$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: St7W7PByYVzpTgUMV15X9s2MDMFejLXmTjUVh8FkESg= Subject key identifier: EC:4F:9D:C7:05:07:B4:23:23:99:7A:96:13:23:1D:44:9C:BB:C4:6A Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 09C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 09B6 Signing time: Wed 14 May 2025 20:08:08 +0000 Manifest this update: Wed 14 May 2025 20:08:07 +0000 Manifest next update: Wed 21 May 2025 20:08:07 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: aNUOsK0MV1xf7BUruQcMa36+K6llGWToBqmU0ehM3ko=) 2: 6322249E033E11EDA7401850C4F9AE02.roa (hash: bxum+WOpJCc/rrq4Z1XLEVCWKFHxlT2LUexLiRBlPmM=) 3: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: zWd+mcCk9l+jHD4vYbrupaGOty0zdeubNycUNDATtLs=) 4: 55892E84839011EAB5B82263C4F9AE02.roa (hash: nXu3TrhqWzeQhIAXd22b9k7kj49e1Ni4pYpn1PtXrj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2504 (0x9c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: May 14 20:08:07 2025 GMT Not After : May 21 20:08:07 2025 GMT Subject: CN=6824f827-7cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:25:7a:4b:65:ff:ba:eb:65:fe:6f:26:98: 9c:e7:45:a0:0e:5a:0a:d6:e9:24:00:2c:88:d3:8e: 92:d2:90:9d:34:bf:d4:bc:b9:8e:60:8c:11:c4:fd: 6c:56:39:df:a9:7c:5c:0d:52:f8:45:3a:b9:97:9d: a5:0e:7c:20:7a:36:46:1d:12:b6:06:29:65:45:06: d2:6c:b9:9a:03:59:66:2d:13:7b:0f:65:09:04:af: 72:d5:03:a3:8d:90:38:65:58:01:4b:d1:b2:fa:6b: 43:2c:c2:39:22:f6:6b:8c:95:0e:e3:34:bd:f4:51: cf:4f:33:03:20:41:f6:2a:05:34:e5:86:31:63:30: 85:06:ba:34:c3:a6:b1:3b:ad:95:d4:c4:29:1e:bf: e0:8a:07:c0:54:e6:1e:03:33:5d:be:aa:d1:17:ef: 1c:d8:fa:ab:a4:ae:b1:8b:38:a8:c4:f6:37:1a:29: cd:77:14:c0:c4:60:84:9a:9b:b4:b0:8b:9d:e0:63: d9:29:99:eb:dd:96:f0:61:db:5d:4e:cd:ab:60:2f: 84:b4:f2:fa:af:a3:8c:7b:24:17:0d:7f:80:a7:92: af:6e:de:b1:a8:20:52:36:72:11:15:c5:30:3f:02: 33:57:35:fe:a8:b5:2c:21:14:cf:e0:e3:de:69:29: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4F:9D:C7:05:07:B4:23:23:99:7A:96:13:23:1D:44:9C:BB:C4:6A X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:3a:b2:c8:de:17:58:7f:87:29:20:6b:b8:58:a5:0d:e8:c9: c0:00:fc:bd:eb:cc:a9:73:3a:c0:0b:fc:13:52:30:e2:c0:1d: b2:ec:15:4d:03:77:cb:7f:18:41:36:fb:de:97:3e:d7:f7:5c: 49:b3:1e:49:80:bf:5d:d4:fd:e7:b6:33:0e:8b:68:45:06:82: 9b:a5:72:48:42:47:14:66:ba:57:05:a3:71:48:fc:fe:93:a4: fb:d7:c9:b7:1d:72:59:97:fd:88:99:0b:38:1d:e2:a9:7a:15: f5:45:fa:21:ec:b9:a7:3d:b0:89:b7:46:ca:f1:38:7c:2f:12: f5:01:7c:3c:56:16:79:4f:2d:a5:ef:a0:2c:a9:7e:78:42:e9: 5f:76:c3:f8:06:a9:dd:09:9a:35:bc:df:d8:50:08:95:64:c9: 02:6d:2e:e5:de:90:6c:af:16:16:f4:c2:ad:10:45:d4:8e:05: fc:9e:62:ea:9a:8e:92:fd:6b:56:f8:1a:7d:d1:70:cc:55:82: 31:3b:24:c3:47:24:8f:74:54:19:30:c7:92:94:cc:b8:3f:f5: 08:ff:cd:78:8a:28:ea:35:e4:2a:51:3b:88:a5:c5:04:d0:e7: ff:c1:65:30:d4:01:5e:e3:4b:b5:eb:81:c4:a7:c7:40:db:d9: 66:fe:a1:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjUwNTE0MjAwODA3WhcNMjUwNTIxMjAwODA3WjAYMRYwFAYD VQQDEw02ODI0ZjgyNy03Y2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulQlektl/7rrZf5vJpic50WgDloK1ukkACyI046S0pCdNL/UvLmOYIwRxP1s VjnfqXxcDVL4RTq5l52lDnwgejZGHRK2BillRQbSbLmaA1lmLRN7D2UJBK9y1QOj jZA4ZVgBS9Gy+mtDLMI5IvZrjJUO4zS99FHPTzMDIEH2KgU05YYxYzCFBro0w6ax O62V1MQpHr/gigfAVOYeAzNdvqrRF+8c2PqrpK6xizioxPY3GinNdxTAxGCEmpu0 sIud4GPZKZnr3ZbwYdtdTs2rYC+EtPL6r6OMeyQXDX+Ap5Kvbt6xqCBSNnIRFcUw PwIzVzX+qLUsIRTP4OPeaSm9LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxPnccF B7QjI5l6lhMjHUScu8RqMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYOrLI3hdYf4cpIGu4WKUN6MnAAPy968ypczrAC/wTUjDiwB2y7BVN A3fLfxhBNvvelz7X91xJsx5JgL9d1P3ntjMOi2hFBoKbpXJIQkcUZrpXBaNxSPz+ k6T718m3HXJZl/2ImQs4HeKpehX1Rfoh7LmnPbCJt0bK8Th8LxL1AXw8VhZ5Ty2l 76AsqX54QulfdsP4BqndCZo1vN/YUAiVZMkCbS7l3pBsrxYW9MKtEEXUjgX8nmLq mo6S/WtW+Bp90XDMVYIxOyTDRySPdFQZMMeSlMy4P/UI/814iijqNeQqUTuIpcUE 0Of/wWUw1AFe40u164HEp8dA29lm/qEX -----END CERTIFICATE-----Generated at Thu May 15 00:29:02 2025 by rpki-client