$ rpki-client -vvf rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft File: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft (raw, json) Hash identifier: ryRtgBOU5R5YFwnzIjpgQZ4oyBLzPzCXJI7bXJswY3E= Subject key identifier: F2:75:5E:5B:45:2A:98:71:C9:08:78:1D:7E:64:49:FC:68:FD:C6:6E Authority key identifier: CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 Certificate issuer: /CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft Manifest number: CF Signing time: Sat 23 Aug 2025 05:54:23 +0000 Manifest this update: Sat 23 Aug 2025 05:54:22 +0000 Manifest next update: Sat 30 Aug 2025 05:54:22 +0000 Files and hashes: 1: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl (hash: UyXwH3d0J/HB4VqG9/Xd3ht0Bn88VhpN8p2jGKYzbAA=) 2: 96908C564E0C11EF9EAADA7EC4F9AE02.roa (hash: myTckGLdf/CA7XSIN0Ija1G5/OvvYgLLHBvtea2wmM0=) 3: 178F0A124E0D11EFB25FB07FC4F9AE02.roa (hash: 8N1bV5QWQ3eENvqebtxJ1v4YaVDUgYQNRr050Qo7Rgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191354, serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Validity Not Before: Aug 23 05:54:22 2025 GMT Not After : Aug 30 05:54:22 2025 GMT Subject: CN=68a9578f-58c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:12:1f:7d:6c:a5:70:f3:22:4d:02:46:79:d9: 05:3e:4b:61:f6:a6:a9:59:82:bb:30:20:51:43:08: 87:03:a6:47:ec:cf:ae:81:5c:88:fa:61:d2:e8:7a: 6e:6d:f6:ca:40:a5:24:51:71:6c:c1:f8:b8:45:33: 9b:c9:71:4e:7b:13:da:60:38:d2:04:c7:81:b8:f7: c2:4b:74:d0:79:ae:74:e2:e4:a8:9c:cf:9f:42:90: 6b:07:b2:d2:bd:a1:fa:39:5d:89:38:e0:c4:e7:e0: f1:38:f6:ea:40:10:3f:a1:6a:f0:5c:a5:be:49:ee: e5:0a:fc:06:61:44:2d:de:3b:3a:ad:9d:4b:4a:35: dc:be:73:ac:c8:ed:43:68:1b:69:3d:ed:83:07:cd: 7b:08:40:19:af:d7:1b:8d:f4:05:93:9e:a5:38:fb: 3e:24:9c:90:d0:f0:20:9a:39:0d:de:25:87:89:f5: 01:1d:cc:b6:c8:2a:12:3a:a4:77:16:60:a6:04:2c: 56:a2:e4:d6:e5:6a:60:30:25:82:f2:9e:7c:04:44: 28:4e:f8:7b:87:32:5d:15:ee:f4:50:e4:09:b5:46: 4e:7a:85:ca:3a:fd:13:3a:e2:f7:04:7d:62:a6:f3: 2b:7f:9f:cc:1c:d5:3e:0d:60:0b:7e:50:c9:40:d2: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:75:5E:5B:45:2A:98:71:C9:08:78:1D:7E:64:49:FC:68:FD:C6:6E X509v3 Authority Key Identifier: keyid:CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:db:1b:e3:de:1f:7b:e8:95:a2:3a:d9:a8:fd:1d:79:01:ee: 87:94:6d:54:e8:f2:73:7a:23:67:e9:0b:ea:a4:8a:a0:97:fb: 80:4a:24:eb:f0:0b:e9:41:ff:3a:71:d8:e6:b6:d1:54:f5:24: d5:71:ee:6b:82:7a:b7:7a:a7:58:18:a5:d0:2f:8d:3e:dc:36: bd:66:5d:f5:1c:fb:9e:67:a5:0e:31:36:f1:26:ce:b9:c2:70: 69:73:18:f4:96:ff:e4:31:3e:57:2e:a0:0f:4d:41:c3:d5:0d: 4a:f7:5f:85:a6:ef:e1:68:99:a0:0e:b3:14:94:7e:23:f5:30: 27:b9:b6:79:6d:35:5f:88:a1:f3:22:6d:ad:e5:65:50:64:98: 8d:5e:c0:16:e5:c0:29:1f:a2:b2:d2:35:c8:ad:e6:44:0c:58: 49:c4:48:5c:89:6b:a7:32:6c:7c:c8:00:c0:67:2d:05:c4:27: b5:e9:3d:8f:45:a4:28:22:3c:f9:0c:9f:a1:37:ac:e1:e0:58: 41:84:2c:70:e9:51:c3:86:19:12:dd:fd:ff:3e:9f:e9:22:70: 31:30:18:81:74:3d:c2:20:df:8e:19:14:82:29:fc:71:d3:f1: 33:5a:fb:5e:d8:ad:22:0d:aa:b7:6e:41:93:93:bb:30:a1:cc: 7c:c2:66:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNTQxMTAvBgNVBAUTKENFQzlCMUIzNTlGRTU4RTkwMjNBODRDRkMyNjc0QzE2 MTgyOEY5OTkwHhcNMjUwODIzMDU1NDIyWhcNMjUwODMwMDU1NDIyWjAYMRYwFAYD VQQDEw02OGE5NTc4Zi01OGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRIffWylcPMiTQJGedkFPkth9qapWYK7MCBRQwiHA6ZH7M+ugVyI+mHS6Hpu bfbKQKUkUXFswfi4RTObyXFOexPaYDjSBMeBuPfCS3TQea504uSonM+fQpBrB7LS vaH6OV2JOODE5+DxOPbqQBA/oWrwXKW+Se7lCvwGYUQt3js6rZ1LSjXcvnOsyO1D aBtpPe2DB817CEAZr9cbjfQFk56lOPs+JJyQ0PAgmjkN3iWHifUBHcy2yCoSOqR3 FmCmBCxWouTW5WpgMCWC8p58BEQoTvh7hzJdFe70UOQJtUZOeoXKOv0TOuL3BH1i pvMrf5/MHNU+DWALflDJQNKWbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJ1XltF KphxyQh4HX5kSfxo/cZuMB8GA1UdIwQYMBaAFM7JsbNZ/ljpAjqEz8JnTBYYKPmZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM1NC84RDRFQ0Y4NDRE ODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi96c214czFuLVdPa0NPb1RQd21kTUZoZ28t WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pzbXhzMW4tV09rQ09vVFB3bWRNRmhnby1aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM1NC84RDRFQ0Y4NDREODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi96c214czFuLVdP a0NPb1RQd21kTUZoZ28tWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl2xvj3h976JWiOtmo/R15Ae6HlG1U6PJzeiNn6QvqpIqgl/uASiTr 8AvpQf86cdjmttFU9STVce5rgnq3eqdYGKXQL40+3Da9Zl31HPueZ6UOMTbxJs65 wnBpcxj0lv/kMT5XLqAPTUHD1Q1K91+Fpu/haJmgDrMUlH4j9TAnubZ5bTVfiKHz Im2t5WVQZJiNXsAW5cApH6Ky0jXIreZEDFhJxEhciWunMmx8yADAZy0FxCe16T2P RaQoIjz5DJ+hN6zh4FhBhCxw6VHDhhkS3f3/Pp/pInAxMBiBdD3CIN+OGRSCKfxx 0/EzWvte2K0iDaq3bkGTk7swocx8wmbk -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:43 2025 by rpki-client