$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft File: SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft (raw, json) Hash identifier: ak2Nla/ACt4wzvuMCI3IOzYwXfvafMK4P4zHPsWxb10= Subject key identifier: 14:4A:0A:2B:04:D1:85:17:61:9A:EE:9C:89:06:3C:E3:6B:9F:62:64 Authority key identifier: 48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29 Certificate issuer: /CN=A91DA389/serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29 Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft Manifest number: 0284 Signing time: Sat 05 Sep 2026 01:44:51 +0000 Manifest this update: Sat 05 Sep 2026 01:44:51 +0000 Manifest next update: Sat 12 Sep 2026 01:44:51 +0000 Files and hashes: 1: SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl (hash: 5UNBU6IOZHkGIIMrYjJRZkJch5EnRZTm8bsMvVJYKk4=) 2: 4F467C58D3AA11ED91B0C532C4F9AE02.roa (hash: vF4Alq/C7G9DCvRKcjCjRoH9i6udd05/xt+Mvpi8FbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 01:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA389, serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29 Validity Not Before: Sep 5 01:44:51 2026 GMT Not After : Sep 12 01:44:51 2026 GMT Subject: CN=6a9b7413-248e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:a9:c2:fe:59:b2:f9:7d:f1:56:31:6d:a1: 17:9f:3a:9e:c6:cc:d7:0c:ae:4e:12:26:08:99:a4: 89:6e:a9:fd:b9:61:75:b6:89:d1:51:40:26:8b:47: ea:e7:62:33:2e:01:bf:6b:d6:54:21:d7:ca:cb:82: 83:e9:3b:49:36:04:f8:b8:46:ad:d9:d1:15:8a:60: e3:d9:1a:0f:27:27:4a:ee:99:4c:ce:24:c5:5c:f1: b5:66:d2:69:13:c6:2c:82:a1:c9:89:48:2b:8f:3b: 67:e9:53:48:eb:b6:42:7d:f8:91:9e:3d:e4:d3:bc: 79:7e:83:27:05:14:07:3b:98:83:c8:23:94:f3:47: 9d:c2:30:46:60:d4:48:a3:70:0e:72:4b:9a:7f:70: a7:af:49:4d:16:56:a7:57:ae:bc:f1:34:86:43:08: 62:cb:22:56:7e:d0:03:af:7e:38:7b:c8:e5:a5:ab: 90:a0:56:37:8b:2d:2f:d2:d7:a3:2b:4c:a6:40:62: 85:ce:d5:6f:e3:e3:30:7e:a4:c9:62:0d:1f:7c:c6: 2d:ba:3f:df:10:11:a3:6a:17:a5:64:26:4c:74:0a: af:64:bc:bc:3a:90:19:cb:c8:3b:fc:ab:c1:c8:83: 51:b8:28:e1:b5:52:ae:b7:42:5f:14:ea:02:15:c6: ca:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4A:0A:2B:04:D1:85:17:61:9A:EE:9C:89:06:3C:E3:6B:9F:62:64 X509v3 Authority Key Identifier: keyid:48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:cf:4f:e6:77:d0:fd:80:78:a8:f0:52:78:65:d6:48:51:6e: 6f:ab:32:41:eb:8f:f2:d1:08:7c:77:55:c0:fd:23:3c:79:ef: 22:cf:6b:0c:42:69:37:6f:39:d0:69:b6:63:ce:5d:4d:18:0f: a8:cd:5e:da:7a:06:43:25:75:0b:77:ad:90:5d:1c:e6:a6:53: 52:ca:bf:fc:83:4f:32:83:b4:a2:a0:01:23:2b:a4:ad:bc:1d: a0:ae:68:fe:0a:16:ed:d3:11:1f:95:dd:e1:ff:a4:f2:bc:3a: 66:97:57:3a:ea:e1:a4:30:af:fe:78:14:4b:c6:0e:47:ae:d7: fe:42:ff:ce:89:b7:f9:6b:41:5c:02:f3:36:a9:45:13:c9:40: d6:cb:b2:f1:52:1a:1d:f9:be:ab:f7:d4:be:c6:3b:cb:8c:5c: 7d:1e:f4:b2:1b:0b:b5:5d:6d:c0:0f:5f:fc:c7:17:63:9c:ef: 1e:e0:ae:4a:73:39:81:ed:3b:12:fd:b9:c1:e4:56:ac:b5:bd: bb:c3:78:f8:2f:8a:1c:48:e2:a2:85:47:d9:58:81:06:e1:5d: cd:ac:63:b6:c1:e4:b0:d8:20:08:fa:1d:bd:7f:44:bc:9e:34: 26:df:c5:25:7b:0c:1d:05:7e:dd:8d:a9:0a:a5:77:ff:ea:b5: 4e:3c:a1:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEzODkxMTAvBgNVBAUTKDQ4RjUwRTE2QjgzMDVBQTJDNzU2RDIxQzhGMEZENTA5 MzM4QTVDMjkwHhcNMjYwOTA1MDE0NDUxWhcNMjYwOTEyMDE0NDUxWjAYMRYwFAYD VQQDEw02YTliNzQxMy0yNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+epwv5Zsvl98VYxbaEXnzqexszXDK5OEiYImaSJbqn9uWF1tonRUUAmi0fq 52IzLgG/a9ZUIdfKy4KD6TtJNgT4uEat2dEVimDj2RoPJydK7plMziTFXPG1ZtJp E8YsgqHJiUgrjztn6VNI67ZCffiRnj3k07x5foMnBRQHO5iDyCOU80edwjBGYNRI o3AOckuaf3Cnr0lNFlanV6688TSGQwhiyyJWftADr344e8jlpauQoFY3iy0v0tej K0ymQGKFztVv4+MwfqTJYg0ffMYtuj/fEBGjahelZCZMdAqvZLy8OpAZy8g7/KvB yINRuCjhtVKut0JfFOoCFcbKhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRKCisE 0YUXYZrunIkGPONrn2JkMB8GA1UdIwQYMBaAFEj1Dha4MFqix1bSHI8P1Qkzilwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTM4OS9CMjE3MEI3NEQz QTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dxTEhWdEljandfVkNUT0tY Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQVU9Gcmd3V3FMSFZ0SWNqd19WQ1RPS1hDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTM4OS9CMjE3MEI3NEQzQTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dx TEhWdEljandfVkNUT0tYQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHM9P5nfQ/YB4qPBSeGXWSFFub6syQeuP8tEIfHdVwP0jPHnvIs9rDEJpN285 0Gm2Y85dTRgPqM1e2noGQyV1C3etkF0c5qZTUsq//INPMoO0oqABIyukrbwdoK5o /goW7dMRH5Xd4f+k8rw6ZpdXOurhpDCv/ngUS8YOR67X/kL/zom3+WtBXALzNqlF E8lA1suy8VIaHfm+q/fUvsY7y4xcfR70shsLtV1twA9f/McXY5zvHuCuSnM5ge07 Ev25weRWrLW9u8N4+C+KHEjiooVH2ViBBuFdzaxjtsHksNggCPodvX9EvJ40Jt/F JXsMHQV+3Y2pCqV3/+q1TjyhQg== -----END CERTIFICATE-----Generated at Sat Sep 5 05:19:08 2026 by rpki-client