$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json) Hash identifier: C+KHjGZMpYOvjw0LoTWZ6OAohXRUOvdNGe01hMUcl5k= Subject key identifier: C5:E4:2B:03:30:84:52:05:97:11:84:9B:58:E0:33:E0:30:FD:31:DA Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft Manifest number: 011A Signing time: Wed 03 Sep 2025 05:18:03 +0000 Manifest this update: Wed 03 Sep 2025 05:18:03 +0000 Manifest next update: Wed 10 Sep 2025 05:18:03 +0000 Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: nP9d2YvyicjJdJmHmcXmcsPrKFqtL1i/BBW8YaVsYCo=) 2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Validity Not Before: Sep 3 05:18:03 2025 GMT Not After : Sep 10 05:18:03 2025 GMT Subject: CN=68b7cf8b-ea53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:78:9c:68:ad:46:0a:ff:5e:e1:d2:61:dc:01: 53:26:8d:4c:52:0a:e5:5f:b7:d2:b4:b8:6e:96:12: 3f:2a:a2:b7:66:eb:d1:86:5d:f7:56:f4:54:37:e1: b7:25:5c:14:3f:df:c3:c9:9b:34:6e:cc:d7:76:60: c4:c0:46:3d:77:f2:e3:08:07:c1:21:8f:35:2f:67: ce:fb:af:e4:d6:94:59:14:f4:8e:d7:bb:64:9c:b6: 62:33:f0:32:86:5b:29:dd:c5:76:84:34:92:52:90: 2f:a0:5e:75:4e:42:14:3a:49:a5:61:99:0e:57:da: 7e:1b:31:d0:7e:7d:68:8b:64:91:bc:42:cf:89:80: 9d:22:b3:cd:17:1a:4c:62:7c:df:aa:6c:34:b2:9c: 98:7c:74:13:42:1d:f6:4f:5c:39:d3:fe:d7:90:d7: b7:0f:28:9b:ee:52:1f:59:9c:28:8f:a7:d9:42:59: 25:30:60:67:12:d1:81:34:3c:e1:14:14:f2:a3:84: ae:58:c0:c8:9a:b5:b2:34:55:b7:97:e0:4d:96:ac: e4:2e:c9:87:f3:43:b5:38:4d:28:87:2f:dc:1f:e1: fa:7f:c6:d7:bf:45:de:f8:b5:f9:6a:86:99:6e:82: eb:24:9e:56:4e:fb:00:64:49:6c:f0:cc:31:ab:30: 91:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E4:2B:03:30:84:52:05:97:11:84:9B:58:E0:33:E0:30:FD:31:DA X509v3 Authority Key Identifier: keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:ad:80:e0:4c:fd:b3:7b:18:23:c9:fa:df:1b:31:8e:21:84: b5:17:e3:ba:23:ef:3a:ea:6f:c8:6e:7a:12:10:bb:97:41:97: cd:39:0a:f0:63:54:fd:0e:42:37:0a:1b:78:56:3f:21:37:ff: 87:08:fc:f9:c9:66:6a:8a:b1:48:cf:65:a7:e5:9a:75:04:d8: 7c:a9:97:59:96:d8:b2:09:df:a6:a5:f8:bb:46:50:74:45:9b: db:43:ed:83:9b:76:ca:34:76:ad:c2:9d:2f:db:cf:12:e7:00: bb:46:0a:96:28:78:0a:51:99:a5:e2:5c:de:9d:3b:4b:f4:68: 14:fb:1b:00:d4:75:76:9c:63:08:63:dd:49:d6:da:08:5a:fd: c0:16:61:3f:35:2c:4e:6e:6a:92:b6:4a:7c:5e:05:64:61:40: 00:1e:02:1f:de:76:fe:56:25:22:4e:b5:84:05:2e:17:2c:17: 86:59:f7:6d:1c:44:0f:63:a5:93:b2:4f:fd:c0:5d:e5:ef:f2: 60:ea:27:16:11:dc:16:be:77:cb:06:40:6f:22:15:76:15:32: 8e:a5:bf:6c:d9:6e:65:af:38:cc:ea:34:c7:c8:75:48:a4:a7: 22:5c:27:bc:2d:1f:81:3a:e8:54:95:3b:b3:ac:a1:51:36:bc: 87:78:ed:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKENFNkM0NkY4MDJCMTVCOENGNEFEQTM0NUE4Mjg4QUQ2 RTdGQTUzNUUwHhcNMjUwOTAzMDUxODAzWhcNMjUwOTEwMDUxODAzWjAYMRYwFAYD VQQDEw02OGI3Y2Y4Yi1lYTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XicaK1GCv9e4dJh3AFTJo1MUgrlX7fStLhulhI/KqK3ZuvRhl33VvRUN+G3 JVwUP9/DyZs0bszXdmDEwEY9d/LjCAfBIY81L2fO+6/k1pRZFPSO17tknLZiM/Ay hlsp3cV2hDSSUpAvoF51TkIUOkmlYZkOV9p+GzHQfn1oi2SRvELPiYCdIrPNFxpM Ynzfqmw0spyYfHQTQh32T1w50/7XkNe3Dyib7lIfWZwoj6fZQlklMGBnEtGBNDzh FBTyo4SuWMDImrWyNFW3l+BNlqzkLsmH80O1OE0ohy/cH+H6f8bXv0Xe+LX5aoaZ boLrJJ5WTvsAZEls8MwxqzCR9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXkKwMw hFIFlxGEm1jgM+Aw/THaMB8GA1UdIwQYMBaAFM5sRvgCsVuM9K2jRagoitbn+lNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DNTJCMDI2NEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0ejByYU5GcUNpSzF1ZjZV MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pteEctQUt4VzR6MHJhTkZxQ2lLMXVmNlUxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DNTJCMDI2NEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0 ejByYU5GcUNpSzF1ZjZVMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwrYDgTP2zexgjyfrfGzGOIYS1F+O6I+866m/IbnoSELuXQZfNOQrw Y1T9DkI3Cht4Vj8hN/+HCPz5yWZqirFIz2Wn5Zp1BNh8qZdZltiyCd+mpfi7RlB0 RZvbQ+2Dm3bKNHatwp0v288S5wC7RgqWKHgKUZml4lzenTtL9GgU+xsA1HV2nGMI Y91J1toIWv3AFmE/NSxObmqStkp8XgVkYUAAHgIf3nb+ViUiTrWEBS4XLBeGWfdt HEQPY6WTsk/9wF3l7/Jg6icWEdwWvnfLBkBvIhV2FTKOpb9s2W5lrzjM6jTHyHVI pKciXCe8LR+BOuhUlTuzrKFRNryHeO06 -----END CERTIFICATE-----Generated at Thu Sep 4 13:59:05 2025 by rpki-client