$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft File: mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json) Hash identifier: KGbN5Hn5q/F8z8jXQI4ayteBXsqIN1GuGtBHF1qeiVA= Subject key identifier: 43:8C:DE:89:64:BB:0B:D6:77:83:8B:03:12:0A:A9:DC:29:02:8F:A2 Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Certificate serial: 08D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft Manifest number: 1AAA Signing time: Tue 28 Jul 2026 17:15:34 +0000 Manifest this update: Tue 28 Jul 2026 17:15:34 +0000 Manifest next update: Tue 04 Aug 2026 17:15:34 +0000 Files and hashes: 1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: LEHT/7sP+JUqc3b077IdUNuZfrLn6y4NSyQuuM8s+p4=) 2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: 2Sypc2mrayj07nSA2R63Ko2GoXx3vyD4TE8lcoXnaoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2257 (0x8d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Validity Not Before: Jul 28 17:15:34 2026 GMT Not After : Aug 4 17:15:34 2026 GMT Subject: CN=6a68e3b6-01fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:11:30:44:5f:36:b6:8c:66:a7:93:e0:4f:e7: 69:3c:50:ad:b4:e5:23:65:9e:7c:5c:bf:43:04:5f: 5e:ea:e1:ce:c4:05:40:4c:af:cc:ec:98:a3:99:8a: b9:44:4b:20:c4:2c:78:2c:4a:5a:c0:3b:f6:8a:90: 33:f8:62:d0:05:39:af:b1:d9:18:60:e4:bb:41:3a: e3:6d:6c:0e:8f:1c:df:25:74:99:9b:db:72:65:95: 42:32:f8:0b:57:52:a0:29:17:88:2e:d5:da:4c:0e: f0:dc:b5:81:a2:ad:05:5b:ee:26:49:b6:d0:94:34: 73:c0:4c:a5:0b:3f:4a:00:83:fa:80:7f:53:76:6d: 20:7f:4f:43:4f:d9:1a:fe:f5:c7:de:c9:ad:f1:8e: d1:09:62:68:5a:89:e3:35:07:7c:3e:1b:57:3e:e4: e6:b4:cc:6e:75:ac:e1:75:8e:10:49:3c:91:6d:98: 41:ca:77:a3:99:24:8d:67:b9:bd:00:c1:91:d8:83: 04:ec:3b:40:a1:b0:ee:a6:6b:90:6f:a4:3d:65:a8: c2:92:43:67:ac:dc:64:5d:36:f5:95:bd:e6:35:bd: 6b:58:ea:1d:ec:8e:13:31:f6:94:27:0e:e5:f7:b6: df:48:cf:25:a7:95:fd:34:09:57:75:37:b4:3f:de: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8C:DE:89:64:BB:0B:D6:77:83:8B:03:12:0A:A9:DC:29:02:8F:A2 X509v3 Authority Key Identifier: keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:8a:a9:cf:fe:d6:14:6b:bf:e6:cc:f7:2e:93:d7:79:d8:04: 5c:6b:4a:e3:c4:18:1e:2b:0f:b9:49:8b:68:b3:9d:fb:7b:32: ee:94:0c:b6:48:20:17:c9:87:32:fd:38:59:ce:4f:5b:22:97: 90:20:1a:de:01:25:fc:34:f3:70:91:db:c4:1a:b3:35:7a:19: f0:f3:85:66:90:7c:f8:62:d1:d9:a2:f3:50:30:f3:c5:3d:d6: 0d:69:58:9a:00:ba:84:0b:f8:5f:90:5e:bb:ff:ad:60:a7:9d: 41:a1:b0:05:90:5e:f5:43:ac:40:13:59:82:68:7f:f9:77:c7: 32:35:f9:ab:6f:1b:5f:da:7b:77:10:2c:bc:9c:c9:ea:f0:b4: a1:a3:5a:66:c4:e4:26:15:5f:1c:4e:40:7d:39:6b:56:ea:1a: 4f:86:ae:c4:cf:49:09:ee:bb:17:3f:75:9c:0e:65:d6:c6:11: 1d:9f:70:6d:14:a2:a1:c9:13:b7:bd:ba:c9:c1:5b:88:1d:4a: 20:a7:34:58:b7:c5:e2:50:f1:1f:89:09:a1:8f:d4:da:10:23: d0:ed:a6:a3:4d:f0:42:3d:eb:35:7e:0a:f6:1f:38:df:20:56: 85:32:4c:40:2f:8e:b3:0c:7c:7a:14:85:44:88:34:9a:0e:15: f0:8d:2b:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxMTkxMTAvBgNVBAUTKDlBNDQwMzA0MDNENTBCNzFCOTk4NDYzQjNBRTU2ODQz QjkyNTk1RTEwHhcNMjYwNzI4MTcxNTM0WhcNMjYwODA0MTcxNTM0WjAYMRYwFAYD VQQDEw02YTY4ZTNiNi0wMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhEwRF82toxmp5PgT+dpPFCttOUjZZ58XL9DBF9e6uHOxAVATK/M7JijmYq5 REsgxCx4LEpawDv2ipAz+GLQBTmvsdkYYOS7QTrjbWwOjxzfJXSZm9tyZZVCMvgL V1KgKReILtXaTA7w3LWBoq0FW+4mSbbQlDRzwEylCz9KAIP6gH9Tdm0gf09DT9ka /vXH3smt8Y7RCWJoWonjNQd8PhtXPuTmtMxudazhdY4QSTyRbZhBynejmSSNZ7m9 AMGR2IME7DtAobDupmuQb6Q9ZajCkkNnrNxkXTb1lb3mNb1rWOod7I4TMfaUJw7l 97bfSM8lp5X9NAlXdTe0P95IUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOM3olk uwvWd4OLAxIKqdwpAo+iMB8GA1UdIwQYMBaAFJpEAwQD1QtxuZhGOzrlaEO5JZXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDExOS9FRUI3MUJFMjEz RjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMzRzVtRVk3T3VWb1E3a2xs ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rUURCQVBWQzNHNW1FWTdPdVZvUTdrbGxlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDExOS9FRUI3MUJFMjEzRjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMz RzVtRVk3T3VWb1E3a2xsZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsIqpz/7WFGu/5sz3LpPXedgEXGtK48QYHisPuUmLaLOd+3sy7pQMtkggF8mH Mv04Wc5PWyKXkCAa3gEl/DTzcJHbxBqzNXoZ8POFZpB8+GLR2aLzUDDzxT3WDWlY mgC6hAv4X5Beu/+tYKedQaGwBZBe9UOsQBNZgmh/+XfHMjX5q28bX9p7dxAsvJzJ 6vC0oaNaZsTkJhVfHE5AfTlrVuoaT4auxM9JCe67Fz91nA5l1sYRHZ9wbRSiockT t726ycFbiB1KIKc0WLfF4lDxH4kJoY/U2hAj0O2mo03wQj3rNX4K9h843yBWhTJM QC+Oswx8ehSFRIg0mg4V8I0rCQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:50:42 2026 by rpki-client