$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json) Hash identifier: mzQRTisTmfU4e1ozjDwdKqTo59uNvabkc2yuhdWQICk= Subject key identifier: 4E:CE:42:65:EE:17:4E:42:EB:02:62:F3:6E:23:89:31:C8:06:CE:E7 Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Certificate serial: 0C55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft Manifest number: 0C46 Signing time: Sat 14 Jun 2025 18:23:44 +0000 Manifest this update: Sat 14 Jun 2025 18:23:44 +0000 Manifest next update: Sat 21 Jun 2025 18:23:44 +0000 Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: BkjlUA7HiCVg8CP7vHMT+dBjfF+nlehv0gteeSCURUQ=) 2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: SVlu02hkSNzBlCDk2yMt2xQVwlZY+Mck+6jTuLXWYgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3157 (0xc55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Validity Not Before: Jun 14 18:23:44 2025 GMT Not After : Jun 21 18:23:44 2025 GMT Subject: CN=684dbe30-8381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9b:43:07:4b:1b:aa:9e:d9:e7:1d:84:30:32: c5:4a:df:5c:55:32:59:bc:48:56:aa:2d:c6:5c:a6: 64:82:45:84:59:ce:da:2a:0c:3d:5c:e2:63:61:c3: 14:72:38:69:9b:1f:bb:ea:dc:fb:84:2f:dc:48:2b: e1:60:90:34:19:c9:08:a6:a2:09:2a:68:17:42:5c: 4e:fa:e5:95:a9:db:13:be:ec:a0:15:99:ee:3e:1e: c2:23:41:cb:1d:7b:ef:f8:9b:af:cb:61:27:bf:f2: 6b:25:15:36:66:40:0f:37:75:b2:1a:39:cc:72:21: a1:a0:6d:8d:02:57:00:57:52:9b:d4:39:84:f1:f0: 9f:0f:d2:ff:da:2e:44:26:e4:34:40:d0:72:d8:27: 69:f9:80:6e:c7:b9:be:7d:8d:b8:03:30:42:83:11: 57:e7:3b:31:5b:9a:37:03:39:b4:57:18:5f:60:e3: 59:ee:b7:7d:c2:3b:b7:af:40:27:2d:52:a9:9c:43: 2e:22:a1:a6:c1:26:a8:61:b9:5c:50:93:e8:ce:d7: 47:26:2d:9d:85:12:08:3b:4e:39:db:84:2c:a0:7c: 35:95:8e:fe:24:1f:c1:c1:c7:b9:7f:91:4b:c5:06: 46:b8:e3:70:ac:32:aa:92:c0:d0:7f:d2:57:05:1b: 95:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CE:42:65:EE:17:4E:42:EB:02:62:F3:6E:23:89:31:C8:06:CE:E7 X509v3 Authority Key Identifier: keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8b:e1:81:f5:9f:c6:46:70:15:29:62:ae:b2:ed:5a:60:3a: 3e:f1:31:bd:2b:87:3e:27:97:07:9a:24:b9:be:f8:fb:65:e8: 55:ea:fb:2c:ac:4b:97:9d:42:af:3a:c0:c2:fa:86:ff:b8:01: b3:e8:6c:cb:f4:27:5d:e2:c6:f1:c3:3a:00:85:c7:66:71:3f: 27:b7:a5:e4:b6:5f:1a:9e:1c:85:dc:0b:8e:51:04:b9:2e:c8: 7d:39:f5:66:5e:a3:fc:aa:51:bf:00:81:60:24:8b:f1:c1:54: 86:d5:12:3e:46:dc:36:09:04:fb:5b:b6:0f:03:4b:5b:3b:e8: 67:cf:4d:2b:ca:f4:0e:42:0e:74:da:91:04:ee:1b:39:b7:d2: d0:d2:cf:6a:69:2f:a1:4d:37:bd:3f:5f:db:8d:58:8d:e6:0e: e2:c0:62:29:29:bf:5b:c8:3f:83:53:b0:6e:cb:8e:71:0a:c8: ea:49:e5:ba:7e:7c:d1:af:50:be:36:18:61:20:56:40:56:a9: 23:07:c4:24:3e:1b:4e:64:0a:ec:31:de:46:4a:e1:8a:cb:29: 4a:33:54:d3:5a:7b:7d:bc:c6:62:f3:61:d0:aa:2c:fe:22:10: c9:90:a2:2c:f0:41:a7:62:2e:9c:5f:86:4e:c4:d1:99:dc:3b: a2:5d:30:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2MkYxMTAvBgNVBAUTKERGQjY3MjM2NzIxNTFFQzJDNDZDRDA0RTcxQzU5Rjkx NjlDQUU2RjgwHhcNMjUwNjE0MTgyMzQ0WhcNMjUwNjIxMTgyMzQ0WjAYMRYwFAYD VQQDEw02ODRkYmUzMC04MzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ptDB0sbqp7Z5x2EMDLFSt9cVTJZvEhWqi3GXKZkgkWEWc7aKgw9XOJjYcMU cjhpmx+76tz7hC/cSCvhYJA0GckIpqIJKmgXQlxO+uWVqdsTvuygFZnuPh7CI0HL HXvv+Juvy2Env/JrJRU2ZkAPN3WyGjnMciGhoG2NAlcAV1Kb1DmE8fCfD9L/2i5E JuQ0QNBy2Cdp+YBux7m+fY24AzBCgxFX5zsxW5o3Azm0VxhfYONZ7rd9wju3r0An LVKpnEMuIqGmwSaoYblcUJPoztdHJi2dhRIIO04524QsoHw1lY7+JB/Bwce5f5FL xQZGuONwrDKqksDQf9JXBRuV9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7OQmXu F05C6wJi824jiTHIBs7nMB8GA1UdIwQYMBaAFN+2cjZyFR7CxGzQTnHFn5Fpyub4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyRi8xQ0Y5ODcyNjA4 NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhzTEViTkJPY2NXZmtXbks1 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3WnlObklWSHNMRWJOQk9jY1dma1duSzV2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTYyRi8xQ0Y5ODcyNjA4NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhz TEViTkJPY2NXZmtXbks1dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAri+GB9Z/GRnAVKWKusu1aYDo+8TG9K4c+J5cHmiS5vvj7ZehV6vss rEuXnUKvOsDC+ob/uAGz6GzL9Cdd4sbxwzoAhcdmcT8nt6Xktl8anhyF3AuOUQS5 Lsh9OfVmXqP8qlG/AIFgJIvxwVSG1RI+Rtw2CQT7W7YPA0tbO+hnz00ryvQOQg50 2pEE7hs5t9LQ0s9qaS+hTTe9P1/bjViN5g7iwGIpKb9byD+DU7Buy45xCsjqSeW6 fnzRr1C+NhhhIFZAVqkjB8QkPhtOZArsMd5GSuGKyylKM1TTWnt9vMZi82HQqiz+ IhDJkKIs8EGnYi6cX4ZOxNGZ3DuiXTBx -----END CERTIFICATE-----Generated at Sun Jun 15 08:47:12 2025 by rpki-client