$ rpki-client -vvf rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft File: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft (raw, json) Hash identifier: f5SgSEy/zO/Q0qXpSrF9CLvgTHYOs3+/LDzXPOCQ7k0= Subject key identifier: 22:42:35:6E:CF:10:83:BB:62:78:66:3D:FC:14:65:EE:81:AE:E0:BF Authority key identifier: CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 Certificate issuer: /CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft Manifest number: C9 Signing time: Mon 11 Aug 2025 06:00:43 +0000 Manifest this update: Mon 11 Aug 2025 06:00:43 +0000 Manifest next update: Mon 18 Aug 2025 06:00:42 +0000 Files and hashes: 1: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl (hash: 1mMyKgk5mobvJT4cKqVal/dwkqX4I0CKuHaq72+K6eE=) 2: 96908C564E0C11EF9EAADA7EC4F9AE02.roa (hash: myTckGLdf/CA7XSIN0Ija1G5/OvvYgLLHBvtea2wmM0=) 3: 178F0A124E0D11EFB25FB07FC4F9AE02.roa (hash: 8N1bV5QWQ3eENvqebtxJ1v4YaVDUgYQNRr050Qo7Rgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191354, serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Validity Not Before: Aug 11 06:00:43 2025 GMT Not After : Aug 18 06:00:42 2025 GMT Subject: CN=6899870b-7c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:10:cd:ea:5b:90:81:2e:d5:d8:b4:bf:a2:cc: 11:52:b2:b8:9c:76:48:cd:f2:cf:5e:4b:ed:17:aa: e0:10:fb:24:f2:cb:2a:9d:d9:ba:91:03:78:6b:73: 7b:54:72:08:94:31:de:6a:03:2f:05:12:9e:83:28: 5a:0f:5f:53:d3:66:a3:4b:33:6b:03:5b:8a:0c:aa: 9a:11:62:68:18:ce:e7:4b:81:90:f9:ef:14:33:02: 03:9d:f4:9a:f7:aa:79:52:d4:db:7f:1e:af:1e:11: 2d:fb:1f:61:88:19:b7:10:6d:c3:ee:5d:01:dd:20: 47:7d:a1:cb:4e:7c:57:a4:b0:32:96:96:f5:48:2a: d4:8c:c2:92:a8:43:12:76:42:02:aa:3f:7e:40:b4: 2a:6a:df:38:b0:f3:11:ac:87:4d:8d:9d:76:b1:22: ea:2c:95:3b:06:9c:25:1c:59:3d:95:7b:70:4b:92: 17:8a:bf:d5:6d:6d:80:04:ac:13:64:08:03:4e:a0: 0f:30:a6:c1:ec:22:4e:ec:73:a8:76:48:c1:49:57: 0c:53:90:a6:47:3b:c5:74:f1:80:fa:c8:0f:6e:64: 5f:b5:1d:de:35:79:76:2a:f1:8e:75:01:a8:53:95: 12:0c:91:52:6c:ce:b6:49:c8:dd:ef:ec:ea:94:2a: 23:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:42:35:6E:CF:10:83:BB:62:78:66:3D:FC:14:65:EE:81:AE:E0:BF X509v3 Authority Key Identifier: keyid:CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e4:f5:b5:b6:e5:c5:b6:e0:7f:7d:1b:01:42:6e:8e:68:81: 5a:8e:ec:8e:38:a5:04:d2:c1:27:e4:1f:8c:2f:1d:f4:57:10: 0d:97:32:82:d0:6c:d9:e9:a1:09:c2:1b:59:b9:73:69:f1:23: 22:c7:78:ad:bf:61:c3:12:01:65:5c:52:62:c1:11:cc:e2:31: cc:e8:95:bc:3f:0e:35:71:02:91:fe:67:03:48:6d:bc:2e:e6: 45:4b:fb:16:77:5b:d4:db:d2:be:40:74:cb:fa:63:6c:cd:dd: b3:17:51:35:8a:03:1b:ea:2e:37:70:e6:18:37:a8:e3:a3:d5: 5b:fd:9d:43:28:30:da:21:1a:38:25:4d:bc:b1:5c:af:72:82: bd:a4:86:a7:1e:ac:69:42:c6:9b:59:c9:1c:77:92:7a:27:31: 3d:ca:1c:29:09:df:7d:60:b4:c4:be:93:ac:44:40:69:70:83: c0:4f:1f:d3:65:4e:dc:f8:39:e4:27:24:53:f2:eb:ac:60:5b: bd:01:d0:8f:78:f2:bd:07:c7:31:2b:99:29:ef:a0:8d:4c:2b: 7a:0a:2f:66:4a:10:1d:b8:b6:94:a5:9d:67:2e:ec:92:71:96: 71:61:22:2f:8b:3b:00:e3:37:e7:5c:52:a0:94:7a:6b:e9:d0: 6f:c7:77:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNTQxMTAvBgNVBAUTKENFQzlCMUIzNTlGRTU4RTkwMjNBODRDRkMyNjc0QzE2 MTgyOEY5OTkwHhcNMjUwODExMDYwMDQzWhcNMjUwODE4MDYwMDQyWjAYMRYwFAYD VQQDEw02ODk5ODcwYi03YzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxDN6luQgS7V2LS/oswRUrK4nHZIzfLPXkvtF6rgEPsk8ssqndm6kQN4a3N7 VHIIlDHeagMvBRKegyhaD19T02ajSzNrA1uKDKqaEWJoGM7nS4GQ+e8UMwIDnfSa 96p5UtTbfx6vHhEt+x9hiBm3EG3D7l0B3SBHfaHLTnxXpLAylpb1SCrUjMKSqEMS dkICqj9+QLQqat84sPMRrIdNjZ12sSLqLJU7BpwlHFk9lXtwS5IXir/VbW2ABKwT ZAgDTqAPMKbB7CJO7HOodkjBSVcMU5CmRzvFdPGA+sgPbmRftR3eNXl2KvGOdQGo U5USDJFSbM62Scjd7+zqlCoj7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJCNW7P EIO7YnhmPfwUZe6BruC/MB8GA1UdIwQYMBaAFM7JsbNZ/ljpAjqEz8JnTBYYKPmZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM1NC84RDRFQ0Y4NDRE ODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi96c214czFuLVdPa0NPb1RQd21kTUZoZ28t WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pzbXhzMW4tV09rQ09vVFB3bWRNRmhnby1aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM1NC84RDRFQ0Y4NDREODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi96c214czFuLVdP a0NPb1RQd21kTUZoZ28tWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA35PW1tuXFtuB/fRsBQm6OaIFajuyOOKUE0sEn5B+MLx30VxANlzKC 0GzZ6aEJwhtZuXNp8SMix3itv2HDEgFlXFJiwRHM4jHM6JW8Pw41cQKR/mcDSG28 LuZFS/sWd1vU29K+QHTL+mNszd2zF1E1igMb6i43cOYYN6jjo9Vb/Z1DKDDaIRo4 JU28sVyvcoK9pIanHqxpQsabWckcd5J6JzE9yhwpCd99YLTEvpOsREBpcIPATx/T ZU7c+DnkJyRT8uusYFu9AdCPePK9B8cxK5kp76CNTCt6Ci9mShAduLaUpZ1nLuyS cZZxYSIvizsA4zfnXFKglHpr6dBvx3dA -----END CERTIFICATE-----Generated at Wed Aug 13 02:49:07 2025 by rpki-client