
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
File: SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft (raw, json)
Hash identifier: au3/EHJM5w9H6vG7D2S1Lls/Xa0MZ7aMOpYlx0ZEs94=
Subject key identifier: 8A:32:FE:65:0E:FF:7E:76:2A:B4:6A:43:71:A0:75:6F:81:85:69:13
Authority key identifier: 48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29
Certificate issuer: /CN=A91DA389/serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29
Certificate serial: 0259
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
Manifest number: 0252
Signing time: Mon 01 Jun 2026 03:04:47 +0000
Manifest this update: Mon 01 Jun 2026 03:04:47 +0000
Manifest next update: Mon 08 Jun 2026 03:04:47 +0000
Files and hashes: 1: SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl (hash: 3hsXvDNyicO95iKas/g1tHMQQuIsT+fAwzdjhQBTOCE=)
2: 4F467C58D3AA11ED91B0C532C4F9AE02.roa (hash: h5AorI3QkOoBAwObfVPrh+bfy5EutI9s6EKcaVcQGYk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl
rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 03:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA389, serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29
Validity
Not Before: Jun 1 03:04:47 2026 GMT
Not After : Jun 8 03:04:47 2026 GMT
Subject: CN=6a1cf6cf-b74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:8a:08:3b:de:d4:02:10:9d:74:7f:fd:ec:
a9:e3:1b:76:eb:fe:ed:56:dd:aa:6e:56:93:5f:95:
9a:ed:94:d6:82:a1:01:96:ad:b6:53:74:cb:61:29:
d3:3d:c0:67:a9:6c:69:f9:56:87:1e:a4:d0:b4:8f:
d8:46:c1:23:9d:8e:42:7d:8b:d2:69:95:74:81:e1:
24:be:36:c5:89:5f:c9:94:64:a8:74:6f:8a:fa:1e:
ba:a8:34:fe:59:6f:a7:18:ea:93:35:29:7a:f7:4e:
01:b9:58:cf:36:d5:8b:d6:c3:b7:dd:c6:7e:17:2b:
88:04:02:f7:4c:74:71:82:85:ba:12:17:10:ef:7d:
4b:71:d3:8a:34:fc:20:12:b9:75:ab:d3:9c:9d:29:
a1:00:cb:e7:69:c5:78:ad:d4:f3:65:30:a3:4d:b7:
5a:b3:e1:0c:e3:1d:6c:9e:51:59:1f:19:78:e6:64:
a0:92:41:9a:48:20:a9:13:2b:73:bd:3b:66:fb:32:
4f:ca:95:55:df:3f:af:6d:4b:c2:bc:d2:1e:0d:dd:
38:d7:6e:82:64:7b:3d:86:a4:80:bd:10:0f:8b:c7:
56:5b:5a:8b:7b:c6:f3:65:b8:b0:97:cb:e3:92:6f:
39:f8:aa:71:00:8a:93:62:6a:f2:59:25:2f:80:8f:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:32:FE:65:0E:FF:7E:76:2A:B4:6A:43:71:A0:75:6F:81:85:69:13
X509v3 Authority Key Identifier:
keyid:48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:45:ab:e2:19:ec:1c:52:93:da:05:64:6b:09:a6:4b:64:f1:
2a:0a:8e:60:fd:48:66:8f:7f:81:e2:5f:f2:f1:9b:88:96:70:
8a:78:5a:9e:2d:65:87:ce:2e:e2:90:48:73:e3:77:e9:12:b7:
25:de:dd:2c:3f:14:c9:e9:fa:e1:39:9c:dc:cb:b1:b1:14:e0:
80:e2:de:da:09:b5:12:a1:33:1f:f9:ef:4c:5b:30:88:92:da:
21:ab:d1:42:19:9b:7c:92:94:54:34:5a:ab:c6:16:52:57:78:
21:b6:8f:c0:75:14:b1:24:02:56:4d:55:34:24:5e:9a:41:af:
59:ac:ec:b3:8e:b0:e3:c6:e8:34:3a:6c:fb:ee:53:df:01:a1:
af:f1:34:3b:6f:da:35:91:11:67:1d:21:29:61:09:ee:56:b8:
c4:4e:24:c5:e1:29:d3:0b:6f:6b:45:35:97:b5:6a:e7:2f:69:
ae:9f:f2:6a:06:77:b6:ab:8f:f5:81:d0:cf:37:93:62:99:32:
a0:3f:1f:b5:9c:e3:52:86:f1:3b:80:00:7a:59:eb:7d:7c:8a:
e6:79:af:65:eb:f8:fa:9c:34:ae:62:fd:ac:06:3f:cb:f1:20:
d3:81:f2:aa:de:a8:a8:25:92:0b:31:22:25:a5:99:38:b5:3a:
a8:c0:29:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REEzODkxMTAvBgNVBAUTKDQ4RjUwRTE2QjgzMDVBQTJDNzU2RDIxQzhGMEZENTA5
MzM4QTVDMjkwHhcNMjYwNjAxMDMwNDQ3WhcNMjYwNjA4MDMwNDQ3WjAYMRYwFAYD
VQQDEw02YTFjZjZjZi1iNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvkmKCDve1AIQnXR//eyp4xt26/7tVt2qblaTX5Wa7ZTWgqEBlq22U3TLYSnT
PcBnqWxp+VaHHqTQtI/YRsEjnY5CfYvSaZV0geEkvjbFiV/JlGSodG+K+h66qDT+
WW+nGOqTNSl6904BuVjPNtWL1sO33cZ+FyuIBAL3THRxgoW6EhcQ731LcdOKNPwg
Erl1q9OcnSmhAMvnacV4rdTzZTCjTbdas+EM4x1snlFZHxl45mSgkkGaSCCpEytz
vTtm+zJPypVV3z+vbUvCvNIeDd04126CZHs9hqSAvRAPi8dWW1qLe8bzZbiwl8vj
km85+KpxAIqTYmryWSUvgI/L0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIoy/mUO
/352KrRqQ3GgdW+BhWkTMB8GA1UdIwQYMBaAFEj1Dha4MFqix1bSHI8P1Qkzilwp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTM4OS9CMjE3MEI3NEQz
QTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dxTEhWdEljandfVkNUT0tY
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NQVU9Gcmd3V3FMSFZ0SWNqd19WQ1RPS1hDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTM4OS9CMjE3MEI3NEQzQTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dx
TEhWdEljandfVkNUT0tYQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR0Wr4hnsHFKT2gVkawmmS2TxKgqOYP1IZo9/geJf8vGbiJZwinhani1lh84u
4pBIc+N36RK3Jd7dLD8Uyen64Tmc3MuxsRTggOLe2gm1EqEzH/nvTFswiJLaIavR
QhmbfJKUVDRaq8YWUld4IbaPwHUUsSQCVk1VNCRemkGvWazss46w48boNDps++5T
3wGhr/E0O2/aNZERZx0hKWEJ7la4xE4kxeEp0wtva0U1l7Vq5y9prp/yagZ3tquP
9YHQzzeTYpkyoD8ftZzjUobxO4AAelnrfXyK5nmvZev4+pw0rmL9rAY/y/Eg04Hy
qt6oqCWSCzEiJaWZOLU6qMAp8g==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:01:45 2026 by rpki-client