
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
File: mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json)
Hash identifier: DGykDz0PytCq3x5ry1CNqSBfYjaCmogTUcns1j33LcQ=
Subject key identifier: 6A:0D:97:9D:1A:0E:C1:17:06:01:D6:EF:2E:72:E7:1F:DF:08:92:C7
Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1
Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
Certificate serial: 089D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
Manifest number: 1A42
Signing time: Thu 16 Apr 2026 17:07:21 +0000
Manifest this update: Thu 16 Apr 2026 17:07:21 +0000
Manifest next update: Thu 23 Apr 2026 17:07:21 +0000
Files and hashes: 1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: PSD327RXJFGAUxwjm67GRS8d79fh/sD5WXUgJX+i+fQ=)
2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: 2Sypc2mrayj07nSA2R63Ko2GoXx3vyD4TE8lcoXnaoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl
rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2205 (0x89d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
Validity
Not Before: Apr 16 17:07:21 2026 GMT
Not After : Apr 23 17:07:21 2026 GMT
Subject: CN=69e11749-52f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:e2:f6:fc:f3:75:05:6f:4a:2f:67:31:77:
ea:90:45:06:91:59:96:ec:1c:d0:7e:56:fa:a9:d1:
70:25:43:3f:eb:5c:12:da:18:0d:4b:25:7e:ec:d6:
ec:e2:d5:e2:a1:c1:54:68:7d:e8:4b:b1:52:03:7b:
bf:73:cf:4a:b5:60:5e:95:ee:ae:47:2e:78:76:3e:
75:22:f3:b3:25:82:5d:af:0e:f9:96:68:dc:36:b9:
41:ae:47:e9:71:c0:21:6b:d8:99:89:3a:d3:99:e1:
f8:62:39:13:be:3c:0c:ca:2a:d5:cd:2c:5e:31:29:
9a:37:51:c5:f5:84:3d:e5:f6:f6:f8:68:dc:ba:21:
3e:6f:ea:10:a1:12:35:93:cf:67:20:15:af:48:cc:
79:7b:a0:3f:c9:e4:02:25:c3:75:34:12:3a:b3:47:
9b:a0:a5:03:44:b9:31:ca:b4:fd:b0:58:e4:e6:8c:
a3:3c:10:b2:a9:77:26:b3:cc:3e:da:d6:a4:b8:93:
37:34:35:ff:99:27:03:6b:1b:13:ca:cf:af:ce:b2:
52:5e:d0:e4:9b:6e:77:7d:22:b3:07:4b:77:c4:e8:
3d:09:21:e7:0b:70:e1:bf:a9:8c:d5:2b:88:6f:0a:
71:30:6e:48:8a:d6:c2:b4:f7:7d:43:9f:53:e2:1a:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0D:97:9D:1A:0E:C1:17:06:01:D6:EF:2E:72:E7:1F:DF:08:92:C7
X509v3 Authority Key Identifier:
keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8a:c1:43:e5:9a:cd:8c:31:0a:92:c6:9b:72:de:5e:6d:78:
35:b4:08:1d:7e:13:47:5a:71:e5:4d:83:cc:dc:68:0f:5a:0a:
95:e6:b4:f4:69:93:68:75:bc:6b:31:89:f5:84:46:ac:3f:95:
3f:0f:da:65:cd:3f:39:60:9f:75:02:27:87:d7:83:56:c5:4a:
ce:ae:5a:9c:d5:d8:03:e3:cf:d5:28:78:2c:f3:3b:ac:42:02:
c7:fe:64:f3:68:fd:d1:23:2e:e1:09:e9:72:4b:54:77:6e:fb:
cb:ac:75:d8:65:43:b1:5d:1f:ea:a1:09:b3:5e:7b:59:7e:94:
1e:22:42:0a:5b:66:c5:79:c6:a0:45:99:65:9e:aa:b7:c9:d6:
66:60:67:80:a7:4f:e0:43:c9:68:e7:95:17:54:61:1f:29:cc:
67:6c:1b:62:e9:0d:b3:f7:be:b8:33:2f:b1:a8:a5:17:1c:5d:
8b:20:22:ed:3e:47:ec:8e:d5:6a:5d:b4:8c:3f:82:be:7b:a8:
31:67:72:4d:f4:13:97:46:b6:29:8b:b8:67:e7:34:37:e9:66:
9e:86:a5:e6:c1:bd:b6:1b:00:65:5e:c5:14:32:c5:4c:ad:80:
2a:0c:03:41:e0:8b:60:bc:c1:14:a3:5f:41:d7:3f:d3:4a:6c:
4c:4b:c7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:14:28 2026 by rpki-client