
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json)
Hash identifier: vvLntt/f/153c0lAG9gX19myTibx30U5CDLKieuYkHc=
Subject key identifier: C1:0C:FA:40:F1:D6:FF:CA:DA:41:D4:80:E7:32:7C:6F:77:FC:27:BE
Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Certificate serial: 0D02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
Manifest number: 0CED
Signing time: Wed 02 Sep 2026 18:25:33 +0000
Manifest this update: Wed 02 Sep 2026 18:25:33 +0000
Manifest next update: Wed 09 Sep 2026 18:25:33 +0000
Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: tDMnkrcTFER/5Iqvl6eW1L9iINy+yE/3or+Eu/JtXbk=)
2: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: M9hrVMTzZX+RhBo3mKRURH0NS+fV+W9LRBlbRm5uCWM=)
3: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: LCPMT0hgRgxkY6g8i6rd3I6r5PrzQRSGvYCOXRlNG28=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 18:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3330 (0xd02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Validity
Not Before: Sep 2 18:25:33 2026 GMT
Not After : Sep 9 18:25:33 2026 GMT
Subject: CN=6a986a1d-09ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:a1:8e:5b:3f:02:09:b0:f8:29:e6:2e:be:
e0:68:03:62:2a:64:90:e3:18:2a:c5:b6:f4:d3:0c:
d0:22:fd:c8:bc:9b:0d:75:47:de:1c:5b:95:f7:17:
73:34:b8:30:35:0c:cd:eb:c7:3c:25:3a:d3:be:8a:
08:d0:4b:2d:66:33:28:28:5d:bf:1e:f0:e8:ae:0e:
6d:85:38:98:f9:3b:aa:44:e7:cb:66:f4:46:a6:5f:
8c:e3:85:25:db:e3:35:df:ac:06:59:7a:8a:24:6c:
da:08:91:3e:4a:47:de:69:24:39:65:a8:76:ff:d4:
7c:35:34:32:45:0a:97:e4:0e:3b:fd:29:b6:33:22:
16:64:c0:20:bc:8f:f2:b6:51:4e:d9:07:bb:3e:d1:
0e:cd:8e:5d:47:10:5b:cb:0a:4a:1e:8e:fc:67:00:
05:c9:7a:ba:79:9c:c3:be:76:a8:25:b5:18:af:98:
fb:9e:fb:32:ba:df:31:11:4f:b4:5d:58:72:88:4e:
71:22:2d:2e:ad:f8:26:7f:86:0a:a4:39:24:aa:1e:
f3:5b:95:a0:4c:7c:64:47:ed:6c:89:85:6b:41:76:
52:60:f1:ac:70:00:95:67:3e:d9:44:fd:6f:59:e9:
c0:31:72:69:e7:ce:94:a1:2b:0b:f9:4e:71:57:cb:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0C:FA:40:F1:D6:FF:CA:DA:41:D4:80:E7:32:7C:6F:77:FC:27:BE
X509v3 Authority Key Identifier:
keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:68:16:44:b9:94:8c:f7:f4:c4:f8:5e:8c:e7:ee:cf:c0:25:
c7:66:2b:29:e9:f5:81:25:a8:f8:78:81:df:a6:6a:42:10:89:
a9:0a:d9:4b:ce:26:47:e2:48:79:a6:b9:23:20:17:4f:d9:31:
08:8d:46:a8:31:56:5e:bf:94:98:33:a5:25:6a:87:93:01:09:
c8:f0:7e:d9:fb:41:ee:51:67:ea:a4:2c:d9:c1:11:89:74:fb:
f4:42:fd:28:0f:9b:99:1a:92:0d:07:7c:69:d5:e3:12:2f:bb:
cd:80:93:eb:93:a6:57:24:34:72:f5:52:01:bc:44:bd:5a:71:
1d:d8:a9:82:d5:7c:06:87:3c:bf:c7:b3:f4:c0:53:b4:50:3e:
9e:69:b6:0e:a4:df:d5:5a:12:75:75:1e:f0:53:05:53:54:a5:
6f:6d:25:e7:83:14:5d:be:98:27:3f:10:17:c3:a7:26:39:a4:
c9:0c:04:f2:f7:c9:73:b0:76:da:b3:d0:60:26:f5:e7:45:d6:
b0:f7:63:8b:b5:9c:24:0d:25:ff:bf:1f:33:87:c9:a3:ce:04:
fe:0f:44:b8:1c:96:6b:e3:43:18:ad:d9:38:d9:8a:59:d6:c9:
56:ba:dd:11:26:e5:a0:13:2a:cc:9c:cb:a5:7f:f6:4e:56:f9:
ea:62:c6:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc3MzAxMTAvBgNVBAUTKDBFMzE4QTZBOTQxRTYwQzk5MDg2MUQ4NjlCMjAzOTQ4
QzhCNDg4NDEwHhcNMjYwOTAyMTgyNTMzWhcNMjYwOTA5MTgyNTMzWjAYMRYwFAYD
VQQDEw02YTk4NmExZC0wOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm3Ghjls/Agmw+CnmLr7gaANiKmSQ4xgqxbb00wzQIv3IvJsNdUfeHFuV9xdz
NLgwNQzN68c8JTrTvooI0EstZjMoKF2/HvDorg5thTiY+TuqROfLZvRGpl+M44Ul
2+M136wGWXqKJGzaCJE+SkfeaSQ5Zah2/9R8NTQyRQqX5A47/Sm2MyIWZMAgvI/y
tlFO2Qe7PtEOzY5dRxBbywpKHo78ZwAFyXq6eZzDvnaoJbUYr5j7nvsyut8xEU+0
XVhyiE5xIi0urfgmf4YKpDkkqh7zW5WgTHxkR+1siYVrQXZSYPGscACVZz7ZRP1v
WenAMXJp586UoSsL+U5xV8sLlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMEM+kDx
1v/K2kHUgOcyfG93/Ce+MB8GA1UdIwQYMBaAFA4ximqUHmDJkIYdhpsgOUjItIhB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzczMC8zQTQ5RTcwRTEy
REQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlNbVFoaDJHbXlBNVNNaTBp
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RqR0thcFFlWU1tUWhoMkdteUE1U01pMGlFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzczMC8zQTQ5RTcwRTEyREQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlN
bVFoaDJHbXlBNVNNaTBpRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuGgWRLmUjPf0xPhejOfuz8Alx2YrKen1gSWo+HiB36ZqQhCJqQrZS84mR+JI
eaa5IyAXT9kxCI1GqDFWXr+UmDOlJWqHkwEJyPB+2ftB7lFn6qQs2cERiXT79EL9
KA+bmRqSDQd8adXjEi+7zYCT65OmVyQ0cvVSAbxEvVpxHdipgtV8Boc8v8ez9MBT
tFA+nmm2DqTf1VoSdXUe8FMFU1Slb20l54MUXb6YJz8QF8OnJjmkyQwE8vfJc7B2
2rPQYCb150XWsPdji7WcJA0l/78fM4fJo84E/g9EuByWa+NDGK3ZONmKWdbJVrrd
ESbloBMqzJzLpX/2Tlb56mLGrw==
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:09:19 2026 by rpki-client