
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json)
Hash identifier: W1x/eoFAaPmw3vWYXgLyjgf50JQGOaKUPK4u/DSxq2w=
Subject key identifier: B3:5D:E8:19:A7:CC:D9:C0:2A:E3:64:BE:08:06:56:31:AA:A1:CD:95
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0C7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
Manifest number: 0BF6
Signing time: Tue 02 Jun 2026 19:16:17 +0000
Manifest this update: Tue 02 Jun 2026 19:16:16 +0000
Manifest next update: Tue 09 Jun 2026 19:16:16 +0000
Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: mgNXUb4iLhVTPYEzQ0tW6ka/IvzX6cEHkuXUUnDisn4=)
2: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: PUCwcVB7mOMKNLxgaPflJNHZ7wfZlaCCwrgkjtHbLlA=)
3: FC895C72C39F11F095CC9914C4F9AE02.roa (hash: oeoqWRtwQTgBkvjilvWPRZDpoi0Ors8C695fBl0ectw=)
4: 9E173D98C3A011F09FB4B135C4F9AE02.roa (hash: Du9re4YnGbzI32FEa+5SNfgxUVGqyoMQw5ZZIhqirTQ=)
5: DC2FC844C39F11F0B36A6414C4F9AE02.roa (hash: V2qlmV4XkoxlRoXJX3GJoP5zWEsqS91ZCQdcyts5qHo=)
6: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: llpJTFb5gbR6BmRuVyy4JWW+914NmVxABUKSPBGS9YM=)
7: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: Uvg+BnkN8k4fglRUul1hQWU8OMx515TnEmaoTVsiH3Q=)
8: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 0+4o+E6SOsFpjtUX15g9YSzD9JvjowUL7y6x/I96FSg=)
9: 305F24342A0811EE9D810010C4F9AE02.roa (hash: xTnjKFEkhv3ieLQOrP9C6yTVSU56UseqdjRyAJkV7Io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3196 (0xc7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: Jun 2 19:16:16 2026 GMT
Not After : Jun 9 19:16:16 2026 GMT
Subject: CN=6a1f2c01-5272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:74:24:07:6a:02:f6:b6:d0:ab:e8:38:76:
4d:17:e1:69:a8:18:61:3d:dc:24:24:c5:36:8b:6e:
2c:0a:77:81:68:92:72:5f:f7:6c:21:d0:3f:63:f0:
67:73:65:dd:fb:bb:d0:93:8c:b2:df:7c:26:16:50:
97:39:98:d1:7f:7c:4a:dc:a0:e0:2d:64:cb:df:e5:
9e:21:0e:65:62:1b:27:15:30:29:59:bf:5d:c1:fd:
c5:ea:6b:a7:ea:fd:1c:28:b1:e8:c5:6d:b1:0e:28:
37:a3:8b:44:ac:56:50:f5:7c:59:44:29:9d:bd:57:
21:4c:5b:86:e2:dd:64:4e:57:4f:9d:28:14:3f:53:
eb:0d:43:fd:8c:59:dd:26:54:04:d7:c7:77:c7:86:
ce:4e:6f:9e:ef:a6:40:74:45:83:7c:60:ff:e9:0b:
50:ca:a3:c4:42:0c:6f:e6:6c:3e:7b:23:93:10:4b:
2d:7e:22:9a:7f:98:23:1c:6a:4f:d1:dc:ee:e8:f6:
1c:00:e5:d3:6d:f1:de:8d:6e:f5:0b:8a:76:36:12:
88:ec:e6:81:f4:02:e0:b0:be:e1:a6:9c:1f:fc:25:
04:e7:ca:31:ed:e1:13:cb:9e:9e:f2:33:9e:ff:e2:
04:5e:0f:01:48:c3:ef:84:91:d9:7f:b8:85:06:9b:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5D:E8:19:A7:CC:D9:C0:2A:E3:64:BE:08:06:56:31:AA:A1:CD:95
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:6c:04:bd:2c:2c:aa:6a:bd:8a:52:08:90:29:dc:f4:e2:fa:
9f:20:2d:44:02:6d:54:dd:83:e2:a9:14:c2:63:35:6b:0b:37:
20:91:cf:b3:e9:b9:f7:11:c6:2e:61:ac:50:50:17:fc:29:67:
83:e3:b8:32:c7:f5:cc:a8:be:d9:f5:f8:73:8a:f6:1a:e1:32:
b8:32:19:d0:aa:14:55:ad:d5:fe:e9:8f:f1:84:c0:2a:a8:d9:
94:75:f0:03:0b:b8:c3:bf:4e:59:99:c3:37:6d:9a:cd:70:7f:
cd:d8:ce:11:94:d9:85:44:3e:09:d7:95:95:de:6c:bf:40:8c:
85:c6:f3:d0:db:86:08:29:c2:91:94:c1:1a:ca:bf:0c:70:e8:
63:51:6a:4f:c7:a6:51:ad:73:d8:14:cc:37:79:1b:b1:db:fe:
b4:48:3f:16:bc:6d:3d:0c:bd:ef:7d:c9:0b:6b:7f:1f:bf:42:
01:3a:ff:ad:a0:6f:95:9c:fb:6f:b8:27:8a:4f:0e:f1:24:df:
ec:27:3b:a3:d0:7a:ba:67:e1:8d:21:ee:dd:cb:8b:f1:63:4f:
1d:f3:e1:cb:b8:11:88:85:4b:02:da:bb:ee:ab:e3:e6:ca:d0:
6c:ee:e0:fd:ec:2f:f2:bb:75:cc:61:77:a2:c0:30:41:f3:05:
1d:ba:c9:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1
QzBEREY5RDQwHhcNMjYwNjAyMTkxNjE2WhcNMjYwNjA5MTkxNjE2WjAYMRYwFAYD
VQQDEw02YTFmMmMwMS01MjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxlB0JAdqAva20KvoOHZNF+FpqBhhPdwkJMU2i24sCneBaJJyX/dsIdA/Y/Bn
c2Xd+7vQk4yy33wmFlCXOZjRf3xK3KDgLWTL3+WeIQ5lYhsnFTApWb9dwf3F6mun
6v0cKLHoxW2xDig3o4tErFZQ9XxZRCmdvVchTFuG4t1kTldPnSgUP1PrDUP9jFnd
JlQE18d3x4bOTm+e76ZAdEWDfGD/6QtQyqPEQgxv5mw+eyOTEEstfiKaf5gjHGpP
0dzu6PYcAOXTbfHejW71C4p2NhKI7OaB9ALgsL7hppwf/CUE58ox7eETy56e8jOe
/+IEXg8BSMPvhJHZf7iFBpsuLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNd6Bmn
zNnAKuNkvggGVjGqoc2VMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF
RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE
Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN2wEvSwsqmq9ilIIkCnc9OL6nyAtRAJtVN2D4qkUwmM1aws3IJHPs+m59xHG
LmGsUFAX/Clng+O4Msf1zKi+2fX4c4r2GuEyuDIZ0KoUVa3V/umP8YTAKqjZlHXw
Awu4w79OWZnDN22azXB/zdjOEZTZhUQ+CdeVld5sv0CMhcbz0NuGCCnCkZTBGsq/
DHDoY1FqT8emUa1z2BTMN3kbsdv+tEg/FrxtPQy9733JC2t/H79CATr/raBvlZz7
b7gnik8O8STf7Cc7o9B6umfhjSHu3cuL8WNPHfPhy7gRiIVLAtq77qvj5srQbO7g
/ewv8rt1zGF3osAwQfMFHbrJig==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:51:01 2026 by rpki-client