$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft File: mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json) Hash identifier: Bpt/VgzrM/i9Qg1p1Wtg37rjwEJ8OxWa2hqAm4yvOqE= Subject key identifier: 1E:B3:55:A7:40:4C:1D:8E:32:63:8D:2C:5D:B4:8A:55:1D:62:0F:03 Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Certificate serial: 0818 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft Manifest number: 193D Signing time: Fri 08 Aug 2025 17:27:32 +0000 Manifest this update: Fri 08 Aug 2025 17:27:31 +0000 Manifest next update: Fri 15 Aug 2025 17:27:31 +0000 Files and hashes: 1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: kUoECH0N9njbWxanFGtFyLavMLM5nixhbFL8mlDn1a4=) 2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: AyCP93l17PVAvsWp7E1MG1o/2qev6JZiBs4CqJLmMrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2072 (0x818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Validity Not Before: Aug 8 17:27:31 2025 GMT Not After : Aug 15 17:27:31 2025 GMT Subject: CN=68963383-24d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:82:49:c7:7e:cf:84:16:f3:ef:7a:fb:cb:33: ea:61:4e:db:18:d5:b1:16:a7:99:4f:09:41:dd:ca: 06:76:13:c1:a5:36:17:2d:a4:32:ba:0e:fa:af:0b: 6a:8b:68:e4:d4:5c:ca:4a:0a:4e:d6:1f:3e:ae:1d: 59:16:47:b9:ca:da:ae:4e:00:3e:22:06:59:f1:7a: 91:12:fc:ea:5d:24:ff:f0:a8:86:9a:86:27:f2:df: 44:6b:5e:bc:a7:0e:6a:00:29:68:ac:d1:21:d2:83: 06:16:43:14:3b:b8:5d:b0:9a:fe:d6:72:a8:2d:1e: e7:8f:a0:3c:16:1f:8c:9f:be:89:72:af:d3:0d:56: a3:e9:62:7b:86:0c:29:6c:6d:17:6c:87:1b:15:b5: 4b:db:86:11:d7:58:23:b5:e6:9d:bc:4a:66:57:35: 1b:32:23:06:a9:35:e8:0f:3e:7e:f6:d4:18:5f:ab: 41:fa:6e:df:e8:58:e2:29:00:71:a7:d0:4b:46:1f: f6:7b:57:42:a4:96:f0:b8:e5:64:de:da:c9:0f:bd: 95:b6:24:3e:70:b4:a5:ff:95:32:a6:5e:4b:55:ee: 0c:24:d7:11:83:82:38:3a:07:fb:01:87:7f:fd:f2: c9:98:8c:93:81:90:85:91:0c:6c:0e:09:b2:a4:00: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B3:55:A7:40:4C:1D:8E:32:63:8D:2C:5D:B4:8A:55:1D:62:0F:03 X509v3 Authority Key Identifier: keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:7c:41:a5:df:b7:53:ff:d6:63:96:f5:9f:aa:15:bc:19:f2: ff:8d:93:7a:1c:8a:cd:57:76:72:34:aa:ce:fc:37:88:06:76: 11:a5:36:32:c4:88:b6:ba:ea:54:c5:76:2f:25:d3:a5:6f:e3: 94:12:28:f0:e8:93:28:99:9b:2d:fa:30:e5:8e:92:f8:27:35: 82:d2:d5:e8:93:36:42:13:f2:8c:fc:f3:a8:ca:ec:f4:4a:36: 97:60:ab:e6:36:26:0d:23:95:9b:7b:8f:96:14:37:52:56:8c: 0f:cf:6c:40:45:77:23:a8:c7:e8:1b:c9:fd:05:74:8c:51:18: 86:77:a0:1b:2b:ae:55:21:5a:0f:bf:ad:6a:24:6e:5a:e6:d9: 05:d4:bf:d4:90:60:5b:75:ad:0c:2d:3d:08:29:b1:27:fc:41: f4:17:13:4e:bd:37:ec:b5:22:80:73:f5:46:e7:cd:17:fc:5f: ad:cd:f1:e3:33:c6:97:eb:02:8b:a6:ed:1a:c3:87:23:8a:9f: 7e:9e:b4:c1:ec:ea:56:92:6d:02:51:a1:56:e4:2f:d9:78:0a: 66:11:2a:eb:75:de:c8:4a:37:0a:f8:0b:b4:c9:62:93:e5:bc: cd:d9:9c:2f:a9:43:21:3e:74:07:e9:84:3e:c1:74:29:09:ac: 67:e2:b2:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxMTkxMTAvBgNVBAUTKDlBNDQwMzA0MDNENTBCNzFCOTk4NDYzQjNBRTU2ODQz QjkyNTk1RTEwHhcNMjUwODA4MTcyNzMxWhcNMjUwODE1MTcyNzMxWjAYMRYwFAYD VQQDEw02ODk2MzM4My0yNGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IJJx37PhBbz73r7yzPqYU7bGNWxFqeZTwlB3coGdhPBpTYXLaQyug76rwtq i2jk1FzKSgpO1h8+rh1ZFke5ytquTgA+IgZZ8XqREvzqXST/8KiGmoYn8t9Ea168 pw5qAClorNEh0oMGFkMUO7hdsJr+1nKoLR7nj6A8Fh+Mn76Jcq/TDVaj6WJ7hgwp bG0XbIcbFbVL24YR11gjteadvEpmVzUbMiMGqTXoDz5+9tQYX6tB+m7f6FjiKQBx p9BLRh/2e1dCpJbwuOVk3trJD72VtiQ+cLSl/5Uypl5LVe4MJNcRg4I4Ogf7AYd/ /fLJmIyTgZCFkQxsDgmypACcRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6zVadA TB2OMmONLF20ilUdYg8DMB8GA1UdIwQYMBaAFJpEAwQD1QtxuZhGOzrlaEO5JZXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDExOS9FRUI3MUJFMjEz RjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMzRzVtRVk3T3VWb1E3a2xs ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rUURCQVBWQzNHNW1FWTdPdVZvUTdrbGxlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDExOS9FRUI3MUJFMjEzRjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMz RzVtRVk3T3VWb1E3a2xsZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQfEGl37dT/9ZjlvWfqhW8GfL/jZN6HIrNV3ZyNKrO/DeIBnYRpTYy xIi2uupUxXYvJdOlb+OUEijw6JMomZst+jDljpL4JzWC0tXokzZCE/KM/POoyuz0 SjaXYKvmNiYNI5Wbe4+WFDdSVowPz2xARXcjqMfoG8n9BXSMURiGd6AbK65VIVoP v61qJG5a5tkF1L/UkGBbda0MLT0IKbEn/EH0FxNOvTfstSKAc/VG580X/F+tzfHj M8aX6wKLpu0aw4cjip9+nrTB7OpWkm0CUaFW5C/ZeApmESrrdd7ISjcK+Au0yWKT 5bzN2ZwvqUMhPnQH6YQ+wXQpCaxn4rLs -----END CERTIFICATE-----Generated at Sat Aug 9 22:43:56 2025 by rpki-client