
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
File: mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json)
Hash identifier: 6Gg1xz7C8RiRfmExyy8VFmalUETBHGbsu3PaAvmloyw=
Subject key identifier: E9:09:4F:72:56:75:62:94:CD:1F:40:8E:7B:82:A5:9E:A5:8C:CF:85
Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1
Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
Certificate serial: 08F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
Manifest number: 1AE5
Signing time: Sun 20 Sep 2026 17:07:12 +0000
Manifest this update: Sun 20 Sep 2026 17:07:12 +0000
Manifest next update: Sun 27 Sep 2026 17:07:12 +0000
Files and hashes: 1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: tfaXLnu61FYdJBByC0T82QYDRahQGUXYZbkgctzjn6Y=)
2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: pFivcl6/2LaS0iSbDcUyygHwyMDGedaAY+O1WaW+9u8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl
rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2288 (0x8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
Validity
Not Before: Sep 20 17:07:12 2026 GMT
Not After : Sep 27 17:07:12 2026 GMT
Subject: CN=6ab012c0-ca9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:08:94:ee:d7:77:82:48:e1:54:31:29:b6:
fd:90:5a:64:46:da:94:5d:c1:d5:e4:c0:a3:fa:71:
48:91:d6:d6:e1:bd:3c:9b:cc:8d:6c:89:e2:91:91:
bc:8f:f2:2f:4d:c8:30:2e:c6:ce:d5:97:3e:4f:0d:
4c:0c:bc:5f:55:f8:2b:ae:28:62:79:b2:8f:fc:c8:
54:50:57:84:1b:13:e9:9c:e6:ea:db:5b:80:ea:c8:
5c:bf:af:cd:04:cb:df:7c:ef:be:35:15:a5:6d:97:
5a:67:fd:47:0e:7b:73:4d:8a:18:ae:83:ef:8d:eb:
db:d1:f7:6f:d0:c5:2e:c6:db:9a:d0:08:f2:93:47:
ec:ad:dc:95:3c:37:6a:66:2d:38:dd:38:8e:22:be:
18:ea:fc:9b:51:4e:51:45:d8:31:68:ae:5b:d6:1f:
e1:eb:ca:08:41:76:76:a7:31:14:bf:8c:70:81:61:
02:25:ad:e9:e2:0d:11:ca:8b:f8:e9:7d:0d:e7:65:
9d:28:5e:6b:a9:3b:e3:ca:c5:39:da:4f:a6:0d:0b:
22:59:f6:56:45:a8:21:bf:ff:c5:25:8f:fb:2e:dc:
6f:01:57:03:df:00:e7:0c:a9:d6:86:1d:b7:de:a3:
76:d2:1a:c2:e6:af:b1:74:02:81:ea:b6:bf:47:af:
a1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:09:4F:72:56:75:62:94:CD:1F:40:8E:7B:82:A5:9E:A5:8C:CF:85
X509v3 Authority Key Identifier:
keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5e:25:ac:4e:8e:d3:4b:69:48:f6:87:f2:bc:4c:19:da:92:
f7:d2:6d:a6:61:c0:54:df:5b:14:ac:80:49:37:e8:eb:2a:35:
e7:71:61:73:84:03:cc:58:de:7a:89:e0:da:05:2e:3a:d7:5f:
e5:f6:91:69:75:07:70:39:78:02:b8:bd:44:f6:97:70:29:2f:
89:fd:1f:61:b9:e9:03:58:93:70:ec:3c:34:40:fb:12:88:ef:
7a:4a:5b:65:ea:15:6f:c6:6e:45:cf:56:23:fd:aa:b5:5e:11:
de:89:2b:bd:f8:8c:43:4d:5c:b7:fe:95:79:80:92:51:df:2f:
9c:06:e1:d2:b5:bc:80:40:22:02:79:eb:64:e8:02:ca:55:08:
72:1d:8d:3e:4a:b0:5c:00:b1:b5:ba:fd:74:60:33:d7:68:17:
5c:5f:0d:f1:be:a2:f3:7f:69:c4:81:69:98:21:d5:d1:88:60:
5e:e9:76:c4:85:11:81:9b:1e:f2:bb:56:84:2c:54:0c:87:93:
7c:63:32:10:99:c7:1f:98:8d:bd:6e:16:7c:35:fc:31:33:e2:
e7:a1:8b:65:2f:f6:e6:4f:29:8d:0a:68:8b:a3:d1:f9:35:df:
06:46:28:e8:46:e4:28:ae:d7:d1:c1:9c:84:a9:00:b1:a1:3a:
23:b7:94:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:08:05 2026 by rpki-client