
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json)
Hash identifier: HvSccwCAkazYSSzDnvUGCW+oEJemlsPB5camB4CDJLM=
Subject key identifier: 80:6B:FB:EB:10:2B:70:9A:9F:28:87:24:26:BD:38:F0:4E:62:60:73
Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4
Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4
Certificate serial: 028E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
Manifest number: 0278
Signing time: Sun 25 Oct 2026 02:23:26 +0000
Manifest this update: Sun 25 Oct 2026 02:23:25 +0000
Manifest next update: Sun 01 Nov 2026 02:23:25 +0000
Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: MN344PR+OHN019q+FbQVEnNULyJK7CAr0Z0mTBNUlGY=)
2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: ebN5g/mLZ+iv553qbwuex8M4P6A1JM4zrqLcn9GGHns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl
rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 02:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4
Validity
Not Before: Oct 25 02:23:25 2026 GMT
Not After : Nov 1 02:23:25 2026 GMT
Subject: CN=6add681e-879e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:d9:2b:99:79:ef:87:e7:9e:fc:99:50:ce:
f1:87:fa:44:b5:d2:41:51:81:d8:02:51:80:3f:8a:
0a:6c:d0:97:ba:32:92:31:e9:d3:45:47:c4:f2:11:
4b:40:21:15:0c:7b:e7:2c:83:18:60:4c:0d:a8:73:
15:c6:1e:0a:a8:01:4a:4e:b0:34:a7:1c:81:34:58:
c5:a4:45:90:e9:93:b1:a7:a7:3a:e8:ca:1a:96:25:
60:b4:ae:81:b1:34:6d:31:a6:5f:38:ae:d3:ce:a6:
83:69:75:ef:5b:13:84:eb:4d:6b:3f:6c:79:f9:aa:
10:f3:0b:48:31:fd:bc:5c:3d:51:e1:f1:c6:48:34:
9b:1e:1f:c3:0d:9b:be:99:9c:f2:bf:9f:37:92:08:
56:e1:ba:91:a3:e2:64:88:3c:49:da:05:fb:0b:8d:
c1:31:ac:26:8e:60:c2:d1:a9:17:c0:4e:a1:a5:a5:
1b:34:a8:0c:0b:15:e5:09:9f:50:a6:db:02:23:73:
01:a0:f0:8b:4c:76:3d:a3:4e:2d:10:90:3c:5e:09:
30:b4:10:b5:92:af:f4:63:ee:ad:3e:c2:a0:57:6d:
51:4e:a9:cf:a6:44:b6:6e:20:67:f2:03:20:d6:ab:
66:19:c3:8c:12:49:08:c9:f2:a8:ce:fd:df:5c:9d:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6B:FB:EB:10:2B:70:9A:9F:28:87:24:26:BD:38:F0:4E:62:60:73
X509v3 Authority Key Identifier:
keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:bd:4c:ae:57:dc:59:2d:b5:5a:7a:53:5e:e9:a8:c8:69:69:
11:49:0d:f0:fe:73:e1:3a:43:3f:b9:67:45:c9:47:0c:c5:33:
05:5a:7c:75:d0:21:62:18:54:6b:d5:a3:16:97:cb:d6:2e:5b:
ac:a8:d2:27:38:8b:6f:89:05:3d:cd:f9:8f:c3:bb:d0:ea:81:
7a:47:12:71:3f:50:22:10:e6:b9:4f:ac:fd:a5:69:cc:09:8e:
e8:8b:f0:30:97:c3:ab:22:52:a7:e4:e9:41:4a:db:76:a1:c3:
76:0e:69:d7:96:da:90:78:c3:44:3f:3c:1c:11:3b:d0:b4:c6:
98:af:cf:65:cc:94:1f:52:7d:9d:0b:df:e0:48:14:a1:d1:5b:
9e:73:7e:26:6d:41:35:da:fe:0f:c0:dc:df:2f:82:f4:7e:92:
43:9c:a3:50:40:d8:db:c2:4e:d0:18:ad:8c:39:b7:c1:e5:5d:
ec:9d:b7:59:c9:a6:9a:13:ee:23:df:99:19:9a:62:ae:20:2f:
1d:f4:9f:a7:81:5c:cf:e7:2c:80:1e:d7:fb:41:c0:30:d9:7d:
e7:b3:5f:9e:e6:a1:a4:85:88:6b:36:23:5c:8e:6a:b7:23:47:
25:f5:4d:da:aa:62:04:75:53:7f:86:d2:ef:ac:64:f8:35:33:
42:51:b1:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC
REUzNDJCRjQwHhcNMjYxMDI1MDIyMzI1WhcNMjYxMTAxMDIyMzI1WjAYMRYwFAYD
VQQDEw02YWRkNjgxZS04NzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjN/ZK5l574fnnvyZUM7xh/pEtdJBUYHYAlGAP4oKbNCXujKSMenTRUfE8hFL
QCEVDHvnLIMYYEwNqHMVxh4KqAFKTrA0pxyBNFjFpEWQ6ZOxp6c66MoaliVgtK6B
sTRtMaZfOK7TzqaDaXXvWxOE601rP2x5+aoQ8wtIMf28XD1R4fHGSDSbHh/DDZu+
mZzyv583kghW4bqRo+JkiDxJ2gX7C43BMawmjmDC0akXwE6hpaUbNKgMCxXlCZ9Q
ptsCI3MBoPCLTHY9o04tEJA8XgkwtBC1kq/0Y+6tPsKgV21RTqnPpkS2biBn8gMg
1qtmGcOMEkkIyfKozv3fXJ3lkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBr++sQ
K3CanyiHJCa9OPBOYmBzMB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB
NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ
UFBVTkt1YjZNT0c5NDBLX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ71MrlfcWS21WnpTXumoyGlpEUkN8P5z4TpDP7lnRclHDMUzBVp8ddAhYhhU
a9WjFpfL1i5brKjSJziLb4kFPc35j8O70OqBekcScT9QIhDmuU+s/aVpzAmO6Ivw
MJfDqyJSp+TpQUrbdqHDdg5p15bakHjDRD88HBE70LTGmK/PZcyUH1J9nQvf4EgU
odFbnnN+Jm1BNdr+D8Dc3y+C9H6SQ5yjUEDY28JO0BitjDm3weVd7J23WcmmmhPu
I9+ZGZpiriAvHfSfp4Fcz+csgB7X+0HAMNl957NfnuahpIWIazYjXI5qtyNHJfVN
2qpiBHVTf4bS76xk+DUzQlGxJA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 06:16:25 2026 by rpki-client