$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft File: SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft (raw, json) Hash identifier: ZM6cTvIvD1oLfFkxAJT5jIU9+s8KlEwO5qFkFW3fRxI= Subject key identifier: 34:2D:04:7C:22:80:32:2E:F5:BE:B0:A8:A8:C6:2B:B4:34:C5:10:0E Authority key identifier: 48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29 Certificate issuer: /CN=A91DA389/serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft Manifest number: 028E Signing time: Fri 25 Sep 2026 01:51:04 +0000 Manifest this update: Fri 25 Sep 2026 01:51:03 +0000 Manifest next update: Fri 02 Oct 2026 01:51:03 +0000 Files and hashes: 1: SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl (hash: 1qycrsfr0dEqIThY1rqQhdQqqCj97ysGCJXbFi0+988=) 2: 4F467C58D3AA11ED91B0C532C4F9AE02.roa (hash: vF4Alq/C7G9DCvRKcjCjRoH9i6udd05/xt+Mvpi8FbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA389, serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29 Validity Not Before: Sep 25 01:51:03 2026 GMT Not After : Oct 2 01:51:03 2026 GMT Subject: CN=6ab5d387-cfa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:65:e1:dc:f4:80:db:6a:ac:a3:7a:c4:69: b7:ac:9f:2e:8b:af:92:a1:7d:5f:58:be:bb:41:a2: dc:8a:8f:1f:78:46:f4:18:d7:18:d2:f7:9e:e3:30: 0c:0a:ee:77:9d:4b:40:cf:37:d4:13:8e:92:fd:ab: 77:73:8d:77:f5:e8:47:22:af:5e:4b:b0:b0:5f:be: 29:11:c9:7c:e8:78:ad:57:56:ae:2c:ca:9f:fa:b0: 5e:30:7a:4e:d6:e3:3e:81:13:be:38:e0:2d:86:b9: 6b:83:0b:5b:cf:46:89:37:0c:37:18:a4:25:bc:52: 8e:cd:c2:ea:ad:40:b1:80:fe:94:2e:7c:93:33:c0: e0:c4:29:6e:75:f9:2a:0f:34:5d:38:f6:17:9f:d4: eb:e1:a4:3d:7f:05:c0:4f:1a:7e:0f:1c:7d:8b:61: fb:8e:ac:4a:e8:f9:e8:1a:5c:95:09:61:d8:d1:ad: 08:9e:90:a9:7e:ff:dd:73:d6:46:48:9e:b4:32:c0: 26:95:59:06:9e:bb:c8:98:be:30:ad:0a:81:00:91: 35:90:b3:7a:ec:78:1c:b4:bc:9a:48:7a:ba:69:16: 70:0b:d9:33:6e:ad:77:07:9d:1d:db:ff:67:b2:ff: 94:5a:0e:af:73:d1:a6:a6:dd:af:ea:64:78:a9:ed: 2c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2D:04:7C:22:80:32:2E:F5:BE:B0:A8:A8:C6:2B:B4:34:C5:10:0E X509v3 Authority Key Identifier: keyid:48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:42:19:ca:e2:6b:2e:18:00:9f:cf:01:ee:f4:31:0d:ba:26: 0c:4c:4f:3d:af:ef:38:10:49:ff:7d:56:ea:8d:ff:0b:f5:de: f7:00:3e:90:ec:5a:4c:da:c6:c6:f7:ed:cd:9c:6f:bf:3b:45: 4b:c2:b2:a9:e2:ba:1b:c7:10:ef:2c:1b:f5:19:81:f6:5d:72: 45:57:9c:7e:07:e5:ca:ce:21:3d:40:fa:37:85:66:55:19:2f: 08:17:39:2e:59:8b:a4:cd:b2:47:2f:1c:d1:ad:9f:ef:43:37: 26:2b:8e:d5:80:db:2e:29:80:ec:13:b1:f7:4c:68:fb:6a:4a: f4:f0:c8:a3:e8:37:be:29:8a:77:be:ad:39:70:ce:67:0b:41: c5:e9:b0:90:04:04:b2:f6:42:5a:76:15:22:fa:e2:c8:ca:5e: 75:80:de:91:8d:20:a5:ed:65:34:e3:c9:58:32:6c:57:73:f4: 53:91:09:c3:5d:36:39:29:a8:71:03:27:97:40:27:5b:a0:1b: 79:f6:24:56:3a:58:53:0e:0b:93:ef:ba:81:e5:8f:92:72:61: f1:e5:83:91:0f:18:63:f8:30:b5:20:53:6a:de:8c:1e:19:23: 34:b5:d8:26:89:67:48:41:1e:e0:21:55:58:9b:5a:ba:16:49: fa:c7:97:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEzODkxMTAvBgNVBAUTKDQ4RjUwRTE2QjgzMDVBQTJDNzU2RDIxQzhGMEZENTA5 MzM4QTVDMjkwHhcNMjYwOTI1MDE1MTAzWhcNMjYxMDAyMDE1MTAzWjAYMRYwFAYD VQQDEw02YWI1ZDM4Ny1jZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYVl4dz0gNtqrKN6xGm3rJ8ui6+SoX1fWL67QaLcio8feEb0GNcY0vee4zAM Cu53nUtAzzfUE46S/at3c4139ehHIq9eS7CwX74pEcl86HitV1auLMqf+rBeMHpO 1uM+gRO+OOAthrlrgwtbz0aJNww3GKQlvFKOzcLqrUCxgP6ULnyTM8DgxCludfkq DzRdOPYXn9Tr4aQ9fwXATxp+Dxx9i2H7jqxK6PnoGlyVCWHY0a0InpCpfv/dc9ZG SJ60MsAmlVkGnrvImL4wrQqBAJE1kLN67HgctLyaSHq6aRZwC9kzbq13B50d2/9n sv+UWg6vc9Gmpt2v6mR4qe0snQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQtBHwi gDIu9b6wqKjGK7Q0xRAOMB8GA1UdIwQYMBaAFEj1Dha4MFqix1bSHI8P1Qkzilwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTM4OS9CMjE3MEI3NEQz QTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dxTEhWdEljandfVkNUT0tY Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQVU9Gcmd3V3FMSFZ0SWNqd19WQ1RPS1hDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTM4OS9CMjE3MEI3NEQzQTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dx TEhWdEljandfVkNUT0tYQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjkIZyuJrLhgAn88B7vQxDbomDExPPa/vOBBJ/31W6o3/C/Xe9wA+kOxaTNrG xvftzZxvvztFS8KyqeK6G8cQ7ywb9RmB9l1yRVecfgflys4hPUD6N4VmVRkvCBc5 LlmLpM2yRy8c0a2f70M3JiuO1YDbLimA7BOx90xo+2pK9PDIo+g3vimKd76tOXDO ZwtBxemwkAQEsvZCWnYVIvriyMpedYDekY0gpe1lNOPJWDJsV3P0U5EJw102OSmo cQMnl0AnW6AbefYkVjpYUw4Lk++6geWPknJh8eWDkQ8YY/gwtSBTat6MHhkjNLXY JolnSEEe4CFVWJtauhZJ+seX/Q== -----END CERTIFICATE-----Generated at Sat Sep 26 04:55:21 2026 by rpki-client