
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
File: mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json)
Hash identifier: 45RHmhzY5SVOmbhRrhsxPcgc73m8wcRUsOUP533cA64=
Subject key identifier: CE:E7:C4:8B:2D:8B:5A:BD:83:09:05:64:D9:A0:D8:25:9B:04:BC:02
Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1
Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
Certificate serial: 0881
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
Manifest number: 1A0F
Signing time: Sat 28 Feb 2026 17:17:52 +0000
Manifest this update: Sat 28 Feb 2026 17:17:51 +0000
Manifest next update: Sat 07 Mar 2026 17:17:51 +0000
Files and hashes: 1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: pyj+Q/4kjab6eP5VJGYxFzfg7BRtmj+KFBUx98mElW4=)
2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: AyCP93l17PVAvsWp7E1MG1o/2qev6JZiBs4CqJLmMrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl
rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177 (0x881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
Validity
Not Before: Feb 28 17:17:51 2026 GMT
Not After : Mar 7 17:17:51 2026 GMT
Subject: CN=69a32340-2393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:83:b4:72:c8:9f:c9:db:17:47:f2:23:7b:
e0:88:12:24:0d:74:3d:ea:68:7b:fa:d2:1f:32:a8:
30:4f:d8:93:3d:fd:b7:c3:d1:9f:ed:a2:2c:31:f1:
e0:ba:02:fa:f1:8d:5e:de:52:c3:ba:f3:f1:ff:86:
a4:d5:af:c6:96:d8:c4:6a:66:88:54:d3:02:1e:55:
ad:d8:b6:f6:d6:7f:ce:37:f7:d8:80:12:cc:b9:1c:
81:4d:bb:a9:95:6a:bc:76:41:ef:1b:8a:af:14:1a:
19:4e:8a:4e:b5:6f:99:32:b3:4c:87:e2:6f:8d:17:
4c:84:ef:17:f1:12:f0:db:a4:ac:23:46:3a:f5:69:
e2:ba:ef:c0:c9:68:9e:3e:98:71:99:4d:6c:4d:3d:
28:36:dd:c4:df:97:fd:04:cd:5b:6b:83:06:c8:f0:
73:c6:38:c5:8f:05:74:7e:07:4f:5e:4e:01:94:e6:
d3:83:ce:68:b4:1b:0d:14:79:b8:29:e2:58:d6:75:
a6:aa:d5:69:ec:03:85:ba:7f:b5:e9:f2:e2:5e:a0:
9a:8e:b6:04:43:d9:94:37:fe:42:66:77:4d:44:00:
b8:d4:d4:d3:e9:a6:93:1a:ad:32:3d:49:ea:68:2d:
46:cd:83:69:71:1b:5d:8b:48:60:73:38:06:81:8f:
ff:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E7:C4:8B:2D:8B:5A:BD:83:09:05:64:D9:A0:D8:25:9B:04:BC:02
X509v3 Authority Key Identifier:
keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ff:3b:c4:f5:5b:5d:9e:c8:e1:d9:51:06:d1:7b:d3:e2:db:
62:6a:4f:24:0b:db:da:cc:b7:9f:6c:2d:fd:6e:23:e6:d2:02:
6f:8c:93:2e:22:06:9a:a1:46:ef:0d:80:f5:30:cd:62:f4:6a:
5a:ee:23:64:a0:be:63:7d:02:86:a7:81:6f:ab:7c:59:96:b3:
4f:ec:ca:eb:be:cd:2c:4c:4a:3a:ce:72:5f:f4:17:e6:8f:4c:
43:f9:77:30:7a:16:1a:84:6c:d9:35:29:03:37:30:1a:ae:a2:
62:14:35:26:b2:3b:f1:5c:69:54:89:ce:3d:65:58:3d:d5:24:
37:f1:bd:f6:7d:72:92:94:7b:61:27:c8:a7:79:ab:a9:30:e8:
89:3a:1a:12:70:16:c5:f8:d0:6f:37:03:bf:e8:ee:b9:ad:f2:
4e:85:8a:5c:0e:a5:db:01:aa:e0:da:98:1f:31:ef:9c:03:fc:
88:63:1a:51:04:d1:ba:fc:e2:92:24:01:ee:5d:5a:6f:88:23:
d8:77:89:57:06:c7:91:dd:10:5f:7b:e5:cb:95:e0:1c:a7:19:
71:20:11:ec:fe:e9:5c:dc:00:b8:58:e7:46:c0:e0:14:dc:f3:
4e:d1:a6:3b:7c:44:03:a3:2e:ab:66:0d:30:14:1e:09:b4:fb:
dd:cb:61:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjAxMTkxMTAvBgNVBAUTKDlBNDQwMzA0MDNENTBCNzFCOTk4NDYzQjNBRTU2ODQz
QjkyNTk1RTEwHhcNMjYwMjI4MTcxNzUxWhcNMjYwMzA3MTcxNzUxWjAYMRYwFAYD
VQQDDA02OWEzMjM0MC0yMzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsoWDtHLIn8nbF0fyI3vgiBIkDXQ96mh7+tIfMqgwT9iTPf23w9Gf7aIsMfHg
ugL68Y1e3lLDuvPx/4ak1a/GltjEamaIVNMCHlWt2Lb21n/ON/fYgBLMuRyBTbup
lWq8dkHvG4qvFBoZTopOtW+ZMrNMh+JvjRdMhO8X8RLw26SsI0Y69Wniuu/AyWie
PphxmU1sTT0oNt3E35f9BM1ba4MGyPBzxjjFjwV0fgdPXk4BlObTg85otBsNFHm4
KeJY1nWmqtVp7AOFun+16fLiXqCajrYEQ9mUN/5CZndNRAC41NTT6aaTGq0yPUnq
aC1GzYNpcRtdi0hgczgGgY//twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7nxIst
i1q9gwkFZNmg2CWbBLwCMB8GA1UdIwQYMBaAFJpEAwQD1QtxuZhGOzrlaEO5JZXh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDExOS9FRUI3MUJFMjEz
RjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMzRzVtRVk3T3VWb1E3a2xs
ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21rUURCQVBWQzNHNW1FWTdPdVZvUTdrbGxlRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDExOS9FRUI3MUJFMjEzRjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMz
RzVtRVk3T3VWb1E3a2xsZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKf87xPVbXZ7I4dlRBtF70+LbYmpPJAvb2sy3n2wt/W4j5tICb4yTLiIGmqFG
7w2A9TDNYvRqWu4jZKC+Y30ChqeBb6t8WZazT+zK677NLExKOs5yX/QX5o9MQ/l3
MHoWGoRs2TUpAzcwGq6iYhQ1JrI78VxpVInOPWVYPdUkN/G99n1ykpR7YSfIp3mr
qTDoiToaEnAWxfjQbzcDv+juua3yToWKXA6l2wGq4NqYHzHvnAP8iGMaUQTRuvzi
kiQB7l1ab4gj2HeJVwbHkd0QX3vly5XgHKcZcSAR7P7pXNwAuFjnRsDgFNzzTtGm
O3xEA6Muq2YNMBQeCbT73cth4A==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:44 2026 by rpki-client