$ rpki-client -vvvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: WOGofpw854jyGltQ6ReIxkYVI7qF2catwug1ZEMFZdI= Subject key identifier: A1:F3:8F:2B:24:2B:BE:A3:5E:4B:32:C9:EA:E6:F6:70:60:18:B6:2F Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 3620 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 35B2 Signing time: Sat 14 Nov 2026 14:19:02 +0000 Manifest this update: Sat 14 Nov 2026 14:19:02 +0000 Manifest next update: Sat 21 Nov 2026 14:19:02 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: FaoIHp7/8h8NTwCjXO9D/ViBR/KL4LrmlvBzEUbEsRs=) 2: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: iAjJeW7mv0SQMiUZA706Y7e5Dpr+uJ1EKTAhmx1r1Ho=) 3: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: oYQNkpcQFkrJq7hNKWTpwJS+ixdzI6MgGMC3Udqv1Uw=) 4: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: gLPTWrm2PPekN94x5WPKoFXaMR9NBRCv5mD6xWQxTlQ=) 5: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=) 6: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13856 (0x3620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Nov 14 14:19:02 2026 GMT Not After : Nov 21 14:19:02 2026 GMT Subject: CN=6af86dd6-fbe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:bf:47:e1:bd:26:ae:5b:c9:f8:00:e3:b0: 31:79:80:a5:d2:80:75:e1:03:ae:f6:ec:40:f0:f9: 8e:b1:c3:13:52:fa:8f:f8:b6:8b:b1:17:20:ce:15: 8b:a7:4b:57:22:a3:d2:d1:be:4b:28:f8:89:b1:9c: 35:d2:b1:4b:62:1d:90:f2:f5:46:7c:91:d2:23:e6: e8:59:0d:26:30:35:5a:df:9a:ed:26:9b:e4:0b:91: cf:8b:5f:21:e9:15:d2:95:91:1b:36:f1:e0:3d:1d: c8:65:6c:1f:1e:8a:a5:bd:11:0f:a2:3c:e7:b6:c2: 26:b4:7e:04:20:45:17:c9:f4:3a:e8:0f:a2:c8:67: 35:cd:ea:d5:30:70:80:fe:3c:bf:2c:9b:5f:5e:b8: 83:6d:bb:8c:29:99:63:b1:a1:92:91:c8:c4:b3:b6: 4d:1c:f7:8d:85:4f:1a:e4:72:00:3f:64:00:09:7d: cc:ab:cb:f7:ea:35:9e:98:d5:f3:ab:4e:c8:f4:da: 51:d8:db:f6:e3:5f:92:70:ae:24:02:bc:5f:56:52: 2e:41:5e:5f:51:9d:ad:83:06:0c:2d:05:72:aa:de: b6:26:ff:c8:fd:c5:6d:b8:68:4e:24:ce:87:36:5e: 78:e2:93:00:ae:ac:d5:87:e7:74:3b:ad:f8:a3:f2: b1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F3:8F:2B:24:2B:BE:A3:5E:4B:32:C9:EA:E6:F6:70:60:18:B6:2F X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:2c:64:b1:a9:51:e5:da:3b:f5:4b:f2:fb:d3:3b:50:59:b3: db:b9:9a:b3:11:e8:db:3f:37:fc:46:60:a8:58:02:3c:92:b5: 5d:44:18:88:01:ce:9b:28:99:61:06:db:2f:fd:ca:f2:d3:69: b2:0e:53:e6:28:85:23:ac:36:94:5c:59:99:99:89:bf:51:24: 29:50:36:bf:d8:eb:b3:be:3c:d5:4a:1a:5c:09:44:48:1b:0f: dc:da:46:53:f6:93:15:19:c1:b2:07:ad:9a:54:86:c1:6c:f2: c5:db:ae:a1:68:0e:28:dd:45:91:c7:1d:f1:3d:7e:ec:4d:da: 6d:3d:62:4a:94:f2:83:23:d6:c5:b4:79:40:1f:c7:93:9f:5f: 6a:53:4e:b3:77:25:43:ed:ee:48:a5:7e:a9:1c:89:81:f2:10: 58:3c:67:99:e5:14:7d:d7:a5:2a:c1:ac:68:c8:74:36:bf:19: aa:7f:14:0a:50:a3:d5:ae:26:bc:fb:7a:ef:7a:0e:13:fc:61: 6a:4e:fe:67:a2:64:d3:83:c6:05:11:2a:d4:6a:47:0f:56:27: ef:c7:2f:15:aa:50:96:7d:16:6e:9c:d4:28:80:21:bb:18:f7: 22:a8:f1:6e:15:02:e8:3b:64:86:bf:c2:d7:88:22:c3:22:ce: 2a:97:5e:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjYxMTE0MTQxOTAyWhcNMjYxMTIxMTQxOTAyWjAYMRYwFAYD VQQDEw02YWY4NmRkNi1mYmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8i/R+G9Jq5byfgA47AxeYCl0oB14QOu9uxA8PmOscMTUvqP+LaLsRcgzhWL p0tXIqPS0b5LKPiJsZw10rFLYh2Q8vVGfJHSI+boWQ0mMDVa35rtJpvkC5HPi18h 6RXSlZEbNvHgPR3IZWwfHoqlvREPojzntsImtH4EIEUXyfQ66A+iyGc1zerVMHCA /jy/LJtfXriDbbuMKZljsaGSkcjEs7ZNHPeNhU8a5HIAP2QACX3Mq8v36jWemNXz q07I9NpR2Nv241+ScK4kArxfVlIuQV5fUZ2tgwYMLQVyqt62Jv/I/cVtuGhOJM6H Nl544pMArqzVh+d0O634o/Kx2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKHzjysk K76jXksyyerm9nBgGLYvMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiSxksalR5do79Uvy+9M7UFmz27masxHo2z83/EZgqFgCPJK1XUQYiAHOmyiZ YQbbL/3K8tNpsg5T5iiFI6w2lFxZmZmJv1EkKVA2v9jrs7481UoaXAlESBsP3NpG U/aTFRnBsgetmlSGwWzyxduuoWgOKN1Fkccd8T1+7E3abT1iSpTygyPWxbR5QB/H k59falNOs3clQ+3uSKV+qRyJgfIQWDxnmeUUfdelKsGsaMh0Nr8Zqn8UClCj1a4m vPt673oOE/xhak7+Z6Jk04PGBREq1GpHD1Yn78cvFapQln0WbpzUKIAhuxj3Iqjx bhUC6Dtkhr/C14giwyLOKpdeyg== -----END CERTIFICATE-----Generated at Sun Nov 15 10:29:18 2026 by rpki-client