$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: Z4fjPF6fNaB0/TLHkmKmAlhljUjAaXNvtHzcMiVm+TY= Subject key identifier: 98:3E:A9:73:9E:F4:2A:96:17:D0:75:AC:CA:E5:5A:FD:FB:9B:3A:AE Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 0AD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 0ABA Signing time: Tue 22 Sep 2026 19:19:10 +0000 Manifest this update: Tue 22 Sep 2026 19:19:09 +0000 Manifest next update: Tue 29 Sep 2026 19:19:09 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: GWQGXTn3e3vWUlpwQerXX9uervkltpcVABohHnB3aBs=) 2: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: OG3ctaEtxzOpwlGGz1iZBXWwa/TL/RFeipRYOMMEKxw=) 3: 55892E84839011EAB5B82263C4F9AE02.roa (hash: QmhFOsJakuRPvilxf18zot/c04GvDsCOSbSfIAJQQfc=) 4: 6322249E033E11EDA7401850C4F9AE02.roa (hash: pGyuW5enksJ2G+9mcRO+cELx6+FB88OJUmeOOQetTPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2774 (0xad6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: Sep 22 19:19:09 2026 GMT Not After : Sep 29 19:19:09 2026 GMT Subject: CN=6ab2d4ae-9c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f0:4b:f9:23:36:c2:5d:0a:25:3d:d6:06:f2: 51:f1:ea:dc:b9:3c:a1:13:0d:13:ff:15:01:f9:96: 2f:20:d8:8d:86:0d:4e:02:26:17:31:78:04:f7:e1: f6:0e:b2:a7:cd:61:63:0b:66:05:8b:ec:2d:7e:0c: 68:f3:93:37:80:4c:cf:9a:e2:d2:8f:53:3b:6d:7a: 13:b7:ef:6a:49:68:41:56:c7:ec:d1:64:8b:f2:c2: 7a:a8:d3:e1:82:9e:d0:b1:5e:af:11:8c:b3:d4:bc: 2d:b8:cb:e8:d5:83:a1:7b:f8:92:e1:78:d3:af:42: d2:4d:5b:fa:2b:b1:75:9d:9e:d7:77:93:d0:4d:e9: 78:d5:2b:1e:60:be:25:27:4c:79:22:a0:59:6c:ef: 2f:4f:8b:6c:93:2a:36:23:e9:09:f4:a9:2a:20:08: 21:ef:10:01:ed:1b:13:cb:57:2e:74:28:57:e7:45: f4:db:2f:b6:8a:4c:ff:7a:dc:30:a8:aa:17:4d:28: 8e:95:a6:1e:ea:23:a8:28:bd:8f:b5:96:dd:f1:10: 90:25:c8:f2:d5:e4:59:e5:61:ce:bf:08:75:ab:30: 6e:46:a8:ed:ba:13:5d:0f:c7:a3:28:67:05:5a:08: 00:92:dc:1e:0a:ac:aa:82:3f:bf:8b:a3:5d:07:eb: 73:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3E:A9:73:9E:F4:2A:96:17:D0:75:AC:CA:E5:5A:FD:FB:9B:3A:AE X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:62:e6:87:3c:f0:d2:7f:ce:01:19:c7:90:8c:9f:ff:82:46: a7:b8:77:36:09:e9:7c:13:d9:da:13:e3:66:3a:41:bd:26:e0: 14:6f:9a:91:f2:26:db:5a:95:2e:96:68:f9:60:e5:6c:79:3a: f5:3a:aa:85:53:74:07:62:07:ab:fc:5f:d6:81:60:1c:70:07: f4:30:d7:ae:b6:46:7b:76:bf:a0:6b:81:ea:36:fa:65:7d:09: 2f:e6:2e:2c:f2:fc:24:ff:ea:e7:c2:4d:96:21:02:92:73:4b: 38:ab:ec:1c:67:30:e3:bf:a4:0a:f0:ee:d9:d5:81:bf:6a:13: 9e:79:9e:3a:c3:a4:f6:50:27:3b:86:01:f0:b0:a2:26:97:29: e8:a1:78:28:bb:a0:7f:18:b3:c6:f7:65:b0:cc:f7:3d:3b:1a: 0d:18:23:66:f0:93:ac:62:fc:aa:ed:a5:55:cc:be:3d:60:91: 68:80:65:5f:30:93:af:4b:8d:22:6b:47:79:4b:71:04:88:c6: 0d:29:8d:90:be:6f:97:7b:5f:36:fc:79:96:98:18:e8:71:a7: ab:d1:f1:cd:37:f6:4f:22:a8:25:82:ac:0d:07:c4:f0:b6:b0: 5c:a7:f7:f8:ef:eb:70:b4:da:8c:ff:68:e1:59:bb:9a:9d:31: f6:ae:41:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjYwOTIyMTkxOTA5WhcNMjYwOTI5MTkxOTA5WjAYMRYwFAYD VQQDEw02YWIyZDRhZS05YzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/BL+SM2wl0KJT3WBvJR8ercuTyhEw0T/xUB+ZYvINiNhg1OAiYXMXgE9+H2 DrKnzWFjC2YFi+wtfgxo85M3gEzPmuLSj1M7bXoTt+9qSWhBVsfs0WSL8sJ6qNPh gp7QsV6vEYyz1LwtuMvo1YOhe/iS4XjTr0LSTVv6K7F1nZ7Xd5PQTel41SseYL4l J0x5IqBZbO8vT4tskyo2I+kJ9KkqIAgh7xAB7RsTy1cudChX50X02y+2ikz/etww qKoXTSiOlaYe6iOoKL2PtZbd8RCQJcjy1eRZ5WHOvwh1qzBuRqjtuhNdD8ejKGcF WggAktweCqyqgj+/i6NdB+tzxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJg+qXOe 9CqWF9B1rMrlWv37mzquMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbWLmhzzw0n/OARnHkIyf/4JGp7h3NgnpfBPZ2hPjZjpBvSbgFG+akfIm21qV LpZo+WDlbHk69TqqhVN0B2IHq/xf1oFgHHAH9DDXrrZGe3a/oGuB6jb6ZX0JL+Yu LPL8JP/q58JNliECknNLOKvsHGcw47+kCvDu2dWBv2oTnnmeOsOk9lAnO4YB8LCi Jpcp6KF4KLugfxizxvdlsMz3PTsaDRgjZvCTrGL8qu2lVcy+PWCRaIBlXzCTr0uN ImtHeUtxBIjGDSmNkL5vl3tfNvx5lpgY6HGnq9HxzTf2TyKoJYKsDQfE8LawXKf3 +O/rcLTajP9o4Vm7mp0x9q5BCA== -----END CERTIFICATE-----Generated at Thu Sep 24 07:02:19 2026 by rpki-client