$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json) Hash identifier: 3tskuJolNPkn7iljRg5nGhUD5aPSJ24ojLe82Nk7Tes= Subject key identifier: EB:35:97:51:6B:BE:16:12:A3:C1:BA:B7:81:AC:66:57:66:FD:0A:40 Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft Manifest number: FA Signing time: Thu 03 Jul 2025 05:21:56 +0000 Manifest this update: Thu 03 Jul 2025 05:21:56 +0000 Manifest next update: Thu 10 Jul 2025 05:21:56 +0000 Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: HldSA46WKISrgRXeEinh+P2qIDBUkJGnwg2muzYMs6g=) 2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Validity Not Before: Jul 3 05:21:56 2025 GMT Not After : Jul 10 05:21:56 2025 GMT Subject: CN=68661374-6400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6e:29:c8:df:4f:8a:af:be:6b:67:42:33:68: 5f:b6:b0:e7:14:5b:49:52:71:f0:64:d1:8b:ab:ac: 5e:2f:62:99:52:e9:c2:02:e7:40:8c:0e:1d:4b:94: 0b:0b:48:a2:f0:d7:28:e8:61:9b:4e:1c:08:8d:fa: 12:87:1d:a9:35:b6:87:b0:b4:67:02:eb:ba:30:ab: 20:91:40:0a:75:05:3d:38:78:42:89:9f:71:7a:df: ab:16:b4:40:19:26:b0:ba:8c:69:ca:43:37:04:9d: 4b:4b:a5:6c:c1:d0:e8:26:7b:f4:b3:18:ee:35:1b: 62:08:c3:bd:71:9c:27:a8:77:18:8b:bf:d7:0f:a7: bb:37:5f:55:06:06:75:35:af:82:22:e5:62:f8:55: f4:80:f1:2c:01:50:d7:a9:fa:cd:0a:7e:93:ea:70: fd:c1:e1:03:62:a3:52:b6:9c:f8:af:a0:c1:43:31: 5c:60:d7:4d:f0:f4:5f:72:b7:2f:c5:f1:82:5d:47: 4e:5c:18:f0:be:f2:72:7a:bd:13:dd:cf:40:de:9b: 21:9c:a1:d7:d3:06:26:99:85:eb:4d:35:5f:55:22: 65:c1:3c:e2:16:80:c3:f9:76:b3:ea:f6:06:5a:d9: ba:b3:7a:cb:69:a4:4e:41:23:65:48:a9:a3:aa:06: 67:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:35:97:51:6B:BE:16:12:A3:C1:BA:B7:81:AC:66:57:66:FD:0A:40 X509v3 Authority Key Identifier: keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:39:55:7b:b5:4d:0c:43:db:12:56:90:e6:fb:96:12:a9:d6: 93:69:2e:9b:4f:97:a9:30:be:16:7a:57:8b:01:f5:56:a0:63: a3:30:11:e2:d5:0c:43:83:17:26:4d:9b:5c:a6:c5:09:a1:d8: aa:85:8d:c8:da:bb:91:b5:14:b5:fa:c4:9f:2c:c5:b6:e4:aa: 38:28:49:f8:ac:b2:16:cf:af:2f:39:7d:76:89:57:d1:ea:7f: fb:ae:2e:4d:16:c6:f6:ad:84:c4:a4:db:67:17:70:98:b1:b6: 3f:74:43:bc:ef:81:bb:5e:61:bb:c4:f0:77:66:34:d9:4f:b0: 74:7f:26:ea:a9:c5:c5:d3:cb:71:56:47:bb:55:3b:8c:ad:37: 9c:9f:18:41:a1:e9:bd:67:63:a8:5d:62:d3:84:cc:3d:19:6f: 6c:28:63:5e:73:d5:75:00:9d:b7:5e:88:e3:e9:25:6b:c7:92: 2f:5a:58:82:c0:29:9c:72:c3:f4:ec:d4:56:34:87:1b:e6:c7: 7c:33:42:40:1d:63:20:64:22:ef:1d:23:f9:ab:44:92:22:85: 21:65:03:af:56:d1:65:10:9f:61:f2:d2:a5:8a:f0:fc:70:6d: df:d2:38:3d:25:e7:66:8e:2e:16:c2:60:f9:8e:7a:60:3d:4c: 12:d3:d0:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKENFNkM0NkY4MDJCMTVCOENGNEFEQTM0NUE4Mjg4QUQ2 RTdGQTUzNUUwHhcNMjUwNzAzMDUyMTU2WhcNMjUwNzEwMDUyMTU2WjAYMRYwFAYD VQQDEw02ODY2MTM3NC02NDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1m4pyN9Piq++a2dCM2hftrDnFFtJUnHwZNGLq6xeL2KZUunCAudAjA4dS5QL C0ii8Nco6GGbThwIjfoShx2pNbaHsLRnAuu6MKsgkUAKdQU9OHhCiZ9xet+rFrRA GSawuoxpykM3BJ1LS6VswdDoJnv0sxjuNRtiCMO9cZwnqHcYi7/XD6e7N19VBgZ1 Na+CIuVi+FX0gPEsAVDXqfrNCn6T6nD9weEDYqNStpz4r6DBQzFcYNdN8PRfcrcv xfGCXUdOXBjwvvJyer0T3c9A3pshnKHX0wYmmYXrTTVfVSJlwTziFoDD+Xaz6vYG Wtm6s3rLaaROQSNlSKmjqgZn+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOs1l1Fr vhYSo8G6t4GsZldm/QpAMB8GA1UdIwQYMBaAFM5sRvgCsVuM9K2jRagoitbn+lNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DNTJCMDI2NEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0ejByYU5GcUNpSzF1ZjZV MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pteEctQUt4VzR6MHJhTkZxQ2lLMXVmNlUxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DNTJCMDI2NEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0 ejByYU5GcUNpSzF1ZjZVMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmOVV7tU0MQ9sSVpDm+5YSqdaTaS6bT5epML4WeleLAfVWoGOjMBHi 1QxDgxcmTZtcpsUJodiqhY3I2ruRtRS1+sSfLMW25Ko4KEn4rLIWz68vOX12iVfR 6n/7ri5NFsb2rYTEpNtnF3CYsbY/dEO874G7XmG7xPB3ZjTZT7B0fybqqcXF08tx Vke7VTuMrTecnxhBoem9Z2OoXWLThMw9GW9sKGNec9V1AJ23Xojj6SVrx5IvWliC wCmccsP07NRWNIcb5sd8M0JAHWMgZCLvHSP5q0SSIoUhZQOvVtFlEJ9h8tKlivD8 cG3f0jg9Jedmji4WwmD5jnpgPUwS09A+ -----END CERTIFICATE-----Generated at Thu Jul 3 23:06:01 2025 by rpki-client