$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json) Hash identifier: uxV5RPm5O9Yp9tgtjVGtMEFCOIhlqTbiOkTI0L+KfMQ= Subject key identifier: 56:CE:CC:F5:77:24:C9:A3:FF:FF:1F:A0:AB:D9:BC:66:47:1E:A8:28 Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0CCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft Manifest number: 0C45 Signing time: Wed 04 Nov 2026 19:19:16 +0000 Manifest this update: Wed 04 Nov 2026 19:19:16 +0000 Manifest next update: Wed 11 Nov 2026 19:19:16 +0000 Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: QgccV4PSrWOB9DjdlltOBya0CB4sHgVI77s4fbxitv0=) 2: DC2FC844C39F11F0B36A6414C4F9AE02.roa (hash: V2qlmV4XkoxlRoXJX3GJoP5zWEsqS91ZCQdcyts5qHo=) 3: 305F24342A0811EE9D810010C4F9AE02.roa (hash: xTnjKFEkhv3ieLQOrP9C6yTVSU56UseqdjRyAJkV7Io=) 4: FC895C72C39F11F095CC9914C4F9AE02.roa (hash: oeoqWRtwQTgBkvjilvWPRZDpoi0Ors8C695fBl0ectw=) 5: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 0+4o+E6SOsFpjtUX15g9YSzD9JvjowUL7y6x/I96FSg=) 6: 9E173D98C3A011F09FB4B135C4F9AE02.roa (hash: Du9re4YnGbzI32FEa+5SNfgxUVGqyoMQw5ZZIhqirTQ=) 7: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: PUCwcVB7mOMKNLxgaPflJNHZ7wfZlaCCwrgkjtHbLlA=) 8: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: llpJTFb5gbR6BmRuVyy4JWW+914NmVxABUKSPBGS9YM=) 9: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: Uvg+BnkN8k4fglRUul1hQWU8OMx515TnEmaoTVsiH3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 19:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3275 (0xccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Nov 4 19:19:16 2026 GMT Not After : Nov 11 19:19:16 2026 GMT Subject: CN=6aeb8534-937d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:40:e4:94:24:4d:62:af:22:81:6c:6a:c6: 5a:57:13:b0:be:cd:8b:4b:eb:71:70:66:ff:63:36: d8:06:e3:23:6c:f4:35:23:6d:32:18:28:e6:6d:63: b6:38:4a:9f:f3:15:87:c7:e8:6e:dc:24:89:3b:68: 66:c0:c6:d6:54:a3:c9:b8:2b:ee:0e:16:dd:5b:89: 3c:5a:3e:41:dd:98:88:48:2f:33:db:dc:16:99:40: fe:82:f0:02:e0:c8:8d:5b:48:17:6c:33:63:8d:35: 4e:32:89:f5:16:96:9e:a9:5b:8f:f6:6b:ac:aa:a2: b7:d3:af:93:91:4c:c5:9c:de:50:70:ac:81:7e:be: 7a:86:35:ef:93:e6:ab:55:1f:ac:6b:33:52:8f:18: 76:12:90:cc:a6:41:be:3e:83:ac:e7:c3:24:c8:6c: 61:77:6e:77:c8:62:aa:3a:3a:7f:8a:ae:b2:9d:cd: 63:84:24:ba:18:8f:7e:6b:84:8b:9c:e5:89:d1:9f: 5a:7d:50:ce:7e:7e:63:3a:64:ff:10:bb:bb:0d:24: e6:40:c1:8a:a2:0f:e5:19:40:a5:3b:e1:f5:e0:e9: f7:60:41:b1:e1:c4:8d:7c:da:62:af:85:0d:3c:e5: 38:cb:00:3e:e3:9e:5c:0d:3d:f9:a7:08:44:03:58: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CE:CC:F5:77:24:C9:A3:FF:FF:1F:A0:AB:D9:BC:66:47:1E:A8:28 X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:b2:d0:30:ed:2b:ba:e4:69:06:c6:09:86:96:36:ee:57:d6: e2:e0:b7:14:8c:53:08:78:6a:f6:8f:cc:e1:dc:52:9e:df:5e: 80:87:8c:db:a5:41:11:16:d0:17:3e:67:05:5b:b6:f0:54:ed: d5:41:8c:79:1b:8b:7f:50:8c:b0:e3:78:37:4e:63:44:65:b9: ea:61:6a:ab:07:62:d2:be:90:47:9f:c5:98:b2:dc:62:4c:a6: e8:d6:a3:c1:60:4a:bd:4c:28:46:48:25:1b:ae:4d:7d:13:a0: 4d:df:5c:6e:a7:5d:4e:29:dd:e6:e1:d1:40:cb:7e:78:34:83: 9e:ea:a2:68:af:a6:a7:43:6f:d9:1b:d7:1e:2d:a2:0f:53:97: 05:20:da:8b:c6:32:81:19:80:d9:6d:93:cf:bb:92:4a:67:26: d3:1e:a4:f8:a2:10:80:53:bf:45:af:f9:2c:ea:92:9f:31:4c: 6d:e8:3b:2b:9e:c8:46:48:6f:6e:23:bb:7b:81:a3:74:01:b0: 18:c4:b9:64:b4:83:10:44:fe:34:8b:ff:7a:9f:f7:eb:c3:b9: cb:eb:03:63:62:e3:04:7b:75:e0:56:58:99:e2:40:e2:a4:44: 62:9f:55:6e:8b:d7:04:70:4f:01:8e:f7:43:02:09:5f:56:d7: df:93:76:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjYxMTA0MTkxOTE2WhcNMjYxMTExMTkxOTE2WjAYMRYwFAYD VQQDEw02YWViODUzNC05MzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuJA5JQkTWKvIoFsasZaVxOwvs2LS+txcGb/YzbYBuMjbPQ1I20yGCjmbWO2 OEqf8xWHx+hu3CSJO2hmwMbWVKPJuCvuDhbdW4k8Wj5B3ZiISC8z29wWmUD+gvAC 4MiNW0gXbDNjjTVOMon1FpaeqVuP9musqqK306+TkUzFnN5QcKyBfr56hjXvk+ar VR+sazNSjxh2EpDMpkG+PoOs58MkyGxhd253yGKqOjp/iq6ync1jhCS6GI9+a4SL nOWJ0Z9afVDOfn5jOmT/ELu7DSTmQMGKog/lGUClO+H14On3YEGx4cSNfNpir4UN POU4ywA+455cDT35pwhEA1iQbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbOzPV3 JMmj//8foKvZvGZHHqgoMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVrLQMO0ruuRpBsYJhpY27lfW4uC3FIxTCHhq9o/M4dxSnt9egIeM26VBERbQ Fz5nBVu28FTt1UGMeRuLf1CMsON4N05jRGW56mFqqwdi0r6QR5/FmLLcYkym6Naj wWBKvUwoRkglG65NfROgTd9cbqddTind5uHRQMt+eDSDnuqiaK+mp0Nv2RvXHi2i D1OXBSDai8YygRmA2W2Tz7uSSmcm0x6k+KIQgFO/Ra/5LOqSnzFMbeg7K57IRkhv biO7e4GjdAGwGMS5ZLSDEET+NIv/ep/368O5y+sDY2LjBHt14FZYmeJA4qREYp9V bovXBHBPAY73QwIJX1bX35N2nA== -----END CERTIFICATE-----Generated at Thu Nov 5 16:15:39 2026 by rpki-client