$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: Q4AakvlS46vrYxALzDgRMRokmbL2tfiHkngNBBo/nZo= Subject key identifier: 0D:0A:58:38:CF:F9:7F:0F:7D:7B:4E:71:8E:2F:89:11:DA:DC:8E:D3 Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 0ADB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 0ABF Signing time: Fri 02 Oct 2026 19:43:40 +0000 Manifest this update: Fri 02 Oct 2026 19:43:39 +0000 Manifest next update: Fri 09 Oct 2026 19:43:39 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: sdYhZ3IQZgUnO1UDUVT4JCkWzv4fYt8UUtpsVtiTVbs=) 2: 6322249E033E11EDA7401850C4F9AE02.roa (hash: pGyuW5enksJ2G+9mcRO+cELx6+FB88OJUmeOOQetTPM=) 3: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: OG3ctaEtxzOpwlGGz1iZBXWwa/TL/RFeipRYOMMEKxw=) 4: 55892E84839011EAB5B82263C4F9AE02.roa (hash: QmhFOsJakuRPvilxf18zot/c04GvDsCOSbSfIAJQQfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 19:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2779 (0xadb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: Oct 2 19:43:39 2026 GMT Not After : Oct 9 19:43:39 2026 GMT Subject: CN=6ac0096c-d38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1b:e7:ca:d6:c0:55:aa:da:80:ed:df:b1:c9: 5b:80:d6:34:bd:a9:92:62:27:d0:c6:c3:ef:49:69: 38:27:c2:28:59:8f:91:9a:f2:75:a3:da:de:62:ca: 80:df:64:63:46:ce:15:58:27:6e:f8:7a:86:88:f7: 29:ad:af:8e:88:2b:bb:35:da:3c:26:ff:0a:74:f6: 1b:c6:5e:42:d3:ca:78:dc:30:1c:c3:25:db:00:0f: 78:34:98:67:06:41:4b:c8:51:6d:d2:48:e4:e4:29: b2:8b:8a:75:51:5e:47:59:55:69:a6:0c:6e:82:91: 8e:4d:5f:c8:75:28:4c:11:80:f9:73:b4:27:53:44: c2:36:63:81:d6:92:c8:22:ef:d6:61:a3:e3:c6:55: fc:db:4b:60:c1:41:b1:79:21:db:5c:2c:74:00:9f: da:c1:6a:23:17:95:04:cd:0a:67:63:cc:1d:18:28: 0b:3a:b0:30:16:75:df:54:67:56:53:ff:ec:05:69: f5:19:ae:1c:61:ba:e7:c3:a3:7d:8f:47:ee:1b:f8: 16:0e:5c:e5:13:0b:31:82:7d:8f:6a:49:dd:2f:aa: 6b:6c:19:36:0a:b9:6e:6b:0e:f9:55:fe:00:5f:a4: 81:6b:bd:83:3c:04:03:41:93:af:63:7c:4f:51:e0: e5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0A:58:38:CF:F9:7F:0F:7D:7B:4E:71:8E:2F:89:11:DA:DC:8E:D3 X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d9:0b:b6:a1:da:cb:46:d9:58:e4:35:0a:66:a3:e3:23:f7: a3:07:1f:cf:8c:42:7b:1a:22:ea:61:b5:62:43:c8:b5:e4:e5: d6:7f:7b:9c:0e:6b:ec:fc:f8:f6:cc:c0:da:23:a9:24:09:52: 88:d7:e1:d0:f7:7f:39:ec:55:d9:2f:9d:70:6c:7d:9c:b5:18: 49:21:cf:6c:dd:2b:20:81:31:48:87:65:7b:c3:d3:a8:18:93: 79:4b:2e:68:dd:d8:c4:96:c7:f9:22:7a:7e:95:77:e3:5a:a7: 50:36:8d:4d:4b:9b:d4:04:a6:f8:e6:01:10:0a:38:2a:80:f9: 54:57:cd:ee:2a:78:bc:53:a1:83:96:d1:dd:e7:8b:8d:f1:17: 52:3e:62:cd:e0:ff:e1:44:d4:6e:7d:b2:1e:91:70:aa:40:f1: 72:15:c0:8e:d2:b9:61:d2:37:b6:81:c8:8f:07:74:16:6d:16: 33:bf:30:5e:3c:9c:03:a9:ad:01:51:94:23:3b:51:7f:fb:78: 03:db:bb:79:31:04:2a:e1:78:74:f0:79:4d:0b:55:ef:24:18: b8:e4:76:35:d3:72:40:c7:12:c1:5c:a6:bf:76:9a:69:c0:b9: 3d:c2:8c:79:e5:85:57:01:7b:24:c9:d3:8d:0e:9e:90:33:55: 25:65:39:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjYxMDAyMTk0MzM5WhcNMjYxMDA5MTk0MzM5WjAYMRYwFAYD VQQDEw02YWMwMDk2Yy1kMzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRvnytbAVaragO3fsclbgNY0vamSYifQxsPvSWk4J8IoWY+RmvJ1o9reYsqA 32RjRs4VWCdu+HqGiPcpra+OiCu7Ndo8Jv8KdPYbxl5C08p43DAcwyXbAA94NJhn BkFLyFFt0kjk5Cmyi4p1UV5HWVVppgxugpGOTV/IdShMEYD5c7QnU0TCNmOB1pLI Iu/WYaPjxlX820tgwUGxeSHbXCx0AJ/awWojF5UEzQpnY8wdGCgLOrAwFnXfVGdW U//sBWn1Ga4cYbrnw6N9j0fuG/gWDlzlEwsxgn2PakndL6prbBk2Crluaw75Vf4A X6SBa72DPAQDQZOvY3xPUeDlBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0KWDjP +X8PfXtOcY4viRHa3I7TMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW9kLtqHay0bZWOQ1Cmaj4yP3owcfz4xCexoi6mG1YkPIteTl1n97nA5r7Pz4 9szA2iOpJAlSiNfh0Pd/OexV2S+dcGx9nLUYSSHPbN0rIIExSIdle8PTqBiTeUsu aN3YxJbH+SJ6fpV341qnUDaNTUub1ASm+OYBEAo4KoD5VFfN7ip4vFOhg5bR3eeL jfEXUj5izeD/4UTUbn2yHpFwqkDxchXAjtK5YdI3toHIjwd0Fm0WM78wXjycA6mt AVGUIztRf/t4A9u7eTEEKuF4dPB5TQtV7yQYuOR2NdNyQMcSwVymv3aaacC5PcKM eeWFVwF7JMnTjQ6ekDNVJWU5Xw== -----END CERTIFICATE-----Generated at Sun Oct 4 19:51:36 2026 by rpki-client