
$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json)
Hash identifier: 2WbSq7MffGlXO8NR64Zt9RuhnG4u0a4EZKJgG39U0tw=
Subject key identifier: 56:14:68:27:CA:D1:CD:59:8E:29:CB:99:19:63:E5:DE:2D:D9:4A:36
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial: 35B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
Manifest number: 3546
Signing time: Thu 16 Apr 2026 14:19:12 +0000
Manifest this update: Thu 16 Apr 2026 14:19:11 +0000
Manifest next update: Thu 23 Apr 2026 14:19:11 +0000
Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: pIST16v1M4u0KSfqu4VakAdn2stJK/LTTyx1vRT/16Q=)
2: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: iAjJeW7mv0SQMiUZA706Y7e5Dpr+uJ1EKTAhmx1r1Ho=)
3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=)
4: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=)
5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: oYQNkpcQFkrJq7hNKWTpwJS+ixdzI6MgGMC3Udqv1Uw=)
6: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: gLPTWrm2PPekN94x5WPKoFXaMR9NBRCv5mD6xWQxTlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13748 (0x35b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Validity
Not Before: Apr 16 14:19:11 2026 GMT
Not After : Apr 23 14:19:11 2026 GMT
Subject: CN=69e0efdf-11eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:58:ba:de:77:23:cd:40:ef:6d:3b:64:49:
c5:e2:7b:a8:77:38:89:0d:e3:96:7c:8a:db:24:13:
23:5f:03:05:a9:1d:9c:6d:61:6a:51:f2:e7:2c:da:
ca:d7:c3:62:8e:42:1d:6f:7a:47:29:d2:02:25:56:
d7:ce:79:e9:13:40:19:c8:4a:0f:8d:30:84:d8:5f:
be:99:77:cb:5c:67:11:40:ea:e9:d2:06:ea:d5:d7:
7a:84:83:26:fc:36:ce:59:3b:a2:38:d8:a3:e9:b8:
7c:dc:dc:08:4d:03:05:47:92:45:57:1d:9a:9e:a1:
58:c1:f4:6b:36:a4:cd:13:71:ea:74:13:c2:36:12:
95:3b:09:a9:4c:d8:dc:c4:52:74:20:38:2c:0f:89:
52:33:f7:e8:b7:af:d6:8d:82:3e:02:8b:e2:65:57:
ed:42:d4:ee:7d:b5:8b:a6:0a:3c:d3:27:88:33:d4:
1e:99:9c:52:95:b3:b3:d1:21:15:17:f7:3b:c1:c7:
57:99:87:e1:0b:b2:e0:ce:1a:3f:81:c7:81:43:ea:
2b:60:f1:da:ce:d1:d6:bb:1e:dd:1a:78:48:f3:2c:
e7:20:4e:cb:d8:a7:40:01:31:9a:f6:96:90:58:00:
68:1c:c0:07:31:d3:5e:2f:63:6c:f3:23:fb:c5:49:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:14:68:27:CA:D1:CD:59:8E:29:CB:99:19:63:E5:DE:2D:D9:4A:36
X509v3 Authority Key Identifier:
keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:6f:f5:8c:d2:2c:55:dc:72:56:a9:fe:85:dc:c7:99:79:46:
06:f7:32:9c:07:50:e6:f7:85:7c:e4:16:1f:f8:b5:cc:c5:4d:
a4:48:f8:c1:23:bb:8e:e7:33:b6:7a:bc:13:16:4b:3c:27:bb:
4f:46:de:70:d4:d1:82:32:34:70:2d:0d:a4:e0:ab:82:56:b1:
55:8d:c6:4b:d4:c5:f2:66:c0:d0:8f:8f:05:8c:3b:77:22:bf:
6b:72:fe:34:d6:37:c6:92:88:fc:2d:36:3a:fb:e8:b2:a0:e7:
b1:fe:6e:cf:5d:ce:4d:78:da:22:83:07:21:cd:09:b0:83:f0:
74:83:75:fc:9c:e4:16:3f:13:94:a7:dd:9d:71:6b:b3:26:e1:
62:c3:06:e6:29:76:b1:83:07:e5:f6:15:e0:3c:ca:35:36:66:
b3:de:df:21:aa:89:60:a2:49:bb:a9:22:0f:7d:84:0a:a6:89:
ae:50:bc:79:6b:f5:c2:d9:68:1d:e4:a3:ae:0b:63:68:11:e8:
18:53:38:72:a0:62:3a:1e:41:b5:04:1a:44:4d:c3:e6:89:1b:
a8:37:62:74:0a:4e:b4:53:ac:b8:db:5e:30:aa:cc:ae:5c:21:
e7:a3:3d:d6:f2:44:4c:71:94:cc:af:8f:09:c5:e1:70:c5:f6:
aa:e2:97:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:04 2026 by rpki-client