$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: 7JAJ1g5aZS37lp0ps3BjSnfLcSPRJoQpAxzHWnzrnms= Subject key identifier: AB:AC:95:EC:EA:DC:F1:95:11:57:86:74:63:E9:F7:2D:1D:1F:62:74 Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 0A4D Signing time: Sat 28 Feb 2026 19:56:27 +0000 Manifest this update: Sat 28 Feb 2026 19:56:27 +0000 Manifest next update: Sat 07 Mar 2026 19:56:27 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: WlOrUZpJzO74uJBXSw7WMzZz82UUrc0mqAnfuSMgOWI=) 2: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: BSWCZvWsxuFeFiHzVgk34XawqpNGgGaEjCo245fx0K8=) 3: 55892E84839011EAB5B82263C4F9AE02.roa (hash: xEiN6K4EW+nKd7QWTCkRP8NOXy6rmtQFux7SNMIIIHs=) 4: 6322249E033E11EDA7401850C4F9AE02.roa (hash: 9QQyKt+E/JcYKsBHtBvz9pVnNqBPSWtrM9W4Vr2YKyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 19:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: Feb 28 19:56:27 2026 GMT Not After : Mar 7 19:56:27 2026 GMT Subject: CN=69a3486b-1dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8b:11:a5:fa:e7:97:c9:14:6d:6b:4d:f2:d4: 89:2a:74:b2:70:be:85:6a:72:63:44:c3:20:a4:91: 1e:20:ec:b8:41:e7:2a:d5:5b:9f:78:d7:31:22:90: 5b:69:50:46:5d:f0:9a:a4:ad:8e:85:55:68:4b:4e: 25:b5:32:fc:42:57:6b:a3:95:2b:22:b2:48:c7:db: 57:93:e1:c5:b8:b4:d2:89:3d:a3:3a:84:20:2d:47: a7:8b:9e:71:c2:13:db:41:17:9d:73:f2:bd:e3:66: f0:2d:72:55:52:1a:19:aa:b9:a6:f1:94:3f:af:c8: ea:eb:b3:af:25:46:60:40:af:77:ae:09:fc:14:8d: a7:34:98:eb:fd:a5:8f:d2:6b:1e:74:94:4f:e0:05: 9d:d5:37:d9:21:81:84:bd:a3:b3:bd:a3:dd:ac:82: e4:91:33:42:4f:ed:b3:1a:13:a4:86:e4:ce:18:02: 34:34:1d:7a:95:10:a6:fd:bd:33:f9:ca:36:92:c3: 04:c0:d4:56:07:17:3d:fc:ee:b7:5d:d3:f5:28:1e: 57:97:fb:96:bd:de:25:56:5a:06:71:13:2e:ac:7c: 62:5d:15:34:61:a4:3a:f6:c8:77:32:0a:2d:00:6c: a7:9b:4f:9d:1f:ab:fd:07:13:72:24:fc:e9:f1:79: 96:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AC:95:EC:EA:DC:F1:95:11:57:86:74:63:E9:F7:2D:1D:1F:62:74 X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:65:69:59:ca:01:27:fd:3e:8b:00:27:05:f5:be:21:e2:91: 2f:42:26:df:e4:7e:0f:19:eb:66:9d:04:4a:c9:f3:73:68:43: 4b:13:8f:df:43:25:a7:f4:28:2c:5b:19:35:ce:7f:72:0c:24: 01:6c:16:47:d5:a1:3a:3c:00:c4:97:e2:d2:07:e8:8e:b9:36: d9:02:90:a2:ff:24:31:66:1a:e3:0b:39:1f:53:0e:7a:cb:91: 31:dc:72:44:30:d0:f0:34:7b:d6:d6:a0:93:9f:fa:d2:f5:d4: 2e:63:a2:19:55:95:e9:f4:ca:cb:47:bf:d4:6a:77:c6:d4:72: e8:8c:75:88:8e:46:2a:f2:e5:9e:7b:d7:74:a3:56:4b:dd:b0: 7d:23:05:fe:94:36:18:84:5c:b8:2d:55:80:47:33:f9:69:57: c7:bf:47:bb:88:28:04:ad:03:48:7c:3a:5e:14:19:a6:7a:f0: e9:f5:fd:53:8f:7c:8e:fb:77:6b:97:79:94:2c:d7:39:ee:fb: 6e:01:5d:e8:91:b9:c3:a5:d7:b8:61:15:f1:4a:42:07:a4:1a: 45:96:81:4f:b0:27:d5:8a:e9:08:70:69:75:6d:a2:29:b9:98: 90:24:fb:f4:c8:0e:20:08:1c:e0:9d:61:54:91:76:42:fb:bc: 1b:50:fa:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjYwMjI4MTk1NjI3WhcNMjYwMzA3MTk1NjI3WjAYMRYwFAYD VQQDDA02OWEzNDg2Yi0xZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24sRpfrnl8kUbWtN8tSJKnSycL6FanJjRMMgpJEeIOy4Qecq1VufeNcxIpBb aVBGXfCapK2OhVVoS04ltTL8Qldro5UrIrJIx9tXk+HFuLTSiT2jOoQgLUeni55x whPbQRedc/K942bwLXJVUhoZqrmm8ZQ/r8jq67OvJUZgQK93rgn8FI2nNJjr/aWP 0msedJRP4AWd1TfZIYGEvaOzvaPdrILkkTNCT+2zGhOkhuTOGAI0NB16lRCm/b0z +co2ksMEwNRWBxc9/O63XdP1KB5Xl/uWvd4lVloGcRMurHxiXRU0YaQ69sh3Mgot AGynm0+dH6v9BxNyJPzp8XmWBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKuslezq 3PGVEVeGdGPp9y0dH2J0MB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbmVpWcoBJ/0+iwAnBfW+IeKRL0Im3+R+DxnrZp0ESsnzc2hDSxOP30Mlp/Qo LFsZNc5/cgwkAWwWR9WhOjwAxJfi0gfojrk22QKQov8kMWYa4ws5H1MOesuRMdxy RDDQ8DR71tagk5/60vXULmOiGVWV6fTKy0e/1Gp3xtRy6Ix1iI5GKvLlnnvXdKNW S92wfSMF/pQ2GIRcuC1VgEcz+WlXx79Hu4goBK0DSHw6XhQZpnrw6fX9U498jvt3 a5d5lCzXOe77bgFd6JG5w6XXuGEV8UpCB6QaRZaBT7An1YrpCHBpdW2iKbmYkCT7 9MgOIAgc4J1hVJF2Qvu8G1D6VA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:25:22 2026 by rpki-client