
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json)
Hash identifier: TYlcqZRXzdu8qQfAvDzLCPjeGkDlIpQjPYkDtgN0cBc=
Subject key identifier: 04:61:D4:51:71:6A:0C:86:0F:36:B8:55:A6:59:87:A5:47:BC:D0:D7
Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Certificate serial: 04D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
Manifest number: 04C0
Signing time: Thu 24 Sep 2026 23:43:57 +0000
Manifest this update: Thu 24 Sep 2026 23:43:56 +0000
Manifest next update: Thu 01 Oct 2026 23:43:56 +0000
Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: rRs2dGDY4opYAk9eFlGgT6zzINK/tSZNzS+6ZF0hq+M=)
2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: rGGje0FS4AvgaHfWy61oWrz45FxmRS+DVJtlEpZvXeQ=)
3: f4SYpTUG7k64OFgvsGjRgBE0T4I.asa (hash: 6NcW9tAhZLoiK4PUm1MtD9kFuxbJy/+YVywHuEPtw7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1232 (0x4d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Validity
Not Before: Sep 24 23:43:56 2026 GMT
Not After : Oct 1 23:43:56 2026 GMT
Subject: CN=6ab5b5bc-baaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:d3:24:c2:55:62:fc:a3:ef:b4:c1:4b:2f:
25:11:53:93:9c:2b:81:95:01:5c:80:57:bf:74:6f:
c0:f0:dd:e9:96:19:ba:5b:e1:26:93:71:99:6a:0b:
f1:21:16:4d:75:d6:ff:aa:82:ce:4d:7c:34:7b:14:
28:37:f4:22:39:a5:ec:4a:b2:c7:b8:6d:1c:54:f0:
ad:a2:eb:5b:96:46:5d:30:b0:1c:78:14:0c:bc:8c:
ef:76:2f:c4:cd:56:3b:3f:db:6a:21:01:74:7e:59:
df:df:55:b4:da:19:78:bd:79:37:ef:5e:dd:1d:b7:
d4:ac:e0:1d:f1:64:13:47:3d:26:00:d0:76:1d:b9:
50:b1:bc:b2:f4:ee:93:6b:43:b2:61:a2:d0:58:00:
62:54:21:c5:27:a2:40:35:61:c1:6d:e5:71:33:1e:
36:e5:20:fa:21:9b:46:1b:9e:b8:36:08:7b:8c:40:
07:bf:19:d6:2b:50:8c:75:af:39:74:2c:cb:ca:fc:
4b:45:ee:14:ae:15:a5:b8:9d:43:cd:98:52:8c:d9:
b0:49:4d:9c:a0:98:6c:2e:45:90:e7:7a:6e:fb:e3:
12:73:11:c9:7f:57:43:fc:c4:44:63:53:51:22:9e:
e0:9e:6b:7e:a7:9d:49:60:d3:b0:5a:af:b2:a1:d4:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:61:D4:51:71:6A:0C:86:0F:36:B8:55:A6:59:87:A5:47:BC:D0:D7
X509v3 Authority Key Identifier:
keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:3a:8e:44:ac:d8:8c:75:ec:fc:00:33:ff:ba:11:a6:ef:92:
0a:33:6d:76:12:24:9a:28:55:e8:85:a2:4f:f3:b6:53:a2:9a:
f6:dd:99:56:c7:8f:08:6f:50:9c:3a:c9:47:c5:2a:4e:ed:08:
9a:74:67:c8:72:8f:12:38:69:ec:56:cc:86:6f:f4:c9:18:c8:
74:a2:11:4e:74:21:89:3b:08:10:c8:c7:74:c8:43:8d:bb:34:
b3:e6:c2:01:74:28:eb:d2:0a:16:e2:02:22:37:d9:9f:c8:91:
c5:22:f4:fa:68:a7:4e:19:76:6d:c6:91:94:d1:13:3b:55:3d:
88:3d:84:97:d3:13:8d:c1:bb:74:cf:a4:82:eb:5e:1d:74:bd:
5c:eb:66:66:c3:f8:3f:18:3f:4c:54:ae:f8:47:92:db:86:c2:
5e:db:2f:e6:2c:2a:9e:38:82:49:81:70:a8:90:5e:88:8e:a5:
ba:09:77:05:a0:99:13:34:40:c6:08:33:e1:ce:66:5a:da:8e:
b9:1c:ec:17:1a:b1:2e:cc:ee:16:be:8a:e7:0a:c0:6c:93:73:
fa:52:a6:8b:da:a9:fc:00:bf:c4:55:33:e9:38:d2:f8:de:88:
e1:a8:70:be:d3:fe:89:19:40:d1:46:2a:92:e8:0a:6c:ac:f6:
29:50:56:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:25:55 2026 by rpki-client