$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft File: mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json) Hash identifier: XPYN1at9pTiqy2MHGyRVNxtrWle1LG1FMCCQEBwUzUc= Subject key identifier: D4:32:8A:4A:52:FC:19:CA:9B:E9:20:A9:FC:56:56:7C:E5:D4:E7:42 Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Certificate serial: 083C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft Manifest number: 1985 Signing time: Sat 18 Oct 2025 17:47:27 +0000 Manifest this update: Sat 18 Oct 2025 17:47:26 +0000 Manifest next update: Sat 25 Oct 2025 17:47:26 +0000 Files and hashes: 1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: mWs8Tfu3Mwna46jxq+RiifqClYfoVb9B7PMr9cD78+A=) 2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: AyCP93l17PVAvsWp7E1MG1o/2qev6JZiBs4CqJLmMrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Validity Not Before: Oct 18 17:47:26 2025 GMT Not After : Oct 25 17:47:26 2025 GMT Subject: CN=68f3d2ae-9e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c3:5f:62:5b:ca:1d:9a:2e:12:4e:fa:0e:85: bb:17:8d:88:94:e4:dc:e0:28:c5:89:31:ee:5d:9a: a1:45:c0:04:a1:8f:cd:8f:bf:26:8f:07:0e:ff:e3: 43:04:e5:62:ee:41:43:ff:f2:ee:99:26:7e:fa:df: 4a:2d:cf:cb:90:c2:3e:89:32:15:53:55:ec:f2:87: ed:d0:5c:d4:bd:29:a3:43:da:a0:70:1e:22:26:d1: df:9e:57:df:2c:62:00:df:06:36:d7:d9:57:60:ff: c8:f7:20:e4:6c:c4:7c:f6:be:1c:a3:2a:e3:f9:64: e2:2f:5a:26:a4:21:64:ba:27:32:b4:8f:69:ab:1a: 8b:8c:7c:38:39:69:15:b5:29:a1:43:2a:93:55:43: 83:74:80:ca:c3:f2:64:ef:ca:7c:45:54:27:bf:45: 72:62:dd:f7:c7:39:12:f2:31:4f:63:93:65:af:c6: e9:be:8f:e4:17:cc:91:7c:b0:07:2b:ca:41:09:ef: b5:ac:41:1b:42:0b:33:54:18:93:99:fb:76:34:e2: cd:d9:6b:87:2e:1c:2f:3b:44:47:11:82:77:71:19: c8:2d:21:ee:8e:25:4b:d9:7f:11:0e:9e:85:3a:b3: 18:c7:f7:eb:c1:76:41:24:66:46:40:99:cb:2e:49: 1f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:32:8A:4A:52:FC:19:CA:9B:E9:20:A9:FC:56:56:7C:E5:D4:E7:42 X509v3 Authority Key Identifier: keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:96:db:3a:0a:66:51:95:f8:40:25:ee:f0:86:8d:e0:85:23: 79:cd:d6:5f:a3:cc:10:00:c1:39:3d:51:b7:68:ed:e0:da:f0: ff:5a:e0:50:78:34:42:9e:b7:98:4f:d9:27:c5:bd:98:14:91: 82:38:5b:4e:9d:2c:25:35:3e:4d:0a:36:13:86:7b:5a:e1:2d: 13:4c:e3:36:ae:20:4c:88:ed:fd:8c:fc:1c:d6:e9:be:ab:75: 42:e8:7a:5a:9f:d5:f2:27:48:0b:e8:68:06:15:4a:0a:b1:87: 66:79:c0:3f:3a:95:5e:a3:be:70:d7:f4:78:d2:33:ea:88:92: bb:44:84:1f:4b:ff:be:c9:34:6c:a6:0a:80:cd:09:f9:f2:f6: 8a:28:de:39:50:be:2c:38:62:9b:5c:da:10:c7:97:fd:be:61: 50:ea:3f:c2:53:a4:e2:0b:ba:a8:83:87:79:4a:7a:48:96:76: 5f:8d:f8:d5:10:4f:b0:05:d0:5a:ea:59:2c:bd:e5:6e:fc:de: 3e:d1:a6:93:00:c6:1e:03:ca:77:63:a6:5f:cf:94:23:8d:a3: 05:20:a1:22:65:b9:48:9e:7e:a6:4c:49:c4:5e:04:a7:78:63: 8b:33:6f:f1:05:3d:b8:23:2d:76:4d:b1:e7:15:5e:da:47:82: ba:85:80:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxMTkxMTAvBgNVBAUTKDlBNDQwMzA0MDNENTBCNzFCOTk4NDYzQjNBRTU2ODQz QjkyNTk1RTEwHhcNMjUxMDE4MTc0NzI2WhcNMjUxMDI1MTc0NzI2WjAYMRYwFAYD VQQDEw02OGYzZDJhZS05ZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9sNfYlvKHZouEk76DoW7F42IlOTc4CjFiTHuXZqhRcAEoY/Nj78mjwcO/+ND BOVi7kFD//LumSZ++t9KLc/LkMI+iTIVU1Xs8oft0FzUvSmjQ9qgcB4iJtHfnlff LGIA3wY219lXYP/I9yDkbMR89r4coyrj+WTiL1ompCFkuicytI9pqxqLjHw4OWkV tSmhQyqTVUODdIDKw/Jk78p8RVQnv0VyYt33xzkS8jFPY5Nlr8bpvo/kF8yRfLAH K8pBCe+1rEEbQgszVBiTmft2NOLN2WuHLhwvO0RHEYJ3cRnILSHujiVL2X8RDp6F OrMYx/frwXZBJGZGQJnLLkkfPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQyikpS /BnKm+kgqfxWVnzl1OdCMB8GA1UdIwQYMBaAFJpEAwQD1QtxuZhGOzrlaEO5JZXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDExOS9FRUI3MUJFMjEz RjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMzRzVtRVk3T3VWb1E3a2xs ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rUURCQVBWQzNHNW1FWTdPdVZvUTdrbGxlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDExOS9FRUI3MUJFMjEzRjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMz RzVtRVk3T3VWb1E3a2xsZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUlts6CmZRlfhAJe7who3ghSN5zdZfo8wQAME5PVG3aO3g2vD/WuBQ eDRCnreYT9knxb2YFJGCOFtOnSwlNT5NCjYThnta4S0TTOM2riBMiO39jPwc1um+ q3VC6Hpan9XyJ0gL6GgGFUoKsYdmecA/OpVeo75w1/R40jPqiJK7RIQfS/++yTRs pgqAzQn58vaKKN45UL4sOGKbXNoQx5f9vmFQ6j/CU6TiC7qog4d5SnpIlnZfjfjV EE+wBdBa6lksveVu/N4+0aaTAMYeA8p3Y6Zfz5QjjaMFIKEiZblInn6mTEnEXgSn eGOLM2/xBT24Iy12TbHnFV7aR4K6hYCb -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:59 2025 by rpki-client