
$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json)
Hash identifier: +B8VY68w6maLEhES3PCsT75BswLZsmOTa6/GYvRTVdM=
Subject key identifier: 01:CE:66:D1:F3:E3:18:DC:74:AC:F9:EC:B4:7B:E2:07:5B:80:EF:A3
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial: 35DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
Manifest number: 356F
Signing time: Mon 06 Jul 2026 14:19:33 +0000
Manifest this update: Mon 06 Jul 2026 14:19:32 +0000
Manifest next update: Mon 13 Jul 2026 14:19:32 +0000
Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: HG5KGXJAEV9hQBx43wPq/ZvDC4Pz3Mg5mze25MmBQlc=)
2: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=)
3: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: iAjJeW7mv0SQMiUZA706Y7e5Dpr+uJ1EKTAhmx1r1Ho=)
4: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=)
5: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: gLPTWrm2PPekN94x5WPKoFXaMR9NBRCv5mD6xWQxTlQ=)
6: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: oYQNkpcQFkrJq7hNKWTpwJS+ixdzI6MgGMC3Udqv1Uw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 14:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13789 (0x35dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Validity
Not Before: Jul 6 14:19:32 2026 GMT
Not After : Jul 13 14:19:32 2026 GMT
Subject: CN=6a4bb974-415e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:48:59:47:78:eb:9f:d3:1f:d7:28:9e:e0:
27:11:1f:e4:a2:9b:dd:59:e9:e1:45:22:cb:00:eb:
3e:c1:90:aa:81:d9:be:cb:0c:22:66:e8:49:bd:03:
91:aa:00:51:b0:89:2d:ef:28:d3:4b:87:93:a4:3f:
70:2b:6e:b9:88:fa:4f:f6:02:8b:cf:8c:ab:9c:34:
bd:1c:fd:68:6a:32:81:48:7f:17:a5:65:3d:81:79:
ab:d6:91:32:45:3d:c5:25:c4:29:88:a1:51:82:30:
b5:39:ad:d2:13:2f:6e:a8:2d:a2:15:6b:27:db:21:
e4:4c:15:07:21:66:a0:40:8c:3b:1d:8d:4a:fd:cc:
1e:bf:96:6d:b0:ac:ca:7e:49:e7:f8:ba:0e:d6:37:
17:02:4e:4f:bc:03:60:33:6f:f9:91:c3:ca:03:6c:
82:2a:aa:72:cd:e6:64:cc:7d:a7:d7:d6:0f:0e:36:
30:6d:32:13:48:52:8e:c0:81:6d:b9:84:aa:55:1b:
0b:dc:17:56:97:d9:99:f2:19:1e:98:c0:41:d1:01:
5b:2a:ac:0f:d3:15:14:3f:f5:bb:fd:f5:c0:ba:8b:
e7:1c:d1:51:06:70:c0:1d:8f:cb:07:5d:87:e9:79:
c1:40:a3:d0:5a:2c:65:66:a5:6d:eb:a8:fe:41:97:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CE:66:D1:F3:E3:18:DC:74:AC:F9:EC:B4:7B:E2:07:5B:80:EF:A3
X509v3 Authority Key Identifier:
keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:9a:f8:45:1d:a2:20:b5:44:74:d1:14:28:b9:0d:f4:e9:b0:
47:5f:1f:83:02:ee:96:26:f1:ad:46:cd:7e:d0:36:cd:88:5e:
ec:7b:bf:c4:8c:9c:eb:81:f8:68:39:00:af:a7:df:a1:b3:cc:
70:84:76:89:cd:92:eb:a5:8a:de:5d:27:f9:10:97:b8:94:f4:
f6:13:76:52:26:9b:46:3e:30:0a:6d:9a:10:58:42:bd:d4:36:
49:b8:9f:f1:36:bc:e1:de:39:19:7c:4b:c5:6a:f0:f2:30:72:
bd:7e:d2:22:85:60:cd:cd:68:9d:cd:53:e4:5b:06:a2:3b:12:
a7:5d:d9:5d:f8:f1:cc:88:fc:17:1f:1f:46:14:53:eb:af:fb:
c6:43:9c:ea:69:7e:60:53:62:e1:49:92:51:7a:15:cc:02:a2:
09:c9:da:84:d6:3e:a5:91:f6:fd:77:2f:08:1b:d7:76:d6:d2:
7a:b3:ca:a4:35:2f:dc:e0:59:2b:a9:a6:bc:37:32:85:b5:bd:
e5:1d:80:fd:5b:9b:b8:ba:4d:b9:6b:08:cb:da:f1:11:1c:8d:
d5:aa:ed:52:e7:54:78:3b:51:c2:ce:92:85:28:27:55:20:64:
e5:2a:6f:2c:96:aa:df:bf:63:56:94:86:c5:ef:8e:a8:ef:16:
38:8d:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 07:51:18 2026 by rpki-client