$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: 0lbjF7MSLytNlNJXSq8wwMPJVgAhyEhV+7dqhZ8jFtM= Subject key identifier: 09:B4:49:1D:64:CD:18:F5:4E:D6:B0:8E:79:1A:33:C0:04:05:C0:43 Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 0AD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 0ABB Signing time: Thu 24 Sep 2026 19:25:52 +0000 Manifest this update: Thu 24 Sep 2026 19:25:52 +0000 Manifest next update: Thu 01 Oct 2026 19:25:52 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: n3vvqL7KQSzspA055s0zxxkHk9nBBmFq8a0ay1HnNTA=) 2: 6322249E033E11EDA7401850C4F9AE02.roa (hash: pGyuW5enksJ2G+9mcRO+cELx6+FB88OJUmeOOQetTPM=) 3: 55892E84839011EAB5B82263C4F9AE02.roa (hash: QmhFOsJakuRPvilxf18zot/c04GvDsCOSbSfIAJQQfc=) 4: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: OG3ctaEtxzOpwlGGz1iZBXWwa/TL/RFeipRYOMMEKxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2775 (0xad7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: Sep 24 19:25:52 2026 GMT Not After : Oct 1 19:25:52 2026 GMT Subject: CN=6ab57940-3c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:3e:7f:6d:72:a5:0e:05:2c:6c:d9:9f:1d: 7c:da:57:9a:76:a6:8b:2b:cd:0d:85:d6:be:59:19: 4c:5d:00:6b:1b:08:d0:62:59:72:ae:73:ab:2c:9f: fa:8b:aa:2f:c4:86:3c:52:af:cd:19:07:62:d3:42: c0:55:2f:ab:b4:a0:19:6d:50:67:be:00:ee:2e:b9: 71:53:d5:a3:41:39:c4:f5:5e:53:2f:83:8c:66:2b: 12:60:94:7b:4b:b1:43:e5:a6:47:3b:a4:d0:d4:b1: 7c:48:92:22:e3:70:1f:20:4a:24:47:28:5f:a4:eb: 98:6b:20:40:91:59:06:12:8b:ec:69:fc:02:08:70: 38:3d:cf:5a:ab:7f:27:83:70:06:b2:9e:ee:a0:01: 58:12:3c:0a:10:23:d1:ea:d5:2e:d2:53:19:a1:0a: f0:23:3e:6c:65:ef:0a:07:19:d8:e5:88:8d:c3:f5: 25:a9:f3:09:e5:a8:90:0e:dc:40:83:b4:ab:1f:fa: 15:b8:a2:f6:4d:70:14:ef:c3:59:3a:ea:aa:71:58: cd:03:f1:3a:ae:d2:35:95:6e:bd:1e:e7:de:25:da: 6b:f5:fa:81:fb:64:03:85:d5:74:3b:00:c5:e5:76: b4:ae:83:ee:25:2d:70:04:97:ed:9c:33:f5:88:10: c8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B4:49:1D:64:CD:18:F5:4E:D6:B0:8E:79:1A:33:C0:04:05:C0:43 X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e3:cb:d7:8b:a6:6e:2d:4a:5c:30:bc:4f:f5:14:d9:1e:a0: 93:a4:6c:06:ae:e2:b6:e8:ba:9a:48:12:bd:9f:b2:17:d6:9a: e8:7c:8f:f6:1a:3d:3e:57:8f:d6:ab:10:74:0d:e2:72:19:f3: 7b:d0:23:7b:f2:76:72:09:39:92:19:bb:5b:b8:6f:e6:d4:85: 91:f7:c5:1e:5b:8d:74:c5:19:24:0d:69:ea:8c:5a:35:bd:cc: d8:4f:48:a6:c2:23:13:24:d4:58:41:4c:78:37:82:a5:e1:3d: e8:9a:52:9d:97:92:6c:ef:4b:04:cc:6f:ba:11:47:f2:da:ea: 63:d1:70:ea:e4:5e:57:23:25:58:b5:a1:9c:8b:f6:8a:a7:1d: 94:c7:ee:9c:70:45:f7:ce:2d:e2:15:b5:42:6b:15:c7:cd:96: c7:f7:af:c0:7f:ed:04:41:62:0c:5d:91:23:df:c9:d0:1d:44: 29:65:35:e8:d0:1f:74:6e:5f:ff:22:7e:31:fa:24:b9:83:9f: b1:b9:4c:53:28:75:e4:24:66:e0:de:a2:2a:b7:11:a2:8b:e3: 39:fe:90:8e:cf:a7:1f:ae:c6:7d:00:ff:f1:38:27:d2:76:51: 3e:26:79:48:78:de:7b:79:08:5f:1e:3a:06:42:26:0b:cf:2b: bb:af:fd:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjYwOTI0MTkyNTUyWhcNMjYxMDAxMTkyNTUyWjAYMRYwFAYD VQQDEw02YWI1Nzk0MC0zYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8Y+f21ypQ4FLGzZnx182leadqaLK80Nhda+WRlMXQBrGwjQYllyrnOrLJ/6 i6ovxIY8Uq/NGQdi00LAVS+rtKAZbVBnvgDuLrlxU9WjQTnE9V5TL4OMZisSYJR7 S7FD5aZHO6TQ1LF8SJIi43AfIEokRyhfpOuYayBAkVkGEovsafwCCHA4Pc9aq38n g3AGsp7uoAFYEjwKECPR6tUu0lMZoQrwIz5sZe8KBxnY5YiNw/UlqfMJ5aiQDtxA g7SrH/oVuKL2TXAU78NZOuqqcVjNA/E6rtI1lW69HufeJdpr9fqB+2QDhdV0OwDF 5Xa0roPuJS1wBJftnDP1iBDIXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAm0SR1k zRj1TtawjnkaM8AEBcBDMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ+PL14umbi1KXDC8T/UU2R6gk6RsBq7itui6mkgSvZ+yF9aa6HyP9ho9PleP 1qsQdA3ichnze9Aje/J2cgk5khm7W7hv5tSFkffFHluNdMUZJA1p6oxaNb3M2E9I psIjEyTUWEFMeDeCpeE96JpSnZeSbO9LBMxvuhFH8trqY9Fw6uReVyMlWLWhnIv2 iqcdlMfunHBF984t4hW1QmsVx82Wx/evwH/tBEFiDF2RI9/J0B1EKWU16NAfdG5f /yJ+MfokuYOfsblMUyh15CRm4N6iKrcRoovjOf6Qjs+nH67GfQD/8Tgn0nZRPiZ5 SHjee3kIXx46BkImC88ru6/9RQ== -----END CERTIFICATE-----Generated at Fri Sep 25 23:49:14 2026 by rpki-client