$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: qx8ophQQPxbmm/f8HHMc/GtFVJBtQnK4nh80SkWx5jM= Subject key identifier: 11:BC:9B:19:AC:AD:AE:08:13:F6:E4:87:86:1D:BF:F7:85:A7:4E:B4 Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 0A77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 0A5C Signing time: Thu 26 Mar 2026 19:33:00 +0000 Manifest this update: Thu 26 Mar 2026 19:33:00 +0000 Manifest next update: Thu 02 Apr 2026 19:33:00 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: RoJPUwpkdWaQI2OcsZ7D/bdxtClcCJJ6wiSC6c+MmfA=) 2: 55892E84839011EAB5B82263C4F9AE02.roa (hash: QmhFOsJakuRPvilxf18zot/c04GvDsCOSbSfIAJQQfc=) 3: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: kdGWDUBBwv7cJ1dopKP4Pf5YTmUxxvJuv1IOgZRikQU=) 4: 6322249E033E11EDA7401850C4F9AE02.roa (hash: pGyuW5enksJ2G+9mcRO+cELx6+FB88OJUmeOOQetTPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 19:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2679 (0xa77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: Mar 26 19:33:00 2026 GMT Not After : Apr 2 19:33:00 2026 GMT Subject: CN=69c589ec-cc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:33:20:b6:28:7d:cf:95:4e:c6:26:6d:f6:85: 6b:b1:af:e3:7c:81:fc:1a:85:36:9f:ee:90:d3:d8: 5c:e1:c7:ca:b6:46:90:5f:06:99:92:c8:ea:a1:8f: 20:c2:b9:00:69:91:39:b7:8e:26:ef:6e:8c:c9:1f: 5b:5c:4d:43:a1:e3:5a:7a:b7:2b:86:3f:6c:5e:53: 61:e2:60:34:68:25:0c:c6:9d:65:b2:ba:8b:b2:c5: 14:04:46:67:f1:9d:cb:9f:fe:4c:a2:2b:d1:80:77: 5b:66:7c:19:e7:bb:a2:0b:00:a4:df:4e:33:f5:90: e9:40:2e:37:49:1c:9f:cf:51:5f:03:e5:4d:5d:22: 24:76:d2:ff:92:1d:82:4c:9f:64:c9:d8:57:86:6c: 7b:3e:6d:cf:3a:6e:c7:ca:e0:53:d4:e5:a7:50:f4: c3:52:0e:38:d7:56:e6:18:d2:d5:26:48:70:3d:8c: 20:f5:f8:b4:d5:ba:3f:58:62:26:83:ef:0a:88:f6: 9e:fe:e7:8d:4f:21:fd:4a:30:8c:63:d4:6e:5b:22: e9:7a:40:b0:77:1b:f2:86:80:50:ca:f6:f6:46:57: c9:23:ff:a8:a3:d8:28:19:2b:eb:1c:58:4d:0a:e3: 7c:b0:94:24:f1:35:46:55:4e:31:90:41:26:93:c3: 5c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BC:9B:19:AC:AD:AE:08:13:F6:E4:87:86:1D:BF:F7:85:A7:4E:B4 X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:ce:ad:fa:29:d9:fc:41:a4:89:5f:cc:d5:cc:0c:62:3d:9a: 26:cf:e7:00:09:93:d6:e3:65:b4:be:10:69:53:35:c5:e4:e2: 6c:eb:b0:7a:f8:46:ce:a5:4b:d0:68:e2:0d:3c:b2:07:a4:6b: 04:23:15:dc:3c:67:82:ef:2d:91:d7:86:61:99:e6:80:52:e3: 12:45:3a:ab:1c:ce:de:51:c0:b4:7d:4a:4c:05:bd:a4:f9:4d: 63:a2:27:64:bc:56:8a:28:36:1e:7e:21:57:5b:ef:74:02:a3: 7c:62:55:40:8a:5a:bc:e5:b7:34:c4:fd:96:ce:f5:f2:98:d0: f2:4d:22:0e:87:fe:4a:1d:c3:32:a5:6b:43:92:9f:0a:9c:bd: b9:78:25:e9:00:84:1a:5c:4b:b3:19:ba:ed:a3:56:fe:62:a8: 0c:27:bb:fc:48:39:d5:f7:eb:bb:79:fc:da:a0:3d:2a:a7:a4: ca:56:d3:b4:85:90:5f:47:0c:fe:0f:7b:60:18:1e:ed:09:85: 7a:93:b1:db:bb:06:fa:76:21:30:09:3e:36:80:bc:fe:53:3b: 6e:52:5f:5f:0c:34:7b:36:0e:f3:6c:95:60:84:7b:73:55:8a: 0a:7e:66:9b:43:90:45:d6:0d:a0:9d:bd:be:a3:ad:ab:d9:a6: d6:b9:90:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjYwMzI2MTkzMzAwWhcNMjYwNDAyMTkzMzAwWjAYMRYwFAYD VQQDEw02OWM1ODllYy1jYzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljMgtih9z5VOxiZt9oVrsa/jfIH8GoU2n+6Q09hc4cfKtkaQXwaZksjqoY8g wrkAaZE5t44m726MyR9bXE1DoeNaercrhj9sXlNh4mA0aCUMxp1lsrqLssUUBEZn 8Z3Ln/5MoivRgHdbZnwZ57uiCwCk304z9ZDpQC43SRyfz1FfA+VNXSIkdtL/kh2C TJ9kydhXhmx7Pm3POm7HyuBT1OWnUPTDUg4411bmGNLVJkhwPYwg9fi01bo/WGIm g+8KiPae/ueNTyH9SjCMY9RuWyLpekCwdxvyhoBQyvb2RlfJI/+oo9goGSvrHFhN CuN8sJQk8TVGVU4xkEEmk8NckwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBG8mxms ra4IE/bkh4Ydv/eFp060MB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvs6t+inZ/EGkiV/M1cwMYj2aJs/nAAmT1uNltL4QaVM1xeTibOuwevhGzqVL 0GjiDTyyB6RrBCMV3Dxngu8tkdeGYZnmgFLjEkU6qxzO3lHAtH1KTAW9pPlNY6In ZLxWiig2Hn4hV1vvdAKjfGJVQIpavOW3NMT9ls718pjQ8k0iDof+Sh3DMqVrQ5Kf Cpy9uXgl6QCEGlxLsxm67aNW/mKoDCe7/Eg51ffru3n82qA9KqekylbTtIWQX0cM /g97YBge7QmFepOx27sG+nYhMAk+NoC8/lM7blJfXww0ezYO82yVYIR7c1WKCn5m m0OQRdYNoJ29vqOtq9mm1rmQRw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:34 2026 by rpki-client