$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json) Hash identifier: 8Hp4r32jhrhxvvWizHzMDoWkWEAiiteDDPXvSbsLrbo= Subject key identifier: 0E:87:66:C5:1E:C1:B2:66:DA:03:B9:6F:58:6C:5D:42:50:EF:C9:05 Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft Manifest number: 0139 Signing time: Mon 03 Nov 2025 04:28:22 +0000 Manifest this update: Mon 03 Nov 2025 04:28:21 +0000 Manifest next update: Mon 10 Nov 2025 04:28:21 +0000 Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: DxkaNq3JmncH3OMpHq4PZeRNhgKXghRBXXxxhizmRAE=) 2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Validity Not Before: Nov 3 04:28:21 2025 GMT Not After : Nov 10 04:28:21 2025 GMT Subject: CN=69082f65-5f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:10:89:c7:b2:f3:d6:9b:ef:1c:3e:89:1b:ae: a3:1a:7b:76:83:79:e1:49:42:6f:10:f0:ff:47:86: 8a:dd:6a:83:9f:76:22:eb:67:6a:4e:af:2d:55:bc: 31:36:f0:b3:61:02:02:d3:73:ed:52:b5:c0:e5:bd: 5a:1a:ba:f9:15:73:b4:5d:4d:ae:c0:9b:cb:ca:69: ba:99:3c:38:1e:27:59:96:a5:ad:29:48:a0:cd:45: 4a:8f:c3:bb:cb:96:c3:1d:15:a1:ca:bd:37:1d:42: a8:81:f1:04:ce:59:a6:a4:0b:be:ed:6f:53:39:28: 03:67:90:e6:7d:d1:bc:ce:c5:09:db:34:4b:f4:58: 64:f6:69:b2:e9:75:16:c3:02:55:62:62:37:7e:01: 67:05:26:65:38:a6:5e:b0:b6:3e:80:02:03:d8:64: eb:06:34:2c:dd:33:7d:e8:9f:ac:be:90:0d:2b:7f: 95:da:9e:f3:88:fc:ae:1c:42:c9:4c:e4:02:9f:19: a1:db:35:33:31:9a:5d:88:64:fa:87:db:2d:61:2e: eb:ca:79:02:ea:d0:70:6a:62:94:18:a9:34:6d:4d: 11:96:78:bc:5d:52:ee:c2:0c:59:bc:e3:8c:d5:02: 65:86:69:e1:ee:d6:d2:4f:d4:87:c3:ad:b9:a9:57: 0d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:87:66:C5:1E:C1:B2:66:DA:03:B9:6F:58:6C:5D:42:50:EF:C9:05 X509v3 Authority Key Identifier: keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:53:5a:0d:f0:83:eb:34:c6:c1:3c:dd:8c:12:b8:b6:18:d9: 6f:e7:6d:ce:78:18:57:4d:62:a9:15:8f:28:af:33:dc:a1:73: 67:18:d3:04:93:28:37:bf:03:f1:d8:70:0f:8a:9d:22:c2:d2: e9:e6:29:eb:f8:2f:fe:4d:e2:b6:35:91:1d:63:ee:e6:83:fd: df:5b:f4:5c:b7:16:ef:de:aa:50:d7:4f:af:f7:ed:34:fe:10: fd:bc:d0:0f:fd:3b:0f:6d:0b:71:c5:e4:ed:44:bb:f3:d3:24: 2c:b5:e3:b4:8d:74:2a:be:3c:ca:61:d7:85:8a:37:74:7f:9e: 37:3a:5a:7b:41:d1:98:4d:d1:37:74:5b:3f:b3:7e:5c:c7:d1: b8:15:a4:cb:2f:7e:d6:54:b4:5d:48:94:a3:61:b9:a3:2c:40: f7:9f:44:69:f8:96:78:65:05:e7:07:c4:ec:ee:65:40:10:60: 23:33:90:4b:ed:d7:c7:75:08:5a:77:b4:05:f1:1b:33:0b:aa: f2:c8:7b:df:2c:a9:ff:78:7e:ad:b5:1c:55:77:ab:56:33:f6: b6:62:39:37:89:a2:3c:34:65:d4:94:41:d1:cf:d7:58:59:d8: 63:41:ad:2d:fb:3d:19:23:ce:f0:43:11:0c:ca:e8:5b:b3:ae: 04:43:aa:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKENFNkM0NkY4MDJCMTVCOENGNEFEQTM0NUE4Mjg4QUQ2 RTdGQTUzNUUwHhcNMjUxMTAzMDQyODIxWhcNMjUxMTEwMDQyODIxWjAYMRYwFAYD VQQDEw02OTA4MmY2NS01ZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RCJx7Lz1pvvHD6JG66jGnt2g3nhSUJvEPD/R4aK3WqDn3Yi62dqTq8tVbwx NvCzYQIC03PtUrXA5b1aGrr5FXO0XU2uwJvLymm6mTw4HidZlqWtKUigzUVKj8O7 y5bDHRWhyr03HUKogfEEzlmmpAu+7W9TOSgDZ5DmfdG8zsUJ2zRL9Fhk9mmy6XUW wwJVYmI3fgFnBSZlOKZesLY+gAID2GTrBjQs3TN96J+svpANK3+V2p7ziPyuHELJ TOQCnxmh2zUzMZpdiGT6h9stYS7rynkC6tBwamKUGKk0bU0Rlni8XVLuwgxZvOOM 1QJlhmnh7tbST9SHw625qVcNfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6HZsUe wbJm2gO5b1hsXUJQ78kFMB8GA1UdIwQYMBaAFM5sRvgCsVuM9K2jRagoitbn+lNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DNTJCMDI2NEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0ejByYU5GcUNpSzF1ZjZV MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pteEctQUt4VzR6MHJhTkZxQ2lLMXVmNlUxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DNTJCMDI2NEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0 ejByYU5GcUNpSzF1ZjZVMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjU1oN8IPrNMbBPN2MEri2GNlv523OeBhXTWKpFY8orzPcoXNnGNME kyg3vwPx2HAPip0iwtLp5inr+C/+TeK2NZEdY+7mg/3fW/Rctxbv3qpQ10+v9+00 /hD9vNAP/TsPbQtxxeTtRLvz0yQsteO0jXQqvjzKYdeFijd0f543Olp7QdGYTdE3 dFs/s35cx9G4FaTLL37WVLRdSJSjYbmjLED3n0Rp+JZ4ZQXnB8Ts7mVAEGAjM5BL 7dfHdQhad7QF8RszC6ryyHvfLKn/eH6ttRxVd6tWM/a2Yjk3iaI8NGXUlEHRz9dY WdhjQa0t+z0ZI87wQxEMyuhbs64EQ6pq -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:59 2025 by rpki-client