$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json) Hash identifier: MrjXt6uvx9MlOfMxVdli4zaiyczIZPBK45r03NTU9Bc= Subject key identifier: 9D:12:A7:8F:1F:6D:66:84:36:83:C0:B7:11:61:18:15:79:1F:F5:EC Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft Manifest number: F1 Signing time: Sun 15 Jun 2025 04:26:46 +0000 Manifest this update: Sun 15 Jun 2025 04:26:46 +0000 Manifest next update: Sun 22 Jun 2025 04:26:46 +0000 Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: pKlBecKMBUZEI4bc0A0H+FB3WnbdfVOTDJJ3zmV9vS4=) 2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Validity Not Before: Jun 15 04:26:46 2025 GMT Not After : Jun 22 04:26:46 2025 GMT Subject: CN=684e4b86-8a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:0f:be:49:46:58:46:6f:42:ab:d7:45:e7: 7b:50:5f:cb:0d:95:6f:6d:03:6d:e4:a6:cb:fc:92: e0:52:1f:9f:a9:5e:17:53:63:40:a9:d4:fe:e4:7f: 0e:ae:cf:59:16:c1:20:bf:a5:c1:c9:9b:79:05:4b: c5:73:06:63:42:28:7b:33:64:5f:40:e1:db:bb:ae: ae:43:06:04:21:25:e7:a6:27:92:ed:70:c8:be:a6: 20:fd:c6:e0:11:19:03:ac:91:54:17:aa:d9:cc:17: b1:38:72:88:c6:ba:77:87:fe:84:7a:16:17:f3:8a: 9e:87:2a:43:51:62:08:d2:f9:d1:f2:df:82:d8:36: 4a:55:47:8c:eb:00:96:45:1d:0b:c7:62:db:c2:ac: cb:5d:47:c4:3f:14:3b:93:bb:45:13:8a:40:ab:97: 36:fa:ee:72:3a:cb:81:a9:7f:f7:ee:68:15:7e:a9: 58:2f:2b:bd:86:8b:da:d3:b9:1e:00:c6:b7:8e:9a: 1d:b0:08:87:b7:1a:79:30:74:22:ac:77:38:d1:94: 82:1c:32:44:ee:16:80:20:1a:42:f0:ac:05:e7:bf: 7b:70:be:ec:da:30:6b:88:80:80:ea:71:27:ea:f8: b6:f9:26:04:36:96:d5:d9:c0:43:a4:df:2a:20:ff: 0d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:12:A7:8F:1F:6D:66:84:36:83:C0:B7:11:61:18:15:79:1F:F5:EC X509v3 Authority Key Identifier: keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:3f:4b:a3:42:14:8c:09:7e:78:ea:93:48:04:d9:3a:9e:d4: 8e:29:60:bf:59:6b:74:f7:48:52:63:7c:68:ec:6e:93:47:0c: fd:ed:17:4a:58:e7:9f:d5:fc:0b:04:a8:66:a2:33:a9:cf:54: c8:2b:42:ee:a3:92:72:d2:d6:9c:c7:5a:b4:34:90:3a:7f:85: 0d:02:a2:12:d8:1f:21:6c:85:1d:a5:c0:2d:d0:d9:bf:3d:11: b3:f6:e2:74:8f:bd:05:9e:f3:c8:ff:7f:e6:26:7d:76:0d:27: 89:e0:dd:09:41:52:8a:6b:35:e7:29:0d:e1:fd:1c:51:f6:53: d9:58:2b:22:66:4b:bb:9d:be:06:85:61:94:a7:dd:7a:27:ef: 36:37:9c:74:48:e4:88:e1:65:60:41:11:99:bb:5e:17:6d:2b: 1d:c1:38:50:09:86:b7:1e:47:49:fa:db:b2:5f:db:2b:12:f8: a4:30:33:27:22:a3:fe:87:c4:ed:89:a5:68:b0:79:c1:98:46: d2:9b:01:81:68:65:87:cc:66:f7:7b:46:2c:23:c9:95:a2:c0: 83:62:bd:c8:35:19:f9:11:e8:39:a1:14:ad:44:2e:0e:a9:ad: 7d:a2:74:3c:97:4c:59:52:65:1a:fd:dc:0d:33:3b:59:06:c2: 3e:cc:ec:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKENFNkM0NkY4MDJCMTVCOENGNEFEQTM0NUE4Mjg4QUQ2 RTdGQTUzNUUwHhcNMjUwNjE1MDQyNjQ2WhcNMjUwNjIyMDQyNjQ2WjAYMRYwFAYD VQQDEw02ODRlNGI4Ni04YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuQPvklGWEZvQqvXRed7UF/LDZVvbQNt5KbL/JLgUh+fqV4XU2NAqdT+5H8O rs9ZFsEgv6XByZt5BUvFcwZjQih7M2RfQOHbu66uQwYEISXnpieS7XDIvqYg/cbg ERkDrJFUF6rZzBexOHKIxrp3h/6EehYX84qehypDUWII0vnR8t+C2DZKVUeM6wCW RR0Lx2LbwqzLXUfEPxQ7k7tFE4pAq5c2+u5yOsuBqX/37mgVfqlYLyu9hova07ke AMa3jpodsAiHtxp5MHQirHc40ZSCHDJE7haAIBpC8KwF5797cL7s2jBriICA6nEn 6vi2+SYENpbV2cBDpN8qIP8NMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0Sp48f bWaENoPAtxFhGBV5H/XsMB8GA1UdIwQYMBaAFM5sRvgCsVuM9K2jRagoitbn+lNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DNTJCMDI2NEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0ejByYU5GcUNpSzF1ZjZV MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pteEctQUt4VzR6MHJhTkZxQ2lLMXVmNlUxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DNTJCMDI2NEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0 ejByYU5GcUNpSzF1ZjZVMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwP0ujQhSMCX546pNIBNk6ntSOKWC/WWt090hSY3xo7G6TRwz97RdK WOef1fwLBKhmojOpz1TIK0Luo5Jy0tacx1q0NJA6f4UNAqIS2B8hbIUdpcAt0Nm/ PRGz9uJ0j70FnvPI/3/mJn12DSeJ4N0JQVKKazXnKQ3h/RxR9lPZWCsiZku7nb4G hWGUp916J+82N5x0SOSI4WVgQRGZu14XbSsdwThQCYa3HkdJ+tuyX9srEvikMDMn IqP+h8TtiaVosHnBmEbSmwGBaGWHzGb3e0YsI8mVosCDYr3INRn5Eeg5oRStRC4O qa19onQ8l0xZUmUa/dwNMztZBsI+zOzR -----END CERTIFICATE-----Generated at Mon Jun 16 16:19:27 2025 by rpki-client