$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json) Hash identifier: vkgFUIUDb95EO1UK81uq3wzS1l0qEkG9JpiMFqmLdHY= Subject key identifier: D2:86:22:37:48:93:54:C6:CF:9B:B9:DD:50:7F:14:3E:95:E2:0A:EB Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0CC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft Manifest number: 0C3D Signing time: Tue 20 Oct 2026 19:14:16 +0000 Manifest this update: Tue 20 Oct 2026 19:14:16 +0000 Manifest next update: Tue 27 Oct 2026 19:14:16 +0000 Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: WH66gZp09VoFoIUt5ufs6mBrqacEkwkWGYR6mVcbYSo=) 2: 305F24342A0811EE9D810010C4F9AE02.roa (hash: xTnjKFEkhv3ieLQOrP9C6yTVSU56UseqdjRyAJkV7Io=) 3: 9E173D98C3A011F09FB4B135C4F9AE02.roa (hash: Du9re4YnGbzI32FEa+5SNfgxUVGqyoMQw5ZZIhqirTQ=) 4: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 0+4o+E6SOsFpjtUX15g9YSzD9JvjowUL7y6x/I96FSg=) 5: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: Uvg+BnkN8k4fglRUul1hQWU8OMx515TnEmaoTVsiH3Q=) 6: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: llpJTFb5gbR6BmRuVyy4JWW+914NmVxABUKSPBGS9YM=) 7: DC2FC844C39F11F0B36A6414C4F9AE02.roa (hash: V2qlmV4XkoxlRoXJX3GJoP5zWEsqS91ZCQdcyts5qHo=) 8: FC895C72C39F11F095CC9914C4F9AE02.roa (hash: oeoqWRtwQTgBkvjilvWPRZDpoi0Ors8C695fBl0ectw=) 9: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: PUCwcVB7mOMKNLxgaPflJNHZ7wfZlaCCwrgkjtHbLlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 19:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3267 (0xcc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Oct 20 19:14:16 2026 GMT Not After : Oct 27 19:14:16 2026 GMT Subject: CN=6ad7bd88-f2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:e9:2c:16:0f:6d:5f:8f:50:c6:f4:2e:3c: 35:b4:76:c4:c7:83:1f:39:d6:9f:40:97:d6:f4:fa: b1:32:7b:68:78:4e:a5:c9:26:1e:c9:50:00:30:1b: b8:ed:d6:b2:20:4b:8f:55:37:cd:0f:c6:73:6a:f2: 3d:81:0a:4c:66:f2:77:6b:ea:60:a1:42:8a:b1:16: d1:96:62:3b:b4:ed:e2:9c:f7:d5:eb:8c:6f:f0:0d: bf:fd:c7:5f:b3:e1:e3:01:cb:d0:35:ef:20:14:ea: 52:74:63:be:99:55:0d:5a:1d:7a:a0:7f:0b:46:d4: 72:f3:f9:6a:fe:27:20:45:c7:8d:bf:02:10:bb:9b: d3:a2:f6:73:df:2c:4c:66:79:59:10:8d:ad:ca:9a: aa:6f:27:72:d5:a7:f1:cb:b8:38:49:78:a7:f2:21: 00:5a:8c:c2:da:62:cf:86:5b:32:cf:36:07:f7:e4: bb:1c:99:e4:83:c2:4b:63:12:84:c0:9b:68:e8:34: 63:b0:1d:ec:64:27:c0:9b:4f:f3:f1:74:21:4e:83: 87:7f:b8:a0:68:76:be:5e:06:ed:92:6b:62:0d:af: c3:15:df:2b:ad:f8:24:34:0e:d9:4c:95:0f:9a:cc: 54:df:3b:84:5c:fa:23:64:0d:da:54:2c:ed:c6:6c: f9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:86:22:37:48:93:54:C6:CF:9B:B9:DD:50:7F:14:3E:95:E2:0A:EB X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:72:97:57:31:a8:59:d2:61:92:71:8b:86:eb:df:a4:28:4b: 81:e7:04:97:d9:70:b0:67:8f:46:5f:43:54:db:8d:87:9a:7e: 30:3a:2d:e3:e5:f8:6f:5a:9b:9f:8c:16:22:23:49:3f:fa:47: a9:e8:1b:06:cb:ed:fd:24:81:bc:fe:b5:87:72:1b:7e:b5:82: d1:95:4a:11:41:72:e7:60:07:e0:2f:1c:d1:62:11:63:64:72: a2:e5:01:6b:e7:ef:6c:f2:a5:15:61:e4:51:2d:ba:25:58:b8: 53:6f:b2:c4:e2:80:2d:35:be:33:f9:3e:14:04:d0:03:4c:10: b9:08:ac:4e:47:20:f5:a9:05:de:76:86:09:75:8c:3f:3c:54: 09:79:b4:9f:2a:b8:16:74:bb:43:bf:b9:ff:55:8f:50:bb:48: 6c:86:64:7d:f2:bc:c3:73:38:d6:08:cc:d5:5b:b6:ab:06:d1: bd:6d:38:89:ac:81:37:97:e4:79:38:6e:e1:e0:1e:51:58:a8: 72:1c:94:17:ce:32:a6:84:86:b0:73:85:aa:80:6f:8e:52:52: ea:78:f0:48:46:ff:0a:8e:64:b7:f0:d4:35:40:f5:88:9d:03: 89:f0:8d:b3:e4:b3:d1:48:be:76:c0:7a:6a:d8:d5:d7:c4:c0: 06:f4:74:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjYxMDIwMTkxNDE2WhcNMjYxMDI3MTkxNDE2WjAYMRYwFAYD VQQDEw02YWQ3YmQ4OC1mMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwELpLBYPbV+PUMb0Ljw1tHbEx4MfOdafQJfW9PqxMntoeE6lySYeyVAAMBu4 7dayIEuPVTfND8ZzavI9gQpMZvJ3a+pgoUKKsRbRlmI7tO3inPfV64xv8A2//cdf s+HjAcvQNe8gFOpSdGO+mVUNWh16oH8LRtRy8/lq/icgRceNvwIQu5vTovZz3yxM ZnlZEI2typqqbydy1afxy7g4SXin8iEAWozC2mLPhlsyzzYH9+S7HJnkg8JLYxKE wJto6DRjsB3sZCfAm0/z8XQhToOHf7igaHa+XgbtkmtiDa/DFd8rrfgkNA7ZTJUP msxU3zuEXPojZA3aVCztxmz5gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKGIjdI k1TGz5u53VB/FD6V4grrMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOHKXVzGoWdJhknGLhuvfpChLgecEl9lwsGePRl9DVNuNh5p+MDot4+X4b1qb n4wWIiNJP/pHqegbBsvt/SSBvP61h3IbfrWC0ZVKEUFy52AH4C8c0WIRY2RyouUB a+fvbPKlFWHkUS26JVi4U2+yxOKALTW+M/k+FATQA0wQuQisTkcg9akF3naGCXWM PzxUCXm0nyq4FnS7Q7+5/1WPULtIbIZkffK8w3M41gjM1Vu2qwbRvW04iayBN5fk eThu4eAeUViochyUF84ypoSGsHOFqoBvjlJS6njwSEb/Co5kt/DUNUD1iJ0DifCN s+Sz0Ui+dsB6atjV18TABvR0GA== -----END CERTIFICATE-----Generated at Wed Oct 21 09:20:47 2026 by rpki-client