$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: xmKmvE6lTqZdaB7Kkfqz0pqXXZ9OKe05AnFIMYI4jjE= Subject key identifier: 22:FC:A6:E3:50:90:B9:34:F5:55:A7:98:A8:6D:84:CA:56:FF:08:CF Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 35A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 3538 Signing time: Tue 24 Mar 2026 14:19:10 +0000 Manifest this update: Tue 24 Mar 2026 14:19:09 +0000 Manifest next update: Tue 31 Mar 2026 14:19:09 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: wR8Ues1fQTuXGxB/ePBF3y2xyv2IizfP0Dw0QUbY9I4=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: gYgPKLTyvNYiTFM0PJyNAWg0vPRNWXqQFQDh+UrI/c4=) 3: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: pVaeuPDK0FHsvcGhje7MCH08iltLABR4qD4qhWQ9kFc=) 4: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: xeFzCopV71maYEg1r/El2ibbwX7/wW/fpz6xhHAMBuU=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: XGOhTSHwV0R/sk4ikZ5fC/R5vWAmGAsO0B3q+lISZ6A=) 6: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: ZXrfTBU3STfnw3l29z2Q3NYRt0b0qumfbQZigLBYusE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13729 (0x35a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Mar 24 14:19:09 2026 GMT Not After : Mar 31 14:19:09 2026 GMT Subject: CN=69c29d5e-b581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:08:d4:2f:6b:2c:00:55:2e:38:dd:69:b2:9d: e6:53:32:39:46:d5:38:5d:e1:63:e7:86:97:35:a6: d6:90:ca:2b:eb:3c:92:54:06:5f:23:19:7a:42:20: 4f:cd:ec:3e:44:b5:0f:81:54:ea:4b:77:68:69:b8: 97:66:a5:2d:ad:51:37:48:69:b1:66:d8:3d:40:84: be:02:72:b9:16:b1:73:69:a9:7e:df:8d:b8:84:d3: 43:14:e3:e2:9b:00:9b:40:07:27:e2:46:c1:c6:2c: 66:30:5e:a6:d7:e9:3f:71:8b:00:f9:12:e7:9e:21: a5:03:39:81:6a:ce:cc:9b:15:be:e6:54:73:68:da: bb:27:92:b7:64:a5:cd:0d:dd:65:d1:06:3f:96:fa: 8e:67:d6:6b:fc:ae:a5:76:39:ac:5d:e4:73:79:09: aa:74:82:d3:84:ee:fe:64:ac:3c:33:d4:d4:7d:08: d1:b2:a4:aa:1d:18:4c:87:ce:30:e5:85:c1:ca:f4: 96:01:ef:c5:2d:43:40:ad:4c:dd:7f:9f:2e:2a:ef: 31:74:c5:2c:d6:1e:4d:42:d0:36:1a:30:40:5b:13: ab:70:d7:2b:13:57:6e:d4:44:9a:2d:81:d3:c5:29: df:f7:0b:b4:2c:66:5e:ef:3c:07:b4:88:73:e2:d5: b7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FC:A6:E3:50:90:B9:34:F5:55:A7:98:A8:6D:84:CA:56:FF:08:CF X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:96:7b:09:ea:a7:08:97:88:5e:59:02:8a:4c:8c:ff:b2:0d: 4e:c8:21:29:fb:49:7f:03:27:5a:6a:5c:f5:da:7b:19:95:97: 7b:43:72:cb:16:41:c6:fa:e2:c0:bf:84:88:9a:df:f5:d3:e5: 85:52:ac:90:7b:cd:8d:dd:b5:cc:25:2d:f0:8a:7f:7b:3e:0e: 36:a4:98:4f:f5:d4:4a:64:0d:ca:29:a3:08:bb:88:ef:12:89: e6:9b:8b:22:cb:25:28:b9:7c:08:11:fd:d7:4e:6f:a3:6f:e2: 26:7b:a0:d4:b0:41:65:85:8c:84:0a:c8:eb:21:c6:ec:35:f6: 7b:53:47:4c:57:d9:71:67:0a:99:36:19:6b:79:55:99:d8:cf: cb:8b:9f:fe:fd:9b:19:93:9e:d9:32:e9:29:5b:ee:c8:ef:67: 3d:2e:39:1b:fb:eb:f1:c4:9f:68:22:00:13:a9:00:e6:36:1c: cd:3e:1f:eb:12:33:f4:bd:2d:6e:0d:ca:d3:b1:bd:ee:e0:af: 6a:8d:90:00:37:d8:de:dd:71:ba:dc:d2:43:28:dd:d9:01:91: 73:1c:eb:77:c4:d3:4a:3a:3b:78:0a:6d:38:33:5d:d4:42:43: 44:4e:8d:3c:78:0e:7e:95:68:83:55:39:51:af:a6:ab:d1:fe: 0f:87:2d:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjYwMzI0MTQxOTA5WhcNMjYwMzMxMTQxOTA5WjAYMRYwFAYD VQQDEw02OWMyOWQ1ZS1iNTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlwjUL2ssAFUuON1psp3mUzI5RtU4XeFj54aXNabWkMor6zySVAZfIxl6QiBP zew+RLUPgVTqS3doabiXZqUtrVE3SGmxZtg9QIS+AnK5FrFzaal+3424hNNDFOPi mwCbQAcn4kbBxixmMF6m1+k/cYsA+RLnniGlAzmBas7MmxW+5lRzaNq7J5K3ZKXN Dd1l0QY/lvqOZ9Zr/K6ldjmsXeRzeQmqdILThO7+ZKw8M9TUfQjRsqSqHRhMh84w 5YXByvSWAe/FLUNArUzdf58uKu8xdMUs1h5NQtA2GjBAWxOrcNcrE1du1ESaLYHT xSnf9wu0LGZe7zwHtIhz4tW3OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCL8puNQ kLk09VWnmKhthMpW/wjPMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEJZ7CeqnCJeIXlkCikyM/7INTsghKftJfwMnWmpc9dp7GZWXe0NyyxZBxvri wL+EiJrf9dPlhVKskHvNjd21zCUt8Ip/ez4ONqSYT/XUSmQNyimjCLuI7xKJ5puL IsslKLl8CBH9105vo2/iJnug1LBBZYWMhArI6yHG7DX2e1NHTFfZcWcKmTYZa3lV mdjPy4uf/v2bGZOe2TLpKVvuyO9nPS45G/vr8cSfaCIAE6kA5jYczT4f6xIz9L0t bg3K07G97uCvao2QADfY3t1xutzSQyjd2QGRcxzrd8TTSjo7eAptODNd1EJDRE6N PHgOfpVog1U5Ua+mq9H+D4ct5w== -----END CERTIFICATE-----Generated at Thu Mar 26 05:35:52 2026 by rpki-client