$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: BqfsFQOSrG5Qvu0H92QVgdg9AOChz5CsysAQgyI3HA4= Subject key identifier: 9D:B5:DE:70:BB:24:D5:E1:BA:81:79:90:05:49:FD:60:A0:DB:AF:E6 Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 09E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 09CE Signing time: Wed 02 Jul 2025 20:11:42 +0000 Manifest this update: Wed 02 Jul 2025 20:11:42 +0000 Manifest next update: Wed 09 Jul 2025 20:11:42 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: txw5eY9uCzSVez6s7+MJ7aueCDSBvNAsB4oidp44Fso=) 2: 6322249E033E11EDA7401850C4F9AE02.roa (hash: bxum+WOpJCc/rrq4Z1XLEVCWKFHxlT2LUexLiRBlPmM=) 3: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: zWd+mcCk9l+jHD4vYbrupaGOty0zdeubNycUNDATtLs=) 4: 55892E84839011EAB5B82263C4F9AE02.roa (hash: nXu3TrhqWzeQhIAXd22b9k7kj49e1Ni4pYpn1PtXrj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2528 (0x9e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: Jul 2 20:11:42 2025 GMT Not After : Jul 9 20:11:42 2025 GMT Subject: CN=6865927e-1dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7b:77:7c:7f:96:0c:fc:98:6f:ee:90:7b:51: 09:f9:83:d8:10:67:45:23:46:07:eb:cd:fa:2d:24: e7:c2:5e:af:76:95:93:5a:ec:29:93:d8:0d:8e:32: 6d:db:cf:94:47:65:4a:b5:a7:24:90:3b:dc:7d:6b: cf:ad:f4:21:ca:c4:47:76:1a:07:4a:d2:16:51:d7: 14:63:d7:ca:ce:b1:d8:89:06:38:8a:97:e9:f4:2c: d5:cd:1b:e4:2b:ab:4e:49:81:05:03:75:69:25:46: 87:ae:ec:2c:7e:8b:7c:e3:ba:01:35:99:3c:5d:37: df:c3:d3:87:75:6d:a0:a7:20:de:f2:61:18:d8:d1: 62:8a:57:2d:5e:5b:b4:69:5d:86:8f:d2:33:c3:c0: 6d:40:b1:2c:c1:aa:d9:bc:87:ec:d6:72:d3:b4:b9: 3c:7a:7d:07:2f:1d:be:88:e7:15:55:6a:54:6a:bc: 33:da:30:ec:81:7b:fb:67:d1:5c:63:d1:28:cc:5b: 66:29:02:74:61:b8:05:7c:24:cd:62:51:ce:43:42: 8e:17:83:20:05:1b:fe:36:d3:d7:06:1e:b3:ea:c2: ff:78:68:b4:ac:ff:d1:f3:13:8e:01:1f:57:2c:a9: 4e:62:57:a1:d8:1e:83:29:25:b7:3f:96:8a:6d:b4: 69:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B5:DE:70:BB:24:D5:E1:BA:81:79:90:05:49:FD:60:A0:DB:AF:E6 X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ad:b0:18:de:06:81:53:94:cf:06:1b:72:a6:13:9e:58:e4: f9:8e:f2:85:a3:7a:f2:bd:a2:3d:d0:bd:81:97:d7:53:83:50: e4:5a:c0:c0:1a:c6:76:2c:5c:d5:df:af:a3:cd:fb:78:d5:4a: 89:60:42:fa:5c:16:1d:0e:b8:83:4e:a0:22:29:4d:5c:72:bd: ab:95:5c:88:e3:74:1d:e1:f3:5e:f4:11:4d:4c:b4:8d:47:88: 7f:46:8d:9f:4d:23:7f:37:39:a1:a2:0b:d9:98:c6:a9:d0:fd: 57:4c:ac:87:1d:b7:5c:f2:09:39:8c:f7:39:2b:f7:b4:65:0b: e8:81:52:0d:19:f8:04:20:4f:57:55:69:f0:9b:ab:11:66:6e: 30:5d:12:74:e7:7c:ae:9e:cd:ec:03:d7:d2:14:1c:98:bd:08: 6e:1e:7e:97:21:03:ba:c1:50:16:19:9d:b0:09:8f:67:85:04: 8d:32:f0:87:ea:bf:8f:f5:33:3c:e9:c0:17:b3:17:c8:bc:99: 7d:94:55:09:20:5f:46:e0:b5:68:3d:d8:e8:14:78:c4:db:dc: 7b:ec:76:d0:c8:54:e3:93:dc:04:2b:f7:af:62:13:0f:65:28: 9d:e2:d0:df:b8:5c:f6:81:5a:29:c8:eb:c5:fe:de:e7:c6:51: 9e:0d:ca:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjUwNzAyMjAxMTQyWhcNMjUwNzA5MjAxMTQyWjAYMRYwFAYD VQQDEw02ODY1OTI3ZS0xZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ht3fH+WDPyYb+6Qe1EJ+YPYEGdFI0YH6836LSTnwl6vdpWTWuwpk9gNjjJt 28+UR2VKtackkDvcfWvPrfQhysRHdhoHStIWUdcUY9fKzrHYiQY4ipfp9CzVzRvk K6tOSYEFA3VpJUaHruwsfot847oBNZk8XTffw9OHdW2gpyDe8mEY2NFiilctXlu0 aV2Gj9Izw8BtQLEswarZvIfs1nLTtLk8en0HLx2+iOcVVWpUarwz2jDsgXv7Z9Fc Y9EozFtmKQJ0YbgFfCTNYlHOQ0KOF4MgBRv+NtPXBh6z6sL/eGi0rP/R8xOOAR9X LKlOYleh2B6DKSW3P5aKbbRpAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ213nC7 JNXhuoF5kAVJ/WCg26/mMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHrbAY3gaBU5TPBhtyphOeWOT5jvKFo3ryvaI90L2Bl9dTg1DkWsDA GsZ2LFzV36+jzft41UqJYEL6XBYdDriDTqAiKU1ccr2rlVyI43Qd4fNe9BFNTLSN R4h/Ro2fTSN/NzmhogvZmMap0P1XTKyHHbdc8gk5jPc5K/e0ZQvogVINGfgEIE9X VWnwm6sRZm4wXRJ053yuns3sA9fSFByYvQhuHn6XIQO6wVAWGZ2wCY9nhQSNMvCH 6r+P9TM86cAXsxfIvJl9lFUJIF9G4LVoPdjoFHjE29x77HbQyFTjk9wEK/evYhMP ZSid4tDfuFz2gVopyOvF/t7nxlGeDco/ -----END CERTIFICATE-----Generated at Thu Jul 3 11:00:13 2025 by rpki-client