$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: uDG0+srAnOP2u3tkp27RF60hu6pSfDW4jDz728Ydb4M= Subject key identifier: 84:54:7D:47:95:6B:AF:B1:E6:6A:CD:F4:D4:99:1A:7B:98:65:37:67 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 35E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 357A Signing time: Tue 28 Jul 2026 14:19:29 +0000 Manifest this update: Tue 28 Jul 2026 14:19:28 +0000 Manifest next update: Tue 04 Aug 2026 14:19:28 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: dMWymjaasF3IBh+l7qkrCY92qKBzw0ZJmOXqRFbylG8=) 2: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=) 3: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: iAjJeW7mv0SQMiUZA706Y7e5Dpr+uJ1EKTAhmx1r1Ho=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: oYQNkpcQFkrJq7hNKWTpwJS+ixdzI6MgGMC3Udqv1Uw=) 6: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: gLPTWrm2PPekN94x5WPKoFXaMR9NBRCv5mD6xWQxTlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13800 (0x35e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Jul 28 14:19:28 2026 GMT Not After : Aug 4 14:19:28 2026 GMT Subject: CN=6a68ba71-23e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4a:fb:19:b2:37:a8:d2:90:4d:1b:1f:7c:ea: fd:d9:e3:44:0c:c1:4f:47:31:bb:ab:89:43:49:61: fc:ff:12:3a:e8:8a:d5:06:b5:04:f3:50:fb:d2:e9: 11:7f:75:cb:47:f8:11:b6:e6:35:c3:88:2e:ff:d6: 4b:92:f3:f0:de:ef:92:62:de:f8:ff:26:1c:db:60: ce:58:36:55:5d:68:af:69:f3:dd:af:5a:c5:bd:6c: ac:85:be:24:10:62:41:f0:c5:01:94:4f:e0:e6:f4: 89:65:c5:1d:bc:7e:d6:3b:bf:8b:56:20:3d:c0:62: 4e:dc:21:d8:26:b1:5e:7a:d1:41:61:91:3d:8e:1a: 2f:28:2e:ac:f5:8d:89:11:fe:d5:a3:26:1c:4f:8d: 7c:9c:25:f6:9e:6e:7c:bd:cf:72:fc:55:25:63:d3: c4:b4:aa:dd:53:da:cf:33:0d:83:2a:aa:e5:d8:5c: 78:6f:94:bb:5e:a6:ca:b5:de:ba:9f:9d:20:78:53: c5:55:87:57:ac:e9:ba:cd:a6:ff:4b:1e:4b:88:d8: 64:cc:5b:54:58:34:c3:94:96:b5:c9:9d:90:d8:d6: 6b:c0:76:7d:b7:f8:1b:71:c4:0f:f5:c1:b2:de:f9: dc:4a:a8:d3:d6:57:f6:58:3a:f5:ac:15:9a:46:97: 94:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:54:7D:47:95:6B:AF:B1:E6:6A:CD:F4:D4:99:1A:7B:98:65:37:67 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:37:38:cf:fd:f0:29:7b:52:24:8a:9b:35:60:f8:51:df:f5: d4:7c:a9:33:7b:25:1b:67:f2:f4:1b:f2:45:1a:da:3c:e6:eb: 0e:08:35:0c:e8:21:5a:85:28:fa:d2:1f:3e:21:23:12:63:04: 49:31:eb:a5:70:60:37:f3:cd:5b:9b:0d:be:a5:5e:ed:4d:53: 19:53:9d:c9:09:c7:87:f4:4a:d4:b8:82:11:7c:fb:5b:6c:3a: df:2e:94:13:57:6c:02:6c:aa:e4:cd:16:fc:90:43:56:29:10: 5d:1e:9e:eb:f6:b6:c5:16:81:43:aa:89:1e:83:53:57:d5:be: 38:4a:1b:c3:92:df:c8:09:d2:42:e7:38:ce:28:e4:8d:8f:b8: 0d:23:0f:85:bd:ce:ba:05:ec:3b:9e:5a:fe:3c:c8:65:3e:05: 04:7d:ff:96:7f:54:59:5d:cc:77:0e:61:88:5e:59:b9:de:aa: b2:f1:70:1f:0e:a0:9f:1a:fe:9d:0c:f5:e3:82:a5:a6:97:7c: a9:f3:7b:3c:b7:16:bb:93:cd:85:5e:0e:a3:46:e4:f3:8c:b3: 67:09:fd:d3:59:33:32:66:70:bb:57:f1:f4:d7:5e:90:77:70: 7f:9c:f2:49:3f:f3:2e:3c:f7:5a:22:9f:91:09:bc:71:ec:f4: 01:11:cc:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjYwNzI4MTQxOTI4WhcNMjYwODA0MTQxOTI4WjAYMRYwFAYD VQQDEw02YTY4YmE3MS0yM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlUr7GbI3qNKQTRsffOr92eNEDMFPRzG7q4lDSWH8/xI66IrVBrUE81D70ukR f3XLR/gRtuY1w4gu/9ZLkvPw3u+SYt74/yYc22DOWDZVXWivafPdr1rFvWyshb4k EGJB8MUBlE/g5vSJZcUdvH7WO7+LViA9wGJO3CHYJrFeetFBYZE9jhovKC6s9Y2J Ef7VoyYcT418nCX2nm58vc9y/FUlY9PEtKrdU9rPMw2DKqrl2Fx4b5S7XqbKtd66 n50geFPFVYdXrOm6zab/Sx5LiNhkzFtUWDTDlJa1yZ2Q2NZrwHZ9t/gbccQP9cGy 3vncSqjT1lf2WDr1rBWaRpeUJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRUfUeV a6+x5mrN9NSZGnuYZTdnMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZTc4z/3wKXtSJIqbNWD4Ud/11HypM3slG2fy9BvyRRraPObrDgg1DOghWoUo +tIfPiEjEmMESTHrpXBgN/PNW5sNvqVe7U1TGVOdyQnHh/RK1LiCEXz7W2w63y6U E1dsAmyq5M0W/JBDVikQXR6e6/a2xRaBQ6qJHoNTV9W+OEobw5LfyAnSQuc4zijk jY+4DSMPhb3OugXsO55a/jzIZT4FBH3/ln9UWV3Mdw5hiF5Zud6qsvFwHw6gnxr+ nQz144Klppd8qfN7PLcWu5PNhV4Oo0bk84yzZwn901kzMmZwu1fx9NdekHdwf5zy ST/zLjz3WiKfkQm8cez0ARHMjw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:20:45 2026 by rpki-client