$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json) Hash identifier: hX/6VPyfsrH59wIiTVh+pxOGjL7EVcbXPVWMTxvUVik= Subject key identifier: 10:DC:A6:FF:2F:E6:99:8F:98:3C:41:97:48:7E:9B:81:B5:46:8D:BB Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft Manifest number: 0131 Signing time: Sun 19 Oct 2025 07:21:52 +0000 Manifest this update: Sun 19 Oct 2025 07:21:51 +0000 Manifest next update: Sun 26 Oct 2025 07:21:51 +0000 Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: uE8RupU64Su1ip67iiXF9LvhQh2f2TYUpwaMS+j2HAA=) 2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Validity Not Before: Oct 19 07:21:51 2025 GMT Not After : Oct 26 07:21:51 2025 GMT Subject: CN=68f49190-f937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c6:26:46:79:ce:6d:f0:b0:f7:73:be:a1:ee: f8:15:e8:cf:e7:e7:d7:50:6f:95:d4:d6:97:4d:74: d2:0c:8f:a9:ce:80:4a:1e:0e:24:dc:7c:4f:7f:cf: c6:72:55:42:2a:b5:19:2b:4b:fc:34:3c:ee:98:91: 90:05:e0:05:56:6c:50:06:18:b4:2c:6e:06:6a:96: a5:90:15:70:ea:30:f9:a6:2e:e4:23:c7:bd:c2:3d: d9:8c:2f:f9:e2:6f:28:25:a1:7b:1d:74:fe:11:19: 50:e9:67:04:19:b1:9a:ca:af:de:33:36:c4:26:15: 41:50:a7:0a:6a:d8:01:38:f9:c4:19:25:b7:ba:22: f2:46:f7:79:6e:bb:91:3e:ab:ac:85:ee:90:63:64: c7:ba:ad:a6:f6:d0:e2:44:90:67:e4:0f:4c:02:ce: 77:ea:75:9b:7a:8d:b4:65:40:88:9f:6b:a2:d3:2b: 96:a8:5e:de:a4:3a:89:0e:e7:ab:7c:cb:55:77:6b: 2a:d2:0d:e7:ec:04:9c:c4:31:04:37:0e:a9:1a:8b: 41:30:d4:34:0d:3f:b3:97:27:df:1d:7b:4c:44:cb: 78:a3:e4:d3:a6:0f:cb:3a:49:66:d3:c0:fc:28:28: c3:52:52:c4:07:bd:83:f4:8e:c5:66:34:03:4a:50: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DC:A6:FF:2F:E6:99:8F:98:3C:41:97:48:7E:9B:81:B5:46:8D:BB X509v3 Authority Key Identifier: keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:22:6a:11:58:63:95:a1:ce:06:56:3b:91:dd:b8:3b:ff:a8: 5a:7f:ef:04:4c:58:ec:fc:d1:dc:1e:19:63:39:44:3b:8a:5f: 4a:48:bd:17:80:fd:0c:3d:ed:75:98:30:bf:ae:f7:09:de:5a: 1a:09:65:31:7d:90:c0:17:ba:51:aa:42:53:81:82:9f:9a:3f: 9c:36:46:2f:03:87:98:47:77:e9:8e:7f:bc:4a:0c:05:c1:92: a0:df:63:83:be:4a:6c:1e:77:de:dd:40:46:ba:59:4f:f7:62: e2:bd:ef:2b:c3:87:89:02:30:98:b5:a3:01:3b:cb:0c:bd:b7: 1d:35:8c:c1:d0:3f:30:a5:40:a6:98:3d:6e:f5:9e:16:55:1d: 75:6b:b1:9e:f8:9e:24:9e:a5:9b:ed:c7:d5:f3:cb:82:ba:d0: 62:c8:cc:f3:00:e7:9b:70:da:8d:d2:b5:6f:44:8b:57:50:54: a9:c6:26:eb:2f:6b:b5:a5:c4:91:19:13:e3:5d:c3:e5:c8:dd: a0:9a:86:8f:9f:1f:3a:f8:45:e6:17:28:04:99:df:1f:24:07: ce:6a:5f:57:d5:6a:2f:9b:b1:c2:f4:1a:98:b1:f2:4b:76:07: 7e:22:2f:06:ad:d7:e1:98:13:b0:79:82:9f:48:2a:a5:73:71: ce:1b:d0:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKENFNkM0NkY4MDJCMTVCOENGNEFEQTM0NUE4Mjg4QUQ2 RTdGQTUzNUUwHhcNMjUxMDE5MDcyMTUxWhcNMjUxMDI2MDcyMTUxWjAYMRYwFAYD VQQDEw02OGY0OTE5MC1mOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocYmRnnObfCw93O+oe74FejP5+fXUG+V1NaXTXTSDI+pzoBKHg4k3HxPf8/G clVCKrUZK0v8NDzumJGQBeAFVmxQBhi0LG4GapalkBVw6jD5pi7kI8e9wj3ZjC/5 4m8oJaF7HXT+ERlQ6WcEGbGayq/eMzbEJhVBUKcKatgBOPnEGSW3uiLyRvd5bruR Pqushe6QY2THuq2m9tDiRJBn5A9MAs536nWbeo20ZUCIn2ui0yuWqF7epDqJDuer fMtVd2sq0g3n7AScxDEENw6pGotBMNQ0DT+zlyffHXtMRMt4o+TTpg/LOklm08D8 KCjDUlLEB72D9I7FZjQDSlDJyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDcpv8v 5pmPmDxBl0h+m4G1Ro27MB8GA1UdIwQYMBaAFM5sRvgCsVuM9K2jRagoitbn+lNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DNTJCMDI2NEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0ejByYU5GcUNpSzF1ZjZV MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pteEctQUt4VzR6MHJhTkZxQ2lLMXVmNlUxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DNTJCMDI2NEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0 ejByYU5GcUNpSzF1ZjZVMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1ImoRWGOVoc4GVjuR3bg7/6haf+8ETFjs/NHcHhljOUQ7il9KSL0X gP0MPe11mDC/rvcJ3loaCWUxfZDAF7pRqkJTgYKfmj+cNkYvA4eYR3fpjn+8SgwF wZKg32ODvkpsHnfe3UBGullP92Live8rw4eJAjCYtaMBO8sMvbcdNYzB0D8wpUCm mD1u9Z4WVR11a7Ge+J4knqWb7cfV88uCutBiyMzzAOebcNqN0rVvRItXUFSpxibr L2u1pcSRGRPjXcPlyN2gmoaPnx86+EXmFygEmd8fJAfOal9X1Wovm7HC9BqYsfJL dgd+Ii8GrdfhmBOweYKfSCqlc3HOG9Ad -----END CERTIFICATE-----Generated at Mon Oct 20 18:22:21 2025 by rpki-client