
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
File: SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft (raw, json)
Hash identifier: I5VdI12nR7mbKZmKYiE2NXVehAY7UlJTpEzN6aa/+Ss=
Subject key identifier: 43:E7:24:70:2C:96:77:CF:C2:9E:62:2F:DB:40:10:11:FD:94:0C:E4
Authority key identifier: 48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29
Certificate issuer: /CN=A91DA389/serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29
Certificate serial: 0242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
Manifest number: 023B
Signing time: Fri 17 Apr 2026 02:18:48 +0000
Manifest this update: Fri 17 Apr 2026 02:18:47 +0000
Manifest next update: Fri 24 Apr 2026 02:18:47 +0000
Files and hashes: 1: SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl (hash: hkvv/XKMJMxoXeonEqkdaIVe1zPsWis4rbevR99FsrY=)
2: 4F467C58D3AA11ED91B0C532C4F9AE02.roa (hash: h5AorI3QkOoBAwObfVPrh+bfy5EutI9s6EKcaVcQGYk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl
rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA389, serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29
Validity
Not Before: Apr 17 02:18:47 2026 GMT
Not After : Apr 24 02:18:47 2026 GMT
Subject: CN=69e19887-6b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:69:8d:38:b3:98:fe:cf:dd:97:77:bf:56:
f7:de:44:2e:b0:5c:f1:7a:b8:ab:15:4b:0b:6d:d7:
39:30:09:df:e2:55:b5:29:35:6b:e9:c4:42:8a:ef:
19:af:44:af:ee:7d:7e:c4:61:8b:af:c7:6f:e0:93:
42:32:0e:fd:d7:09:bd:5f:ca:11:a7:e3:4b:cb:83:
63:ad:75:b3:a7:7e:76:23:1c:f1:89:91:1e:1c:dc:
65:b3:c4:3e:99:54:66:b8:64:a5:3a:e1:f9:c6:e1:
16:a5:fa:0a:ae:c0:c0:ca:1e:86:73:a5:52:f9:8b:
13:ac:82:c7:f8:c1:96:c7:7b:8b:f2:65:61:3b:29:
4f:50:e9:04:35:72:bb:0f:ed:6b:07:33:60:6f:44:
7c:ed:cb:08:ba:dd:c0:f6:ac:f5:a8:40:14:77:3f:
ab:5e:01:a8:e0:f0:75:64:98:4f:4e:dd:fd:6b:44:
93:36:16:9e:c4:82:a3:09:cf:f0:d5:b9:12:67:5b:
a7:39:21:74:38:87:db:9d:31:e6:84:66:f2:2e:c1:
a0:6e:64:d5:9e:55:66:42:39:6c:4d:6d:d8:60:d7:
e3:82:e4:09:43:35:9d:a4:f9:9d:18:56:a9:0f:29:
b2:eb:37:50:88:e7:eb:61:a0:0c:81:fa:ab:fc:05:
1d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E7:24:70:2C:96:77:CF:C2:9E:62:2F:DB:40:10:11:FD:94:0C:E4
X509v3 Authority Key Identifier:
keyid:48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:b8:e4:69:ca:51:b6:36:e6:d1:b9:77:27:a8:47:2b:b7:76:
ae:0d:2f:92:b2:5e:9b:51:a9:16:ef:d2:05:c1:99:cc:55:87:
86:54:61:5d:2b:34:06:77:1f:67:89:f3:e1:0b:a5:b6:32:d0:
8d:d3:a3:36:aa:ae:0d:61:30:f8:5f:f0:ca:97:1e:99:a6:66:
2a:67:6e:ae:54:4c:1c:69:2d:7e:c9:5c:9a:95:62:c7:b6:e0:
63:ee:c3:14:24:62:3e:d7:4a:75:0b:69:e8:44:9a:50:44:04:
92:42:96:2b:e6:5a:82:d1:bc:c4:c5:e1:8b:e3:6b:ad:3f:33:
84:e5:d5:62:16:96:d3:65:3a:eb:37:4d:53:e5:be:f8:c3:e2:
03:75:86:35:12:c8:45:6c:00:a2:d3:a0:5c:94:5f:11:26:83:
f6:dd:94:18:c9:d4:09:cc:ad:bd:1a:39:9f:27:45:d6:c2:ed:
dd:e2:e5:04:b1:cd:2f:f5:70:8d:91:f4:dd:ed:4f:8b:d2:fd:
09:6d:14:fe:93:a9:86:d6:da:8a:12:c7:40:33:a4:36:c5:5f:
45:3d:d9:18:00:ef:09:b9:4d:0c:8f:a4:7e:1e:c9:a0:e5:cb:
2b:9b:65:ba:be:ab:c8:e7:e8:bf:52:98:be:9a:3d:1d:f3:b1:
15:7b:54:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REEzODkxMTAvBgNVBAUTKDQ4RjUwRTE2QjgzMDVBQTJDNzU2RDIxQzhGMEZENTA5
MzM4QTVDMjkwHhcNMjYwNDE3MDIxODQ3WhcNMjYwNDI0MDIxODQ3WjAYMRYwFAYD
VQQDEw02OWUxOTg4Ny02YjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq6RpjTizmP7P3Zd3v1b33kQusFzxerirFUsLbdc5MAnf4lW1KTVr6cRCiu8Z
r0Sv7n1+xGGLr8dv4JNCMg791wm9X8oRp+NLy4NjrXWzp352IxzxiZEeHNxls8Q+
mVRmuGSlOuH5xuEWpfoKrsDAyh6Gc6VS+YsTrILH+MGWx3uL8mVhOylPUOkENXK7
D+1rBzNgb0R87csIut3A9qz1qEAUdz+rXgGo4PB1ZJhPTt39a0STNhaexIKjCc/w
1bkSZ1unOSF0OIfbnTHmhGbyLsGgbmTVnlVmQjlsTW3YYNfjguQJQzWdpPmdGFap
Dymy6zdQiOfrYaAMgfqr/AUd5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPnJHAs
lnfPwp5iL9tAEBH9lAzkMB8GA1UdIwQYMBaAFEj1Dha4MFqix1bSHI8P1Qkzilwp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTM4OS9CMjE3MEI3NEQz
QTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dxTEhWdEljandfVkNUT0tY
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NQVU9Gcmd3V3FMSFZ0SWNqd19WQ1RPS1hDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTM4OS9CMjE3MEI3NEQzQTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dx
TEhWdEljandfVkNUT0tYQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYLjkacpRtjbm0bl3J6hHK7d2rg0vkrJem1GpFu/SBcGZzFWHhlRhXSs0Bncf
Z4nz4QultjLQjdOjNqquDWEw+F/wypcemaZmKmdurlRMHGktfslcmpVix7bgY+7D
FCRiPtdKdQtp6ESaUEQEkkKWK+ZagtG8xMXhi+NrrT8zhOXVYhaW02U66zdNU+W+
+MPiA3WGNRLIRWwAotOgXJRfESaD9t2UGMnUCcytvRo5nydF1sLt3eLlBLHNL/Vw
jZH03e1Pi9L9CW0U/pOphtbaihLHQDOkNsVfRT3ZGADvCblNDI+kfh7JoOXLK5tl
ur6ryOfov1KYvpo9HfOxFXtUAQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:28 2026 by rpki-client