$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: j9YzdiQKKSu0frnvNpytcWOxqL4sVhjbLngNnNKrq0A= Subject key identifier: D7:E6:8F:48:7A:FB:EA:7A:66:AF:66:2A:11:57:66:7C:D7:0E:1A:AC Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 09B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 09A2 Signing time: Fri 04 Apr 2025 20:13:15 +0000 Manifest this update: Fri 04 Apr 2025 20:13:14 +0000 Manifest next update: Fri 11 Apr 2025 20:13:14 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: 1eKWnqfo/44aAzVDjRJW5oX4TxfYnB2aXZ2FwKnKeJ0=) 2: 6322249E033E11EDA7401850C4F9AE02.roa (hash: bxum+WOpJCc/rrq4Z1XLEVCWKFHxlT2LUexLiRBlPmM=) 3: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: zWd+mcCk9l+jHD4vYbrupaGOty0zdeubNycUNDATtLs=) 4: 55892E84839011EAB5B82263C4F9AE02.roa (hash: nXu3TrhqWzeQhIAXd22b9k7kj49e1Ni4pYpn1PtXrj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2484 (0x9b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9 Validity Not Before: Apr 4 20:13:14 2025 GMT Not After : Apr 11 20:13:14 2025 GMT Subject: CN=67f03d5a-180a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:a2:ed:18:fa:de:b4:c9:42:c0:d4:f3:a4: 9f:6b:db:52:c0:64:74:41:b2:df:64:8f:4e:29:e5: 87:eb:cf:84:4d:d4:89:90:c9:ab:a0:0c:02:d6:c5: da:43:72:bd:f9:b3:a6:92:d8:5b:20:75:c9:37:b9: d2:df:e1:24:60:b6:b0:73:d0:bd:41:73:e7:99:28: c8:fe:36:7c:dc:f4:a9:25:02:b7:12:ae:6d:5c:ca: a2:47:17:2e:98:3c:95:86:2f:8b:f5:bd:1f:e8:ac: db:c8:3b:ac:bb:86:6e:b6:92:76:3e:48:0a:4f:24: 78:d0:c1:3a:0e:8a:26:89:f1:ee:76:03:79:79:18: 30:ac:76:97:e4:88:a3:c2:33:79:76:9b:39:73:72: 75:62:8b:97:6b:3e:44:f3:d3:60:c9:2f:b8:1a:7f: e6:f0:46:9b:a9:69:db:f1:7b:25:ed:9d:b5:29:62: 18:8f:cb:83:41:25:ef:1f:4e:b6:d0:16:09:81:bb: 7d:1d:da:69:da:4c:58:27:56:64:b6:74:76:9c:ae: 71:11:6f:78:85:2d:15:c8:6d:e2:e8:60:4f:70:1c: d3:72:a6:65:fb:35:2d:aa:46:66:92:c7:05:fa:50: 5c:e1:21:da:73:24:08:16:26:ab:a9:3e:24:9a:56: 5f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E6:8F:48:7A:FB:EA:7A:66:AF:66:2A:11:57:66:7C:D7:0E:1A:AC X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:85:46:a2:30:54:3e:b6:27:fd:2b:84:b0:f3:ba:82:d7:c1: 6c:fb:9e:99:2c:9d:c7:49:6f:64:e4:2a:ba:4d:c6:18:35:b2: 38:f4:24:bf:db:1a:12:87:92:30:f4:c0:fe:ef:c7:38:d9:7a: 6e:1b:34:fd:c0:26:5b:b9:29:36:0e:43:0e:13:3b:9b:60:35: b6:4c:e8:a0:85:9c:58:31:e6:89:8e:94:2b:63:6c:84:08:8d: 3e:b8:f5:4b:f5:f9:36:13:9a:53:5c:68:40:19:cf:aa:d6:c1: 10:e3:ad:db:73:cb:ca:9b:df:78:e4:4e:93:f9:77:fd:a6:81: 94:b6:fb:20:8a:a0:64:40:40:77:8c:e9:f9:be:f0:cc:d4:3f: 52:5f:48:20:ca:5f:f0:ee:81:bd:80:b3:24:bd:c7:99:8f:4e: 53:51:b1:5f:b4:b7:74:32:7b:a9:28:cc:d1:09:4e:77:83:a7: a3:00:12:03:5d:59:42:53:f6:a4:8e:4f:e7:f6:a9:76:2d:f1: 5e:4a:8b:11:76:c4:4e:07:57:e9:0d:c3:b5:1c:7d:ad:f9:b0: 0e:b0:e9:c7:51:d4:11:ab:77:ae:0a:86:ec:1b:5e:0c:5a:8a: 4a:b9:7d:84:0b:eb:f3:2d:a6:ec:50:7e:3f:e2:d3:6c:4d:83: 08:6a:f7:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjUwNDA0MjAxMzE0WhcNMjUwNDExMjAxMzE0WjAYMRYwFAYD VQQDEw02N2YwM2Q1YS0xODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSWi7Rj63rTJQsDU86Sfa9tSwGR0QbLfZI9OKeWH68+ETdSJkMmroAwC1sXa Q3K9+bOmkthbIHXJN7nS3+EkYLawc9C9QXPnmSjI/jZ83PSpJQK3Eq5tXMqiRxcu mDyVhi+L9b0f6KzbyDusu4ZutpJ2PkgKTyR40ME6DoomifHudgN5eRgwrHaX5Iij wjN5dps5c3J1YouXaz5E89NgyS+4Gn/m8EabqWnb8Xsl7Z21KWIYj8uDQSXvH062 0BYJgbt9Hdpp2kxYJ1ZktnR2nK5xEW94hS0VyG3i6GBPcBzTcqZl+zUtqkZmkscF +lBc4SHacyQIFiarqT4kmlZfmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfmj0h6 ++p6Zq9mKhFXZnzXDhqsMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLhUaiMFQ+tif9K4Sw87qC18Fs+56ZLJ3HSW9k5Cq6TcYYNbI49CS/ 2xoSh5Iw9MD+78c42XpuGzT9wCZbuSk2DkMOEzubYDW2TOighZxYMeaJjpQrY2yE CI0+uPVL9fk2E5pTXGhAGc+q1sEQ463bc8vKm9945E6T+Xf9poGUtvsgiqBkQEB3 jOn5vvDM1D9SX0ggyl/w7oG9gLMkvceZj05TUbFftLd0MnupKMzRCU53g6ejABID XVlCU/akjk/n9ql2LfFeSosRdsROB1fpDcO1HH2t+bAOsOnHUdQRq3euCobsG14M WopKuX2EC+vzLabsUH4/4tNsTYMIavdh -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:54 2025 by rpki-client