$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: 4YT+RMWXH8dQJqOuhXGvKOCK/HezZbBuDAyqf2WX1/Y= Subject key identifier: AC:5A:1D:6C:4C:DA:64:9A:CA:D3:DC:33:E8:9B:22:4F:37:B8:46:8D Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 0AF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 0AD5 Signing time: Sat 14 Nov 2026 19:20:16 +0000 Manifest this update: Sat 14 Nov 2026 19:20:15 +0000 Manifest next update: Sat 21 Nov 2026 19:20:15 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: KTwqczHgKorsd2cgYEJEefUypoLdf4e+QfUU26efoPE=) 2: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: OG3ctaEtxzOpwlGGz1iZBXWwa/TL/RFeipRYOMMEKxw=) 3: 55892E84839011EAB5B82263C4F9AE02.roa (hash: QmhFOsJakuRPvilxf18zot/c04GvDsCOSbSfIAJQQfc=) 4: 6322249E033E11EDA7401850C4F9AE02.roa (hash: pGyuW5enksJ2G+9mcRO+cELx6+FB88OJUmeOOQetTPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 19:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2801 (0xaf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: Nov 14 19:20:15 2026 GMT Not After : Nov 21 19:20:15 2026 GMT Subject: CN=6af8b46f-b52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:8f:2b:7b:18:96:d5:2c:56:9b:e2:cf:a7: 45:69:71:c9:93:4d:48:c6:81:44:7b:4b:f6:cf:7a: 19:36:37:90:ed:ab:98:0b:07:33:8d:db:fb:36:c9: 77:0d:4a:88:f5:8c:66:ac:6b:c4:6d:e3:90:a6:16: f8:b0:f0:ba:19:38:e6:b3:fc:fa:d5:eb:a2:84:36: d7:ab:0a:56:5e:98:bc:52:2b:27:7e:7f:d8:8c:1e: e3:67:5b:6f:e5:56:7a:b6:c7:93:28:5d:30:ed:f6: 40:2d:e4:25:2f:11:13:21:29:63:f4:6b:28:c4:3e: be:5d:60:e4:ae:75:5a:00:e3:6c:4e:50:7e:b3:81: d9:c0:e4:75:09:15:1e:c3:1c:88:85:08:56:83:c1: cb:00:74:9c:00:14:ce:a8:fa:fd:41:a0:f7:72:71: 6d:90:dd:1b:32:69:a9:f7:a8:d4:e5:9e:bc:57:b6: 6e:cb:15:4e:67:71:b9:88:bc:58:cd:cf:26:02:31: 18:67:c1:5a:fe:0f:65:06:09:43:26:c7:01:97:75: 90:e8:cc:e9:47:ff:01:83:18:22:74:cf:c7:0c:94: f0:46:a7:a7:39:c5:34:19:c9:ec:98:1d:04:d3:f4: b3:f1:99:e1:30:4b:5e:92:26:1e:ba:62:5f:db:a1: f7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5A:1D:6C:4C:DA:64:9A:CA:D3:DC:33:E8:9B:22:4F:37:B8:46:8D X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:c6:3e:5c:6f:72:f7:c5:00:ac:18:46:3e:9c:67:e1:71:50: bf:87:0f:d6:41:89:c6:45:71:8d:84:6a:69:4a:8b:ba:26:dd: bb:bb:57:f5:0a:3c:50:16:bc:76:29:6f:7c:e5:c1:be:32:bc: ed:f0:49:21:aa:84:0e:a5:5f:31:83:ea:9f:81:6c:53:92:70: cb:03:18:67:11:5b:b9:86:91:bd:fd:65:f7:92:0a:04:d1:2c: b6:dc:0c:f9:dc:f0:1b:1a:63:85:f9:5c:74:c5:d8:09:8f:5e: c8:95:35:0b:89:e3:da:15:15:db:f0:00:b4:28:57:d0:c9:13: c2:a6:f3:40:44:2e:1e:d4:99:88:f5:66:22:28:ab:36:69:0d: fe:b4:b5:6b:50:e8:2f:11:12:d1:c2:79:a8:b1:30:24:37:9e: 0e:20:49:98:20:a4:6d:e3:88:1c:ac:c9:23:6d:c4:f3:0e:41: 12:33:82:74:f7:f4:5b:a5:0d:1a:58:27:69:e6:a6:77:b6:59: df:ed:45:ee:a1:87:9f:4d:3d:b4:a6:0d:4e:a1:c7:64:75:8f: 47:25:80:09:f6:ef:37:2a:1d:a0:14:ba:fe:79:f2:b4:77:b2: 7a:6f:d7:40:93:f2:b3:c0:cf:6d:14:03:35:8a:c7:9d:3f:b8: 04:86:15:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjYxMTE0MTkyMDE1WhcNMjYxMTIxMTkyMDE1WjAYMRYwFAYD VQQDEw02YWY4YjQ2Zi1iNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoqPK3sYltUsVpviz6dFaXHJk01IxoFEe0v2z3oZNjeQ7auYCwczjdv7Nsl3 DUqI9YxmrGvEbeOQphb4sPC6GTjms/z61euihDbXqwpWXpi8Uisnfn/YjB7jZ1tv 5VZ6tseTKF0w7fZALeQlLxETISlj9GsoxD6+XWDkrnVaAONsTlB+s4HZwOR1CRUe wxyIhQhWg8HLAHScABTOqPr9QaD3cnFtkN0bMmmp96jU5Z68V7ZuyxVOZ3G5iLxY zc8mAjEYZ8Fa/g9lBglDJscBl3WQ6MzpR/8BgxgidM/HDJTwRqenOcU0GcnsmB0E 0/Sz8ZnhMEtekiYeumJf26H3sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKxaHWxM 2mSaytPcM+ibIk83uEaNMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAysY+XG9y98UArBhGPpxn4XFQv4cP1kGJxkVxjYRqaUqLuibdu7tX9Qo8UBa8 dilvfOXBvjK87fBJIaqEDqVfMYPqn4FsU5JwywMYZxFbuYaRvf1l95IKBNEsttwM +dzwGxpjhflcdMXYCY9eyJU1C4nj2hUV2/AAtChX0MkTwqbzQEQuHtSZiPVmIiir NmkN/rS1a1DoLxES0cJ5qLEwJDeeDiBJmCCkbeOIHKzJI23E8w5BEjOCdPf0W6UN Glgnaeamd7ZZ3+1F7qGHn009tKYNTqHHZHWPRyWACfbvNyodoBS6/nnytHeyem/X QJPys8DPbRQDNYrHnT+4BIYV+A== -----END CERTIFICATE-----Generated at Sun Nov 15 12:14:18 2026 by rpki-client