
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
File: QELW5jee2AQkizYN7Zhe9_VlIBE.mft (raw, json)
Hash identifier: Mg9AChDQxEfrqgRT94oGdjpDcjZ48psLP9SrnrH/VbQ=
Subject key identifier: 9B:D0:C3:5F:DB:DC:5A:26:75:DF:E3:7E:99:29:72:1B:E9:48:C9:14
Authority key identifier: 40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11
Certificate issuer: /CN=A9148465/serialNumber=4042D6E6379ED804248B360DED985EF7F5652011
Certificate serial: 02EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
Manifest number: 02E8
Signing time: Wed 13 May 2026 01:26:33 +0000
Manifest this update: Wed 13 May 2026 01:26:32 +0000
Manifest next update: Wed 20 May 2026 01:26:32 +0000
Files and hashes: 1: QELW5jee2AQkizYN7Zhe9_VlIBE.crl (hash: UCPD3ilGWQoMaGClAfrznsJzJX+igcZZcse8UYONeXM=)
2: 7777513828C011EDBEC6D287C4F9AE02.roa (hash: KjdHFdT4hMQndSJL6UoMqkq2ZW2qsfB7WspT9fMf+Io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl
rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750 (0x2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148465, serialNumber=4042D6E6379ED804248B360DED985EF7F5652011
Validity
Not Before: May 13 01:26:32 2026 GMT
Not After : May 20 01:26:32 2026 GMT
Subject: CN=6a03d349-c623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:74:20:12:6e:af:a4:01:be:0b:61:cf:02:
43:76:cd:07:97:f7:d4:a7:88:df:d8:6b:68:bc:9e:
d2:cc:b7:b8:ac:d6:34:bb:dc:2a:b9:e5:a1:8a:04:
65:17:f2:7b:e7:9a:ba:84:c8:cd:48:3f:d6:84:4b:
0b:4f:1c:62:62:59:4b:93:e3:38:0d:07:2b:69:6c:
d2:40:d4:a4:3e:d1:d5:4c:a7:ac:60:80:64:6a:2e:
eb:4b:0a:06:69:b6:e3:9d:f8:3f:b6:30:8b:39:16:
b1:65:48:25:dd:2f:0a:4e:d7:4b:23:33:44:93:18:
b7:56:8b:25:1a:ea:35:0d:ed:4b:97:1b:9c:7b:37:
95:9a:fb:09:11:d2:ef:19:32:f3:b7:d8:56:8d:74:
48:69:29:42:cc:85:4f:b6:e4:c1:d8:ce:e8:02:7b:
9a:14:82:a4:9f:f8:10:00:72:f5:9d:6c:bc:8c:d3:
9c:cc:87:65:c0:01:68:78:89:2a:55:bc:5f:5d:24:
62:67:b1:8d:c6:4c:cd:56:7e:1a:1c:cc:52:08:2f:
be:38:c2:5d:fa:a2:8d:f1:6f:ad:bc:c1:cc:e6:81:
d0:1e:01:41:df:54:93:c6:95:73:2a:0d:81:fc:f6:
14:e9:07:92:db:99:56:94:5a:4b:69:bb:da:96:b7:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D0:C3:5F:DB:DC:5A:26:75:DF:E3:7E:99:29:72:1B:E9:48:C9:14
X509v3 Authority Key Identifier:
keyid:40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:99:4e:db:8c:a6:fc:72:87:fb:d2:7a:2d:ef:f4:27:8e:a0:
7d:07:85:fd:8c:a9:11:e1:f4:99:6d:d6:46:f8:2c:2d:54:1d:
35:02:39:a8:c3:9f:34:fb:66:ac:f3:aa:cc:93:b5:9f:9a:d5:
9c:24:ec:c8:84:87:2b:bd:11:92:6a:28:62:34:c7:4a:d8:6e:
59:e3:ab:bf:1d:89:f4:10:02:7d:3e:18:3b:04:27:70:85:b8:
b3:a9:3d:52:0f:54:47:ed:f3:57:96:a3:3a:82:fe:5f:1d:ef:
15:06:dd:3f:0e:b2:e1:13:19:c1:e2:8a:dc:19:d0:30:e0:9f:
59:fb:a5:93:83:52:df:15:1a:ab:88:f0:3b:24:ef:03:e6:16:
9a:c5:93:2a:66:e0:8f:12:c4:15:98:60:5a:f9:49:a4:cc:38:
59:ba:bc:8b:11:87:ad:03:46:f4:49:06:22:58:b2:10:b8:ab:
bc:84:78:74:e0:b2:e7:1f:c8:4d:31:71:a3:2d:a5:47:d4:3d:
f4:ed:f2:38:0b:18:b0:a0:41:16:b6:97:ad:5c:1d:8a:ee:1c:
b4:5c:39:c2:d1:07:36:11:60:25:06:ab:b5:3b:91:a4:92:27:
50:2e:51:f4:d9:62:08:67:a2:bf:bc:43:05:ff:04:da:e7:20:
16:8c:96:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:14 2026 by rpki-client