
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json)
Hash identifier: 65VSu9am7O3/vCFk3Q59JDCROvECYMLqbwFrtOwLezw=
Subject key identifier: 03:F1:9C:81:6D:97:77:79:CA:75:68:1E:FB:43:96:11:CE:91:7E:BD
Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4
Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
Manifest number: 0225
Signing time: Wed 13 May 2026 02:55:04 +0000
Manifest this update: Wed 13 May 2026 02:55:03 +0000
Manifest next update: Wed 20 May 2026 02:55:03 +0000
Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: SAmHDMYtl4iuO3D6jAU5Q1Nw++fy9B4EDvhtnL8QSrg=)
2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: ebN5g/mLZ+iv553qbwuex8M4P6A1JM4zrqLcn9GGHns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl
rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4
Validity
Not Before: May 13 02:55:03 2026 GMT
Not After : May 20 02:55:03 2026 GMT
Subject: CN=6a03e808-c930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:6a:6a:b0:57:60:26:b8:55:cd:49:02:02:
30:38:e5:fd:31:3b:24:72:17:a1:7f:f2:18:8f:ce:
d3:c0:78:01:68:cb:68:66:d0:b0:a9:46:8d:b0:1e:
f1:7a:2a:d4:8a:3f:9d:21:88:06:11:98:21:33:37:
2b:45:2e:46:ee:77:d3:2d:06:4c:52:75:e0:10:a9:
9a:38:f5:73:24:fc:95:ec:57:e8:3e:6b:46:f3:10:
0c:9b:82:86:7b:a5:b7:85:cb:e6:71:03:4e:10:9f:
63:08:79:35:da:24:f4:c1:a1:9a:94:16:ab:3d:4d:
68:10:ba:d9:fc:73:5c:94:31:fb:df:2e:86:57:4a:
fb:03:37:97:0a:d9:6d:3e:20:d3:bc:45:9d:86:65:
3a:53:af:10:5f:87:e7:0b:f1:10:52:b9:59:68:ba:
20:66:98:44:d7:bc:15:9e:30:f5:ac:97:5a:8d:1d:
2e:f7:eb:09:2f:7a:d5:8c:76:58:82:31:76:b4:84:
2e:d2:ba:2b:79:6f:be:71:37:6a:56:52:c0:ba:62:
e3:44:dc:84:d3:23:bf:71:8e:36:cc:fc:31:74:c8:
62:c6:f0:df:8f:71:37:23:a7:ef:0e:85:10:37:1b:
e0:74:51:cd:e0:a5:77:22:dd:48:56:33:7b:50:b8:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F1:9C:81:6D:97:77:79:CA:75:68:1E:FB:43:96:11:CE:91:7E:BD
X509v3 Authority Key Identifier:
keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:a1:21:c3:d5:83:29:f2:f9:f7:bf:5a:dd:5d:ff:e8:60:27:
fb:3d:67:97:4e:5b:ac:3c:e4:80:e5:f4:7f:ed:0a:56:2e:d8:
b2:de:ce:6e:ad:6e:96:40:a9:57:49:10:c9:41:8f:61:66:0c:
a8:58:88:8f:fa:de:66:b9:a5:bd:96:dc:a2:33:42:65:ba:39:
81:b5:05:ca:ef:06:d1:36:79:4c:ca:6b:1b:cd:d3:0c:f5:4d:
b9:8c:27:00:fe:84:f0:b4:6d:ec:0b:b8:f1:ba:44:5f:0a:3d:
dd:e2:e3:54:f5:98:c6:37:eb:c3:10:f9:d7:d3:14:f7:0a:b6:
26:61:df:df:35:4a:b9:22:0a:5c:39:72:a7:51:fc:67:a9:e8:
81:21:7e:2c:28:c8:78:ba:25:df:b3:11:e3:a3:9f:e4:58:9d:
ba:33:ca:41:b7:e0:4a:dd:79:9e:62:f7:96:67:98:a8:b5:ff:
87:8a:48:73:bc:f5:34:66:4e:39:d8:7e:06:dd:c3:06:35:79:
9a:12:4d:d9:f1:2e:21:99:aa:2b:6f:a9:f2:c7:ea:d6:c0:e3:
47:3b:ff:25:2e:e6:3c:f1:48:ce:19:ff:d0:99:23:34:3c:75:
b8:f7:6b:e6:fd:95:c1:b8:27:c1:31:26:34:11:55:bc:45:27:
44:c7:6d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:22 2026 by rpki-client