPY2NXZmtXbks1dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvOla996kET0nBOMobyDGlFK0KD5O58lBejB3Ha+7qizlfHv/2MmOc xEqJ9nizFQkUXjZajinUa7SPmtsMabNJNuQByUtesr0awlBOy271yAmeHJiskj1Q uVvktiEtuqi9kRiKZuuRpJiUouG5slSmwTQSAxRUMeJc6hw2qSrfn07dM/JsBw4s 2ziHTZLrDZsxugmo8Y4xovXniBSTw+WXZw6JY4pH7hYUzBrDw560K+PUZ2lUwODC ZEzLm5IDx5tVjKrUeXiZAkNbz7ORcPzlrkjzgtSWKk7+DcEY3vOfHIFE/HwnA2ck vvnN6ZU+yE3mSQzDkvmwpIfb3G1WUw/0 -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:57 2025 by rpki-client