$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: e1X2iBKu+f2Qwc9J053k+kbD2wKwEFLGjpfquXRr5K0= Subject key identifier: 7F:DD:98:2D:C2:2B:B3:4C:D9:A4:2C:90:66:7A:0E:13:4C:D9:F5:FE Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 35C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 3553 Signing time: Tue 12 May 2026 14:19:25 +0000 Manifest this update: Tue 12 May 2026 14:19:24 +0000 Manifest next update: Tue 19 May 2026 14:19:24 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: sDDn/9KTqQAxjgf15VXxlq7F4CkHq9E0cX2bLUHwagM=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: gLPTWrm2PPekN94x5WPKoFXaMR9NBRCv5mD6xWQxTlQ=) 3: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: iAjJeW7mv0SQMiUZA706Y7e5Dpr+uJ1EKTAhmx1r1Ho=) 4: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: oYQNkpcQFkrJq7hNKWTpwJS+ixdzI6MgGMC3Udqv1Uw=) 5: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13761 (0x35c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: May 12 14:19:24 2026 GMT Not After : May 19 14:19:24 2026 GMT Subject: CN=6a0336ed-9636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:98:75:56:d2:2c:f0:59:c1:7a:81:54:dc: 8d:5c:39:fa:21:36:ed:83:6f:16:4f:e1:2d:89:86: f8:a5:9d:00:37:a7:a8:99:8a:b7:85:3b:61:dd:d7: c9:a9:d1:69:00:7f:a9:4a:55:b0:0d:91:61:99:db: 81:30:c3:b1:e9:13:99:c0:0e:bb:00:5b:1f:9b:69: 0c:68:03:09:5d:7d:27:59:a4:0c:a6:13:28:18:94: 7a:29:4c:62:ad:92:06:a3:cf:41:cf:6e:44:87:cc: 7f:f7:7e:54:0c:c4:4d:d4:c1:02:0b:c6:2c:79:a6: af:f0:f8:d8:93:ff:17:1b:aa:15:a5:15:2b:ab:5e: 80:ac:e5:2b:23:a6:1a:a1:05:ab:72:c7:6d:a3:31: ac:8e:d1:be:89:4f:a3:f0:83:3e:24:77:e9:13:fc: 27:de:32:5d:e6:d7:cb:9e:ad:d8:80:f4:b7:fb:d2: de:ce:34:7a:18:57:0f:d9:b5:e3:f3:ad:19:f7:a2: fb:6a:44:8d:42:44:22:da:6f:17:ef:27:64:60:50: da:82:11:7f:5e:50:c8:9f:f6:8e:2c:19:65:e1:5e: 69:67:88:47:ca:91:b5:39:f7:81:19:07:f0:3e:76: 90:89:6c:41:14:80:bf:7d:76:df:45:22:44:04:b9: 13:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DD:98:2D:C2:2B:B3:4C:D9:A4:2C:90:66:7A:0E:13:4C:D9:F5:FE X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:40:c4:da:11:41:a0:2e:aa:82:81:1a:ce:af:a9:88:33:5e: 24:8f:82:d2:25:41:34:8a:15:6c:f6:ac:ab:a2:32:1d:b5:71: f8:5e:d9:9c:a2:75:5c:00:04:df:8d:63:81:95:76:b9:26:0f: 8e:3a:93:38:1e:55:be:1f:f9:a6:cc:ff:91:bf:65:ef:a2:de: d4:1c:0a:ed:b6:f4:d8:9f:98:f6:58:02:f1:5e:d0:00:6e:74: 3f:79:6e:8e:36:3b:5f:22:27:4e:d6:3c:78:7e:ad:db:37:91: 10:e7:8f:0f:79:21:f1:a4:65:47:13:b7:fa:6f:ec:67:39:1f: 71:3d:3c:1d:d3:77:fa:41:29:50:fe:dd:05:35:44:a2:df:c3: 92:af:02:39:90:d3:9a:46:f5:a1:79:fb:90:26:40:8b:6d:39: 5b:9f:b3:0e:b1:19:7a:eb:9b:22:bd:de:73:10:8f:39:29:0d: 23:47:77:55:92:42:94:5e:fe:40:84:a4:88:f8:c1:fe:38:e6: 06:f4:6a:2b:c2:76:95:d2:bf:b5:b6:d6:68:7a:39:bb:64:31: 44:da:aa:53:8d:b5:3e:fc:8e:1b:7e:cb:02:ed:9f:cd:1d:c4: db:06:9f:ad:1a:1e:d6:e5:cb:89:95:fb:92:ee:ae:ae:0a:1a: f1:b2:8e:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjYwNTEyMTQxOTI0WhcNMjYwNTE5MTQxOTI0WjAYMRYwFAYD VQQDEw02YTAzMzZlZC05NjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEeYdVbSLPBZwXqBVNyNXDn6ITbtg28WT+EtiYb4pZ0AN6eomYq3hTth3dfJ qdFpAH+pSlWwDZFhmduBMMOx6ROZwA67AFsfm2kMaAMJXX0nWaQMphMoGJR6KUxi rZIGo89Bz25Eh8x/935UDMRN1MECC8Yseaav8PjYk/8XG6oVpRUrq16ArOUrI6Ya oQWrcsdtozGsjtG+iU+j8IM+JHfpE/wn3jJd5tfLnq3YgPS3+9LezjR6GFcP2bXj 860Z96L7akSNQkQi2m8X7ydkYFDaghF/XlDIn/aOLBll4V5pZ4hHypG1OfeBGQfw PnaQiWxBFIC/fXbfRSJEBLkTNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/dmC3C K7NM2aQskGZ6DhNM2fX+MB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN0DE2hFBoC6qgoEazq+piDNeJI+C0iVBNIoVbPasq6IyHbVx+F7ZnKJ1XAAE 341jgZV2uSYPjjqTOB5Vvh/5psz/kb9l76Le1BwK7bb02J+Y9lgC8V7QAG50P3lu jjY7XyInTtY8eH6t2zeREOePD3kh8aRlRxO3+m/sZzkfcT08HdN3+kEpUP7dBTVE ot/Dkq8COZDTmkb1oXn7kCZAi205W5+zDrEZeuubIr3ecxCPOSkNI0d3VZJClF7+ QISkiPjB/jjmBvRqK8J2ldK/tbbWaHo5u2QxRNqqU421PvyOG37LAu2fzR3E2waf rRoe1uXLiZX7ku6urgoa8bKO1A== -----END CERTIFICATE-----Generated at Wed May 13 03:04:33 2026 by rpki-client