$ rpki-client -vvf rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft File: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft (raw, json) Hash identifier: szDtjJDaJVifG9MH1GmFgBJbaZiXnxcN5D3+5ObH3q0= Subject key identifier: FD:BE:99:34:09:AC:F6:8C:28:A8:9D:DC:0C:EC:BF:5B:56:47:13:FB Authority key identifier: CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 Certificate issuer: /CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft Manifest number: D8 Signing time: Tue 09 Sep 2025 05:44:12 +0000 Manifest this update: Tue 09 Sep 2025 05:44:12 +0000 Manifest next update: Tue 16 Sep 2025 05:44:12 +0000 Files and hashes: 1: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl (hash: O5KQ4KuFjPFhrR4RmdQ2xAIUYuPe7g+Yv4GI3r/tuUc=) 2: 96908C564E0C11EF9EAADA7EC4F9AE02.roa (hash: myTckGLdf/CA7XSIN0Ija1G5/OvvYgLLHBvtea2wmM0=) 3: 178F0A124E0D11EFB25FB07FC4F9AE02.roa (hash: 8N1bV5QWQ3eENvqebtxJ1v4YaVDUgYQNRr050Qo7Rgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191354, serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Validity Not Before: Sep 9 05:44:12 2025 GMT Not After : Sep 16 05:44:12 2025 GMT Subject: CN=68bfbeac-2708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:de:22:0c:04:41:5f:9f:4b:7d:b0:b0:ab: 38:99:38:7f:7e:3e:d7:25:8e:1c:4d:48:d3:3c:5e: 28:a5:76:43:4a:d1:32:79:ac:ef:b9:69:c6:f7:c5: b9:74:df:f7:c6:bc:57:cd:ac:e0:7d:db:eb:0e:5a: 9b:14:57:3c:b5:d9:3a:3f:cc:b3:35:e4:2d:38:f9: a9:d8:54:30:49:1f:71:70:cd:50:13:0b:5d:ad:11: 90:5d:cf:c0:01:7d:70:66:29:97:17:8f:db:f0:e5: 71:ed:8b:9b:44:19:97:fa:f3:f0:e7:99:c4:1f:02: 2c:cd:26:fe:64:a1:fa:07:ac:9b:a6:e8:74:7d:1f: b5:a0:0f:f1:54:97:01:37:de:f8:58:41:fc:30:b2: 8e:21:47:89:ea:04:b4:a9:70:7f:aa:a4:09:1a:bf: a7:08:7b:93:24:48:30:e9:38:67:51:64:e9:77:79: 5e:cc:0f:1e:b1:0d:2a:18:a2:3e:3f:28:62:92:cd: de:14:61:e8:57:c8:d9:ce:5a:a4:61:d6:1d:13:e2: 83:58:24:d4:48:f2:bb:75:d9:1d:42:38:d3:55:34: 51:03:fb:ec:71:d5:d8:a1:21:e0:f0:61:ba:30:c6: f3:c7:d5:84:58:c2:e4:b9:4b:6b:27:e1:53:c7:8d: 8f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BE:99:34:09:AC:F6:8C:28:A8:9D:DC:0C:EC:BF:5B:56:47:13:FB X509v3 Authority Key Identifier: keyid:CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:4b:04:ee:fd:24:fd:9d:3f:a1:cb:26:23:82:5c:15:26:ae: 5a:58:c2:84:b5:79:cd:70:22:b1:03:1e:16:50:21:1e:09:40: 8b:4c:c9:04:d3:ec:41:41:ba:72:2b:ef:2b:77:33:9a:f1:2e: f2:4a:d7:91:c2:86:fe:05:2e:4b:2a:33:53:e6:f7:d1:3f:a0: 18:39:bd:d0:b8:a2:fe:1e:c5:99:f5:7f:33:90:c8:54:fe:88: 11:0b:7c:fe:d5:69:33:ea:00:9f:b7:0c:f7:f7:2b:98:71:00: b5:ef:dd:4d:53:54:40:39:bf:85:d3:6a:52:9e:cc:0a:bf:df: 0c:db:b2:2c:5f:53:30:d7:a0:04:57:dc:e3:1e:50:7d:20:35: 4f:e9:88:e2:d7:dc:29:dd:02:d3:9c:e6:f0:62:51:6c:48:c1: ba:b4:95:5e:f2:23:11:c0:c6:e5:3d:08:dd:34:f9:8b:4c:0a: 99:61:2b:48:82:8d:f0:78:a5:03:a6:33:b5:c4:9a:1f:5c:cc: cd:f0:f4:3f:70:ff:98:ad:66:6f:6c:cd:3c:ba:4c:00:0f:8f: 04:c3:0a:21:c3:c6:fb:0a:88:f2:db:86:aa:fd:0f:9b:ee:d9: 5c:51:8f:14:b0:da:9f:0e:23:db:19:de:53:22:e8:b4:f4:94: 59:cf:16:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNTQxMTAvBgNVBAUTKENFQzlCMUIzNTlGRTU4RTkwMjNBODRDRkMyNjc0QzE2 MTgyOEY5OTkwHhcNMjUwOTA5MDU0NDEyWhcNMjUwOTE2MDU0NDEyWjAYMRYwFAYD VQQDEw02OGJmYmVhYy0yNzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSneIgwEQV+fS32wsKs4mTh/fj7XJY4cTUjTPF4opXZDStEyeazvuWnG98W5 dN/3xrxXzazgfdvrDlqbFFc8tdk6P8yzNeQtOPmp2FQwSR9xcM1QEwtdrRGQXc/A AX1wZimXF4/b8OVx7YubRBmX+vPw55nEHwIszSb+ZKH6B6ybpuh0fR+1oA/xVJcB N974WEH8MLKOIUeJ6gS0qXB/qqQJGr+nCHuTJEgw6ThnUWTpd3lezA8esQ0qGKI+ Pyhiks3eFGHoV8jZzlqkYdYdE+KDWCTUSPK7ddkdQjjTVTRRA/vscdXYoSHg8GG6 MMbzx9WEWMLkuUtrJ+FTx42P0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2+mTQJ rPaMKKid3Azsv1tWRxP7MB8GA1UdIwQYMBaAFM7JsbNZ/ljpAjqEz8JnTBYYKPmZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM1NC84RDRFQ0Y4NDRE ODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi96c214czFuLVdPa0NPb1RQd21kTUZoZ28t WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pzbXhzMW4tV09rQ09vVFB3bWRNRmhnby1aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM1NC84RDRFQ0Y4NDREODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi96c214czFuLVdP a0NPb1RQd21kTUZoZ28tWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCESwTu/ST9nT+hyyYjglwVJq5aWMKEtXnNcCKxAx4WUCEeCUCLTMkE 0+xBQbpyK+8rdzOa8S7ySteRwob+BS5LKjNT5vfRP6AYOb3QuKL+HsWZ9X8zkMhU /ogRC3z+1Wkz6gCftwz39yuYcQC1791NU1RAOb+F02pSnswKv98M27IsX1Mw16AE V9zjHlB9IDVP6Yji19wp3QLTnObwYlFsSMG6tJVe8iMRwMblPQjdNPmLTAqZYStI go3weKUDpjO1xJofXMzN8PQ/cP+YrWZvbM08ukwAD48Ewwohw8b7Cojy24aq/Q+b 7tlcUY8UsNqfDiPbGd5TIui09JRZzxZ4 -----END CERTIFICATE-----Generated at Wed Sep 10 23:57:11 2025 by rpki-client