
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
File: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft (raw, json)
Hash identifier: 2pRIs68X/luk6nyk3Ot3lQPeCo50KVPMEkFG+ugFI9U=
Subject key identifier: 4C:EB:9E:3E:CD:E6:54:11:9F:22:9F:F8:5D:3A:6A:6C:93:F4:83:ED
Authority key identifier: 41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD
Certificate issuer: /CN=A91E91BC/serialNumber=414FB6178869130F826E9E30C0B794084D9760DD
Certificate serial: 0411
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
Manifest number: 0409
Signing time: Thu 05 Nov 2026 00:40:51 +0000
Manifest this update: Thu 05 Nov 2026 00:40:50 +0000
Manifest next update: Thu 12 Nov 2026 00:40:50 +0000
Files and hashes: 1: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl (hash: meuRo863aSqPScQOU207g5F1zUTTEtfjmiVPyeG4NMQ=)
2: 7BCC4B32E85C11EE9593933FC4F9AE02.roa (hash: js/NeNf/P0ilTfK3hm4VU61TP33gO5AhYeKCE1H/UPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl
rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 23:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1041 (0x411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E91BC, serialNumber=414FB6178869130F826E9E30C0B794084D9760DD
Validity
Not Before: Nov 5 00:40:50 2026 GMT
Not After : Nov 12 00:40:50 2026 GMT
Subject: CN=6aebd093-d721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:11:2e:8b:72:41:92:8a:4f:1d:d4:f2:ad:ce:
f3:b5:a3:56:30:dc:55:6a:9c:ee:75:75:82:47:39:
7d:ef:3f:96:0c:f8:4e:33:28:28:c7:56:06:b6:d6:
ef:82:85:69:ff:f4:33:6e:e6:fa:72:8c:d2:36:60:
13:c4:a0:c4:5c:a7:4c:e9:b8:84:ad:d5:0e:26:d0:
8e:76:55:2b:79:5f:77:9b:8e:2a:0a:e1:7e:72:22:
7d:f5:b6:4f:2d:1e:83:72:e5:11:0e:18:b1:3c:16:
d8:29:fc:d3:4b:27:83:a7:fe:fc:ae:a5:2c:60:7e:
1f:47:87:20:10:8f:f0:49:3d:55:fa:b3:7b:77:a2:
29:a2:2b:5b:db:92:e8:d6:c5:84:d4:ab:b0:26:bc:
bb:e6:86:9f:be:b1:bf:99:cc:58:a9:3b:f2:00:0a:
a1:6c:d1:f5:6c:d0:85:15:3a:5c:89:13:b9:6c:f2:
0d:d8:a9:bf:66:bc:da:70:3b:61:0e:3e:ba:6d:2e:
df:f9:52:f0:75:83:86:73:8b:37:c3:14:68:63:45:
a2:88:00:28:f2:10:5a:d0:03:db:86:5d:b1:06:a0:
99:77:7a:03:57:67:da:8c:ed:11:28:e5:1f:98:16:
de:c9:00:63:28:89:5a:70:e0:7c:17:57:1a:df:7c:
54:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EB:9E:3E:CD:E6:54:11:9F:22:9F:F8:5D:3A:6A:6C:93:F4:83:ED
X509v3 Authority Key Identifier:
keyid:41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9d:65:4b:1e:20:5f:e2:a1:6e:e1:21:ed:78:51:00:36:59:
97:eb:5f:6c:08:9d:00:c1:3c:00:f3:a2:69:47:11:84:cf:46:
15:24:ad:c1:7c:9f:90:e5:ca:4c:c4:af:73:94:a4:45:63:e7:
f5:6a:82:1e:c6:5f:6a:d6:5a:cc:9c:b1:22:cd:df:c9:7a:14:
9f:20:4c:ec:5a:d0:ec:7b:18:84:a5:9e:04:70:c3:dd:4e:dd:
d3:93:80:be:3e:ee:ae:fb:e2:64:a0:0c:1d:2f:54:09:00:df:
62:83:ba:91:5a:7f:32:18:c6:1d:25:3a:aa:34:44:2b:a4:e2:
f0:ea:5b:43:54:8a:04:63:b0:ca:e1:a1:88:9a:80:6f:70:14:
83:f1:ca:e3:04:f8:17:bc:2a:52:13:15:cb:c2:f4:19:bc:60:
04:63:86:71:05:22:c2:b6:de:72:11:4f:7a:a3:6e:94:9e:33:
18:f8:7f:4d:b4:be:bf:73:e1:ad:e1:34:5f:3c:c9:75:e0:01:
a7:6b:26:cf:63:27:c2:c4:c5:cd:65:bc:0a:42:b2:a8:5f:ad:
39:ff:9f:17:f7:8e:e5:19:54:7c:ac:17:53:dd:72:82:ee:52:
f2:9e:8e:5a:84:05:e2:c3:24:41:a5:b9:7f:36:d9:6d:78:a1:
51:07:28:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:22:50 2026 by rpki-client