
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json)
Hash identifier: GlhZZFSV4Gs4h9s/QlxK5bwUOXhugsi09TexL/ljlgA=
Subject key identifier: B1:3D:32:C9:65:07:C0:3F:F5:07:8A:E8:CD:5B:59:C2:C4:44:B6:08
Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Certificate serial: 04D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
Manifest number: 04C3
Signing time: Thu 01 Oct 2026 00:11:13 +0000
Manifest this update: Thu 01 Oct 2026 00:11:13 +0000
Manifest next update: Thu 08 Oct 2026 00:11:13 +0000
Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: FL6BxanqO8r6PP72oiXl1RdVkS1U5tJoyvillWhaAs4=)
2: f4SYpTUG7k64OFgvsGjRgBE0T4I.asa (hash: 6NcW9tAhZLoiK4PUm1MtD9kFuxbJy/+YVywHuEPtw7Q=)
3: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: rGGje0FS4AvgaHfWy61oWrz45FxmRS+DVJtlEpZvXeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 00:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1235 (0x4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Validity
Not Before: Oct 1 00:11:13 2026 GMT
Not After : Oct 8 00:11:13 2026 GMT
Subject: CN=6abda521-270d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:99:92:86:bf:14:8b:f9:95:f2:6b:fe:c5:
08:b5:63:b7:b0:60:0d:0d:ca:e3:3a:c1:61:46:5f:
68:ad:31:01:4f:ff:07:8c:d5:2f:a5:98:58:ad:63:
06:02:8e:1c:47:50:9f:4c:9c:0b:e8:e0:7f:7b:96:
78:9b:e7:62:08:b2:5b:61:79:34:07:be:2d:6c:e9:
ca:e2:8a:17:08:f2:db:c4:e8:4d:db:bc:39:ae:9f:
66:a1:aa:7f:bc:42:3a:36:b2:02:22:a3:72:a8:03:
fe:66:9c:0f:4b:3d:fc:4b:ed:3d:9b:aa:34:5e:f6:
92:a2:1a:d6:f1:b2:41:55:b6:70:1c:89:7f:ad:58:
ef:cf:67:11:fd:da:49:54:fc:e0:b6:ad:30:e9:f7:
47:58:79:42:b7:17:e4:ea:95:b3:85:ac:32:6a:2d:
6c:f1:67:74:0f:a1:a5:09:39:f4:92:2f:02:fa:83:
71:eb:14:19:45:2f:49:fe:ca:98:3a:e0:97:47:c6:
fc:1b:fd:5d:c9:f6:df:c3:9c:5f:1b:a4:cc:d2:56:
1c:41:92:13:f6:42:5c:6b:67:5a:13:4c:16:aa:54:
4b:75:4f:a8:5c:ee:b7:06:24:5b:4d:f4:9f:30:b4:
21:ca:3d:ab:3c:52:78:1c:e4:72:41:f0:7b:37:e5:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3D:32:C9:65:07:C0:3F:F5:07:8A:E8:CD:5B:59:C2:C4:44:B6:08
X509v3 Authority Key Identifier:
keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:34:11:da:e4:36:56:72:ed:9b:29:66:00:dc:07:b9:5f:78:
0e:2d:55:89:4c:0b:1c:1e:05:4c:e3:35:7b:3a:87:e1:37:89:
02:b6:2c:d9:e1:4c:ea:31:95:55:cb:b1:79:cb:10:51:d8:13:
cd:7f:73:90:6b:4f:11:0d:0b:b0:e9:39:30:49:54:ed:db:4a:
f3:be:b6:c3:5d:eb:d6:70:b7:07:de:c8:ee:2d:7d:1e:06:03:
0a:d3:c5:c1:6e:9a:36:36:74:cf:f7:35:d9:bd:cf:1b:1b:18:
5f:b1:68:71:6d:a7:b5:d4:85:5b:a5:16:89:d9:9d:95:39:6e:
e8:ae:87:4f:a0:8a:15:75:44:26:2d:46:a1:3b:84:a4:85:f2:
4a:3d:95:ab:b8:d8:90:c5:cd:38:93:41:83:1f:9f:65:95:51:
79:a7:2a:e0:bd:12:17:09:d1:63:07:32:ea:ce:69:40:75:ef:
e9:ed:a1:33:e2:a5:af:ed:a7:e6:f9:56:d6:60:cd:5c:85:c7:
32:0c:80:e6:c6:17:2a:c4:0f:35:02:7d:83:e2:a6:68:73:52:
55:77:6d:39:cd:ca:49:c0:a2:2f:be:f7:a9:e2:08:0b:c4:cc:
2e:f0:9a:d1:b9:99:4f:1a:b5:a9:50:84:6a:66:8f:05:aa:6d:
24:92:b1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:47:42 2026 by rpki-client