
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
File: qaamgasBulFfIZosreoJRbStWZ0.mft (raw, json)
Hash identifier: KmFJPtoPNfiiliF4duZWco2w+PInoi8YrNGJAToYnmA=
Subject key identifier: 8C:0F:1D:F0:54:3B:7C:DA:64:38:A1:3F:DD:72:30:8A:69:81:78:68
Authority key identifier: A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D
Certificate issuer: /CN=A91FF18F/serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
Certificate serial: 0B99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
Manifest number: 0B99
Signing time: Tue 24 Mar 2026 18:52:55 +0000
Manifest this update: Tue 24 Mar 2026 18:52:55 +0000
Manifest next update: Tue 31 Mar 2026 18:52:55 +0000
Files and hashes: 1: qaamgasBulFfIZosreoJRbStWZ0.crl (hash: afyYPpS+tyfmCfN/KmVqVhQnr/b8tU8DTQjJTMfewqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl
rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2969 (0xb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF18F, serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
Validity
Not Before: Mar 24 18:52:55 2026 GMT
Not After : Mar 31 18:52:55 2026 GMT
Subject: CN=69c2dd87-216a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:f2:1e:a2:07:b1:cb:c2:82:5d:58:a0:0d:
f5:b3:c8:e7:4d:3f:1d:f5:9f:1b:a8:4a:94:63:61:
1d:17:1a:02:99:18:b1:95:53:5a:76:be:5f:44:a4:
f9:ac:76:94:6b:48:ff:b5:73:ce:1f:3f:b6:08:c3:
a0:84:72:ee:24:21:9d:5d:a1:47:49:99:a1:b3:c0:
49:60:53:df:77:fb:74:ba:f5:09:9c:cb:c0:42:fe:
5d:e9:36:8c:15:fd:58:bd:ca:d7:54:10:6b:93:65:
9e:bb:1d:02:dd:7c:f7:89:41:bc:86:38:9a:13:08:
eb:74:5e:3f:64:e4:4d:5a:71:2f:96:42:28:b9:2f:
1c:8e:38:5f:83:01:8f:93:da:36:cf:44:c6:db:22:
ea:49:2c:88:99:8f:ec:6f:10:ea:b3:8c:b2:4a:97:
39:6b:43:2b:63:bc:63:58:ca:8f:5b:ea:f8:5c:30:
b1:33:c6:01:02:54:a8:d6:68:aa:f4:a9:1f:68:30:
b9:c5:60:01:ce:1e:0b:24:1d:5b:0f:8a:da:c7:f5:
39:4c:94:91:2e:f6:36:c1:20:6a:66:68:c5:92:ed:
c6:f0:9f:af:5f:e3:91:a6:fb:8c:54:93:6a:cf:c7:
73:3e:c4:f4:64:90:8c:5b:22:2d:54:0a:91:5e:dd:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0F:1D:F0:54:3B:7C:DA:64:38:A1:3F:DD:72:30:8A:69:81:78:68
X509v3 Authority Key Identifier:
keyid:A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:18:88:c9:89:cf:85:b4:d0:c2:a3:9a:55:93:a4:cb:04:d1:
58:81:5f:74:79:e5:2f:dd:73:5a:e9:75:b4:72:e1:c0:a2:35:
38:4e:93:13:8a:62:0d:ea:0d:5a:66:df:34:04:c5:c4:58:aa:
34:68:9a:29:e7:76:b1:76:54:57:e2:57:1c:45:b0:08:b3:8f:
65:15:59:44:35:4f:06:3a:82:36:ab:a0:26:f8:67:96:02:b8:
19:17:2b:72:20:bc:34:13:fe:b7:29:a1:7d:05:44:95:fe:41:
94:97:68:a9:73:9e:e6:3a:f5:79:9a:fc:fd:93:64:18:5b:62:
08:cc:b7:01:e9:20:c2:77:4c:25:be:3f:6c:02:3a:2f:4d:e3:
93:aa:65:a0:cd:a9:df:1b:03:2b:ad:56:64:5b:92:65:78:9b:
07:9c:b1:cb:3d:b2:32:c9:9a:c7:a6:f7:ea:75:42:40:67:a2:
38:e5:b7:84:39:23:99:af:79:3b:30:02:ef:b2:8e:71:fc:0e:
9b:1a:d3:f6:5b:1e:ac:9a:8c:ed:2a:73:e5:b7:13:2f:c1:69:
a9:5a:89:a5:78:3d:c1:75:28:f0:e7:34:cf:c6:3e:66:ae:d8:
e6:03:43:82:a8:c3:3a:e6:b9:e3:8b:c4:1a:25:7d:b6:65:e6:
cb:85:52:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:23 2026 by rpki-client