$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: gQWIj9sip7OFR1ScVGHEm+97dQnMNcY9ZxOgKslc8IY= Subject key identifier: 2B:21:DD:D0:09:BF:77:75:B1:6A:ED:E6:CB:EA:E7:F0:5F:6F:59:9D Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 0AD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 0AB9 Signing time: Sun 20 Sep 2026 19:25:40 +0000 Manifest this update: Sun 20 Sep 2026 19:25:40 +0000 Manifest next update: Sun 27 Sep 2026 19:25:40 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: WWl1swozKDHuVAoCWzkADJ8YPVr7L6yoIv/wYVqm8I4=) 2: 6322249E033E11EDA7401850C4F9AE02.roa (hash: pGyuW5enksJ2G+9mcRO+cELx6+FB88OJUmeOOQetTPM=) 3: 55892E84839011EAB5B82263C4F9AE02.roa (hash: QmhFOsJakuRPvilxf18zot/c04GvDsCOSbSfIAJQQfc=) 4: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: OG3ctaEtxzOpwlGGz1iZBXWwa/TL/RFeipRYOMMEKxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2773 (0xad5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: Sep 20 19:25:40 2026 GMT Not After : Sep 27 19:25:40 2026 GMT Subject: CN=6ab03334-dafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d4:ff:b5:b0:a1:92:23:ec:1f:cd:9c:ad:c1: e0:23:ab:7b:d5:97:73:a3:7c:6e:b3:69:da:a6:56: d5:11:f1:ae:ef:59:82:b2:17:89:be:18:bd:9a:8c: f8:8f:a3:9e:25:4b:8f:06:88:66:4c:03:7e:97:ba: bd:17:4a:fd:0a:1a:6a:b9:a9:48:61:06:e3:c9:78: c1:bd:16:8e:06:65:33:f1:7f:4d:38:48:3e:79:a9: df:f3:63:0b:5a:f2:23:79:7b:0d:fe:ea:94:eb:90: 72:1f:9a:5d:48:8e:e7:59:c6:3d:2e:3f:08:89:b5: 5e:e1:72:42:73:89:40:78:77:f0:6e:40:20:31:59: 60:9c:e2:22:f5:2f:64:e3:cd:a6:65:60:39:d8:d4: f5:fc:c8:d3:bf:3c:9d:2f:17:fa:ca:7f:c0:fe:9d: 7e:4b:a3:bb:c0:79:d2:b3:db:4b:8d:0c:22:9f:58: 34:48:93:b6:a5:ec:0b:70:a4:6b:62:27:1d:45:8d: 36:de:91:b0:72:6b:85:95:76:02:06:92:7f:c1:15: 87:86:30:08:a5:8a:f1:57:38:a1:a3:cd:9c:bb:ef: 69:0e:4b:1e:70:b7:d7:53:e0:e3:e9:45:25:08:a0: 04:26:4b:1e:fb:70:6b:11:ad:e0:41:b2:6a:0f:f9: c9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:21:DD:D0:09:BF:77:75:B1:6A:ED:E6:CB:EA:E7:F0:5F:6F:59:9D X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:97:d8:c5:20:ab:aa:df:18:8b:95:57:c6:d1:c6:8c:8d:1f: 0f:28:2e:2d:a1:58:45:a7:f8:66:d7:7c:b7:b2:35:29:db:c7: d6:be:b1:38:85:3a:b1:0b:60:86:50:5b:dd:99:f2:d3:83:cf: fa:df:2c:fc:64:3d:a0:ea:a5:f9:04:57:38:40:0d:74:9e:3e: 8a:d7:ee:f3:54:9a:53:d2:5d:1a:0f:b6:86:a9:19:43:1e:30: 13:64:1d:c1:d6:78:c3:f9:97:61:dc:5a:45:0e:7c:80:92:ce: 5c:d2:d3:05:01:c3:ec:53:53:8d:4c:9c:85:d2:dc:4d:c5:f8: e3:d2:f2:ba:19:c3:d7:87:26:ab:da:5e:00:a5:32:12:c2:42: bb:f2:16:15:c3:63:98:07:e7:32:90:1e:03:37:6d:6d:19:f7: 3f:cf:a5:e2:fb:b3:6d:95:66:c8:09:2d:ed:9d:08:10:3e:30: 20:d6:70:85:d4:8e:d4:4c:db:fc:71:5e:5f:d8:01:55:67:8f: de:31:28:cf:f1:bd:d6:6d:57:38:0a:e9:c5:d1:01:fa:fc:48: ce:fe:c6:98:9c:56:33:57:1b:67:f3:22:f5:8d:93:71:74:d8: 9a:45:77:a4:25:00:47:57:a2:18:4d:f3:88:22:ad:24:e9:03: 68:89:f2:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjYwOTIwMTkyNTQwWhcNMjYwOTI3MTkyNTQwWjAYMRYwFAYD VQQDEw02YWIwMzMzNC1kYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NT/tbChkiPsH82crcHgI6t71Zdzo3xus2naplbVEfGu71mCsheJvhi9moz4 j6OeJUuPBohmTAN+l7q9F0r9ChpqualIYQbjyXjBvRaOBmUz8X9NOEg+eanf82ML WvIjeXsN/uqU65ByH5pdSI7nWcY9Lj8IibVe4XJCc4lAeHfwbkAgMVlgnOIi9S9k 482mZWA52NT1/MjTvzydLxf6yn/A/p1+S6O7wHnSs9tLjQwin1g0SJO2pewLcKRr YicdRY023pGwcmuFlXYCBpJ/wRWHhjAIpYrxVziho82cu+9pDksecLfXU+Dj6UUl CKAEJkse+3BrEa3gQbJqD/nJhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCsh3dAJ v3d1sWrt5svq5/Bfb1mdMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAopfYxSCrqt8Yi5VXxtHGjI0fDyguLaFYRaf4Ztd8t7I1KdvH1r6xOIU6sQtg hlBb3Zny04PP+t8s/GQ9oOql+QRXOEANdJ4+itfu81SaU9JdGg+2hqkZQx4wE2Qd wdZ4w/mXYdxaRQ58gJLOXNLTBQHD7FNTjUychdLcTcX449LyuhnD14cmq9peAKUy EsJCu/IWFcNjmAfnMpAeAzdtbRn3P8+l4vuzbZVmyAkt7Z0IED4wINZwhdSO1Ezb /HFeX9gBVWeP3jEoz/G91m1XOArpxdEB+vxIzv7GmJxWM1cbZ/Mi9Y2TcXTYmkV3 pCUAR1eiGE3ziCKtJOkDaInyfQ== -----END CERTIFICATE-----Generated at Mon Sep 21 17:57:47 2026 by rpki-client