
$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json)
Hash identifier: T5+D11OlzTwtrJ0a7YJqjwc9zfmZH4bD/4zvFgXry7A=
Subject key identifier: B5:40:23:72:CB:66:64:AC:67:FE:B5:51:B3:F9:FD:24:57:B5:7E:81
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial: 35E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
Manifest number: 3577
Signing time: Wed 22 Jul 2026 14:19:30 +0000
Manifest this update: Wed 22 Jul 2026 14:19:29 +0000
Manifest next update: Wed 29 Jul 2026 14:19:29 +0000
Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: Z4H6+Jsrt/4vvxyjE0DrR+7cBGUBtd5OLa1BKwsuTuI=)
2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: gLPTWrm2PPekN94x5WPKoFXaMR9NBRCv5mD6xWQxTlQ=)
3: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: oYQNkpcQFkrJq7hNKWTpwJS+ixdzI6MgGMC3Udqv1Uw=)
4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: iAjJeW7mv0SQMiUZA706Y7e5Dpr+uJ1EKTAhmx1r1Ho=)
5: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=)
6: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13797 (0x35e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Validity
Not Before: Jul 22 14:19:29 2026 GMT
Not After : Jul 29 14:19:29 2026 GMT
Subject: CN=6a60d172-2861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:a3:e2:f9:28:48:09:b0:b6:e7:7d:fe:55:
79:e6:e2:1b:d9:4d:94:24:18:b6:1f:49:04:ff:0a:
77:09:83:59:20:04:45:4c:eb:3b:79:45:a4:63:18:
20:e3:70:9e:5c:f7:99:b3:26:9d:c3:1c:6d:e2:ef:
92:63:c5:d9:a0:04:05:a9:e6:9a:83:10:4d:ef:84:
2e:05:13:de:da:7e:87:6b:61:25:48:da:3b:13:6d:
27:38:1b:10:97:f6:be:31:40:5d:01:45:d1:e6:1c:
1e:c9:8e:1c:08:35:74:88:20:ae:50:af:d3:cf:fc:
89:61:3e:e2:7e:56:7c:6b:44:bf:d4:7c:82:1b:ea:
d7:ed:ac:67:35:70:d3:22:fa:48:99:01:07:28:76:
b7:71:6e:d9:ea:4a:05:cf:eb:5c:73:9c:63:0e:14:
fe:71:8e:b3:81:a2:4b:64:d8:21:b7:ad:40:49:6d:
a2:c5:13:b5:68:1c:92:f6:78:d5:5e:3b:ec:18:41:
6c:4e:b2:eb:1b:0d:a8:f7:8a:a4:79:df:09:56:7e:
5e:51:b3:be:84:5e:12:4b:cc:78:73:89:6d:3d:79:
7e:ea:8d:db:dd:55:03:29:6e:81:34:19:ac:c7:18:
b7:9d:86:fc:77:e7:52:44:3f:80:2b:26:e6:2a:c6:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:40:23:72:CB:66:64:AC:67:FE:B5:51:B3:F9:FD:24:57:B5:7E:81
X509v3 Authority Key Identifier:
keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:46:db:04:13:b4:a1:d9:d9:75:7a:a8:de:a8:d0:93:0e:16:
94:36:ae:a0:69:ab:98:fd:58:b0:e3:f0:cc:e1:87:3f:f0:79:
43:31:2d:2c:60:f2:60:c6:d0:2d:1f:cb:99:97:7e:0e:6c:39:
1e:41:ab:17:64:57:67:d4:06:9f:b3:34:d9:14:61:e7:4c:73:
fc:78:da:8f:59:a2:01:14:11:a8:55:03:06:06:22:45:c7:52:
14:cc:91:22:3e:c4:f1:fc:c6:ae:b8:fe:9f:a7:07:22:87:6f:
fa:16:18:6f:ea:ad:54:7a:31:74:10:cf:50:ef:5c:d5:b1:39:
08:b2:d8:0d:1f:10:90:04:f1:d0:dc:96:8b:d0:57:a5:c0:8d:
6a:cc:51:14:43:cb:94:e6:2a:4c:33:02:b1:8b:2d:04:43:3d:
c0:60:42:5f:e5:9c:25:09:f3:04:2e:61:db:3f:2e:3e:d5:8b:
07:91:27:74:4c:48:1b:1d:b3:83:43:39:a0:fd:cf:ea:db:cc:
eb:97:ec:ea:64:b9:ea:a0:eb:f9:46:5f:9e:c4:52:4d:85:e4:
47:48:bd:d1:56:3a:cc:fe:9d:fe:43:30:a2:ae:7f:56:36:51:
72:3d:97:0f:41:41:e5:f6:ac:79:96:ec:5b:87:35:86:09:71:
43:da:25:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:30 2026 by rpki-client