$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json) Hash identifier: cVtYJdxITokYj68rS6BzRgsW24ky+twnqM8OoNp/76c= Subject key identifier: 80:CC:36:B6:69:68:72:EF:5B:52:BF:50:2F:06:24:2F:FD:5A:9A:9E Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0CD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft Manifest number: 0C4A Signing time: Sat 14 Nov 2026 19:01:21 +0000 Manifest this update: Sat 14 Nov 2026 19:01:20 +0000 Manifest next update: Sat 21 Nov 2026 19:01:20 +0000 Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: 8NOiHOpixeW181AaMw8kdGFd/ON9mBsFPuHkT0TqF50=) 2: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: Uvg+BnkN8k4fglRUul1hQWU8OMx515TnEmaoTVsiH3Q=) 3: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: llpJTFb5gbR6BmRuVyy4JWW+914NmVxABUKSPBGS9YM=) 4: FC895C72C39F11F095CC9914C4F9AE02.roa (hash: oeoqWRtwQTgBkvjilvWPRZDpoi0Ors8C695fBl0ectw=) 5: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: PUCwcVB7mOMKNLxgaPflJNHZ7wfZlaCCwrgkjtHbLlA=) 6: 9E173D98C3A011F09FB4B135C4F9AE02.roa (hash: Du9re4YnGbzI32FEa+5SNfgxUVGqyoMQw5ZZIhqirTQ=) 7: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 0+4o+E6SOsFpjtUX15g9YSzD9JvjowUL7y6x/I96FSg=) 8: DC2FC844C39F11F0B36A6414C4F9AE02.roa (hash: V2qlmV4XkoxlRoXJX3GJoP5zWEsqS91ZCQdcyts5qHo=) 9: 305F24342A0811EE9D810010C4F9AE02.roa (hash: xTnjKFEkhv3ieLQOrP9C6yTVSU56UseqdjRyAJkV7Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 19:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3280 (0xcd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Nov 14 19:01:20 2026 GMT Not After : Nov 21 19:01:20 2026 GMT Subject: CN=6af8b001-6ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:fb:b1:1a:ca:de:b1:8c:d8:4a:07:89:c4: e3:47:a0:b9:92:5c:a5:30:37:da:1a:f6:ad:bf:e5: c9:6a:1e:f7:6d:7a:13:65:b7:7f:8c:c9:c1:ea:32: f7:c7:46:19:08:6d:b7:68:78:0b:cd:c6:f5:65:fb: 7f:55:66:dc:26:04:68:7d:c6:51:fe:e5:72:6f:43: 66:70:79:c0:8a:5b:14:a8:90:e9:ce:39:04:96:7d: c6:95:a9:55:86:3b:53:97:81:59:96:11:a4:2f:5d: 14:14:2c:88:16:2f:f7:a7:30:52:68:04:55:45:d4: 9b:13:5c:6b:d2:84:04:27:4c:61:85:e6:a1:ef:2c: 84:60:1b:19:9d:33:0a:a0:43:d5:fd:6d:d5:73:f6: 2b:6b:59:46:7c:cb:3d:31:bf:e6:d1:3e:1d:40:9e: f0:99:58:9a:01:b5:88:8f:e3:86:3b:60:49:45:7f: e2:8d:e7:f1:7d:88:04:5a:c1:98:92:88:c9:7c:c1: 5b:e2:e4:22:cc:43:47:b6:ee:94:19:3c:ca:57:7e: 7b:a5:c3:ea:71:49:75:ed:3e:eb:e3:79:4e:70:f4: 8d:6a:11:5b:c7:44:1f:ba:77:c6:97:f3:1f:d5:e4: dd:0a:5e:67:dc:62:56:46:e7:2f:4c:bf:50:64:a6: 3e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CC:36:B6:69:68:72:EF:5B:52:BF:50:2F:06:24:2F:FD:5A:9A:9E X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c3:85:9e:3e:df:d7:2c:f4:c7:c6:73:7e:35:c5:3e:a8:ea: 9e:0f:38:6c:09:75:b5:98:4d:6b:da:ab:8c:7b:b4:3e:7f:3a: 6b:52:5e:bb:d8:15:d1:d5:de:09:6b:90:5a:e8:26:14:b3:ed: b1:22:10:6c:6e:ea:56:5c:29:59:23:d9:1a:e8:a6:09:0a:5e: 01:0a:60:c9:cb:f7:7f:b6:6e:4c:e6:0f:7f:a5:e6:d0:70:f2: 31:51:7d:1c:95:03:0b:21:0d:b1:3a:a8:eb:9b:73:5f:bf:0b: 46:d2:68:79:89:ea:49:64:e4:26:25:d4:a7:1f:53:06:e3:14: 71:c8:ab:66:41:b9:64:a8:9e:0e:5b:39:e3:6b:e8:f9:d6:f5: 18:73:dc:ce:a7:ab:81:b1:b8:a6:e0:0b:96:a3:e7:bf:28:b8: 9c:e2:31:05:94:5b:9a:95:37:c6:03:13:17:f0:2b:32:e6:4f: 2d:a2:2d:6c:3a:53:af:4f:07:fb:eb:f8:e2:80:24:e1:e8:30: 08:29:a1:8e:72:30:6c:57:58:05:2b:fb:83:07:f4:15:78:86: cc:c2:0f:73:a8:c9:29:7b:c6:75:5e:76:49:60:9b:6e:57:ce: f2:46:88:4b:57:c4:04:88:9c:1b:f3:84:c8:ff:18:e6:1d:d7: 15:6a:7a:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjYxMTE0MTkwMTIwWhcNMjYxMTIxMTkwMTIwWjAYMRYwFAYD VQQDEw02YWY4YjAwMS02ZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkf7sRrK3rGM2EoHicTjR6C5klylMDfaGvatv+XJah73bXoTZbd/jMnB6jL3 x0YZCG23aHgLzcb1Zft/VWbcJgRofcZR/uVyb0NmcHnAilsUqJDpzjkEln3GlalV hjtTl4FZlhGkL10UFCyIFi/3pzBSaARVRdSbE1xr0oQEJ0xhheah7yyEYBsZnTMK oEPV/W3Vc/Yra1lGfMs9Mb/m0T4dQJ7wmViaAbWIj+OGO2BJRX/ijefxfYgEWsGY kojJfMFb4uQizENHtu6UGTzKV357pcPqcUl17T7r43lOcPSNahFbx0QfunfGl/Mf 1eTdCl5n3GJWRucvTL9QZKY+YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIDMNrZp aHLvW1K/UC8GJC/9WpqeMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF8OFnj7f1yz0x8ZzfjXFPqjqng84bAl1tZhNa9qrjHu0Pn86a1Jeu9gV0dXe CWuQWugmFLPtsSIQbG7qVlwpWSPZGuimCQpeAQpgycv3f7ZuTOYPf6Xm0HDyMVF9 HJUDCyENsTqo65tzX78LRtJoeYnqSWTkJiXUpx9TBuMUccirZkG5ZKieDls542vo +db1GHPczqergbG4puALlqPnvyi4nOIxBZRbmpU3xgMTF/ArMuZPLaItbDpTr08H ++v44oAk4egwCCmhjnIwbFdYBSv7gwf0FXiGzMIPc6jJKXvGdV52SWCbblfO8kaI S1fEBIicG/OEyP8Y5h3XFWp6mw== -----END CERTIFICATE-----Generated at Sun Nov 15 11:51:57 2026 by rpki-client