$ rpki-client -vvvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: ROS4CdSBFALlNxEw3SXn05u5XPn7XrZeniP5gved83Q= Subject key identifier: 7E:95:A5:A9:53:50:FC:AB:53:3A:2F:3B:CD:E8:DD:78:DA:8F:D7:91 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 35F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 3586 Signing time: Thu 20 Aug 2026 14:19:17 +0000 Manifest this update: Thu 20 Aug 2026 14:19:17 +0000 Manifest next update: Thu 27 Aug 2026 14:19:17 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: LhF/q8abJkErGXX+XC4+uhQGLL/9Ud6KUq8CZHpwPwk=) 2: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=) 3: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: iAjJeW7mv0SQMiUZA706Y7e5Dpr+uJ1EKTAhmx1r1Ho=) 4: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: oYQNkpcQFkrJq7hNKWTpwJS+ixdzI6MgGMC3Udqv1Uw=) 5: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=) 6: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: gLPTWrm2PPekN94x5WPKoFXaMR9NBRCv5mD6xWQxTlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13812 (0x35f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Aug 20 14:19:17 2026 GMT Not After : Aug 27 14:19:17 2026 GMT Subject: CN=6a870ce5-6d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:be:01:06:9e:47:34:3d:06:4b:ec:6a:8b: 34:20:ae:b3:c1:41:1d:64:28:76:95:c7:35:b0:0a: f8:2e:65:c4:08:7b:a5:ee:15:8f:2f:c0:2d:ff:28: e5:d8:9c:a2:3d:9a:20:6d:bd:3b:5c:b4:f3:36:82: c4:21:a2:ca:0d:9f:f9:73:c4:9f:55:1f:8a:fd:65: a9:46:da:94:27:0a:70:56:e7:a7:85:ab:c6:e4:0a: 8e:ac:1d:11:74:c8:60:58:0c:f1:9f:e5:27:fb:3f: 16:85:61:ef:6a:13:73:af:ff:24:d8:fc:cf:ae:0c: 6c:30:ae:a6:76:a3:67:d5:43:67:73:6a:88:ae:ab: 95:11:ad:d3:8d:d2:63:b2:e8:61:c1:20:72:cc:86: 90:54:b1:99:29:02:83:11:3b:d8:34:a2:1e:3a:10: 1b:5d:26:12:27:68:d3:75:07:b7:98:dd:10:49:9b: bc:e0:a3:48:9b:32:98:c7:6c:3c:c1:ac:ff:91:db: 2d:b5:4e:ca:cb:59:39:22:f2:ed:1a:de:20:23:af: 6b:52:e3:14:7c:b6:f4:c6:50:b4:4a:99:96:00:b7: 7d:58:03:b5:01:90:9c:01:f8:8d:c6:85:89:4b:21: ff:a0:a6:b6:02:fb:e5:4b:f3:d7:40:5c:bc:f3:ec: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:95:A5:A9:53:50:FC:AB:53:3A:2F:3B:CD:E8:DD:78:DA:8F:D7:91 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:22:12:9d:52:4e:93:48:22:b1:56:4b:47:82:9f:59:64:b8: a2:e4:14:8f:08:94:3c:34:40:cf:79:d9:a3:e5:84:42:a2:1e: 79:4f:e9:aa:8f:3c:4d:37:c5:93:d2:63:a9:af:82:05:e0:c0: 21:59:09:62:05:96:1e:46:85:ec:fc:7e:2d:3e:26:28:95:04: 48:f1:13:5e:50:11:de:b0:78:d5:b6:eb:6c:2f:cd:a9:42:c5: a4:d4:de:ca:1f:69:84:68:2b:22:87:be:57:02:ee:6e:a7:ea: d3:65:f8:17:a1:8f:02:6b:d4:4a:8e:ea:7f:e4:12:06:7c:c9: ec:52:18:8f:78:0c:63:5f:cd:bf:33:f8:6b:d8:65:f2:d5:bf: 1a:82:a9:5c:77:e0:3d:b9:ce:bd:c1:e0:e8:e0:4c:69:a9:61: 14:1c:0d:f0:03:b9:ae:7b:dd:5f:6c:51:5e:5f:8d:da:fe:5d: ac:e4:f5:7f:e3:0c:dc:7a:48:76:14:46:81:54:25:2d:f2:95: 7d:40:95:12:c5:a3:06:0e:7c:60:b3:b2:12:5c:49:7e:be:c5: a4:d6:e5:66:71:73:6f:25:ff:31:95:ad:74:ae:3b:f0:09:41: 0c:2c:2f:f0:45:18:07:3a:a0:c5:ee:fb:35:97:7b:db:65:cc: c7:f2:d2:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjYwODIwMTQxOTE3WhcNMjYwODI3MTQxOTE3WjAYMRYwFAYD VQQDEw02YTg3MGNlNS02ZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/++AQaeRzQ9Bkvsaos0IK6zwUEdZCh2lcc1sAr4LmXECHul7hWPL8At/yjl 2JyiPZogbb07XLTzNoLEIaLKDZ/5c8SfVR+K/WWpRtqUJwpwVuenhavG5AqOrB0R dMhgWAzxn+Un+z8WhWHvahNzr/8k2PzPrgxsMK6mdqNn1UNnc2qIrquVEa3TjdJj suhhwSByzIaQVLGZKQKDETvYNKIeOhAbXSYSJ2jTdQe3mN0QSZu84KNImzKYx2w8 waz/kdsttU7Ky1k5IvLtGt4gI69rUuMUfLb0xlC0SpmWALd9WAO1AZCcAfiNxoWJ SyH/oKa2AvvlS/PXQFy88+zx6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH6VpalT UPyrUzovO83o3Xjaj9eRMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALyISnVJOk0gisVZLR4KfWWS4ouQUjwiUPDRAz3nZo+WEQqIeeU/pqo88TTfF k9Jjqa+CBeDAIVkJYgWWHkaF7Px+LT4mKJUESPETXlAR3rB41bbrbC/NqULFpNTe yh9phGgrIoe+VwLubqfq02X4F6GPAmvUSo7qf+QSBnzJ7FIYj3gMY1/NvzP4a9hl 8tW/GoKpXHfgPbnOvcHg6OBMaalhFBwN8AO5rnvdX2xRXl+N2v5drOT1f+MM3HpI dhRGgVQlLfKVfUCVEsWjBg58YLOyElxJfr7FpNblZnFzbyX/MZWtdK478AlBDCwv 8EUYBzqgxe77NZd722XMx/LSuA== -----END CERTIFICATE-----Generated at Sat Aug 22 05:53:23 2026 by rpki-client