
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json)
Hash identifier: tYf8Ss+rU8sUdhOSIJ1KO/libDxta+VTUvzUJr5JY64=
Subject key identifier: A5:51:4D:72:7E:14:96:B7:39:E0:DA:93:89:71:38:29:BB:B0:46:DB
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0CB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
Manifest number: 0C2F
Signing time: Tue 22 Sep 2026 19:00:38 +0000
Manifest this update: Tue 22 Sep 2026 19:00:38 +0000
Manifest next update: Tue 29 Sep 2026 19:00:38 +0000
Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: 7ZvZGTwi/ET0gCQG/YujX+MN0vWGIsKJ6dO8frWZxbY=)
2: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: PUCwcVB7mOMKNLxgaPflJNHZ7wfZlaCCwrgkjtHbLlA=)
3: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 0+4o+E6SOsFpjtUX15g9YSzD9JvjowUL7y6x/I96FSg=)
4: 9E173D98C3A011F09FB4B135C4F9AE02.roa (hash: Du9re4YnGbzI32FEa+5SNfgxUVGqyoMQw5ZZIhqirTQ=)
5: 305F24342A0811EE9D810010C4F9AE02.roa (hash: xTnjKFEkhv3ieLQOrP9C6yTVSU56UseqdjRyAJkV7Io=)
6: FC895C72C39F11F095CC9914C4F9AE02.roa (hash: oeoqWRtwQTgBkvjilvWPRZDpoi0Ors8C695fBl0ectw=)
7: DC2FC844C39F11F0B36A6414C4F9AE02.roa (hash: V2qlmV4XkoxlRoXJX3GJoP5zWEsqS91ZCQdcyts5qHo=)
8: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: llpJTFb5gbR6BmRuVyy4JWW+914NmVxABUKSPBGS9YM=)
9: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: Uvg+BnkN8k4fglRUul1hQWU8OMx515TnEmaoTVsiH3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3253 (0xcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: Sep 22 19:00:38 2026 GMT
Not After : Sep 29 19:00:38 2026 GMT
Subject: CN=6ab2d056-26f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:02:89:fb:2b:52:da:2e:27:83:68:a5:e3:
ee:c1:75:5e:dd:25:3c:6e:a9:74:df:96:1b:b2:33:
35:20:d1:09:65:24:ab:9b:b1:96:32:b3:72:1f:7e:
6e:b2:8d:d9:d8:30:93:40:e0:66:f0:ff:ed:7f:05:
68:f7:d8:71:f6:73:f9:27:5e:91:44:ec:83:88:63:
f1:31:53:66:0e:6b:bb:f1:09:5e:28:ac:dc:96:12:
3c:83:09:d0:58:a8:47:9a:03:2e:62:58:c9:b0:87:
e2:f5:41:ce:4c:22:5a:cf:3b:c3:8e:14:d6:ae:61:
8a:43:24:9c:cb:2a:a6:89:92:71:d8:77:9c:48:c9:
78:1b:01:fc:e7:c4:76:7b:2d:a7:f7:a4:35:1e:8a:
3f:3f:ab:51:54:5c:38:79:ef:f7:df:23:12:e7:ae:
23:98:6e:87:31:08:a8:36:9e:e5:c2:d6:98:a9:02:
95:10:93:70:56:80:2b:d4:84:c1:5f:e4:89:68:ef:
35:2f:56:3c:cc:b8:95:f0:a8:1f:28:47:d7:ca:93:
91:f6:42:e0:f2:15:1c:be:9f:66:ae:a9:0d:df:12:
27:91:fe:66:4e:2a:68:62:84:12:dd:91:92:fe:72:
95:07:02:d4:a6:4a:e3:2c:c9:93:9a:91:41:50:b3:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:51:4D:72:7E:14:96:B7:39:E0:DA:93:89:71:38:29:BB:B0:46:DB
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:b9:c0:65:ad:5e:54:a7:cc:a0:7a:f0:57:8f:3d:67:48:fe:
e8:ba:9b:29:44:82:f0:87:d0:11:95:b9:da:2e:9b:33:d0:0d:
c1:ba:9e:69:37:f2:a1:26:63:c4:a2:c2:d9:34:37:04:8a:20:
85:4d:52:50:f6:ab:92:3f:45:fe:bd:ee:d0:b4:cb:93:c9:a1:
1c:a9:fc:30:af:cd:a4:d8:ed:9a:37:b9:3b:a4:f5:56:81:b8:
93:90:1e:40:40:f4:d9:dc:fe:f4:79:8b:70:bf:b4:d4:78:05:
08:26:48:d3:99:8a:31:24:d3:9a:18:4e:49:83:1b:a4:c2:8c:
4f:19:da:e3:fc:f8:3a:97:df:ff:a0:c6:20:e2:1e:37:90:d3:
77:ff:88:d4:ce:7d:8e:9b:fe:9b:69:82:51:ed:89:00:a0:21:
3d:60:a3:7e:74:a3:37:9d:72:73:e7:68:88:1e:1f:48:3d:24:
72:cc:aa:de:21:b8:f5:61:f5:66:9d:a4:45:88:73:7c:a6:be:
8f:80:85:9d:66:7b:a4:15:f9:c1:2e:d2:cc:99:ce:3f:bc:67:
fe:63:a1:9d:bc:ff:af:7a:fd:d6:d7:64:70:c7:5a:28:c5:b4:
fb:a6:5d:77:7e:69:02:f5:49:40:6f:25:04:60:72:fe:b8:53:
8b:c4:ff:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1
QzBEREY5RDQwHhcNMjYwOTIyMTkwMDM4WhcNMjYwOTI5MTkwMDM4WjAYMRYwFAYD
VQQDEw02YWIyZDA1Ni0yNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsA8CifsrUtouJ4NopePuwXVe3SU8bql035YbsjM1INEJZSSrm7GWMrNyH35u
so3Z2DCTQOBm8P/tfwVo99hx9nP5J16RROyDiGPxMVNmDmu78QleKKzclhI8gwnQ
WKhHmgMuYljJsIfi9UHOTCJazzvDjhTWrmGKQyScyyqmiZJx2HecSMl4GwH858R2
ey2n96Q1Hoo/P6tRVFw4ee/33yMS564jmG6HMQioNp7lwtaYqQKVEJNwVoAr1ITB
X+SJaO81L1Y8zLiV8KgfKEfXypOR9kLg8hUcvp9mrqkN3xInkf5mTipoYoQS3ZGS
/nKVBwLUpkrjLMmTmpFBULP+kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVRTXJ+
FJa3OeDak4lxOCm7sEbbMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF
RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE
Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJrnAZa1eVKfMoHrwV489Z0j+6LqbKUSC8IfQEZW52i6bM9ANwbqeaTfyoSZj
xKLC2TQ3BIoghU1SUParkj9F/r3u0LTLk8mhHKn8MK/NpNjtmje5O6T1VoG4k5Ae
QED02dz+9HmLcL+01HgFCCZI05mKMSTTmhhOSYMbpMKMTxna4/z4Opff/6DGIOIe
N5DTd/+I1M59jpv+m2mCUe2JAKAhPWCjfnSjN51yc+doiB4fSD0kcsyq3iG49WH1
Zp2kRYhzfKa+j4CFnWZ7pBX5wS7SzJnOP7xn/mOhnbz/r3r91tdkcMdaKMW0+6Zd
d35pAvVJQG8lBGBy/rhTi8T/WA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:04:41 2026 by rpki-client