$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: qos6id430q8baN4seT/yj53AfzLm4D+cd+zGvqfa+sw= Subject key identifier: B7:F4:42:72:E6:14:E2:83:3B:BC:91:83:5E:42:FC:32:2C:53:CB:9C Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 0A82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 0A67 Signing time: Thu 16 Apr 2026 19:33:05 +0000 Manifest this update: Thu 16 Apr 2026 19:33:04 +0000 Manifest next update: Thu 23 Apr 2026 19:33:04 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: Q+sVE1qgf6uxVKqxtXRvSUqohT5Av60YCBrIMkA9cXc=) 2: 55892E84839011EAB5B82263C4F9AE02.roa (hash: QmhFOsJakuRPvilxf18zot/c04GvDsCOSbSfIAJQQfc=) 3: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: kdGWDUBBwv7cJ1dopKP4Pf5YTmUxxvJuv1IOgZRikQU=) 4: 6322249E033E11EDA7401850C4F9AE02.roa (hash: pGyuW5enksJ2G+9mcRO+cELx6+FB88OJUmeOOQetTPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2690 (0xa82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: Apr 16 19:33:04 2026 GMT Not After : Apr 23 19:33:04 2026 GMT Subject: CN=69e13971-0e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:e0:0f:63:e2:8d:ba:24:a2:04:ec:26:ba: 62:48:5e:7a:bf:25:b2:7d:e7:e1:3d:2b:76:a8:0c: 27:c2:19:5f:d2:6f:5c:55:78:94:a1:74:be:b2:28: af:77:b3:98:df:e7:bb:68:52:61:7d:1b:35:cb:8a: 12:bd:28:30:35:81:6e:81:95:bd:3c:a1:e0:f7:e1: bf:29:cd:78:58:e3:48:46:1e:16:fc:19:5a:e6:2f: 24:21:38:b1:da:61:90:58:54:fb:59:ae:1b:4b:46: 5e:6b:69:59:af:47:2a:58:5f:90:22:63:23:62:09: ff:28:cf:62:6c:be:1b:42:93:ae:b3:14:af:51:72: 9b:31:04:01:ee:84:74:aa:b1:b0:8e:e9:f0:e4:c0: a3:a6:d8:4e:d5:b2:24:b3:68:15:f0:41:3f:38:5b: 6d:a0:41:fa:41:cf:8d:40:40:1b:77:64:b9:c5:3c: 4b:b2:20:74:81:12:4c:4f:08:7d:d8:46:d9:43:3e: 03:10:6c:43:ee:a1:4a:c0:77:2e:7d:48:02:76:7f: 04:99:68:a4:d4:76:df:49:e9:92:38:c6:95:17:7b: 8d:42:9e:70:e7:67:a1:e3:cb:8d:7a:98:c0:99:b1: 91:9d:94:f9:1f:3a:31:96:6f:2f:6b:43:2e:51:a6: f0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F4:42:72:E6:14:E2:83:3B:BC:91:83:5E:42:FC:32:2C:53:CB:9C X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:b1:de:74:48:5f:b2:87:6c:e2:f3:ad:17:39:d3:1c:1e:57: ce:f4:29:38:7b:de:0f:fe:eb:65:98:68:68:38:f9:42:96:75: 3d:01:f7:fd:d8:bf:59:47:5c:74:b1:b9:62:42:94:75:10:6b: 98:e2:1e:d0:f3:17:82:7a:a1:8b:27:7b:5f:92:e8:78:4b:e2: 14:73:13:ca:86:c1:32:1e:83:c6:c9:5b:bb:65:8d:82:62:b3: ea:d8:00:64:07:33:c8:a4:78:a1:bf:c8:f9:ad:d8:60:c0:5c: 0e:96:a7:2d:f1:8a:09:56:63:2d:f3:3f:13:b1:8f:44:58:fe: cf:98:82:84:a9:39:f2:27:45:ed:a3:7a:29:e8:c3:30:b2:35: ef:c0:af:da:f1:73:81:54:ab:57:76:f3:9a:df:5f:76:48:c7: 92:b2:59:37:9c:52:70:91:6e:6b:6c:7b:10:ab:50:f6:1d:b2: 98:71:30:ab:d1:bf:19:62:ca:eb:24:9e:26:cd:e6:8e:b8:ad: 0c:ce:76:6f:3f:9e:6d:5d:f7:ce:ee:d3:63:0f:9f:b0:08:cf: 27:a9:9e:42:53:c0:f0:c5:d8:f1:de:7b:08:9a:f0:87:f7:e8: 0a:dd:87:f6:de:82:ea:96:fd:19:b8:12:0d:c9:3a:f6:57:ac: 72:d1:36:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjYwNDE2MTkzMzA0WhcNMjYwNDIzMTkzMzA0WjAYMRYwFAYD VQQDEw02OWUxMzk3MS0wZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcngD2PijbokogTsJrpiSF56vyWyfefhPSt2qAwnwhlf0m9cVXiUoXS+siiv d7OY3+e7aFJhfRs1y4oSvSgwNYFugZW9PKHg9+G/Kc14WONIRh4W/Bla5i8kITix 2mGQWFT7Wa4bS0Zea2lZr0cqWF+QImMjYgn/KM9ibL4bQpOusxSvUXKbMQQB7oR0 qrGwjunw5MCjpthO1bIks2gV8EE/OFttoEH6Qc+NQEAbd2S5xTxLsiB0gRJMTwh9 2EbZQz4DEGxD7qFKwHcufUgCdn8EmWik1HbfSemSOMaVF3uNQp5w52eh48uNepjA mbGRnZT5Hzoxlm8va0MuUabwxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLf0QnLm FOKDO7yRg15C/DIsU8ucMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJLHedEhfsods4vOtFznTHB5XzvQpOHveD/7rZZhoaDj5QpZ1PQH3/di/WUdc dLG5YkKUdRBrmOIe0PMXgnqhiyd7X5LoeEviFHMTyobBMh6Dxslbu2WNgmKz6tgA ZAczyKR4ob/I+a3YYMBcDpanLfGKCVZjLfM/E7GPRFj+z5iChKk58idF7aN6KejD MLI178Cv2vFzgVSrV3bzmt9fdkjHkrJZN5xScJFua2x7EKtQ9h2ymHEwq9G/GWLK 6ySeJs3mjritDM52bz+ebV33zu7TYw+fsAjPJ6meQlPA8MXY8d57CJrwh/foCt2H 9t6C6pb9GbgSDck69lesctE2bA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:34:23 2026 by rpki-client