
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json)
Hash identifier: 9OG5ruZkiU7jc8ToHeIx4ACoa9dW6UpbrSPqvc9T5+Q=
Subject key identifier: 52:5F:CB:00:27:8C:14:11:9A:C6:DD:43:46:40:B3:7E:2A:A2:73:44
Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4
Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
Manifest number: 0212
Signing time: Sun 05 Apr 2026 02:34:17 +0000
Manifest this update: Sun 05 Apr 2026 02:34:16 +0000
Manifest next update: Sun 12 Apr 2026 02:34:16 +0000
Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: lIZTshDYhqJ1WDFJh0vmtlD/7GFJSerljIbPOKz60+8=)
2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: ebN5g/mLZ+iv553qbwuex8M4P6A1JM4zrqLcn9GGHns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl
rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4
Validity
Not Before: Apr 5 02:34:16 2026 GMT
Not After : Apr 12 02:34:16 2026 GMT
Subject: CN=69d1ca29-02ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:47:26:03:c4:4e:d8:07:65:fd:b9:0d:2f:
e9:0c:ba:42:4b:1e:ce:78:69:1a:3f:bd:fa:23:06:
25:56:d0:5d:cc:9f:60:20:38:ee:17:c9:2d:50:23:
07:65:11:2b:c4:30:6f:99:3f:56:e1:a6:a4:0d:e8:
f5:cb:34:c1:92:be:ac:57:5c:38:7f:56:2d:85:15:
57:e5:c9:69:78:a3:aa:50:55:97:4a:75:29:d1:ff:
80:84:d7:82:c1:3d:ba:77:ae:ac:ed:91:35:4b:a4:
44:eb:d4:88:a1:3f:86:b4:0d:4f:4d:8b:7d:e7:de:
55:e1:48:a6:82:9b:20:0b:ae:f6:65:17:53:d3:eb:
88:7e:f4:dc:6d:fe:cc:a0:14:c8:67:f4:d7:e6:66:
21:20:fc:6e:d0:eb:35:83:9a:12:62:86:66:05:d7:
fb:04:48:c7:d8:51:11:8c:6e:38:22:10:d0:02:e8:
d7:c9:62:07:94:71:01:73:03:fb:77:ab:53:2d:fc:
68:08:96:a3:3f:6a:2c:4a:e8:d0:9e:0e:eb:c7:99:
76:b1:c3:cb:46:94:67:26:b9:3f:36:6f:f5:8c:31:
e7:da:28:30:71:a8:e1:72:0c:dd:1d:58:95:89:cc:
45:4e:b4:20:a6:2f:47:b1:13:20:d3:b0:fa:0c:dd:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5F:CB:00:27:8C:14:11:9A:C6:DD:43:46:40:B3:7E:2A:A2:73:44
X509v3 Authority Key Identifier:
keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:30:f5:b2:2f:b2:a1:3c:ac:9f:69:20:e0:10:d5:94:95:e0:
a5:ac:cd:84:04:c6:9a:db:3e:0e:63:ea:99:08:ac:e6:1a:f6:
63:15:c4:af:55:ca:b4:05:bc:3f:76:27:90:f3:72:81:53:d7:
f1:10:3c:1e:d8:fc:c1:0c:7b:7d:cb:54:0f:71:6d:fa:4f:2c:
13:a4:62:60:2d:6a:17:ff:a1:81:99:f2:63:1a:5b:cb:04:02:
2e:71:0b:e6:44:a4:93:e7:77:88:c6:18:0c:8c:62:84:21:7a:
86:29:00:fa:35:89:41:08:d3:2a:20:1e:5b:74:e1:84:ce:38:
17:17:af:21:5a:14:27:d1:13:5a:9e:26:8c:a8:4a:95:fd:cf:
85:94:8c:1c:7a:87:b1:4c:8e:6a:b7:a9:63:15:1b:40:6b:b1:
9c:60:cc:54:d1:21:bc:bd:f7:58:41:c6:f7:17:69:ba:69:73:
2b:90:1b:87:43:26:30:64:33:c8:47:6c:67:32:7d:18:21:02:
9e:0e:0d:04:56:d5:77:1e:03:a2:63:4d:a0:f3:19:16:e0:bd:
78:f2:9f:01:8f:28:57:ac:20:85:d0:b6:03:ed:dd:89:76:c1:
23:32:1d:f0:16:65:35:43:8e:85:7c:3e:7a:62:a4:09:61:54:
9c:95:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:33:05 2026 by rpki-client