$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft File: SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft (raw, json) Hash identifier: uhtqnxYEoK5if/WdvopbCsTl/KLl8t+rBkmLfQV+vdo= Subject key identifier: 52:28:05:24:4F:A9:70:94:1A:25:3A:EC:16:03:E8:83:DA:5B:07:8D Authority key identifier: 48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29 Certificate issuer: /CN=A91DA389/serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft Manifest number: 0248 Signing time: Wed 13 May 2026 02:30:46 +0000 Manifest this update: Wed 13 May 2026 02:30:45 +0000 Manifest next update: Wed 20 May 2026 02:30:45 +0000 Files and hashes: 1: SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl (hash: QddMaWUB3PMsFX5tNDqnKTYUesWAV0sY0hu85u/RgRw=) 2: 4F467C58D3AA11ED91B0C532C4F9AE02.roa (hash: h5AorI3QkOoBAwObfVPrh+bfy5EutI9s6EKcaVcQGYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA389, serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29 Validity Not Before: May 13 02:30:45 2026 GMT Not After : May 20 02:30:45 2026 GMT Subject: CN=6a03e256-2630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:65:4f:78:fc:09:3a:3c:63:80:93:48:93:e2: bd:c6:4c:02:40:65:38:a8:31:1d:5f:e5:c1:42:b0: 86:d8:31:85:9c:15:f7:7b:07:88:37:26:7a:a9:e3: a4:88:5b:6d:56:c8:d9:96:79:95:90:e7:0f:19:b3: 8a:15:81:cb:77:7f:9e:63:c4:e7:ca:f0:39:16:2d: d7:00:ff:b7:a5:94:6f:1c:cd:f0:ce:f5:30:1b:86: 7c:fe:e8:42:98:36:67:93:99:f6:36:5e:9e:c1:e8: 99:a3:a1:53:ab:41:f7:bb:6c:7e:f8:ac:24:57:12: 77:52:22:77:b3:f7:2d:c8:7b:45:23:77:56:71:ad: f7:93:21:43:3d:0a:87:64:83:24:ac:f8:bf:d3:c4: 41:dc:1d:ff:9f:20:6a:d3:89:99:0f:d4:59:79:e4: db:3b:61:e8:4a:b8:f9:8e:3f:a4:3d:ed:f0:86:eb: b2:b1:32:45:8e:72:72:e2:ab:f0:80:4e:28:fe:fb: e3:9d:92:3c:66:56:e5:48:e8:c2:63:e9:bb:46:1c: 8a:2f:e4:4e:22:dc:47:92:74:f1:79:2e:2e:89:d5: a4:25:3c:10:44:f2:c6:6f:34:05:d4:6d:c8:8a:90: bb:9a:76:11:7a:89:a1:10:a3:b1:da:4a:d0:94:b7: b0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:28:05:24:4F:A9:70:94:1A:25:3A:EC:16:03:E8:83:DA:5B:07:8D X509v3 Authority Key Identifier: keyid:48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:31:e1:27:e0:23:a0:7a:4f:96:84:98:55:72:91:f5:f5:83: ad:db:d3:bb:7d:04:7f:17:5f:99:48:6e:9a:74:9c:47:df:58: 0e:09:5d:3d:20:35:1a:0e:49:ab:d2:2e:37:e0:3b:47:a4:b0: c8:e5:4e:b2:6d:f1:4e:0b:1d:76:84:1a:1d:4f:b4:9b:ab:cc: 91:25:c9:c3:4c:fe:ff:97:0f:a0:01:4e:4d:d8:e8:63:e9:ba: 7a:e8:06:c3:be:b8:15:81:a6:bf:c1:c5:bf:d2:ab:e9:43:38: 3f:b4:34:12:06:dc:a9:90:f3:33:8c:15:52:26:69:71:32:b4: bd:5a:52:f4:97:ba:42:66:ce:95:42:c0:16:29:8d:3f:f5:38: 40:6b:e1:5e:a3:fe:55:42:e2:df:1d:43:76:b8:e5:df:37:ff: fa:9b:66:9b:a7:d6:1d:c0:1e:6c:52:d2:21:6f:db:0e:c1:e0: 57:bc:6e:d7:7d:df:84:87:3f:5e:51:1b:32:38:99:d7:96:50: 2c:6c:b3:1c:63:9c:30:c7:cb:0a:1f:fc:33:10:91:fa:a3:ff: 45:09:92:b6:44:9d:93:1f:ff:c9:2e:57:16:c8:29:5e:6c:35: 6f:77:26:ed:f7:87:69:f2:24:06:c3:13:57:a6:9b:2e:d3:23: 4c:48:c3:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEzODkxMTAvBgNVBAUTKDQ4RjUwRTE2QjgzMDVBQTJDNzU2RDIxQzhGMEZENTA5 MzM4QTVDMjkwHhcNMjYwNTEzMDIzMDQ1WhcNMjYwNTIwMDIzMDQ1WjAYMRYwFAYD VQQDEw02YTAzZTI1Ni0yNjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mVPePwJOjxjgJNIk+K9xkwCQGU4qDEdX+XBQrCG2DGFnBX3eweINyZ6qeOk iFttVsjZlnmVkOcPGbOKFYHLd3+eY8TnyvA5Fi3XAP+3pZRvHM3wzvUwG4Z8/uhC mDZnk5n2Nl6eweiZo6FTq0H3u2x++KwkVxJ3UiJ3s/ctyHtFI3dWca33kyFDPQqH ZIMkrPi/08RB3B3/nyBq04mZD9RZeeTbO2HoSrj5jj+kPe3whuuysTJFjnJy4qvw gE4o/vvjnZI8ZlblSOjCY+m7RhyKL+ROItxHknTxeS4uidWkJTwQRPLGbzQF1G3I ipC7mnYReomhEKOx2krQlLewIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFIoBSRP qXCUGiU67BYD6IPaWweNMB8GA1UdIwQYMBaAFEj1Dha4MFqix1bSHI8P1Qkzilwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTM4OS9CMjE3MEI3NEQz QTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dxTEhWdEljandfVkNUT0tY Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQVU9Gcmd3V3FMSFZ0SWNqd19WQ1RPS1hDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTM4OS9CMjE3MEI3NEQzQTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dx TEhWdEljandfVkNUT0tYQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhzHhJ+AjoHpPloSYVXKR9fWDrdvTu30EfxdfmUhumnScR99YDgldPSA1Gg5J q9IuN+A7R6SwyOVOsm3xTgsddoQaHU+0m6vMkSXJw0z+/5cPoAFOTdjoY+m6eugG w764FYGmv8HFv9Kr6UM4P7Q0EgbcqZDzM4wVUiZpcTK0vVpS9Je6QmbOlULAFimN P/U4QGvhXqP+VULi3x1Ddrjl3zf/+ptmm6fWHcAebFLSIW/bDsHgV7xu133fhIc/ XlEbMjiZ15ZQLGyzHGOcMMfLCh/8MxCR+qP/RQmStkSdkx//yS5XFsgpXmw1b3cm 7feHafIkBsMTV6abLtMjTEjDbw== -----END CERTIFICATE-----Generated at Wed May 13 08:52:51 2026 by rpki-client