$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json) Hash identifier: 8F4a0bCN6IrlXzwWJlA/Q4C7+tbGqnjXk20AxEwW8k8= Subject key identifier: 1C:6A:0E:4D:FF:B1:4F:29:06:9D:A1:6E:F7:7F:28:B3:C2:7E:CC:48 Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft Manifest number: 0114 Signing time: Sat 23 Aug 2025 05:02:05 +0000 Manifest this update: Sat 23 Aug 2025 05:02:04 +0000 Manifest next update: Sat 30 Aug 2025 05:02:04 +0000 Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: zKeX6gpUvRVPg3/hQYGR+I9LCl3RebXm/KNqx8UDcDM=) 2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Validity Not Before: Aug 23 05:02:04 2025 GMT Not After : Aug 30 05:02:04 2025 GMT Subject: CN=68a94b4d-731c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:df:ba:47:5b:d6:6a:a3:2d:ae:71:50:b1: a1:0f:e8:b5:45:d0:6f:fb:f0:64:24:d9:fe:28:06: 5f:2c:b0:42:ff:f0:b4:5a:ea:f3:05:8b:60:aa:c3: 05:0f:f6:f5:0e:fe:49:94:60:80:d4:88:2d:94:eb: 99:2f:15:07:eb:ea:80:25:8b:5d:4b:9c:95:4b:aa: 6c:56:5a:c0:7e:dd:ae:e5:a2:d1:05:f0:7a:5d:e5: 5e:fc:9d:72:8d:20:13:7e:ca:2c:ef:83:db:e3:86: d1:78:f9:ce:8d:0a:c9:55:fa:66:b5:a5:8d:a7:ca: db:2e:35:68:ef:a9:73:76:85:b0:73:1a:40:d2:3f: 69:43:f9:62:fc:61:53:f5:12:3e:d3:22:65:9a:1b: ad:fc:74:58:81:83:38:9e:3c:78:97:0d:1d:31:93: cb:59:ba:b9:b3:83:6c:27:79:fb:22:2a:35:41:73: 94:fe:19:8b:32:fe:e8:22:79:56:07:95:04:03:2b: 44:3a:18:a6:68:a2:9d:7a:b2:4c:73:7d:4d:3e:ff: 88:39:5b:87:9f:19:34:c3:a8:f3:bb:fe:77:49:51: b3:6f:4e:1f:ff:16:d7:0d:ea:23:95:3a:70:1b:42: 9b:b7:39:f5:b7:28:0d:a6:6e:3e:81:4f:14:4d:2e: 34:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6A:0E:4D:FF:B1:4F:29:06:9D:A1:6E:F7:7F:28:B3:C2:7E:CC:48 X509v3 Authority Key Identifier: keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:af:fc:38:34:e8:29:35:b9:4e:76:59:e0:68:1c:03:6e:3e: 90:ce:ad:e2:26:83:0e:94:b2:d0:94:b1:db:07:f6:e2:eb:d8: 57:6f:30:3e:10:29:d1:ec:33:77:43:37:b9:85:1a:91:67:a0: 9f:e7:97:39:85:0e:eb:98:b2:7e:0d:b7:6b:99:81:7d:d9:2b: 3f:b5:fc:5e:a4:a4:59:81:de:fd:0a:1a:77:cc:17:07:ff:a7: e1:5f:00:06:6a:4d:d6:0b:44:e5:e9:86:ea:85:c1:42:c8:f9: a2:83:f1:18:3a:dd:fd:f7:8a:a0:ea:57:4e:01:2f:2e:10:ae: 7c:2b:1c:c6:8d:51:e3:d4:99:e8:3d:d1:c1:36:51:90:45:15: 9e:cb:59:29:53:d1:ea:c4:b4:48:73:82:a2:52:d1:05:27:2b: e1:9b:40:a8:0f:9e:db:1c:8e:c9:5b:71:fe:9a:51:e5:4f:99: 69:a7:bd:23:88:dc:81:ad:a4:45:65:1c:78:37:5c:54:5b:f1: 36:7b:25:e2:39:5f:eb:53:1e:c8:90:e3:0d:07:71:b7:fd:72: 0a:83:c1:13:5a:23:ed:e1:f0:e5:2b:69:49:40:7a:4b:19:75: b9:c3:db:dd:15:e9:7b:59:7b:88:0b:67:c0:60:07:b6:81:3a: a4:5f:c2:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKENFNkM0NkY4MDJCMTVCOENGNEFEQTM0NUE4Mjg4QUQ2 RTdGQTUzNUUwHhcNMjUwODIzMDUwMjA0WhcNMjUwODMwMDUwMjA0WjAYMRYwFAYD VQQDEw02OGE5NGI0ZC03MzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0ffukdb1mqjLa5xULGhD+i1RdBv+/BkJNn+KAZfLLBC//C0WurzBYtgqsMF D/b1Dv5JlGCA1IgtlOuZLxUH6+qAJYtdS5yVS6psVlrAft2u5aLRBfB6XeVe/J1y jSATfsos74Pb44bRePnOjQrJVfpmtaWNp8rbLjVo76lzdoWwcxpA0j9pQ/li/GFT 9RI+0yJlmhut/HRYgYM4njx4lw0dMZPLWbq5s4NsJ3n7Iio1QXOU/hmLMv7oInlW B5UEAytEOhimaKKderJMc31NPv+IOVuHnxk0w6jzu/53SVGzb04f/xbXDeojlTpw G0Kbtzn1tygNpm4+gU8UTS40SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxqDk3/ sU8pBp2hbvd/KLPCfsxIMB8GA1UdIwQYMBaAFM5sRvgCsVuM9K2jRagoitbn+lNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DNTJCMDI2NEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0ejByYU5GcUNpSzF1ZjZV MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pteEctQUt4VzR6MHJhTkZxQ2lLMXVmNlUxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DNTJCMDI2NEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0 ejByYU5GcUNpSzF1ZjZVMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsr/w4NOgpNblOdlngaBwDbj6Qzq3iJoMOlLLQlLHbB/bi69hXbzA+ ECnR7DN3Qze5hRqRZ6Cf55c5hQ7rmLJ+DbdrmYF92Ss/tfxepKRZgd79Chp3zBcH /6fhXwAGak3WC0Tl6YbqhcFCyPmig/EYOt3994qg6ldOAS8uEK58KxzGjVHj1Jno PdHBNlGQRRWey1kpU9HqxLRIc4KiUtEFJyvhm0CoD57bHI7JW3H+mlHlT5lpp70j iNyBraRFZRx4N1xUW/E2eyXiOV/rUx7IkOMNB3G3/XIKg8ETWiPt4fDlK2lJQHpL GXW5w9vdFel7WXuIC2fAYAe2gTqkX8Ii -----END CERTIFICATE-----Generated at Sat Aug 23 14:22:16 2025 by rpki-client