$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: xvTUQywYOWhbq1wgi4BUWznze06YiCWzI6AyPgPjrnI= Subject key identifier: B0:4C:10:B5:BB:22:F7:81:E8:63:22:7D:4E:C7:A1:E9:D4:51:C7:D4 Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 09D8 Signing time: Tue 22 Jul 2025 20:11:36 +0000 Manifest this update: Tue 22 Jul 2025 20:11:35 +0000 Manifest next update: Tue 29 Jul 2025 20:11:35 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: PURSVORy0zQGVVHpA6xo34cb4ZivCSc0QYsv3W/REj4=) 2: 6322249E033E11EDA7401850C4F9AE02.roa (hash: bxum+WOpJCc/rrq4Z1XLEVCWKFHxlT2LUexLiRBlPmM=) 3: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: zWd+mcCk9l+jHD4vYbrupaGOty0zdeubNycUNDATtLs=) 4: 55892E84839011EAB5B82263C4F9AE02.roa (hash: nXu3TrhqWzeQhIAXd22b9k7kj49e1Ni4pYpn1PtXrj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 20:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: Jul 22 20:11:35 2025 GMT Not After : Jul 29 20:11:35 2025 GMT Subject: CN=687ff077-23b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dc:6f:d9:ed:d9:a3:0a:c4:df:89:dc:be:c9: cd:6f:aa:35:51:ff:f4:aa:84:04:64:2c:80:b0:ce: fa:27:bd:84:71:3e:f8:eb:8d:05:9c:d7:04:a1:dc: 7c:f0:b1:17:1a:6a:59:93:f1:7c:72:fe:9d:54:e1: 11:93:32:a5:9e:4a:56:df:c6:e6:50:f4:4c:fe:43: 6a:33:37:9f:80:81:17:c8:65:3b:22:21:f1:15:3c: 3d:6c:78:c6:a7:a0:00:56:ce:b2:06:53:36:38:97: 0b:5d:da:06:5b:22:d4:7b:98:35:ba:c0:69:a4:72: f6:f5:e4:ad:58:45:ee:ee:92:91:e0:6e:c2:fa:80: 75:eb:2e:61:35:39:48:78:c3:be:5d:e8:59:03:a4: 3d:2e:9d:c2:8b:0f:f2:99:f7:da:c6:52:70:61:87: 8b:00:74:f6:4f:0a:e0:04:b3:ee:0b:3b:b2:eb:3f: 1b:36:b6:b5:c4:52:66:32:a8:69:bf:68:36:32:a2: b9:d2:e2:64:f9:9f:eb:39:f9:98:87:77:08:7e:f6: 1c:87:9a:f3:a3:60:af:76:4c:23:50:dc:ff:e9:51: 1c:95:9d:b6:46:ed:80:0c:17:70:cb:23:40:1b:fe: c8:56:88:e5:2c:7d:c7:3c:e3:a7:ae:3e:0c:d6:fc: 66:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4C:10:B5:BB:22:F7:81:E8:63:22:7D:4E:C7:A1:E9:D4:51:C7:D4 X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:12:80:30:16:51:15:7f:00:47:49:18:67:d0:53:14:52:cb: 63:f7:b1:1a:79:ff:c9:40:25:90:5e:07:0a:2d:03:9e:1b:db: 21:97:e7:6a:5c:82:be:44:c0:a8:08:e4:9d:22:40:fa:a4:64: 7e:14:9f:70:9c:36:fe:24:3f:62:2a:a3:40:cd:fe:b3:32:c5: 06:dd:95:1e:93:46:f6:62:d5:3b:55:1a:e7:dc:d3:de:10:24: 2e:5b:02:b3:2f:41:77:f9:dd:86:cc:02:ac:da:83:ba:df:cb: ea:fa:a5:a5:4e:d1:84:f3:7a:b0:25:6b:ba:2e:f1:84:c1:93: 66:29:e5:99:0b:c2:08:d0:5c:3b:ea:c5:94:af:e6:f7:d4:0b: 44:27:af:23:ca:9e:ed:05:77:d2:83:df:8b:2b:ba:fb:a7:09: 1a:01:42:5f:2d:7a:05:2e:51:d7:4d:be:5d:a5:7a:e0:5b:ce: d2:97:8d:a5:09:11:97:c6:e1:f8:b4:40:b1:50:6b:a0:56:86: e1:51:0d:6c:c9:0e:83:dd:5b:7e:50:af:69:90:45:c1:ea:da: b1:86:aa:9d:0e:5c:ce:50:bd:f1:29:58:cc:53:f0:c9:1f:df: 54:ca:64:a5:e9:6b:84:88:db:1b:94:07:73:10:d4:e3:db:81: 8d:62:bb:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjUwNzIyMjAxMTM1WhcNMjUwNzI5MjAxMTM1WjAYMRYwFAYD VQQDEw02ODdmZjA3Ny0yM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09xv2e3ZowrE34ncvsnNb6o1Uf/0qoQEZCyAsM76J72EcT74640FnNcEodx8 8LEXGmpZk/F8cv6dVOERkzKlnkpW38bmUPRM/kNqMzefgIEXyGU7IiHxFTw9bHjG p6AAVs6yBlM2OJcLXdoGWyLUe5g1usBppHL29eStWEXu7pKR4G7C+oB16y5hNTlI eMO+XehZA6Q9Lp3Ciw/ymffaxlJwYYeLAHT2TwrgBLPuCzuy6z8bNra1xFJmMqhp v2g2MqK50uJk+Z/rOfmYh3cIfvYch5rzo2CvdkwjUNz/6VEclZ22Ru2ADBdwyyNA G/7IVojlLH3HPOOnrj4M1vxmRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBMELW7 IveB6GMifU7HoenUUcfUMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXEoAwFlEVfwBHSRhn0FMUUstj97Eaef/JQCWQXgcKLQOeG9shl+dq XIK+RMCoCOSdIkD6pGR+FJ9wnDb+JD9iKqNAzf6zMsUG3ZUek0b2YtU7VRrn3NPe ECQuWwKzL0F3+d2GzAKs2oO638vq+qWlTtGE83qwJWu6LvGEwZNmKeWZC8II0Fw7 6sWUr+b31AtEJ68jyp7tBXfSg9+LK7r7pwkaAUJfLXoFLlHXTb5dpXrgW87Sl42l CRGXxuH4tECxUGugVobhUQ1syQ6D3Vt+UK9pkEXB6tqxhqqdDlzOUL3xKVjMU/DJ H99UymSl6WuEiNsblAdzENTj24GNYru7 -----END CERTIFICATE-----Generated at Wed Jul 23 12:20:29 2025 by rpki-client