$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: kwNAXg5OnhD6BoRxqdGxoae4vvZaa4RMns6risbCn4U= Subject key identifier: FC:C7:FC:26:23:D7:43:48:FD:88:2E:5E:89:E8:B9:E4:7F:5E:29:7D Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 09D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 09C5 Signing time: Sat 14 Jun 2025 19:48:01 +0000 Manifest this update: Sat 14 Jun 2025 19:48:01 +0000 Manifest next update: Sat 21 Jun 2025 19:48:01 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: nDZMMR+9D+Gx9nhmTRrg5mQQJtn8QZX7aY8GyNc4uoE=) 2: 6322249E033E11EDA7401850C4F9AE02.roa (hash: bxum+WOpJCc/rrq4Z1XLEVCWKFHxlT2LUexLiRBlPmM=) 3: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: zWd+mcCk9l+jHD4vYbrupaGOty0zdeubNycUNDATtLs=) 4: 55892E84839011EAB5B82263C4F9AE02.roa (hash: nXu3TrhqWzeQhIAXd22b9k7kj49e1Ni4pYpn1PtXrj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2519 (0x9d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: Jun 14 19:48:01 2025 GMT Not After : Jun 21 19:48:01 2025 GMT Subject: CN=684dd1f1-3d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8c:c5:e1:06:5b:8e:d2:c9:7a:92:f9:a3:71: 28:07:3c:d8:d6:60:b9:38:0b:e9:7b:74:a2:91:ef: 1a:38:01:96:79:96:0b:7d:0e:45:7a:1b:a9:f9:95: 68:7d:fc:d4:a7:fe:b1:71:28:5c:fa:35:af:eb:48: be:26:4f:31:c9:b6:dd:6f:a8:80:4e:2d:ce:f3:4f: 4c:0b:c9:db:3c:91:65:83:e2:1e:43:59:66:20:0d: 25:b4:a9:64:61:69:da:d5:19:9c:05:85:ac:bf:31: e9:65:4d:b9:18:6c:b0:55:f9:79:d1:54:8f:85:b8: e8:59:55:9f:76:99:d7:da:04:6c:12:3c:68:cc:61: 9c:e8:f6:22:ae:cc:f8:3a:a7:0b:00:ea:2b:25:f1: 6f:a3:60:e2:55:08:4f:85:5c:e6:da:5a:2d:04:82: 30:ca:7f:67:58:e3:4b:19:09:9f:66:6b:d2:bc:bf: f4:e8:a7:1f:44:d5:67:17:c7:38:21:15:a1:62:1a: bc:0e:e4:82:cd:22:0e:b8:72:c7:b5:4b:b4:75:9e: 3d:ad:50:c3:d7:4b:9d:3c:7e:0f:a9:1c:36:c6:76: bf:5a:8b:d0:5a:93:ff:16:ce:e2:12:44:9e:cb:97: b3:c1:90:b2:1f:63:d1:5c:4a:7d:ed:02:b0:5b:af: 3c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C7:FC:26:23:D7:43:48:FD:88:2E:5E:89:E8:B9:E4:7F:5E:29:7D X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:5e:ca:d3:94:7d:15:f7:da:51:fb:e3:c4:8a:55:e8:bc:88: 63:fe:dc:15:97:5b:b0:c1:4f:e1:2d:49:21:cd:9a:7b:b4:e0: f6:1a:ea:82:5d:56:df:ca:6f:7f:d3:38:a5:fc:13:20:d5:e2: bc:f9:7f:ab:a1:1d:ae:b9:d6:33:c4:aa:5e:96:cb:c8:c5:23: ae:d0:d7:2e:ba:85:d3:44:46:78:4a:ad:59:b9:96:14:28:b3: 2f:98:26:94:d4:c4:5d:e5:94:31:1c:f8:0f:db:fd:e4:84:22: 7d:69:8c:af:ff:84:d0:97:96:43:88:76:7a:48:c1:78:a6:6a: 6f:ac:ce:61:a4:66:8d:e6:10:d3:6f:13:fa:be:6c:75:ff:84: d6:d5:71:e9:ae:77:c9:cf:4f:44:35:ff:9e:bc:7b:ec:81:fc: 77:80:d7:55:c8:cc:2c:70:de:b3:25:b1:b6:56:a6:27:0e:8b: af:27:29:b2:ca:bb:58:e5:63:1c:17:e0:b0:8b:c8:2f:08:47: 11:ac:20:83:87:08:d4:2c:3a:85:82:ee:0d:bb:9f:da:64:a6: 9e:34:bc:bf:ff:ae:76:3c:94:ff:b8:01:4b:3f:58:db:1e:67: df:0e:e1:bb:e8:a8:2f:58:e3:2a:75:1f:04:ae:c4:65:36:f1: b4:5e:06:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjUwNjE0MTk0ODAxWhcNMjUwNjIxMTk0ODAxWjAYMRYwFAYD VQQDEw02ODRkZDFmMS0zZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4zF4QZbjtLJepL5o3EoBzzY1mC5OAvpe3Sike8aOAGWeZYLfQ5Fehup+ZVo ffzUp/6xcShc+jWv60i+Jk8xybbdb6iATi3O809MC8nbPJFlg+IeQ1lmIA0ltKlk YWna1RmcBYWsvzHpZU25GGywVfl50VSPhbjoWVWfdpnX2gRsEjxozGGc6PYirsz4 OqcLAOorJfFvo2DiVQhPhVzm2lotBIIwyn9nWONLGQmfZmvSvL/06KcfRNVnF8c4 IRWhYhq8DuSCzSIOuHLHtUu0dZ49rVDD10udPH4PqRw2xna/WovQWpP/Fs7iEkSe y5ezwZCyH2PRXEp97QKwW688YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzH/CYj 10NI/YguXonoueR/Xil9MB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0XsrTlH0V99pR++PEilXovIhj/twVl1uwwU/hLUkhzZp7tOD2GuqC XVbfym9/0zil/BMg1eK8+X+roR2uudYzxKpelsvIxSOu0NcuuoXTREZ4Sq1ZuZYU KLMvmCaU1MRd5ZQxHPgP2/3khCJ9aYyv/4TQl5ZDiHZ6SMF4pmpvrM5hpGaN5hDT bxP6vmx1/4TW1XHprnfJz09ENf+evHvsgfx3gNdVyMwscN6zJbG2VqYnDouvJymy yrtY5WMcF+Cwi8gvCEcRrCCDhwjULDqFgu4Nu5/aZKaeNLy//652PJT/uAFLP1jb HmffDuG76KgvWOMqdR8ErsRlNvG0XgY0 -----END CERTIFICATE-----Generated at Sun Jun 15 09:53:40 2025 by rpki-client