$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: zg1m8gbwi1iAWuVO8GWmaG7Zo7c/nBTPSlF0qkOUx98= Subject key identifier: 99:B3:20:81:A2:33:6E:F3:D0:48:14:EA:E0:6F:83:3D:9A:E1:2C:56 Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 09F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 09E1 Signing time: Fri 08 Aug 2025 20:14:48 +0000 Manifest this update: Fri 08 Aug 2025 20:14:47 +0000 Manifest next update: Fri 15 Aug 2025 20:14:47 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: UsMSyZ1vuOnmysqvHF9ffg/pQokimm24qsneWD3DkaM=) 2: 6322249E033E11EDA7401850C4F9AE02.roa (hash: bxum+WOpJCc/rrq4Z1XLEVCWKFHxlT2LUexLiRBlPmM=) 3: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: zWd+mcCk9l+jHD4vYbrupaGOty0zdeubNycUNDATtLs=) 4: 55892E84839011EAB5B82263C4F9AE02.roa (hash: nXu3TrhqWzeQhIAXd22b9k7kj49e1Ni4pYpn1PtXrj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2547 (0x9f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: Aug 8 20:14:47 2025 GMT Not After : Aug 15 20:14:47 2025 GMT Subject: CN=68965ab7-677f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0e:e2:f2:c0:b3:1a:87:09:19:8b:a2:b8:df: 93:2c:58:a1:36:9e:98:ed:c6:84:9d:bd:77:ac:41: 0d:05:9e:96:8e:bb:f9:0c:4f:69:38:b6:ce:08:84: 24:5c:8e:f4:56:52:ad:e3:25:6a:24:03:91:0e:f1: 39:a3:30:bd:e9:f4:14:27:40:16:fd:ea:a7:d5:03: e9:04:64:2a:78:ef:46:4b:d8:fa:dc:bd:57:58:91: 30:38:1e:09:c4:45:b7:d5:2b:11:78:da:b3:40:6f: 94:9d:62:c3:2f:46:ab:3c:23:3c:3c:b6:35:f6:0f: ae:37:9d:84:b2:d9:27:90:15:8c:1f:5e:eb:17:1d: cd:1f:c5:99:c7:73:25:81:8d:f6:3b:59:03:57:c6: 85:d6:7f:f5:a2:6d:e9:43:96:1b:42:f7:e9:46:02: 38:e0:89:a4:df:6d:7d:e5:f2:fe:5b:17:82:c1:ea: de:5c:6a:b0:fb:65:c1:61:a8:60:8f:9b:6b:b9:34: 09:71:d1:d6:3e:cc:51:35:dd:d1:0d:4e:91:64:18: a3:e6:5a:bc:05:7c:e5:f3:67:08:68:bb:15:5a:e6: 2d:92:1f:4e:bf:9f:4b:6c:c1:56:52:56:f3:66:d5: 34:63:0b:9a:06:1c:35:65:d6:b8:99:36:f3:76:83: ba:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B3:20:81:A2:33:6E:F3:D0:48:14:EA:E0:6F:83:3D:9A:E1:2C:56 X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:f0:51:9d:ea:aa:5f:a6:4f:7b:a0:39:5b:c0:00:2e:c4:e2: c4:95:80:4b:6e:2f:d8:a1:33:91:7c:d1:4d:2e:5b:ad:89:85: bf:a5:95:9b:5f:35:e8:8d:14:82:33:cb:b2:34:12:3b:4a:06: bb:cf:cc:5a:11:8e:8e:06:0c:be:4a:cf:4c:06:70:e8:45:27: 7b:95:10:39:df:42:b2:75:f5:79:13:85:c0:f1:45:2d:c9:41: 17:ce:49:b5:64:9a:24:53:e2:45:78:c2:18:0a:af:c9:86:5f: e9:09:2f:8a:aa:c9:e1:54:4e:82:95:86:bd:67:b6:17:43:35: b0:9c:6e:bd:23:70:40:fd:8d:31:07:da:ca:8d:e4:c6:e1:34: 87:ed:cd:e2:11:7e:de:1b:ed:78:16:3f:d2:2c:cf:76:87:2c: b5:86:a7:6d:8f:7b:4d:08:01:54:ce:5e:8f:e8:1f:ca:4e:35: b5:d5:e2:33:6b:ad:5d:f2:6c:1e:e8:f8:16:f9:4f:ad:b2:4a: 5e:a1:d0:d0:e4:0e:8a:65:26:77:4b:8b:b5:a5:52:64:3d:6f: bf:de:ad:0c:a1:47:93:b4:67:e1:59:51:cd:86:59:79:9f:25: e1:46:0f:e4:19:62:96:08:06:57:45:c4:e5:9d:58:0a:20:b3: 59:1b:cc:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjUwODA4MjAxNDQ3WhcNMjUwODE1MjAxNDQ3WjAYMRYwFAYD VQQDEw02ODk2NWFiNy02NzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4A7i8sCzGocJGYuiuN+TLFihNp6Y7caEnb13rEENBZ6Wjrv5DE9pOLbOCIQk XI70VlKt4yVqJAORDvE5ozC96fQUJ0AW/eqn1QPpBGQqeO9GS9j63L1XWJEwOB4J xEW31SsReNqzQG+UnWLDL0arPCM8PLY19g+uN52EstknkBWMH17rFx3NH8WZx3Ml gY32O1kDV8aF1n/1om3pQ5YbQvfpRgI44Imk32195fL+WxeCwereXGqw+2XBYahg j5truTQJcdHWPsxRNd3RDU6RZBij5lq8BXzl82cIaLsVWuYtkh9Ov59LbMFWUlbz ZtU0YwuaBhw1Zda4mTbzdoO6LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmzIIGi M27z0EgU6uBvgz2a4SxWMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA8FGd6qpfpk97oDlbwAAuxOLElYBLbi/YoTORfNFNLlutiYW/pZWb XzXojRSCM8uyNBI7Sga7z8xaEY6OBgy+Ss9MBnDoRSd7lRA530KydfV5E4XA8UUt yUEXzkm1ZJokU+JFeMIYCq/Jhl/pCS+KqsnhVE6ClYa9Z7YXQzWwnG69I3BA/Y0x B9rKjeTG4TSH7c3iEX7eG+14Fj/SLM92hyy1hqdtj3tNCAFUzl6P6B/KTjW11eIz a61d8mwe6PgW+U+tskpeodDQ5A6KZSZ3S4u1pVJkPW+/3q0MoUeTtGfhWVHNhll5 nyXhRg/kGWKWCAZXRcTlnVgKILNZG8xe -----END CERTIFICATE-----Generated at Sun Aug 10 04:57:37 2025 by rpki-client