
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
File: qaamgasBulFfIZosreoJRbStWZ0.mft (raw, json)
Hash identifier: BfPYap1vpVuBSqb3OuOMtsdKEj5neDpTFuoseqN7HZw=
Subject key identifier: 26:A2:3B:EA:BC:41:A3:2E:6D:EC:1B:A9:C3:FB:63:F7:71:6A:0B:6C
Authority key identifier: A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D
Certificate issuer: /CN=A91FF18F/serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
Certificate serial: 0B8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
Manifest number: 0B8D
Signing time: Sat 28 Feb 2026 19:18:53 +0000
Manifest this update: Sat 28 Feb 2026 19:18:53 +0000
Manifest next update: Sat 07 Mar 2026 19:18:53 +0000
Files and hashes: 1: qaamgasBulFfIZosreoJRbStWZ0.crl (hash: AqLXhxXUx8AVWVZB75IkdFQ6impDjDK589ZkPmYmc/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl
rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2957 (0xb8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF18F, serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
Validity
Not Before: Feb 28 19:18:53 2026 GMT
Not After : Mar 7 19:18:53 2026 GMT
Subject: CN=69a33f9d-f649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:91:15:56:90:e2:c1:b2:21:18:9e:9b:3b:
58:5d:39:8a:e8:46:61:af:68:fb:0b:7e:2f:f0:45:
e9:74:d8:05:6c:91:49:77:c6:4b:ab:94:5f:6b:8f:
02:80:8f:40:4c:61:a3:0e:b7:72:da:a4:ec:ef:4b:
6b:1d:72:67:47:f7:42:58:36:ef:01:35:e5:3b:87:
f8:a4:d3:21:ce:99:a3:3a:0e:20:b7:71:d5:88:5e:
1a:03:84:83:39:74:33:f8:0c:8a:09:47:45:2d:31:
c6:24:19:8a:e5:73:d2:a3:e1:aa:3d:47:ec:a3:93:
99:2d:ea:de:b0:68:d2:a3:89:81:eb:52:8c:46:30:
f6:8e:cb:e9:fd:2a:68:ba:e9:20:06:d3:61:77:31:
80:58:52:ea:e9:3c:2d:a8:64:f6:b6:0b:88:52:50:
1c:c4:61:55:9c:ed:f7:65:0d:e5:80:92:e4:cd:f4:
c0:13:3b:c8:45:58:2e:24:ad:b9:39:98:78:9e:c7:
81:1a:6f:ce:ca:50:ba:d6:33:8b:7f:98:10:6e:ca:
0f:62:90:d2:ed:d2:30:5d:ec:c7:83:30:ff:05:18:
bc:db:0a:3c:87:e4:47:20:05:cc:5c:79:c2:d4:3e:
62:3b:c4:2d:25:47:02:e6:57:df:45:47:89:b8:5a:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A2:3B:EA:BC:41:A3:2E:6D:EC:1B:A9:C3:FB:63:F7:71:6A:0B:6C
X509v3 Authority Key Identifier:
keyid:A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b3:5c:7c:a0:fa:49:d2:79:c8:07:b6:96:a1:09:f3:2a:08:
ca:44:86:60:13:be:c7:a1:a6:c5:0b:c5:84:26:4b:5a:7a:75:
ff:1d:8e:d9:16:12:ab:85:9b:fa:7f:d7:d9:f4:eb:34:00:8f:
7f:3b:8c:ab:84:66:9d:93:73:03:c6:90:50:bf:c7:2c:b4:75:
77:be:d9:46:70:d5:b8:05:6e:96:f7:7e:bd:17:f0:cf:7e:57:
b4:88:24:f1:14:a9:b1:14:bd:ac:25:46:96:57:3b:62:c0:10:
ae:ca:f7:20:dd:9e:b6:ad:45:37:4d:3c:ea:71:c8:86:25:28:
a3:70:e1:e5:89:6d:a3:10:83:45:10:7c:4a:cd:33:b8:48:3b:
1e:29:ee:71:d9:94:b5:fc:11:34:19:1b:58:81:fd:0f:84:ad:
e1:ed:55:48:02:7c:ff:0e:db:79:b5:e3:93:62:16:08:73:da:
6f:d0:06:c3:f7:e6:c6:36:f3:f9:4b:9d:b9:46:20:95:54:15:
5d:67:47:12:b6:e4:d0:99:af:bf:ca:96:46:94:24:65:67:7b:
e2:3a:df:95:f9:ee:25:7f:c7:50:5c:2e:da:0f:34:de:79:33:
32:e3:96:e0:84:24:6a:c8:ac:f8:0b:54:88:28:8a:f6:99:2f:
e6:43:14:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:34 2026 by rpki-client