
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json)
Hash identifier: tWlX7O0De5aBDocoi4XJ9cUcaTbZoAMioTJ/WMp9yyM=
Subject key identifier: 63:44:7B:8F:1A:99:B4:2C:38:81:DE:03:5B:CD:D9:98:AA:59:2E:F3
Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Certificate serial: 0489
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
Manifest number: 047A
Signing time: Wed 13 May 2026 00:13:38 +0000
Manifest this update: Wed 13 May 2026 00:13:37 +0000
Manifest next update: Wed 20 May 2026 00:13:37 +0000
Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: zaLQXl8rA2STGrk26Cj9QEYC7c/h9v8KAFU0fYqIINI=)
2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: rGGje0FS4AvgaHfWy61oWrz45FxmRS+DVJtlEpZvXeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1161 (0x489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Validity
Not Before: May 13 00:13:37 2026 GMT
Not After : May 20 00:13:37 2026 GMT
Subject: CN=6a03c231-7233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:b1:e4:74:2b:55:e7:3d:bf:54:e7:70:29:
ae:50:27:34:38:6e:c2:73:34:b8:f7:fb:e9:9c:eb:
fb:6d:cf:86:13:45:db:02:51:b3:d7:67:a6:58:d5:
d0:0e:00:7b:00:db:bc:07:f2:ce:33:ba:17:6a:92:
e7:bd:b0:19:67:d5:f0:39:c1:bb:04:0e:07:7d:11:
d8:7d:d4:9a:2f:8f:ed:aa:88:4f:b7:25:a5:29:c5:
9f:a2:ab:ae:dc:3e:18:1d:fd:3a:dc:9b:6b:4a:05:
5d:9f:81:83:13:92:7c:57:c7:15:13:2b:be:97:46:
a7:45:7d:78:af:42:f9:d4:fc:b3:4e:16:14:1e:65:
5f:8c:f1:c7:9e:5f:20:9a:47:7e:2c:a8:40:36:2b:
1f:fc:97:ba:0f:9a:97:9b:92:b5:47:9a:6f:3f:ae:
39:91:45:6c:b8:a8:f7:94:d6:9f:7b:7f:0e:c6:f9:
fb:ce:c8:64:60:9d:e3:73:54:29:7e:ce:fa:d2:69:
14:45:a7:5d:fa:21:aa:57:ec:72:66:f6:fe:6b:e1:
28:b1:31:eb:75:c0:4b:16:13:f0:fc:d6:3f:06:66:
82:ef:b7:11:78:3a:b4:8e:f3:48:38:ca:7e:e8:76:
5d:9a:e2:1c:b9:db:fc:4a:fc:aa:3a:5e:67:f3:d5:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:44:7B:8F:1A:99:B4:2C:38:81:DE:03:5B:CD:D9:98:AA:59:2E:F3
X509v3 Authority Key Identifier:
keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:1f:0f:2e:09:86:b6:97:fb:7d:e0:26:37:0a:9b:59:84:f8:
23:fb:c0:a5:62:f1:62:45:fe:9d:31:6a:1b:75:61:8f:83:b1:
07:c3:f0:6e:96:cd:f5:a3:69:38:67:bb:1f:52:67:b7:2e:65:
d2:db:26:b3:eb:b8:40:0b:48:23:aa:c3:41:0b:af:4e:ba:93:
f3:5b:67:1c:b4:bc:45:be:82:cb:49:74:8a:64:e5:64:e7:42:
d1:56:df:78:e1:3c:be:d5:b3:99:22:c7:38:e6:90:b0:9e:8b:
ef:ef:5c:c6:96:36:97:a7:1b:95:e3:36:2b:11:e7:47:f5:64:
46:c0:4b:4f:84:85:80:b4:48:9a:f8:a7:86:de:79:7d:4d:fb:
6b:ba:84:38:5a:63:78:26:4f:81:07:51:de:59:48:9b:d2:15:
3a:5d:b7:fd:11:2e:64:68:76:dd:fc:a1:4e:59:d6:af:85:f1:
4d:b0:f5:de:43:7d:9d:cc:ff:b9:6b:9d:58:9c:80:ca:28:2d:
75:fa:3b:e0:98:96:28:ef:cd:b7:cf:fa:48:43:e0:26:35:22:
17:a5:db:03:31:92:e2:15:ec:ce:f1:ba:69:7b:51:b0:14:a4:
55:c4:11:54:bc:bf:a9:c1:fe:ac:33:a0:78:1d:03:69:5c:94:
ea:b6:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:57:41 2026 by rpki-client