$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json) Hash identifier: DiFXekEgaN6Vm12bbPcTUPeU8+II/o3bijvBp3ytRak= Subject key identifier: C3:4B:A3:99:61:AF:66:A3:EB:BB:C0:14:A4:12:60:39:99:75:EF:84 Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0C3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft Manifest number: 0BC2 Signing time: Mon 02 Mar 2026 02:51:18 +0000 Manifest this update: Mon 02 Mar 2026 02:51:14 +0000 Manifest next update: Mon 09 Mar 2026 02:51:14 +0000 Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: ovvwrtkVr2+2Mg9PqpSb4WLfcS3SnlD1d288IySJyqM=) 2: 9E173D98C3A011F09FB4B135C4F9AE02.roa (hash: A1LiC6So+TzcJWUeMDWyW1pFnCl8fPM6A2gvVs6e3Ts=) 3: DC2FC844C39F11F0B36A6414C4F9AE02.roa (hash: jy96PTs6C+gIaKgVnf+BwlI3PL8TIgkX96t1uqr+csc=) 4: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: HcqHSTMsYt84t3W+0eQhQAac/iU8v/iz9udK2EXwhGI=) 5: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 6q6cxVdTWvtGrtWiJ2DlSVXHWjVLMFZYfVQkRp5qxGU=) 6: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: mnjp2W7HgpiDoLRZcwfmeeA1AfeQy75tKs4VFRnDKBw=) 7: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: 33cg288GIT5DcOy2TlkSRCD+P649WdE+JFkYLFATbrs=) 8: 305F24342A0811EE9D810010C4F9AE02.roa (hash: F8iFoHrfHfAromv0JDpIOiiFxaRoa1vxgbfkvu/Jldo=) 9: FC895C72C39F11F095CC9914C4F9AE02.roa (hash: yjj/zkLhNcQJqnRFnzDLWEG0yhJ3Fsm/uus5IKjmRsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3135 (0xc3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Mar 2 02:51:14 2026 GMT Not After : Mar 9 02:51:14 2026 GMT Subject: CN=69a4fb25-7925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:40:76:e9:4b:e3:fc:b4:46:6a:d5:9f:d0:f8: d4:ea:f8:e4:9b:cf:44:b0:42:90:a3:56:53:2f:41: 05:80:fa:32:3a:94:a2:4b:e0:ec:f9:e6:8f:89:1f: 3e:8c:03:69:1a:52:b3:96:04:39:1a:4f:a9:66:bf: 12:3d:b8:1f:38:fe:cc:e9:f4:22:0e:e1:91:bf:d1: 3b:fc:51:eb:68:d9:11:10:b3:24:3e:25:70:39:1a: 31:4c:4b:63:af:98:2d:e4:8c:40:2f:14:16:02:a6: a7:89:a9:ec:e6:9a:cd:64:03:8d:11:cf:e7:07:0c: 24:c8:2f:5f:1d:4a:9f:20:c3:77:fc:47:06:fb:ca: fa:60:81:20:63:bc:5d:03:19:57:89:5a:b7:f3:0a: 15:b5:4f:ca:e5:65:0e:fa:6d:b4:a7:b1:5e:f2:85: 1f:ee:d3:6a:b3:2f:be:af:b4:45:7a:5e:9f:b2:b4: 83:bc:8e:3c:73:2a:9b:2a:ae:2a:27:a3:09:97:53: cd:43:65:02:d4:73:94:ee:96:54:ab:2a:d4:c6:87: c2:4d:e2:a9:07:60:65:95:9e:0f:77:4d:5f:74:21: 7d:de:dc:03:c7:f3:bc:86:a2:6d:da:ed:f0:32:e6: 57:f9:66:39:d5:a1:bd:77:27:9f:16:1b:f1:6c:f7: c5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4B:A3:99:61:AF:66:A3:EB:BB:C0:14:A4:12:60:39:99:75:EF:84 X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:05:d4:82:15:ef:dc:03:92:21:6e:26:34:4d:59:6a:ea:a9: 9e:bf:f4:57:76:d0:17:ef:37:4c:bd:6b:01:7d:c8:23:1a:85: 1b:4f:c6:2d:2c:85:30:c9:db:9e:8d:f5:d0:db:d4:bf:57:24: d0:5e:86:87:e4:a7:fe:13:f6:42:55:69:30:e1:f3:25:4f:53: ac:cf:2e:09:df:ca:c9:6a:81:1a:62:6a:b5:65:69:d7:7d:ef: 44:db:f1:01:6a:65:5f:c5:9d:7d:f8:a5:f8:e7:ce:cf:59:72: 8b:c7:0a:09:d8:6f:7a:6c:6a:75:0a:65:09:08:3d:b6:c5:d6: eb:a9:88:b5:ba:96:89:ce:ba:43:f8:a5:1d:ea:4a:b2:19:b2: 85:40:53:2e:75:23:5d:64:15:a6:30:f5:94:55:ec:dc:10:c7: 71:f9:80:d3:82:91:0b:29:9c:75:6b:74:8f:c3:47:3b:b8:a9: ca:08:36:8b:ec:4e:9d:56:17:4b:2d:7f:52:7d:f3:57:f3:d9: 89:6f:9a:dd:14:72:d9:1d:6a:45:b9:0e:68:e9:2e:5f:41:9d: b2:59:1c:f1:a8:bb:3b:e5:ff:4e:c1:bf:52:2d:9f:a9:03:e3: 97:2b:1b:06:77:86:c8:b9:14:80:f2:b0:fd:a1:38:0d:28:bd: 85:9c:12:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjYwMzAyMDI1MTE0WhcNMjYwMzA5MDI1MTE0WjAYMRYwFAYD VQQDEw02OWE0ZmIyNS03OTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjkB26Uvj/LRGatWf0PjU6vjkm89EsEKQo1ZTL0EFgPoyOpSiS+Ds+eaPiR8+ jANpGlKzlgQ5Gk+pZr8SPbgfOP7M6fQiDuGRv9E7/FHraNkRELMkPiVwORoxTEtj r5gt5IxALxQWAqanians5prNZAONEc/nBwwkyC9fHUqfIMN3/EcG+8r6YIEgY7xd AxlXiVq38woVtU/K5WUO+m20p7Fe8oUf7tNqsy++r7RFel6fsrSDvI48cyqbKq4q J6MJl1PNQ2UC1HOU7pZUqyrUxofCTeKpB2BllZ4Pd01fdCF93twDx/O8hqJt2u3w MuZX+WY51aG9dyefFhvxbPfFrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNLo5lh r2aj67vAFKQSYDmZde+EMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAowXUghXv3AOSIW4mNE1Zauqpnr/0V3bQF+83TL1rAX3IIxqFG0/GLSyFMMnb no310NvUv1ck0F6Gh+Sn/hP2QlVpMOHzJU9TrM8uCd/KyWqBGmJqtWVp133vRNvx AWplX8Wdffil+OfOz1lyi8cKCdhvemxqdQplCQg9tsXW66mItbqWic66Q/ilHepK shmyhUBTLnUjXWQVpjD1lFXs3BDHcfmA04KRCymcdWt0j8NHO7ipygg2i+xOnVYX Sy1/Un3zV/PZiW+a3RRy2R1qRbkOaOkuX0Gdslkc8ai7O+X/TsG/Ui2fqQPjlysb BneGyLkUgPKw/aE4DSi9hZwSHw== -----END CERTIFICATE-----Generated at Mon Mar 2 05:49:52 2026 by rpki-client