
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
File: SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft (raw, json)
Hash identifier: briGEVfdpk/zIkR6ahuI7Ez43T5WPuIG1bPZfO6U4yw=
Subject key identifier: 45:42:94:E4:8C:9E:EC:1C:B4:2E:76:AA:D5:2F:35:94:02:B8:ED:AD
Authority key identifier: 48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29
Certificate issuer: /CN=A91DA389/serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
Manifest number: 026D
Signing time: Mon 27 Jul 2026 03:31:31 +0000
Manifest this update: Mon 27 Jul 2026 03:31:31 +0000
Manifest next update: Mon 03 Aug 2026 03:31:31 +0000
Files and hashes: 1: SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl (hash: bTw9ctoU1hkwilKYpG6AJYuIaSz2kVdFzM8WW+19AyE=)
2: 4F467C58D3AA11ED91B0C532C4F9AE02.roa (hash: h5AorI3QkOoBAwObfVPrh+bfy5EutI9s6EKcaVcQGYk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl
rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA389, serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29
Validity
Not Before: Jul 27 03:31:31 2026 GMT
Not After : Aug 3 03:31:31 2026 GMT
Subject: CN=6a66d113-71e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9c:47:11:f1:4d:5d:20:c0:65:e2:db:e9:fe:
08:bf:2b:e9:eb:af:61:30:d0:c7:d5:42:21:89:53:
c9:65:d6:c9:0b:32:34:b9:12:86:d2:f1:4d:7b:5d:
07:09:72:a6:31:93:03:b0:a7:4d:d0:f0:08:bb:55:
38:0d:21:74:33:e5:6c:07:6c:17:14:05:56:f8:9f:
0a:8d:a1:3a:d3:9a:bb:9c:d4:80:8d:05:30:66:40:
13:ae:cf:4b:50:2c:2b:95:a4:02:fa:97:93:d8:72:
9c:4f:d3:ff:85:4f:4a:15:d1:5b:8a:b0:1f:39:31:
54:a6:0e:ec:c3:eb:ed:d7:6b:12:84:b0:d9:63:ed:
66:70:a6:1b:5f:0c:e0:bf:fb:1c:59:c4:94:59:e7:
1e:e5:31:97:d9:9c:cf:bd:ec:9e:58:5e:34:39:e4:
60:3d:49:89:3a:41:3c:48:7d:fd:90:94:bd:c9:93:
5c:e5:b1:a4:80:2c:15:fc:c1:f3:c4:bb:d8:03:0e:
36:b7:7a:eb:5b:29:71:2f:e6:f6:db:8d:0b:9f:5b:
2b:4e:f5:1d:e2:d2:d9:e4:e4:86:f9:13:4c:55:db:
91:07:ed:5f:d8:b9:c2:3f:24:5f:f4:c2:cf:85:89:
34:0a:57:d6:af:d2:07:1c:ba:a8:18:84:0d:44:c8:
0a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:42:94:E4:8C:9E:EC:1C:B4:2E:76:AA:D5:2F:35:94:02:B8:ED:AD
X509v3 Authority Key Identifier:
keyid:48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:de:4b:a6:cb:4a:77:87:f5:c8:1d:9f:bd:f3:df:bb:18:4e:
04:36:63:b1:a0:ea:ef:15:31:92:d8:71:d5:b5:f1:ae:a8:79:
85:4c:03:56:38:3c:61:0e:d7:ee:2c:2c:83:a4:27:f8:cd:71:
52:88:cd:fb:36:af:bd:fa:51:02:63:c2:ca:82:5d:ab:4b:ec:
ae:dd:e1:0c:f5:18:5e:28:78:ce:43:bb:0e:f3:36:25:e9:97:
69:88:2e:14:fb:ed:5e:8d:e2:41:a8:f6:e7:15:da:5b:01:bb:
13:60:5d:04:2a:12:32:94:ba:bf:db:4d:6c:70:37:c0:b4:aa:
74:a3:c0:9e:f1:7a:77:72:da:72:e7:d2:df:12:6b:0a:b4:a1:
be:88:5e:59:ac:7e:b9:91:3f:f3:06:59:95:a1:9f:22:8f:c9:
27:68:17:4e:04:75:0c:f0:39:47:e2:68:79:c4:8a:f2:4c:da:
f9:3e:8e:f4:85:f1:e6:73:b0:e1:23:29:c4:13:68:30:b9:37:
58:fd:0f:fd:c6:39:f6:ff:9a:80:97:bd:75:6e:d9:7c:ea:36:
48:67:8b:be:ef:53:fb:14:7c:20:e0:ab:5a:56:b5:17:19:f9:
21:a2:c9:17:d6:6c:64:5d:b5:2f:37:02:1e:1d:b6:17:7d:e5:
b3:12:5e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:53 2026 by rpki-client