$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft File: SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft (raw, json) Hash identifier: oh2RSm4Slk6LXuGiawuLJUnaog9RZ1Lstj6xh2n3XBc= Subject key identifier: 71:FB:E2:A7:C1:6F:3F:2D:C2:EC:C0:44:DF:34:49:68:CA:B4:27:34 Authority key identifier: 48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29 Certificate issuer: /CN=A91DA389/serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft Manifest number: 028D Signing time: Wed 23 Sep 2026 01:40:23 +0000 Manifest this update: Wed 23 Sep 2026 01:40:22 +0000 Manifest next update: Wed 30 Sep 2026 01:40:22 +0000 Files and hashes: 1: SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl (hash: r46y5n5O/7dfYJR6nu3lfg4GodAQznFsArne7mEsSWo=) 2: 4F467C58D3AA11ED91B0C532C4F9AE02.roa (hash: vF4Alq/C7G9DCvRKcjCjRoH9i6udd05/xt+Mvpi8FbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA389, serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29 Validity Not Before: Sep 23 01:40:22 2026 GMT Not After : Sep 30 01:40:22 2026 GMT Subject: CN=6ab32e07-c25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:05:db:0e:43:17:e0:b7:e4:7c:a6:27:67:c1: 85:d0:36:e1:d9:20:1e:39:ea:e8:f8:80:3d:44:39: 4d:81:30:b5:ee:7c:d5:a6:b1:8c:fe:05:27:3b:d2: 3b:25:87:c6:cd:4d:b3:30:97:05:d0:f8:6e:48:f6: f5:b2:e9:e9:ca:17:55:64:dc:74:ca:28:7d:02:92: 45:bc:62:d6:a2:ec:cc:de:4c:f9:74:3a:e9:b1:19: 78:f1:56:22:58:5d:d1:69:c9:b5:e8:23:d9:f9:9e: fe:e3:49:ae:4c:4d:be:c0:65:66:af:57:b7:1b:a1: 00:77:94:7f:f1:ef:5e:bf:27:06:f7:a6:27:ff:14: c0:46:dc:f0:fa:0c:4c:ba:f8:59:c3:7b:f1:b0:c8: a1:1a:38:29:e3:fa:39:1e:66:08:fe:06:1e:2d:2d: 6b:a1:f1:f5:83:2c:ee:b7:b0:aa:5d:66:28:4b:05: 9c:0e:c6:aa:ca:55:8b:a8:bc:10:a6:a4:18:f5:0a: 6f:30:34:ab:31:0d:23:dd:32:51:ee:ca:3f:eb:48: 0d:fc:f0:21:12:e2:16:f1:5f:88:a4:ca:cd:f0:f3: 8d:64:93:82:67:a1:b8:57:64:ff:67:1a:2b:77:22: 41:70:9d:25:f9:68:5f:ea:19:c8:aa:36:f8:93:e0: ad:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FB:E2:A7:C1:6F:3F:2D:C2:EC:C0:44:DF:34:49:68:CA:B4:27:34 X509v3 Authority Key Identifier: keyid:48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2d:9c:38:a2:24:6c:41:83:c0:69:3a:6f:94:63:ad:9e:55: da:a6:82:d8:b9:19:48:72:fd:c8:01:66:de:bc:7a:b1:c5:9e: 0a:6a:d1:69:02:69:04:f2:c3:cb:74:fe:16:b7:b1:cb:83:c5: f5:3c:80:e5:1c:64:22:f7:54:05:9a:15:b3:c3:19:6e:97:84: 77:94:31:fd:f7:70:8e:c4:e0:8b:68:62:93:97:7c:e1:a0:97: a8:24:99:94:20:0e:c9:bd:9e:5f:db:dd:27:9d:e2:7b:76:fa: 28:63:93:72:71:60:77:eb:27:01:34:d1:c1:63:5b:44:38:f6: b0:58:8c:b1:61:b7:7d:15:de:b3:b1:9b:9f:15:ff:52:33:b4: 1a:40:d1:23:26:95:d0:6a:a7:a7:f3:82:2a:6a:68:80:c3:6f: 84:2f:dc:de:da:0f:41:5c:69:20:87:3c:eb:bf:de:bc:d6:35: e6:d3:25:07:0b:0d:f7:4b:ca:c6:6b:9d:fd:c0:ce:09:23:3c: b4:69:5e:2c:09:30:f6:fe:84:43:2d:71:76:af:82:3a:94:ab: 83:0a:6c:8f:ea:f8:52:c1:46:28:86:c1:db:b4:fe:3f:b6:60: 0c:75:d5:64:e8:2e:ed:f1:6f:f7:db:67:3f:73:68:09:79:3d: 2c:62:86:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEzODkxMTAvBgNVBAUTKDQ4RjUwRTE2QjgzMDVBQTJDNzU2RDIxQzhGMEZENTA5 MzM4QTVDMjkwHhcNMjYwOTIzMDE0MDIyWhcNMjYwOTMwMDE0MDIyWjAYMRYwFAYD VQQDEw02YWIzMmUwNy1jMjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngXbDkMX4LfkfKYnZ8GF0Dbh2SAeOero+IA9RDlNgTC17nzVprGM/gUnO9I7 JYfGzU2zMJcF0PhuSPb1sunpyhdVZNx0yih9ApJFvGLWouzM3kz5dDrpsRl48VYi WF3Racm16CPZ+Z7+40muTE2+wGVmr1e3G6EAd5R/8e9evycG96Yn/xTARtzw+gxM uvhZw3vxsMihGjgp4/o5HmYI/gYeLS1rofH1gyzut7CqXWYoSwWcDsaqylWLqLwQ pqQY9QpvMDSrMQ0j3TJR7so/60gN/PAhEuIW8V+IpMrN8PONZJOCZ6G4V2T/Zxor dyJBcJ0l+Whf6hnIqjb4k+Ct+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHH74qfB bz8twuzARN80SWjKtCc0MB8GA1UdIwQYMBaAFEj1Dha4MFqix1bSHI8P1Qkzilwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTM4OS9CMjE3MEI3NEQz QTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dxTEhWdEljandfVkNUT0tY Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQVU9Gcmd3V3FMSFZ0SWNqd19WQ1RPS1hDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTM4OS9CMjE3MEI3NEQzQTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dx TEhWdEljandfVkNUT0tYQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATC2cOKIkbEGDwGk6b5RjrZ5V2qaC2LkZSHL9yAFm3rx6scWeCmrRaQJpBPLD y3T+Frexy4PF9TyA5RxkIvdUBZoVs8MZbpeEd5Qx/fdwjsTgi2hik5d84aCXqCSZ lCAOyb2eX9vdJ53ie3b6KGOTcnFgd+snATTRwWNbRDj2sFiMsWG3fRXes7GbnxX/ UjO0GkDRIyaV0Gqnp/OCKmpogMNvhC/c3toPQVxpIIc867/evNY15tMlBwsN90vK xmud/cDOCSM8tGleLAkw9v6EQy1xdq+COpSrgwpsj+r4UsFGKIbB27T+P7ZgDHXV ZOgu7fFv99tnP3NoCXk9LGKG4w== -----END CERTIFICATE-----Generated at Thu Sep 24 04:10:43 2026 by rpki-client