$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: yzVyeB66XEDywFfqsJrO5qBM+L/x8X3SgHhiBOeNHpE= Subject key identifier: E0:47:FC:CA:0B:7B:B7:6D:E9:FA:6E:F4:00:99:7D:F0:24:B0:80:CB Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 35AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 3540 Signing time: Sat 04 Apr 2026 15:10:25 +0000 Manifest this update: Sat 04 Apr 2026 15:10:24 +0000 Manifest next update: Sat 11 Apr 2026 15:10:24 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: BksZBoeNLsbyEPMPD2gloMVqMlT35H4cdMNcVOpC8Wk=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: gLPTWrm2PPekN94x5WPKoFXaMR9NBRCv5mD6xWQxTlQ=) 3: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: iAjJeW7mv0SQMiUZA706Y7e5Dpr+uJ1EKTAhmx1r1Ho=) 5: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=) 6: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: oYQNkpcQFkrJq7hNKWTpwJS+ixdzI6MgGMC3Udqv1Uw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13742 (0x35ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Apr 4 15:10:24 2026 GMT Not After : Apr 11 15:10:24 2026 GMT Subject: CN=69d129e1-3ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:a5:8e:26:a5:34:55:d8:1e:48:e6:e2:76: 7b:89:62:73:95:6c:cf:14:8c:3d:35:a0:77:23:51: 32:1f:a9:f7:29:c9:91:38:aa:7a:a1:d8:36:23:60: 16:d4:35:8e:28:88:f6:9f:38:0f:51:f5:7c:85:63: 0f:81:a7:a0:b0:84:ef:be:8b:39:f9:3d:08:3f:c2: 29:d2:d9:4b:e4:b3:59:23:b6:27:80:87:c2:03:ec: 62:4d:6b:a1:10:5c:13:e2:e2:d8:7e:df:ce:1b:b1: c6:cb:03:73:41:c3:e9:7a:48:9e:fe:51:6e:62:27: 97:a4:3f:03:de:6f:36:d4:56:64:41:c8:df:05:90: 35:8e:34:e2:0e:a0:0b:9b:1b:64:a2:34:e3:0f:1a: 59:39:74:01:de:e0:24:d5:55:26:28:ee:c2:26:54: 2f:57:92:7c:f6:79:6f:e2:42:b4:9c:24:70:81:1f: 7d:c7:7e:0d:e8:d9:ce:45:8c:7c:7a:8e:ef:d3:d3: 00:db:cb:f3:61:cc:8c:55:f5:fb:65:bc:46:d4:ef: 38:b5:10:35:a2:a1:20:e5:5e:52:b5:7b:18:71:c8: 1c:60:cb:c1:52:a0:26:81:71:9d:3b:e0:a1:2f:07: 9c:03:41:60:ec:7d:c9:96:90:49:74:28:75:47:de: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:47:FC:CA:0B:7B:B7:6D:E9:FA:6E:F4:00:99:7D:F0:24:B0:80:CB X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b8:95:0a:51:1a:d7:4d:0d:f5:0b:20:8a:49:5c:bc:b7:90: b6:48:b1:76:68:68:e2:74:b3:b8:32:f3:98:fc:79:59:00:35: d7:d6:c3:73:94:44:4c:7a:4b:80:41:40:15:66:96:7b:7f:e9: 0c:7a:01:47:bc:7d:d6:c7:54:54:4e:43:5a:a9:a2:92:24:cc: 64:32:a7:7c:ec:c9:ad:5e:ad:7f:b0:fc:d3:7a:a2:d7:f8:aa: 19:2a:ec:1f:ab:73:e0:5d:4d:75:0b:c2:36:76:fd:40:7b:07: 67:97:c9:e4:61:70:28:c4:ac:39:16:dd:ef:5f:c4:52:3d:ba: ae:f5:33:4a:72:3f:0e:f0:fe:7e:60:dd:74:0c:bd:00:af:86: e6:22:9d:04:8e:02:f0:8b:77:0e:a6:f4:8f:75:44:ea:12:69: d7:5b:74:15:bb:c7:b4:57:66:ea:ee:f7:c5:9a:24:c2:a5:35: 5f:6d:88:75:8b:1d:89:e8:37:fb:14:6f:4f:71:3a:6e:a0:c3: b8:a9:84:c9:2c:92:39:69:82:a0:ef:2b:33:64:69:15:c5:e0: 7b:fd:b5:74:03:97:53:16:a9:7f:ef:c9:40:3b:68:a7:59:b6: 3a:c3:ec:35:8f:a0:ab:32:5b:1d:ca:8d:1c:49:8b:3a:c2:36: 90:55:16:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjYwNDA0MTUxMDI0WhcNMjYwNDExMTUxMDI0WjAYMRYwFAYD VQQDEw02OWQxMjllMS0zZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgeljialNFXYHkjm4nZ7iWJzlWzPFIw9NaB3I1EyH6n3KcmROKp6odg2I2AW 1DWOKIj2nzgPUfV8hWMPgaegsITvvos5+T0IP8Ip0tlL5LNZI7YngIfCA+xiTWuh EFwT4uLYft/OG7HGywNzQcPpekie/lFuYieXpD8D3m821FZkQcjfBZA1jjTiDqAL mxtkojTjDxpZOXQB3uAk1VUmKO7CJlQvV5J89nlv4kK0nCRwgR99x34N6NnORYx8 eo7v09MA28vzYcyMVfX7ZbxG1O84tRA1oqEg5V5StXsYccgcYMvBUqAmgXGdO+Ch LwecA0Fg7H3JlpBJdCh1R96MVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOBH/MoL e7dt6fpu9ACZffAksIDLMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG7iVClEa100N9QsgiklcvLeQtkixdmho4nSzuDLzmPx5WQA119bDc5RETHpL gEFAFWaWe3/pDHoBR7x91sdUVE5DWqmikiTMZDKnfOzJrV6tf7D803qi1/iqGSrs H6tz4F1NdQvCNnb9QHsHZ5fJ5GFwKMSsORbd71/EUj26rvUzSnI/DvD+fmDddAy9 AK+G5iKdBI4C8It3Dqb0j3VE6hJp11t0FbvHtFdm6u73xZokwqU1X22IdYsdieg3 +xRvT3E6bqDDuKmEySySOWmCoO8rM2RpFcXge/21dAOXUxapf+/JQDtop1m2OsPs NY+gqzJbHcqNHEmLOsI2kFUWjA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:40:59 2026 by rpki-client