$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json) Hash identifier: Qzib0kMm4Bn8357uorUhGqsbIuudvGGCCxHoz1sb73Y= Subject key identifier: 1E:18:BF:13:DB:47:64:F9:D8:2A:C6:D9:97:C3:AD:BE:45:D9:4A:FB Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Certificate serial: 0C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft Manifest number: 0C2D Signing time: Thu 24 Apr 2025 18:29:22 +0000 Manifest this update: Thu 24 Apr 2025 18:29:22 +0000 Manifest next update: Thu 01 May 2025 18:29:22 +0000 Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: msDvfm23uhg2uKsDMIva08mRjhpgrJdGg1WHvIIA0zI=) 2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: SVlu02hkSNzBlCDk2yMt2xQVwlZY+Mck+6jTuLXWYgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3132 (0xc3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Validity Not Before: Apr 24 18:29:22 2025 GMT Not After : May 1 18:29:22 2025 GMT Subject: CN=680a8302-b6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7d:40:c4:84:54:66:eb:44:f0:96:a2:72:ed: 11:a1:0a:27:4a:a2:f6:5e:5a:2e:36:9d:55:c6:54: 60:d5:17:a2:01:fc:19:46:ef:ed:84:c4:05:42:9b: f4:e5:54:1b:44:07:ce:19:a5:f0:57:99:8e:68:98: 4e:0e:8d:e8:85:02:91:24:a8:64:d6:74:c6:d1:c3: 47:31:62:a2:a4:33:1a:36:4a:c5:c5:93:f4:6e:e6: ce:9d:b4:93:79:5e:a1:b4:09:62:8a:d8:c6:00:29: 9c:cc:e4:97:3d:0f:83:11:4c:62:6a:67:79:20:da: 65:58:e7:a7:e8:71:21:9b:af:ed:ef:fa:b5:ce:56: a9:45:b1:68:fe:39:f3:01:57:c9:bd:ed:8f:93:0b: c7:f1:87:4d:63:86:2a:ad:f8:1e:a1:34:6f:f6:df: 74:6d:4b:dc:77:0c:61:f4:a8:78:23:c2:a6:a7:68: 2a:75:45:5c:7e:60:4f:c2:bf:dc:da:aa:fc:ee:d0: fe:89:61:8f:a6:0f:47:8b:24:92:5d:dd:21:54:5a: 50:4a:b6:3f:a2:11:4f:b7:50:3d:11:13:2d:b1:29: c9:7a:f9:6d:5c:18:c7:e9:35:0a:d9:be:64:0c:50: 43:f8:ca:be:d0:0f:d7:f5:1c:ba:a3:4c:fb:20:1b: 5a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:18:BF:13:DB:47:64:F9:D8:2A:C6:D9:97:C3:AD:BE:45:D9:4A:FB X509v3 Authority Key Identifier: keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:86:c0:0b:4c:fd:74:65:d8:35:7a:63:ed:32:54:41:81:e5: ab:c1:d6:51:bf:6e:6d:1f:83:24:ce:24:3b:17:22:c1:89:ed: 53:99:cd:f3:ef:a6:d8:ce:01:91:64:b2:f0:d9:63:0a:e2:c0: 10:ec:f4:c5:a9:08:44:94:84:a6:76:a3:54:b4:10:08:2f:76: 13:12:2a:f4:a9:1a:c5:7f:97:80:b9:ef:23:97:1a:39:78:0a: 52:1a:82:19:0f:11:a1:5c:dd:b1:0f:ff:4f:dc:f0:d7:3e:5f: 4e:52:43:a2:ab:d5:a2:ab:36:73:9a:51:7a:b4:e3:8f:bc:2b: 94:e1:a2:01:04:0d:9a:c7:45:48:1d:7a:e4:e7:d5:d8:5f:b2: 6b:fb:cb:98:07:3a:7e:7b:c2:5a:7e:dd:3e:06:19:d6:71:0b: af:53:60:5e:74:aa:de:8e:44:07:37:f4:f7:1b:dd:d2:cd:22: 3e:7e:16:a6:82:a7:8c:5c:5f:91:6d:58:f1:03:ca:35:c5:5d: 86:66:dd:49:bd:04:32:bc:94:da:b2:c1:70:f1:85:17:20:37: 62:1b:0f:ad:41:fe:18:65:9c:f1:be:c9:02:01:4b:3e:c2:45: 0d:ff:86:bc:35:49:d3:72:5e:0b:43:80:05:a4:a0:0b:ed:80: 24:0e:33:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2MkYxMTAvBgNVBAUTKERGQjY3MjM2NzIxNTFFQzJDNDZDRDA0RTcxQzU5Rjkx NjlDQUU2RjgwHhcNMjUwNDI0MTgyOTIyWhcNMjUwNTAxMTgyOTIyWjAYMRYwFAYD VQQDEw02ODBhODMwMi1iNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl31AxIRUZutE8Jaicu0RoQonSqL2XlouNp1VxlRg1ReiAfwZRu/thMQFQpv0 5VQbRAfOGaXwV5mOaJhODo3ohQKRJKhk1nTG0cNHMWKipDMaNkrFxZP0bubOnbST eV6htAliitjGACmczOSXPQ+DEUxiamd5INplWOen6HEhm6/t7/q1zlapRbFo/jnz AVfJve2PkwvH8YdNY4YqrfgeoTRv9t90bUvcdwxh9Kh4I8Kmp2gqdUVcfmBPwr/c 2qr87tD+iWGPpg9HiySSXd0hVFpQSrY/ohFPt1A9ERMtsSnJevltXBjH6TUK2b5k DFBD+Mq+0A/X9Ry6o0z7IBta8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4YvxPb R2T52CrG2ZfDrb5F2Ur7MB8GA1UdIwQYMBaAFN+2cjZyFR7CxGzQTnHFn5Fpyub4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyRi8xQ0Y5ODcyNjA4 NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhzTEViTkJPY2NXZmtXbks1 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3WnlObklWSHNMRWJOQk9jY1dma1duSzV2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTYyRi8xQ0Y5ODcyNjA4NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhz TEViTkJPY2NXZmtXbks1dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3hsALTP10Zdg1emPtMlRBgeWrwdZRv25tH4MkziQ7FyLBie1Tmc3z 76bYzgGRZLLw2WMK4sAQ7PTFqQhElISmdqNUtBAIL3YTEir0qRrFf5eAue8jlxo5 eApSGoIZDxGhXN2xD/9P3PDXPl9OUkOiq9WiqzZzmlF6tOOPvCuU4aIBBA2ax0VI HXrk59XYX7Jr+8uYBzp+e8Jaft0+BhnWcQuvU2BedKrejkQHN/T3G93SzSI+fham gqeMXF+RbVjxA8o1xV2GZt1JvQQyvJTassFw8YUXIDdiGw+tQf4YZZzxvskCAUs+ wkUN/4a8NUnTcl4LQ4AFpKAL7YAkDjNE -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:24 2025 by rpki-client