
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json)
Hash identifier: xGT6L2x/+FJF/kBd4hJHnGnEfnTntIh2EzZuN73JEkY=
Subject key identifier: 88:A8:1A:97:D5:39:DE:91:13:7A:40:3C:0B:52:21:8E:BF:31:BC:C7
Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Certificate serial: 0499
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
Manifest number: 048A
Signing time: Sat 13 Jun 2026 00:06:14 +0000
Manifest this update: Sat 13 Jun 2026 00:06:14 +0000
Manifest next update: Sat 20 Jun 2026 00:06:14 +0000
Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: xVFrB1F3r06PiFPfAX4LbODDSqJkOWCKjCOGS52eED4=)
2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: rGGje0FS4AvgaHfWy61oWrz45FxmRS+DVJtlEpZvXeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177 (0x499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Validity
Not Before: Jun 13 00:06:14 2026 GMT
Not After : Jun 20 00:06:14 2026 GMT
Subject: CN=6a2c9ef6-53f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:59:8a:27:4a:92:79:20:97:5c:de:1c:f7:
f1:8c:cc:c9:92:2c:c6:68:0a:58:06:42:76:c0:36:
77:46:a3:f1:23:26:90:9a:51:d7:92:5a:04:9a:d8:
b0:1f:46:f3:2e:85:5c:43:76:ce:3e:a2:7f:b3:d7:
f3:94:1c:fd:21:cc:14:d8:df:92:c4:39:bf:78:fa:
9a:d0:40:59:cd:4c:3a:a7:9f:1b:b9:11:c6:80:22:
14:e9:48:24:38:23:81:22:1b:82:e1:df:3c:34:0e:
77:8b:9c:5f:95:5a:52:3b:26:38:bc:c2:6b:d8:4b:
13:f2:7a:e5:73:d0:3c:2a:4b:a2:86:31:32:57:c9:
17:bc:7e:c1:cf:73:7d:c0:3b:55:14:cc:d5:ee:24:
1d:23:17:4a:b7:93:8f:ce:f0:cb:d4:5a:0d:5a:f6:
09:20:e4:32:b7:8a:6f:23:94:67:f6:c0:5c:b1:e2:
f7:0e:21:44:d6:fb:cf:e1:03:fd:86:d9:6b:2e:ef:
66:76:e2:72:6d:3d:e8:fa:fe:3c:af:06:a7:b9:01:
f7:7f:e5:7b:6b:21:89:89:0e:63:0f:0b:62:c9:d4:
e7:d7:50:7b:cf:1e:30:c6:01:b9:67:8d:f2:d3:c9:
07:1d:c6:07:01:85:23:bb:2a:4f:8e:49:d0:e9:cd:
18:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A8:1A:97:D5:39:DE:91:13:7A:40:3C:0B:52:21:8E:BF:31:BC:C7
X509v3 Authority Key Identifier:
keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:70:ea:d4:cb:e6:9c:76:0b:10:f2:a7:6c:a6:36:8e:9c:1b:
68:d7:48:28:04:09:f6:9a:62:15:a0:e2:d6:be:72:a7:5c:01:
b4:1f:9d:2d:d9:f7:a1:29:3f:85:8f:4d:77:64:2a:e3:19:fc:
27:d7:81:f3:42:3a:a9:28:07:34:19:19:fa:8a:16:7e:4c:c5:
12:03:59:c0:fa:be:87:60:0d:65:af:da:52:54:f1:4e:a8:d9:
ed:93:d4:a0:a2:26:74:6f:e2:de:fe:3d:cb:f6:d9:ab:d0:77:
98:2f:01:e4:01:c9:da:2a:f2:02:b7:b6:c8:c5:75:b8:dd:0e:
0d:af:a1:32:60:5f:b7:49:bf:02:09:6d:39:7c:a7:7d:21:97:
77:bd:7e:94:b0:95:0c:f2:4d:6d:c7:74:ea:f0:14:4a:aa:5c:
61:07:f8:5e:52:85:a6:d8:c4:fe:f8:a4:b3:ae:42:04:4b:8f:
24:a9:12:75:2b:6d:d8:26:e7:3f:bb:e5:92:9a:ca:ae:c1:08:
fa:0d:23:f7:b1:3e:7e:5b:06:64:40:44:62:53:0d:30:6f:58:
6c:32:45:02:86:50:27:1f:42:e2:27:1c:0b:04:9c:39:90:e1:
bb:9e:c7:37:44:40:60:41:87:dc:2d:a7:ee:89:d9:f0:50:7a:
82:e3:5d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:13:15 2026 by rpki-client