
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
File: mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json)
Hash identifier: Ejfl38XlCtFG0HixAuCLN7eHBRQDlUbGxmWYVHJiNNA=
Subject key identifier: E4:2C:F5:A2:1F:F1:41:89:C7:9E:6F:11:B5:75:CA:B7:D8:96:6C:9A
Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1
Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
Certificate serial: 08F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
Manifest number: 1AE7
Signing time: Tue 22 Sep 2026 17:04:05 +0000
Manifest this update: Tue 22 Sep 2026 17:04:04 +0000
Manifest next update: Tue 29 Sep 2026 17:04:04 +0000
Files and hashes: 1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: E/B6qhQ8zZuBm1EDaNIQhFliSHe97+Aa4sAcHzc6FSQ=)
2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: pFivcl6/2LaS0iSbDcUyygHwyMDGedaAY+O1WaW+9u8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl
rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
Validity
Not Before: Sep 22 17:04:04 2026 GMT
Not After : Sep 29 17:04:04 2026 GMT
Subject: CN=6ab2b505-eae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8a:ce:ed:63:13:94:75:57:37:a7:f1:37:9f:
58:ed:36:45:0e:76:7d:ef:d2:ad:b4:33:0a:8b:51:
16:5e:91:45:ed:a1:e2:9c:68:30:65:39:69:2f:4e:
24:ed:2e:39:e0:86:aa:33:18:0f:0b:75:17:e1:55:
94:3d:e4:60:79:f2:ea:3a:d1:49:90:36:ba:17:d6:
33:d4:8f:78:0d:0c:ff:41:a1:24:89:1b:1b:e1:1c:
a2:dc:82:98:7d:25:39:91:ea:4b:8e:08:20:02:f8:
d0:00:b1:10:14:47:55:71:7a:a3:12:90:3f:09:be:
63:03:98:dc:a0:71:5a:7a:d9:95:32:36:b5:b8:06:
2d:dd:53:0d:01:f6:fe:a3:86:93:a8:df:1e:db:81:
ec:78:a3:71:38:87:5f:7c:90:0f:78:97:ee:93:ba:
5d:a1:ba:31:6f:79:7b:5e:01:0e:26:05:ab:44:70:
73:ec:61:aa:99:e9:f8:02:fe:91:08:df:0d:21:4a:
b2:04:61:13:82:3e:13:df:cd:70:e5:67:f5:64:36:
cf:8d:80:ec:82:e3:c0:d4:98:73:37:da:53:d7:89:
19:81:78:94:48:bf:27:46:90:d0:e7:1c:c1:57:b6:
de:45:ce:a9:2a:89:6f:62:31:7e:ec:c5:25:9d:a9:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2C:F5:A2:1F:F1:41:89:C7:9E:6F:11:B5:75:CA:B7:D8:96:6C:9A
X509v3 Authority Key Identifier:
keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b7:1a:9e:19:5e:a4:27:bf:a2:1f:be:77:4d:43:37:55:3f:
21:e8:fa:54:30:63:eb:ca:96:09:9c:0e:ac:9b:7b:62:df:00:
aa:c3:f7:84:db:5b:7d:49:50:57:11:ea:86:6b:7a:fe:cf:43:
cc:15:26:3a:f5:37:61:4e:88:de:08:c8:b7:c5:b5:57:cc:4d:
0f:b7:7e:18:64:96:10:8e:36:34:fd:94:a6:dc:e8:62:50:57:
8a:f4:06:cc:6a:47:0e:5b:87:87:da:64:90:45:41:fc:8f:50:
79:f0:8d:0d:e7:0b:88:e0:b4:03:56:c2:9a:8a:3a:52:fc:e4:
a7:0b:12:22:15:f4:ad:f1:08:13:52:30:42:6d:0a:9f:3e:4c:
06:b2:e1:65:39:cd:73:75:ca:23:79:3f:98:11:ce:3e:46:74:
0c:ad:a4:14:88:15:60:50:3c:1d:fa:03:6f:79:fd:87:4d:d8:
f4:af:7f:8a:74:6d:18:49:33:f7:82:a7:05:cf:b4:55:ee:a7:
bf:51:0a:42:93:a5:90:fa:8b:cd:d6:76:15:d6:36:4f:69:42:
8c:08:b8:d6:26:72:55:22:9c:55:99:76:3b:1d:58:99:63:33:
9a:97:f7:d1:f7:31:3d:42:5d:2b:0f:9d:8f:01:92:67:64:82:
ac:ca:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:18:29 2026 by rpki-client