
$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json)
Hash identifier: t1og6WTZ0yWes6vcgFWhMCxFfdsaqVULTZnYXH6HmO8=
Subject key identifier: BE:6C:26:57:A4:4B:2C:B4:E5:9E:1F:D7:6D:95:59:4F:2B:28:EC:94
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial: 35D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
Manifest number: 3563
Signing time: Fri 12 Jun 2026 14:19:18 +0000
Manifest this update: Fri 12 Jun 2026 14:19:17 +0000
Manifest next update: Fri 19 Jun 2026 14:19:17 +0000
Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: ufKvvo1UR8khciUHJ3pxJsMQ9V1Ui38q8y3ac6ko3IQ=)
2: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: oYQNkpcQFkrJq7hNKWTpwJS+ixdzI6MgGMC3Udqv1Uw=)
3: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: iAjJeW7mv0SQMiUZA706Y7e5Dpr+uJ1EKTAhmx1r1Ho=)
4: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=)
5: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: gLPTWrm2PPekN94x5WPKoFXaMR9NBRCv5mD6xWQxTlQ=)
6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13777 (0x35d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Validity
Not Before: Jun 12 14:19:17 2026 GMT
Not After : Jun 19 14:19:17 2026 GMT
Subject: CN=6a2c1566-871a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:2a:04:ae:cc:09:34:4f:f5:4c:e0:51:7c:
c3:2e:ce:61:4c:a5:1b:35:c8:28:e8:49:db:32:3f:
71:4e:0b:04:59:49:f2:40:48:d4:b7:c4:3f:51:87:
5b:9d:15:f9:cb:4e:37:b5:92:c5:ad:be:e1:4d:79:
1d:18:c0:18:b5:7e:7c:ac:26:40:e2:85:d7:df:2e:
9c:7e:5d:f6:0d:ec:de:6c:ca:a8:85:c9:31:48:52:
3e:5f:b0:d7:ad:41:e2:75:02:f6:71:9d:38:e5:02:
97:25:b4:46:26:60:a4:58:9c:50:b7:66:f5:71:48:
e5:f3:d3:ce:57:19:7d:a1:4c:f5:56:ad:ed:d0:e5:
76:5b:89:27:9f:fc:c9:23:e1:06:c5:67:0c:84:75:
54:45:6b:7a:ed:d6:6c:68:d8:49:89:51:3f:a2:bf:
f2:f2:fe:be:dc:7c:48:5f:08:68:aa:31:d4:d6:2d:
a7:b9:9c:cc:ae:0e:57:09:7f:57:6d:85:86:03:78:
40:80:4c:49:de:8b:c4:cc:09:40:7c:47:70:b6:af:
b7:97:3a:0e:80:a6:f6:6c:05:d4:39:6d:74:51:4c:
29:5f:80:f0:32:b7:16:ce:bf:b7:10:fc:cb:4f:3b:
cc:c8:b5:6e:1c:03:39:71:12:55:8d:05:a5:3f:e5:
b1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6C:26:57:A4:4B:2C:B4:E5:9E:1F:D7:6D:95:59:4F:2B:28:EC:94
X509v3 Authority Key Identifier:
keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:bb:e0:2f:cf:4c:69:6b:70:81:d2:d8:01:8e:8d:24:08:21:
7c:bb:b6:a1:14:d5:bb:8f:ca:cb:54:1c:36:ac:07:c4:19:80:
cd:a4:b9:2f:71:b4:9f:c0:46:29:b2:ba:fb:8e:10:f8:21:c5:
f8:f4:99:3e:6e:79:be:98:79:8c:3c:05:6c:47:80:39:82:28:
fc:d4:51:c9:7d:cd:6d:66:ae:3c:27:95:08:cd:f6:ba:ca:ee:
93:d8:6d:d6:01:44:fc:ad:15:55:21:de:19:ac:87:74:37:cd:
2d:cc:86:84:47:57:1d:64:8b:c1:05:8a:82:cc:ae:ec:3a:f0:
e8:d2:c5:f5:21:f9:cf:34:e9:dc:36:21:91:e5:9d:03:25:e6:
d4:7c:99:e8:bf:83:10:83:76:e6:80:12:05:0a:48:41:67:d2:
2f:35:c3:7a:5b:61:d9:a4:b2:62:e3:c6:9e:db:df:cb:76:e7:
d0:71:9b:74:2f:c8:d5:89:73:c6:fa:6b:36:03:ad:07:af:e3:
26:2e:68:9b:30:78:00:f5:14:09:a6:43:62:cd:cf:4a:55:1e:
a3:89:e2:eb:2e:c0:eb:02:1f:00:8f:6c:b5:57:61:b2:5e:2b:
96:77:28:96:0d:48:13:f0:33:1e:b7:69:fe:3c:4b:09:a5:97:
05:24:df:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:19:36 2026 by rpki-client