$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: wrjHvmRHlWq5lzOXBPkiuUnXN7ifAqHFxj3Pcm04vqc= Subject key identifier: 1A:59:A1:3C:8E:28:54:27:09:29:82:81:0A:B7:43:D0:89:04:CB:38 Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 09BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 09AC Signing time: Thu 24 Apr 2025 19:55:23 +0000 Manifest this update: Thu 24 Apr 2025 19:55:23 +0000 Manifest next update: Thu 01 May 2025 19:55:23 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: XZNuGbOS2tGwSjbH4P5QqTVEvOC0ZpOcqUsvY4B46v8=) 2: 6322249E033E11EDA7401850C4F9AE02.roa (hash: bxum+WOpJCc/rrq4Z1XLEVCWKFHxlT2LUexLiRBlPmM=) 3: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: zWd+mcCk9l+jHD4vYbrupaGOty0zdeubNycUNDATtLs=) 4: 55892E84839011EAB5B82263C4F9AE02.roa (hash: nXu3TrhqWzeQhIAXd22b9k7kj49e1Ni4pYpn1PtXrj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2494 (0x9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: Apr 24 19:55:23 2025 GMT Not After : May 1 19:55:23 2025 GMT Subject: CN=680a972b-e29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:c8:00:57:7a:f6:79:2d:5f:76:87:7d:fb: 12:de:0a:0d:07:29:9e:17:b3:94:51:47:63:b8:f7: 8e:02:23:73:36:5f:f3:d9:5d:9e:c5:f7:46:57:99: 3c:0b:80:d6:13:6a:d4:00:7b:e3:58:6a:2b:bd:1b: 5b:10:9e:05:a1:19:03:fc:01:02:07:e1:5e:55:bf: 07:a9:ed:b8:14:b8:a0:a3:70:06:f2:49:c0:29:cd: bb:77:d0:61:b9:4b:7c:34:b7:04:01:b8:67:a5:75: 40:f4:5e:3a:de:95:bd:fc:c1:83:08:d9:1c:93:3e: d9:57:c3:75:72:97:1a:25:8f:57:2e:6e:69:a4:91: 8a:55:03:b1:14:41:98:7e:90:38:13:e6:c4:af:bc: d6:cd:ea:e3:26:64:4d:5a:db:1e:fd:01:b4:e3:70: c4:54:80:81:59:a7:d8:9a:3a:d2:6c:bb:08:57:4f: 65:cf:08:da:7f:e9:25:87:ca:46:1f:0f:5e:ef:14: ba:27:86:e9:30:f3:fd:d4:96:d1:95:38:14:b5:58: 4b:fa:10:be:ee:c3:cc:20:5b:6f:32:07:43:7c:ea: 9e:6e:11:9d:a4:bd:e3:b4:41:61:75:6f:67:14:db: 09:e8:e9:f6:46:7c:78:96:5a:a6:ae:ed:4c:ab:a3: 74:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:A1:3C:8E:28:54:27:09:29:82:81:0A:B7:43:D0:89:04:CB:38 X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:63:90:ea:18:4c:6f:9a:cf:88:27:c2:78:d7:45:09:71:86: 05:4d:2e:4d:d4:82:b9:c9:c6:65:57:b9:2e:d1:0e:76:0a:84: 8f:73:85:9d:9a:34:b8:10:fb:f1:46:73:6a:d9:f1:33:76:95: 21:cd:e7:53:f5:a9:55:18:28:98:25:d8:47:4c:2e:51:d1:ff: a0:aa:1d:80:59:a4:d8:b0:eb:34:48:15:b2:c5:af:4a:c4:09: 4c:48:62:42:61:96:a4:91:52:aa:3e:a9:8a:60:c9:3f:2e:3f: c5:7d:e1:7d:df:bf:1f:68:33:c9:6d:9e:09:6c:1f:8a:34:f3: 55:97:32:f1:9e:58:83:b1:d4:9c:a9:f4:17:31:bf:b9:75:fa: 96:7a:c8:5a:f0:10:23:62:16:41:e5:7f:7b:47:28:b7:6d:66: 1d:c7:c5:b3:b0:6c:a6:93:7e:b4:72:d6:0e:4e:24:45:82:73: f4:83:7a:c9:c5:63:5b:b8:d5:3b:3a:24:71:39:48:fb:cf:64: e4:c9:40:d0:09:d9:4e:60:8d:e5:ac:d3:f4:b8:a3:2c:f0:07: ff:30:ca:8e:07:43:4a:ba:d6:e7:d8:fc:28:91:30:a1:90:ef: fb:51:0a:f2:9d:88:d9:3a:0b:b3:c1:66:b7:0a:37:a8:df:de: a6:32:75:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjUwNDI0MTk1NTIzWhcNMjUwNTAxMTk1NTIzWjAYMRYwFAYD VQQDEw02ODBhOTcyYi1lMjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvTIAFd69nktX3aHffsS3goNBymeF7OUUUdjuPeOAiNzNl/z2V2exfdGV5k8 C4DWE2rUAHvjWGorvRtbEJ4FoRkD/AECB+FeVb8Hqe24FLigo3AG8knAKc27d9Bh uUt8NLcEAbhnpXVA9F463pW9/MGDCNkckz7ZV8N1cpcaJY9XLm5ppJGKVQOxFEGY fpA4E+bEr7zWzerjJmRNWtse/QG043DEVICBWafYmjrSbLsIV09lzwjaf+klh8pG Hw9e7xS6J4bpMPP91JbRlTgUtVhL+hC+7sPMIFtvMgdDfOqebhGdpL3jtEFhdW9n FNsJ6On2Rnx4llqmru1Mq6N0gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpZoTyO KFQnCSmCgQq3Q9CJBMs4MB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaY5DqGExvms+IJ8J410UJcYYFTS5N1IK5ycZlV7ku0Q52CoSPc4Wd mjS4EPvxRnNq2fEzdpUhzedT9alVGCiYJdhHTC5R0f+gqh2AWaTYsOs0SBWyxa9K xAlMSGJCYZakkVKqPqmKYMk/Lj/FfeF9378faDPJbZ4JbB+KNPNVlzLxnliDsdSc qfQXMb+5dfqWesha8BAjYhZB5X97Ryi3bWYdx8WzsGymk360ctYOTiRFgnP0g3rJ xWNbuNU7OiRxOUj7z2TkyUDQCdlOYI3lrNP0uKMs8Af/MMqOB0NKutbn2PwokTCh kO/7UQrynYjZOguzwWa3Cjeo396mMnXo -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:33 2025 by rpki-client