
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json)
Hash identifier: QTs9PpJL/9zsKUIvgOtpRoOEdRx1QJwOHidUTolsguU=
Subject key identifier: 4B:4C:5F:3D:53:B6:6E:E9:1B:40:32:49:46:2C:38:F3:29:2E:24:7F
Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Certificate serial: 04D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
Manifest number: 04C7
Signing time: Fri 09 Oct 2026 00:02:23 +0000
Manifest this update: Fri 09 Oct 2026 00:02:23 +0000
Manifest next update: Fri 16 Oct 2026 00:02:23 +0000
Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: hdanNtojKoiDsVuDgB7R8OWlZEeb8ziRR7yiIELfpQA=)
2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: rGGje0FS4AvgaHfWy61oWrz45FxmRS+DVJtlEpZvXeQ=)
3: f4SYpTUG7k64OFgvsGjRgBE0T4I.asa (hash: 6NcW9tAhZLoiK4PUm1MtD9kFuxbJy/+YVywHuEPtw7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 00:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Validity
Not Before: Oct 9 00:02:23 2026 GMT
Not After : Oct 16 00:02:23 2026 GMT
Subject: CN=6ac82f0f-b9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:02:cd:e9:60:b0:61:79:ac:9f:47:ec:d7:
e8:b2:09:cf:b5:3e:49:a9:80:15:19:45:d5:64:75:
42:fd:06:ba:46:77:4d:b5:ea:9c:ed:7e:66:1e:8e:
5f:5c:b5:eb:67:c0:c0:29:3b:25:ea:e4:89:2b:f0:
4e:35:ca:65:f5:f1:9f:1c:d4:59:fc:05:cc:e2:c4:
81:47:5b:62:36:f9:70:29:81:e3:45:2d:68:c8:b4:
9a:2e:3d:77:fd:c7:1a:f5:17:5a:22:00:d2:f9:55:
e6:bd:d2:30:50:02:04:16:60:14:93:98:fa:f3:40:
27:bd:81:43:2d:9a:1c:6f:93:87:2e:50:2d:52:02:
f8:9d:46:b2:92:cf:88:54:17:85:e9:2d:bb:75:30:
0b:a8:8a:08:d6:f5:d3:87:7b:81:b8:06:72:b3:2a:
34:ae:4f:60:84:52:04:0c:5c:83:93:58:91:a4:f9:
d0:4d:c6:2c:0c:ae:e7:38:93:25:7c:29:84:29:51:
85:26:57:6d:e8:17:8f:d0:f0:d2:86:76:c7:6f:e2:
ef:b5:15:e8:ef:07:e4:ae:bc:ae:cd:fa:54:ce:f8:
4b:64:ba:17:56:5c:1d:3a:fc:ba:72:b7:26:02:3c:
4a:31:5f:d6:fb:81:af:6d:c2:e2:46:49:76:29:b3:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4C:5F:3D:53:B6:6E:E9:1B:40:32:49:46:2C:38:F3:29:2E:24:7F
X509v3 Authority Key Identifier:
keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:11:9c:f2:fb:c8:f5:0c:b1:4e:6b:fb:55:c3:05:e2:48:d5:
e7:29:a3:54:ec:01:06:67:51:45:bb:c2:fc:1b:fe:d9:07:7c:
7a:19:e4:ff:79:bd:97:09:00:b5:74:f5:57:40:c7:7d:b2:3c:
47:75:e2:57:68:98:7f:22:d5:92:43:37:2b:cf:2d:9a:59:3f:
ee:06:d8:7c:7d:b7:18:0a:9a:2e:66:7f:8b:0f:f2:f6:14:a1:
c9:19:89:82:45:0e:04:68:4d:02:fe:2a:fb:66:3e:e5:30:d8:
37:90:8f:34:d8:39:f6:62:81:ee:03:00:c3:cc:34:97:22:2b:
06:15:c6:ba:5d:8d:d2:9d:28:91:41:1c:e9:e8:1b:fa:f2:d6:
ed:9a:06:ee:63:62:84:a9:69:a0:51:d2:a1:91:91:07:e0:74:
bd:fe:cc:3a:b8:3f:e1:33:01:58:18:42:ef:ee:8a:9d:4e:59:
ab:1c:99:f8:54:9b:f1:6b:35:f8:90:21:d6:c9:f2:67:7a:cf:
7b:5c:99:3e:09:3d:bb:9d:f2:6d:43:86:eb:e2:1d:3b:69:da:
bb:6a:df:42:73:9a:39:36:87:58:cb:90:e0:73:ba:5a:62:e6:
8a:c8:c7:8d:7e:7c:de:ec:fa:70:4c:3e:4b:12:9b:89:13:81:
94:0b:08:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:15:31 2026 by rpki-client