
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
File: qaamgasBulFfIZosreoJRbStWZ0.mft (raw, json)
Hash identifier: JprIwK5V5d+YkiGBclGixMARjYZW6L2o3De11/xhaiA=
Subject key identifier: 8E:65:14:71:28:B0:C8:E2:C8:87:A9:A0:42:77:1B:BD:0B:A7:C5:34
Authority key identifier: A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D
Certificate issuer: /CN=A91FF18F/serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
Certificate serial: 0BA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
Manifest number: 0BA0
Signing time: Sat 04 Apr 2026 18:52:52 +0000
Manifest this update: Sat 04 Apr 2026 18:52:52 +0000
Manifest next update: Sat 11 Apr 2026 18:52:52 +0000
Files and hashes: 1: qaamgasBulFfIZosreoJRbStWZ0.crl (hash: HhvIkD41YVtgTv9D8qYOnGMnicVi7APW3AEzdw+7bFY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl
rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2976 (0xba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF18F, serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
Validity
Not Before: Apr 4 18:52:52 2026 GMT
Not After : Apr 11 18:52:52 2026 GMT
Subject: CN=69d15e04-ffea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fa:50:18:8c:9b:af:9b:c2:36:f5:67:8f:8b:
8d:ab:c7:67:4e:ef:2f:7b:97:2c:c6:84:ee:42:b0:
e1:f3:37:78:42:6c:f6:6e:2d:b2:a1:e1:f1:95:3e:
63:4f:59:99:60:2a:b9:9f:a4:13:20:30:60:23:b4:
8b:cc:43:a0:60:3c:67:6b:ae:15:3b:f5:91:b5:88:
89:b7:6a:94:56:84:6e:91:fd:c8:59:41:d6:8e:c0:
a5:df:06:a0:08:b5:9c:ee:b8:f3:be:26:3e:f9:18:
a8:56:52:89:9e:10:d7:fd:04:40:d9:03:a3:d0:88:
26:7e:20:f6:5e:fa:09:1d:b0:99:75:e0:f3:4e:11:
e6:18:4a:51:48:f8:8f:18:05:e5:51:ab:bf:aa:3a:
79:06:5d:f8:7a:95:b8:73:59:fd:af:b7:17:f5:1b:
72:a5:c7:a4:79:a9:35:2a:2c:b4:8f:3d:24:b7:79:
c7:cc:ce:7c:da:19:47:29:a1:24:c8:15:48:34:cf:
58:64:78:f0:89:af:fd:05:df:ac:1c:8b:fe:39:a1:
ba:44:fd:f3:8b:db:67:76:e0:ea:7e:b4:12:10:91:
c9:24:bf:0e:5d:c3:a0:70:86:63:5a:c8:8d:75:e2:
0b:68:7b:d3:c7:ba:16:33:bb:e7:25:29:f5:96:93:
22:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:65:14:71:28:B0:C8:E2:C8:87:A9:A0:42:77:1B:BD:0B:A7:C5:34
X509v3 Authority Key Identifier:
keyid:A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:63:15:55:83:1e:9b:8e:13:7e:9c:83:1e:fe:13:73:45:20:
0e:0d:67:b7:03:2e:56:8e:ec:85:e3:ed:4e:de:89:ad:0c:74:
60:d4:22:ff:0a:b1:08:dd:5e:02:8d:bf:0e:20:18:c8:6d:a2:
be:bf:f3:c0:49:5e:19:92:e9:e9:8f:1c:28:83:64:b6:03:20:
b3:1b:f8:29:db:aa:3b:4b:e7:71:d9:83:d5:e4:79:b3:89:13:
ae:85:f8:bd:83:29:c2:2d:35:49:d9:26:74:97:7c:90:eb:f6:
ad:21:cb:fd:37:0c:31:93:52:1b:43:1b:8c:e2:e6:ed:f7:7b:
7f:d8:9b:69:6f:6b:00:d3:5e:c6:f7:c2:a6:8f:57:e5:37:cb:
e6:f3:60:da:d7:6a:3d:1f:4b:de:82:61:8c:ca:42:31:0f:3a:
b3:c3:f7:03:f7:e7:ba:e2:09:43:68:71:89:10:72:9d:49:8d:
cd:92:2b:be:ee:63:10:f8:83:5d:c8:b7:75:bd:0e:58:e4:b9:
69:67:44:b0:68:96:65:ba:b7:2c:7f:dd:75:d3:fe:09:d5:58:
cf:33:56:c7:c9:d9:bc:3b:60:a9:da:01:c7:8e:2b:5e:9b:fb:
e4:d8:cf:b1:dc:22:e2:5a:35:d7:3b:ca:e8:4f:f4:2a:2a:ae:
9b:ed:9d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:46 2026 by rpki-client