$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json) Hash identifier: hg/0n2BGu51+PfiyU9WlXmyPdy/bvE0rCDWix5X4dco= Subject key identifier: 02:5D:39:15:77:9A:16:12:E6:DD:45:C7:4F:31:92:70:C7:BF:BB:C8 Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0C4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft Manifest number: 0BCE Signing time: Tue 24 Mar 2026 19:07:20 +0000 Manifest this update: Tue 24 Mar 2026 19:07:19 +0000 Manifest next update: Tue 31 Mar 2026 19:07:19 +0000 Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: tt7hprCNOT0ewTnWaoUYPGBQFm0nyXKCckHxXWSC+S4=) 2: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 6q6cxVdTWvtGrtWiJ2DlSVXHWjVLMFZYfVQkRp5qxGU=) 3: DC2FC844C39F11F0B36A6414C4F9AE02.roa (hash: jy96PTs6C+gIaKgVnf+BwlI3PL8TIgkX96t1uqr+csc=) 4: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: 33cg288GIT5DcOy2TlkSRCD+P649WdE+JFkYLFATbrs=) 5: 9E173D98C3A011F09FB4B135C4F9AE02.roa (hash: A1LiC6So+TzcJWUeMDWyW1pFnCl8fPM6A2gvVs6e3Ts=) 6: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: mnjp2W7HgpiDoLRZcwfmeeA1AfeQy75tKs4VFRnDKBw=) 7: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: HcqHSTMsYt84t3W+0eQhQAac/iU8v/iz9udK2EXwhGI=) 8: 305F24342A0811EE9D810010C4F9AE02.roa (hash: F8iFoHrfHfAromv0JDpIOiiFxaRoa1vxgbfkvu/Jldo=) 9: FC895C72C39F11F095CC9914C4F9AE02.roa (hash: yjj/zkLhNcQJqnRFnzDLWEG0yhJ3Fsm/uus5IKjmRsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3147 (0xc4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Mar 24 19:07:19 2026 GMT Not After : Mar 31 19:07:19 2026 GMT Subject: CN=69c2e0e7-a5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:9b:3b:1c:14:60:16:57:2a:2c:9d:91:9f: 83:06:a5:a7:38:bd:e5:27:6f:15:a1:6a:6f:80:89: ab:51:64:e6:60:2f:25:93:3e:bc:17:69:a1:cd:d0: 2c:f0:8e:f8:3f:63:9a:81:c4:b9:33:25:dd:e5:b8: fa:60:d9:e2:b1:4f:69:ef:7d:79:5f:d9:29:f9:f1: dc:f6:7c:15:b8:fb:71:af:4f:5c:a4:e3:53:ae:7c: 1f:98:c3:0c:1b:3b:ce:8c:66:89:35:2d:b6:61:54: d8:69:b1:98:1e:99:d2:2a:ed:3f:54:70:f4:cc:a1: 20:dc:3f:71:f3:69:54:b3:1e:e1:d3:21:6e:fd:d6: cd:37:20:55:09:af:32:5f:94:6b:bb:b9:0d:f9:10: 56:72:85:83:28:cb:b3:52:15:91:0d:9f:e6:3b:75: eb:ac:60:57:82:4b:e2:df:b5:90:b9:99:cc:7c:6f: 7c:fd:b9:af:2a:5e:74:b3:b8:fd:ff:37:5e:05:3b: 1a:db:ff:65:71:0a:be:31:1f:d0:3e:52:73:9b:a3: 5b:71:8d:f1:08:7e:a0:d2:13:a7:ad:4f:c9:9c:e4: 53:c3:10:56:8e:2f:17:51:4c:64:e2:81:8f:f2:9e: 69:41:1b:a1:01:2a:87:05:0c:08:36:59:54:78:7b: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5D:39:15:77:9A:16:12:E6:DD:45:C7:4F:31:92:70:C7:BF:BB:C8 X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:bc:43:ad:9d:36:8e:87:68:29:4e:93:fd:54:1f:72:61:ee: 9a:6b:15:f8:74:35:ea:31:ad:fb:9b:b5:f3:23:54:8f:cd:ef: 22:59:5d:bb:73:66:be:6c:6b:26:60:36:2a:98:1b:9d:8a:33: e6:0b:de:c3:e3:56:5b:42:06:7a:c2:5e:db:c3:ca:e5:10:b1: a9:66:77:0a:df:d5:b2:16:2a:d6:d6:83:ab:71:bf:e5:de:b9: b7:74:84:4d:c1:2b:42:06:aa:9c:75:87:e4:51:56:e2:e6:2e: 6e:b4:69:19:8e:fa:7c:ee:d5:eb:3c:ea:71:5a:78:ba:bf:c2: 82:a6:09:71:3d:3f:15:9d:f2:6e:89:4f:8d:22:f6:48:ee:18: ea:fb:30:b0:f9:26:4c:88:54:80:b2:72:16:86:71:41:e7:e7: 06:7e:dc:65:03:a6:0e:7c:2f:ca:89:b7:9f:6a:4f:e9:9b:1d: 9e:80:93:73:76:5d:49:c1:fa:aa:5e:e6:af:7b:5f:08:3f:ab: ab:f1:e9:79:c8:7f:e4:b6:2a:70:0e:28:7e:4f:83:cf:73:57: 9f:a9:6d:f7:e9:f6:88:c4:ca:35:19:0f:80:31:85:67:3f:80: ea:8a:02:27:1c:11:5e:8f:65:d9:03:fd:46:c8:b1:c6:e3:40: a7:b2:71:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjYwMzI0MTkwNzE5WhcNMjYwMzMxMTkwNzE5WjAYMRYwFAYD VQQDEw02OWMyZTBlNy1hNWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSWbOxwUYBZXKiydkZ+DBqWnOL3lJ28VoWpvgImrUWTmYC8lkz68F2mhzdAs 8I74P2OagcS5MyXd5bj6YNnisU9p7315X9kp+fHc9nwVuPtxr09cpONTrnwfmMMM GzvOjGaJNS22YVTYabGYHpnSKu0/VHD0zKEg3D9x82lUsx7h0yFu/dbNNyBVCa8y X5Rru7kN+RBWcoWDKMuzUhWRDZ/mO3XrrGBXgkvi37WQuZnMfG98/bmvKl50s7j9 /zdeBTsa2/9lcQq+MR/QPlJzm6NbcY3xCH6g0hOnrU/JnORTwxBWji8XUUxk4oGP 8p5pQRuhASqHBQwINllUeHtaWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJdORV3 mhYS5t1Fx08xknDHv7vIMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOrxDrZ02jodoKU6T/VQfcmHummsV+HQ16jGt+5u18yNUj83vIlldu3Nmvmxr JmA2KpgbnYoz5gvew+NWW0IGesJe28PK5RCxqWZ3Ct/VshYq1taDq3G/5d65t3SE TcErQgaqnHWH5FFW4uYubrRpGY76fO7V6zzqcVp4ur/CgqYJcT0/FZ3ybolPjSL2 SO4Y6vswsPkmTIhUgLJyFoZxQefnBn7cZQOmDnwvyom3n2pP6ZsdnoCTc3ZdScH6 ql7mr3tfCD+rq/Hpech/5LYqcA4ofk+Dz3NXn6lt9+n2iMTKNRkPgDGFZz+A6ooC JxwRXo9l2QP9RsixxuNAp7Jx2w== -----END CERTIFICATE-----Generated at Thu Mar 26 06:12:41 2026 by rpki-client