
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json)
Hash identifier: UWfVnwj1uu+lsTP8qJYVoeTqi908z/dWp0mhVQNHMY4=
Subject key identifier: 6E:9A:15:FD:82:69:E8:5B:92:ED:A2:60:10:2A:F7:EC:42:30:6D:03
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial: 3604
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
Manifest number: 3596
Signing time: Sun 20 Sep 2026 14:19:03 +0000
Manifest this update: Sun 20 Sep 2026 14:19:03 +0000
Manifest next update: Sun 27 Sep 2026 14:19:03 +0000
Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: O4H9c7JF/irobue8aOf3r+b33xuPPyJmmMymVxORZcg=)
2: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=)
3: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: iAjJeW7mv0SQMiUZA706Y7e5Dpr+uJ1EKTAhmx1r1Ho=)
4: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: gLPTWrm2PPekN94x5WPKoFXaMR9NBRCv5mD6xWQxTlQ=)
5: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=)
6: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: oYQNkpcQFkrJq7hNKWTpwJS+ixdzI6MgGMC3Udqv1Uw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13828 (0x3604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Validity
Not Before: Sep 20 14:19:03 2026 GMT
Not After : Sep 27 14:19:03 2026 GMT
Subject: CN=6aafeb57-aeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:75:b6:ca:54:ba:0a:46:0d:20:c7:4f:ce:
3d:7f:14:bf:31:d0:c2:85:9f:c6:fd:6f:60:6d:67:
1b:91:26:dc:15:5a:3f:87:9f:f9:8c:48:75:94:5b:
28:ca:80:ac:ea:c9:89:4f:6e:36:59:52:96:bb:ff:
f0:3d:91:be:22:c2:e4:ec:a9:0f:49:d2:21:f7:56:
cb:d7:49:10:4a:d5:23:c1:a8:4b:f4:a8:7c:16:44:
73:87:52:96:72:47:52:59:8f:76:a7:90:50:3b:f5:
41:2e:d6:9b:ff:9d:57:17:17:75:dd:9c:66:45:00:
5b:09:b9:46:61:8f:f0:c4:ad:b4:9b:93:5e:f0:ba:
41:f1:ed:c6:e1:a8:66:48:85:f6:fb:43:d4:cf:86:
65:23:0b:be:7d:67:6d:94:97:83:89:4d:38:e1:20:
75:8d:73:8b:d9:dd:53:55:3f:f6:07:30:4d:7c:6e:
d4:fe:9a:05:2a:12:aa:2b:d1:41:00:e2:e9:8f:50:
40:ee:5b:dc:29:6b:9d:cc:87:e9:80:75:f1:e1:af:
43:a7:2a:be:ef:86:8c:f2:45:93:7f:73:99:79:2e:
3c:b7:c6:db:50:08:e3:1c:fc:82:0d:92:19:c0:ad:
65:85:de:b7:0f:db:23:cb:da:8d:e3:2b:a4:20:5e:
39:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9A:15:FD:82:69:E8:5B:92:ED:A2:60:10:2A:F7:EC:42:30:6D:03
X509v3 Authority Key Identifier:
keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:8e:9e:70:ec:16:12:bf:cb:e7:af:8d:eb:13:6a:77:ff:f8:
1c:10:38:76:d7:80:d1:bc:98:da:c3:67:bf:41:c6:d5:61:cb:
b3:14:c9:4c:f1:ec:00:45:7c:b9:2b:ab:8a:55:71:84:31:ac:
b6:4d:24:8c:f7:09:f1:70:89:d4:0b:ce:d0:81:2e:9e:f7:81:
a4:53:4b:49:f4:14:41:7a:f5:78:41:e6:4c:51:7e:2b:83:2f:
47:eb:56:10:42:48:7d:bf:b4:30:79:3d:d4:d1:ac:a2:20:f4:
98:08:4f:62:78:30:23:ab:40:4f:9b:92:04:6e:84:f5:f5:21:
b3:7b:d9:e6:bb:b7:3e:68:f2:5c:b2:92:bb:d9:d6:82:b8:06:
27:d2:ad:38:61:44:8c:d9:b3:9d:b9:58:60:c7:e3:b7:20:fd:
47:8e:1a:be:ad:63:1e:2b:ae:3c:2b:d6:17:c9:84:42:12:c2:
a4:19:4c:b4:1e:99:ec:7e:c5:f6:be:af:25:cf:9b:7a:e5:2e:
99:2d:e8:3d:d5:ce:8e:d5:47:e6:ec:29:0c:66:91:93:5a:64:
5a:80:cf:fc:34:6c:cc:09:80:85:74:2e:81:36:7b:98:ae:52:
12:ff:1b:3b:eb:c7:0b:98:77:85:6d:f5:a1:0f:b8:bd:f0:a6:
2e:4e:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:04:09 2026 by rpki-client