$ rpki-client -vvvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: /yNzP78dkjFiPVNpHlgoYdza3QbFKMp/5ZL4qkJ/MgA= Subject key identifier: DF:22:4B:DC:5F:07:16:2D:24:A9:BA:4A:A5:C5:2C:5E:52:FF:1E:98 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 3605 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 3597 Signing time: Tue 22 Sep 2026 14:19:28 +0000 Manifest this update: Tue 22 Sep 2026 14:19:27 +0000 Manifest next update: Tue 29 Sep 2026 14:19:27 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: ITd5l5Re/yzW57/n8DillJvzwSSUZ6C2KbOQ6kRvJ7o=) 2: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: oYQNkpcQFkrJq7hNKWTpwJS+ixdzI6MgGMC3Udqv1Uw=) 3: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: iAjJeW7mv0SQMiUZA706Y7e5Dpr+uJ1EKTAhmx1r1Ho=) 4: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=) 5: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=) 6: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: gLPTWrm2PPekN94x5WPKoFXaMR9NBRCv5mD6xWQxTlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13829 (0x3605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Sep 22 14:19:27 2026 GMT Not After : Sep 29 14:19:27 2026 GMT Subject: CN=6ab28e6f-537f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:ec:6b:af:35:85:e1:24:64:5d:ad:8b:c1: 9c:42:e3:9b:7c:da:e2:b1:45:92:86:02:00:87:9a: f5:fa:4e:d3:b6:50:5a:00:ed:d5:04:f8:52:24:2d: 71:0c:61:20:b0:55:c1:63:49:c9:4f:4c:e8:68:74: f3:90:5b:c7:a3:db:82:e5:af:14:ae:59:42:4b:c3: ad:8f:83:3a:64:90:20:c8:90:bf:ee:6a:53:3e:c3: 5b:56:11:b1:79:67:97:9c:d2:cf:40:66:e5:5f:9b: 9d:49:5e:e6:9c:e1:e6:07:ad:b7:45:1e:e3:ec:66: 71:8b:2b:e1:b9:77:1f:df:65:7c:98:93:ff:1b:4f: 06:00:04:c0:e8:43:2b:c0:24:ba:7c:3d:7c:87:0e: 51:37:18:e3:ee:ce:9d:dc:55:dc:e9:e2:7d:23:1a: 6a:de:11:9c:a3:a0:2b:93:bf:37:7c:db:38:67:bc: f3:10:54:77:38:a5:f9:29:d6:a5:62:b2:d2:7a:92: f7:24:d4:98:39:ad:02:f6:76:e9:9c:69:c3:2f:a4: 74:15:65:c6:3b:0a:4a:b0:c7:4e:a6:87:78:cc:bf: d8:1e:75:71:91:17:b1:36:89:23:60:c8:ef:44:f2: a6:a0:15:78:2b:d7:20:2f:ef:e4:82:68:59:ca:93: 75:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:22:4B:DC:5F:07:16:2D:24:A9:BA:4A:A5:C5:2C:5E:52:FF:1E:98 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:45:59:7c:2d:9f:52:0c:84:e2:b1:44:62:f5:d7:3e:d5:36: 3f:f5:a3:76:dc:97:db:64:62:53:24:1c:5a:41:72:1b:7f:6f: 19:fb:0c:05:71:ce:63:db:a3:ad:d1:09:b2:e0:7b:28:b9:65: ca:b8:16:52:74:32:09:14:6b:3d:3e:69:f3:d3:d6:f1:00:d4: f0:80:79:df:3d:11:81:e5:a9:b4:88:50:18:19:bc:cb:7e:64: 77:78:1d:09:46:82:04:6e:6c:b2:e4:55:66:b4:f2:a7:96:26: e0:5f:ad:0a:4d:da:7d:cb:50:e5:3e:2f:c9:f5:73:f3:68:e4: d3:c4:e2:77:d5:eb:ed:f6:bc:0f:b3:88:3b:77:e9:b2:f8:25: 78:80:e9:5d:4b:31:eb:bd:32:a2:ed:b3:2e:49:b4:ea:26:d4: af:6f:c1:83:88:bd:40:37:06:6b:ae:fa:e0:92:c0:9c:5f:7c: 1c:a8:37:aa:14:ab:bb:b0:a8:6f:32:cb:c9:72:57:ca:19:f4: 42:17:1a:7e:55:48:d5:2f:71:53:b3:bc:89:db:be:68:77:b7: 0d:31:2b:c4:46:81:65:8d:6e:4b:db:8e:ae:d4:f2:7c:3e:44: 5d:9e:2f:9e:0e:f6:fc:a0:f8:6e:83:01:fb:1f:0f:a2:c2:51: 99:40:21:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjYwOTIyMTQxOTI3WhcNMjYwOTI5MTQxOTI3WjAYMRYwFAYD VQQDEw02YWIyOGU2Zi01MzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocrsa681heEkZF2ti8GcQuObfNrisUWShgIAh5r1+k7TtlBaAO3VBPhSJC1x DGEgsFXBY0nJT0zoaHTzkFvHo9uC5a8UrllCS8Otj4M6ZJAgyJC/7mpTPsNbVhGx eWeXnNLPQGblX5udSV7mnOHmB623RR7j7GZxiyvhuXcf32V8mJP/G08GAATA6EMr wCS6fD18hw5RNxjj7s6d3FXc6eJ9Ixpq3hGco6Ark783fNs4Z7zzEFR3OKX5Kdal YrLSepL3JNSYOa0C9nbpnGnDL6R0FWXGOwpKsMdOpod4zL/YHnVxkRexNokjYMjv RPKmoBV4K9cgL+/kgmhZypN1SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN8iS9xf BxYtJKm6SqXFLF5S/x6YMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABkVZfC2fUgyE4rFEYvXXPtU2P/WjdtyX22RiUyQcWkFyG39vGfsMBXHOY9uj rdEJsuB7KLllyrgWUnQyCRRrPT5p89PW8QDU8IB53z0RgeWptIhQGBm8y35kd3gd CUaCBG5ssuRVZrTyp5Ym4F+tCk3afctQ5T4vyfVz82jk08Tid9Xr7fa8D7OIO3fp svgleIDpXUsx670you2zLkm06ibUr2/Bg4i9QDcGa6764JLAnF98HKg3qhSru7Co bzLLyXJXyhn0QhcaflVI1S9xU7O8idu+aHe3DTErxEaBZY1uS9uOrtTyfD5EXZ4v ng72/KD4boMB+x8PosJRmUAhRg== -----END CERTIFICATE-----Generated at Wed Sep 23 09:17:48 2026 by rpki-client