
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json)
Hash identifier: Su/TK9crcrB4qKZ4WebfyvooeCI2SFaE0xGpqUYachU=
Subject key identifier: 35:0A:5F:09:D8:A4:01:DA:00:8C:AD:67:04:3B:CC:F7:28:20:75:BE
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0C6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
Manifest number: 0BE9
Signing time: Tue 12 May 2026 19:19:44 +0000
Manifest this update: Tue 12 May 2026 19:19:44 +0000
Manifest next update: Tue 19 May 2026 19:19:44 +0000
Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: U24JRbHZTVg2lXEGNXuocajrlN7EAujoKH+Y1iDxXfk=)
2: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: Uvg+BnkN8k4fglRUul1hQWU8OMx515TnEmaoTVsiH3Q=)
3: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: PUCwcVB7mOMKNLxgaPflJNHZ7wfZlaCCwrgkjtHbLlA=)
4: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 0+4o+E6SOsFpjtUX15g9YSzD9JvjowUL7y6x/I96FSg=)
5: FC895C72C39F11F095CC9914C4F9AE02.roa (hash: oeoqWRtwQTgBkvjilvWPRZDpoi0Ors8C695fBl0ectw=)
6: DC2FC844C39F11F0B36A6414C4F9AE02.roa (hash: V2qlmV4XkoxlRoXJX3GJoP5zWEsqS91ZCQdcyts5qHo=)
7: 305F24342A0811EE9D810010C4F9AE02.roa (hash: xTnjKFEkhv3ieLQOrP9C6yTVSU56UseqdjRyAJkV7Io=)
8: 9E173D98C3A011F09FB4B135C4F9AE02.roa (hash: ga9qUIHplz9Q0itJMVESTFTdU82A0oFqh3RAfSw4h6M=)
9: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: llpJTFb5gbR6BmRuVyy4JWW+914NmVxABUKSPBGS9YM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3182 (0xc6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: May 12 19:19:44 2026 GMT
Not After : May 19 19:19:44 2026 GMT
Subject: CN=6a037d50-c1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:3b:a4:fc:e7:8e:44:de:2a:6e:4b:71:f9:
6d:33:51:9d:a2:e8:e7:d2:c6:ba:9b:a4:11:3b:db:
69:25:94:4f:f0:37:96:69:1f:61:33:bb:2f:90:b5:
e9:68:07:12:d6:d9:6b:82:7b:2b:f8:34:de:63:b9:
ca:9d:90:9b:a6:ec:1f:e2:7e:18:c4:43:89:52:de:
17:0a:53:44:45:0f:ed:44:f3:a3:b9:3a:3b:77:8d:
38:6f:1d:a2:76:1b:df:9b:72:96:b0:1e:e3:ec:37:
e5:fe:7e:f6:6e:b9:c0:26:08:87:44:c9:c4:a5:aa:
22:47:71:4a:06:dc:a6:c3:b9:d2:82:9f:63:f7:51:
7c:e2:9d:75:1d:49:1f:32:61:22:e3:bc:dc:ea:b5:
31:38:2b:83:6a:f1:dd:b0:d4:8c:a7:f8:64:97:aa:
8c:07:99:0e:3b:6e:b6:65:48:71:0d:b1:85:ba:31:
a0:db:c0:3b:3f:14:d0:58:29:a7:5b:51:4e:da:2c:
73:bb:a9:f9:a6:64:34:12:3c:07:09:a6:85:1b:2f:
09:e8:f3:29:d3:4b:9c:2f:25:ee:14:5f:42:ac:26:
3c:3c:26:64:b8:64:cc:b2:8f:c8:53:e0:a7:d1:13:
59:34:d5:9e:01:c2:42:4c:d0:e8:d8:f9:9c:97:2a:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0A:5F:09:D8:A4:01:DA:00:8C:AD:67:04:3B:CC:F7:28:20:75:BE
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:78:ee:98:f1:cf:be:4c:aa:31:14:30:25:61:a5:68:eb:52:
15:2e:b9:ea:ab:5a:b3:2a:a6:99:f5:29:f0:e0:d0:94:a7:da:
3a:6d:30:b7:23:da:ea:45:da:d7:1b:00:f7:30:ba:d6:65:88:
25:6a:a8:9a:a8:3a:b2:f2:8a:03:5f:f0:3c:3c:b8:d4:c8:f0:
b9:55:8f:66:87:90:69:21:ab:79:6a:f6:1e:68:e9:92:52:5a:
56:9c:ac:5a:3d:e6:c5:ff:e9:3e:f0:84:71:cc:16:98:46:f9:
58:be:a6:c0:21:a7:e6:81:1a:6a:b0:59:88:b3:98:42:8d:57:
4f:6d:dd:61:4a:27:48:2b:4d:39:29:a1:75:ed:bf:28:1f:54:
ea:b1:ec:5a:7e:1a:70:18:81:ec:c8:a4:76:f1:ea:08:bc:65:
ee:26:24:a1:cd:4f:16:ba:69:77:38:70:70:2f:98:d2:fe:28:
a5:53:55:72:03:75:c6:dd:82:fc:5a:8e:56:83:c9:f2:ff:23:
da:54:5b:f0:0a:32:2a:d0:f1:df:97:f2:c1:d3:58:2e:40:fc:
19:41:7c:6e:d6:30:61:33:b1:2c:3e:32:9f:54:82:8e:10:b8:
44:c1:55:f5:b2:ad:8b:1b:75:b7:03:c1:e4:c2:cb:f1:27:9b:
4f:88:24:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:16 2026 by rpki-client