
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json)
Hash identifier: M14mX+iYSo/ial/BH2zZHtaAjjg9hDXHdaSK4QVStwo=
Subject key identifier: F4:74:E0:A9:C7:31:B5:A9:E9:F8:0F:4F:D0:C3:F1:B8:C5:91:C2:4F
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0CB4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
Manifest number: 0C2E
Signing time: Sun 20 Sep 2026 19:06:43 +0000
Manifest this update: Sun 20 Sep 2026 19:06:43 +0000
Manifest next update: Sun 27 Sep 2026 19:06:43 +0000
Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: hcPWkS9WgAuLwKTAcg8tnNAcAPbWejlFPL4ojFEZbKo=)
2: 9E173D98C3A011F09FB4B135C4F9AE02.roa (hash: Du9re4YnGbzI32FEa+5SNfgxUVGqyoMQw5ZZIhqirTQ=)
3: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: PUCwcVB7mOMKNLxgaPflJNHZ7wfZlaCCwrgkjtHbLlA=)
4: DC2FC844C39F11F0B36A6414C4F9AE02.roa (hash: V2qlmV4XkoxlRoXJX3GJoP5zWEsqS91ZCQdcyts5qHo=)
5: FC895C72C39F11F095CC9914C4F9AE02.roa (hash: oeoqWRtwQTgBkvjilvWPRZDpoi0Ors8C695fBl0ectw=)
6: 305F24342A0811EE9D810010C4F9AE02.roa (hash: xTnjKFEkhv3ieLQOrP9C6yTVSU56UseqdjRyAJkV7Io=)
7: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: llpJTFb5gbR6BmRuVyy4JWW+914NmVxABUKSPBGS9YM=)
8: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: Uvg+BnkN8k4fglRUul1hQWU8OMx515TnEmaoTVsiH3Q=)
9: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 0+4o+E6SOsFpjtUX15g9YSzD9JvjowUL7y6x/I96FSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3252 (0xcb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: Sep 20 19:06:43 2026 GMT
Not After : Sep 27 19:06:43 2026 GMT
Subject: CN=6ab02ec3-9c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:5e:c2:72:3a:2b:08:5c:ec:bc:0e:a2:4a:
c9:41:6a:99:51:0b:a8:d0:5a:c2:ca:1b:17:a2:24:
63:b3:48:57:b5:dc:5f:61:81:53:e4:ba:6f:92:8a:
c0:ca:cf:e9:29:4c:8e:5a:bf:0f:3b:e2:81:2f:05:
be:89:f7:cc:fc:ff:59:2f:72:45:10:5c:db:97:2b:
29:40:55:17:ad:52:d5:fa:f6:23:c3:69:48:78:fe:
3a:89:e8:d9:9d:92:08:71:bf:87:82:a8:e7:7a:a7:
84:68:6d:15:77:bf:48:2b:6f:a1:59:61:b4:99:76:
74:47:1f:76:2a:3b:ec:58:d7:e8:0b:d4:2a:06:df:
cb:85:29:c3:81:e7:c4:ce:09:99:08:26:3b:93:0c:
1a:35:fe:3c:59:23:79:7b:01:5c:cc:97:37:df:86:
8d:a9:21:ae:7f:fb:31:48:f9:b8:c4:1a:37:80:eb:
a5:a5:17:ce:fb:90:3a:a2:67:03:25:ab:ee:c6:9c:
26:c6:33:27:91:fa:52:67:a4:84:0a:0c:13:7b:02:
3d:03:38:20:81:7f:03:30:4a:f0:bf:58:d2:dc:5c:
dd:d1:fe:55:25:95:d4:23:44:4c:51:8a:88:bf:76:
b7:c7:6d:ca:db:b8:86:ba:ca:ea:4e:5f:d8:a0:5e:
80:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:74:E0:A9:C7:31:B5:A9:E9:F8:0F:4F:D0:C3:F1:B8:C5:91:C2:4F
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:30:9b:b5:9b:02:81:cd:a0:71:5c:c2:c5:c8:15:33:85:32:
3f:f7:37:9b:e8:5c:d0:ff:aa:bd:04:4a:7f:f7:64:e3:49:3c:
80:d5:61:b6:c5:a7:b9:28:cd:11:2d:61:a2:27:49:ad:04:b7:
47:73:8d:16:5f:06:3c:ce:cb:75:30:e4:fe:04:b0:28:86:4b:
c0:d5:73:9b:21:f8:e8:6c:a1:26:d6:82:9f:16:69:f4:50:88:
b4:41:8f:50:04:26:26:40:2e:ce:11:16:62:70:0b:31:f8:03:
78:dc:5f:58:eb:0b:e4:20:bd:82:67:f8:f9:df:79:40:5c:c1:
5f:0d:69:37:1e:08:86:53:9a:96:22:77:c5:6b:fa:72:d5:5f:
72:e5:1b:11:70:d8:47:11:78:1b:12:7d:b7:d7:07:78:00:b5:
97:0a:70:96:88:d5:0b:d8:e2:81:ac:35:e3:41:31:fe:ae:7b:
68:f3:35:73:44:22:20:b9:d3:c5:f8:5e:be:26:e1:bf:e8:b3:
0d:61:20:1e:71:b3:6b:a4:91:64:87:40:e5:8f:84:1e:bc:11:
ac:05:97:9b:53:73:44:2e:00:1b:07:eb:fb:f2:d0:6b:f8:44:
2c:59:66:70:26:38:7a:9c:62:4e:75:c7:a5:e0:d7:22:18:dc:
ec:61:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:55:12 2026 by rpki-client