$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json) Hash identifier: 94mVsCBILyHBKhm//0dvJBnerVouLIrwT3IsVydxZB0= Subject key identifier: 4B:1E:AB:D9:58:EE:2F:55:11:51:5C:25:76:95:A8:63:80:7C:1E:BD Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft Manifest number: 010C Signing time: Thu 07 Aug 2025 05:28:21 +0000 Manifest this update: Thu 07 Aug 2025 05:28:20 +0000 Manifest next update: Thu 14 Aug 2025 05:28:20 +0000 Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: J55zSQz2yejDWstxKuZH+aqEHIthxFcpnvPwBwA3QNA=) 2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Validity Not Before: Aug 7 05:28:20 2025 GMT Not After : Aug 14 05:28:20 2025 GMT Subject: CN=68943975-edf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:35:10:2d:08:cc:24:20:eb:c0:b7:5c:cd: a2:53:62:64:21:56:dd:62:1f:cc:66:67:f1:e3:75: 97:3d:b6:8a:92:63:ea:40:59:7c:ce:ae:06:25:7e: 91:ff:c9:33:44:96:71:58:51:10:0a:0a:27:4c:60: 6c:fa:35:aa:e0:40:f0:49:30:1d:6a:69:c1:31:4d: ca:cc:9a:f9:5a:79:b8:e2:c6:aa:60:93:07:25:ad: 42:63:20:c4:3e:9c:03:db:4c:9b:34:fb:d3:ff:b9: dc:d3:20:59:8b:02:e9:ce:e3:ff:9a:e5:17:0e:2e: 33:c3:c0:a2:8c:58:2f:8e:0d:3d:2c:b9:fa:49:f9: 48:9f:ba:97:96:c5:e5:8e:80:e7:83:8e:da:69:d3: 8a:de:55:3b:1c:ed:a2:05:ff:7c:a1:8c:7f:9c:50: 52:7e:65:f2:bb:d3:a9:e8:cc:5d:e8:8f:54:48:9c: b3:b6:af:90:92:25:e0:02:3d:ba:4c:e6:a9:a1:7a: ef:2c:ef:60:7c:f3:11:32:59:66:cf:4e:e4:e0:12: 9e:40:77:6d:64:83:75:ad:15:eb:c2:29:33:a0:c9: 64:c9:e8:12:e6:6e:20:b2:30:1f:f9:c7:67:9a:f2: ab:71:f7:f4:17:e0:96:ed:9b:47:92:e4:7d:31:c7: cb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1E:AB:D9:58:EE:2F:55:11:51:5C:25:76:95:A8:63:80:7C:1E:BD X509v3 Authority Key Identifier: keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e6:09:56:e1:89:92:80:3d:b6:01:0e:0d:75:64:73:1b:73: f3:17:cc:e9:5c:ee:e3:d1:a1:97:4e:b7:b1:5d:a6:92:d3:d1: 70:91:5a:2e:3c:d8:69:c7:a2:60:25:8d:85:b4:db:5f:59:67: 6a:8f:cd:23:4b:38:7c:6f:41:bf:c7:8c:f5:d3:56:db:ec:5e: 44:95:41:36:71:1f:cb:20:41:16:7b:57:9c:3b:35:47:64:75: 0d:bf:df:e9:8a:e1:b3:3b:72:97:a2:2b:b0:3c:b5:48:5b:54: da:12:f5:48:66:df:b0:9b:23:1c:bc:63:d7:af:9f:da:bb:4c: b7:04:b3:3b:b8:17:7f:8e:55:68:36:20:e4:e6:7d:53:7c:56: e5:38:49:4e:d4:f4:f6:32:08:39:84:b1:59:48:26:2e:69:cf: 09:38:b0:01:fc:29:51:30:d9:af:06:f4:47:00:37:47:be:e0: 03:6f:2d:e8:5c:e8:55:e2:94:cc:46:d6:8c:ab:a7:10:2f:9a: c2:5c:b7:0d:10:97:56:8f:97:89:70:c3:2d:3b:63:f1:6b:7c: 2c:33:c5:ae:33:50:3c:a6:66:ca:c8:79:df:60:fa:31:0e:4a: f5:81:49:07:2b:ac:0a:ed:35:bf:f9:c3:c3:5a:1c:70:6b:ed: 75:01:7b:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKENFNkM0NkY4MDJCMTVCOENGNEFEQTM0NUE4Mjg4QUQ2 RTdGQTUzNUUwHhcNMjUwODA3MDUyODIwWhcNMjUwODE0MDUyODIwWjAYMRYwFAYD VQQDEw02ODk0Mzk3NS1lZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7c1EC0IzCQg68C3XM2iU2JkIVbdYh/MZmfx43WXPbaKkmPqQFl8zq4GJX6R /8kzRJZxWFEQCgonTGBs+jWq4EDwSTAdamnBMU3KzJr5Wnm44saqYJMHJa1CYyDE PpwD20ybNPvT/7nc0yBZiwLpzuP/muUXDi4zw8CijFgvjg09LLn6SflIn7qXlsXl joDng47aadOK3lU7HO2iBf98oYx/nFBSfmXyu9Op6Mxd6I9USJyztq+QkiXgAj26 TOapoXrvLO9gfPMRMllmz07k4BKeQHdtZIN1rRXrwikzoMlkyegS5m4gsjAf+cdn mvKrcff0F+CW7ZtHkuR9McfLpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEseq9lY 7i9VEVFcJXaVqGOAfB69MB8GA1UdIwQYMBaAFM5sRvgCsVuM9K2jRagoitbn+lNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DNTJCMDI2NEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0ejByYU5GcUNpSzF1ZjZV MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pteEctQUt4VzR6MHJhTkZxQ2lLMXVmNlUxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DNTJCMDI2NEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0 ejByYU5GcUNpSzF1ZjZVMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv5glW4YmSgD22AQ4NdWRzG3PzF8zpXO7j0aGXTrexXaaS09FwkVou PNhpx6JgJY2FtNtfWWdqj80jSzh8b0G/x4z101bb7F5ElUE2cR/LIEEWe1ecOzVH ZHUNv9/piuGzO3KXoiuwPLVIW1TaEvVIZt+wmyMcvGPXr5/au0y3BLM7uBd/jlVo NiDk5n1TfFblOElO1PT2Mgg5hLFZSCYuac8JOLAB/ClRMNmvBvRHADdHvuADby3o XOhV4pTMRtaMq6cQL5rCXLcNEJdWj5eJcMMtO2Pxa3wsM8WuM1A8pmbKyHnfYPox Dkr1gUkHK6wK7TW/+cPDWhxwa+11AXvO -----END CERTIFICATE-----Generated at Fri Aug 8 12:52:02 2025 by rpki-client