
$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
File: 36hgRQpvzrHG57jU_1SxVBobabM.mft (raw, json)
Hash identifier: SYf6OjcDKOT8LS9lMmxgKylKwmyNbvkw75YBI2B/yrc=
Subject key identifier: F1:5D:A9:72:92:A3:85:55:1D:1F:DB:A7:3F:88:44:3F:14:7F:8C:D2
Authority key identifier: DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3
Certificate issuer: /CN=A91534B8/serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
Certificate serial: 0332
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
Manifest number: 0324
Signing time: Wed 11 Mar 2026 00:36:25 +0000
Manifest this update: Wed 11 Mar 2026 00:36:24 +0000
Manifest next update: Wed 18 Mar 2026 00:36:24 +0000
Files and hashes: 1: 36hgRQpvzrHG57jU_1SxVBobabM.crl (hash: MV+Vxzt4wDYTo0mEUkAk/hfrmKGRjWeTD074SNj3bnU=)
2: 56C4B5083DF511ED98215F18C4F9AE02.roa (hash: eDkYP5k4VqPL3dwJbL2mqB+b8x4YcSaltVXpsNGVZfY=)
3: B0FA33FE6F9611ED8A672F69C4F9AE02.roa (hash: 9w8S4OWRKiHn00WgTxK8sW6EL9lR2MtKh2D9FC7SrtA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl
rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 00:36:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 818 (0x332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91534B8, serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
Validity
Not Before: Mar 11 00:36:24 2026 GMT
Not After : Mar 18 00:36:24 2026 GMT
Subject: CN=69b0b909-aca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b0:9a:5d:31:1b:46:c1:74:43:18:72:1d:02:
7e:37:1c:e2:17:e1:a8:1c:db:9f:bf:dc:b9:ae:f1:
5f:6a:65:67:ae:ed:2b:26:86:4a:c6:33:b6:f6:43:
4e:43:c5:9c:e9:f3:81:9e:ec:6a:34:0f:69:11:03:
c7:c4:ce:be:c3:49:17:d9:0f:8b:60:a4:dc:c0:67:
4b:73:65:de:d1:f8:b0:ea:78:03:75:73:39:67:c1:
ca:b9:84:23:4b:e3:f3:df:13:d6:2c:61:e2:2e:23:
8a:1c:17:02:a2:f6:96:0f:a2:b9:05:f4:c2:9b:d9:
e7:71:4e:07:d3:be:4f:68:9f:bd:97:20:c4:42:74:
61:d2:98:57:c8:7f:4f:22:23:b1:3a:1e:80:f9:b4:
69:55:8d:b1:48:f1:ea:8d:53:31:2a:92:34:bc:ad:
d8:69:fc:79:62:b9:f7:95:fa:b8:2f:6d:f7:83:8a:
40:db:e6:e5:a5:5c:e4:04:14:8e:43:af:86:e0:48:
cf:e3:9c:6e:5f:65:37:62:e5:b9:4d:d9:18:c1:e5:
bb:cb:01:f1:7d:cf:b4:33:5f:cc:34:aa:03:3c:94:
57:d7:49:5b:ef:48:cf:99:78:fe:53:51:3a:b3:10:
50:b8:3e:8d:4e:e9:44:bb:77:d7:f9:fb:f2:09:aa:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5D:A9:72:92:A3:85:55:1D:1F:DB:A7:3F:88:44:3F:14:7F:8C:D2
X509v3 Authority Key Identifier:
keyid:DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:88:e7:5b:7b:ec:83:c0:ef:96:b8:25:3b:b8:b3:a0:87:29:
21:ed:9c:02:b9:02:8b:95:3b:16:8c:4e:35:30:b9:0a:fc:4e:
f0:ec:fb:8c:0c:1f:39:b7:60:ad:4f:2c:d9:65:5d:26:c6:96:
db:a2:76:5a:cf:39:50:24:54:c6:45:72:b4:2e:f1:b9:38:c0:
f4:d7:9e:76:3a:ce:da:b4:da:6e:74:5d:dc:cc:2b:1d:85:5f:
a2:d2:89:17:b5:45:4c:0b:17:1f:40:50:b7:a7:85:6d:62:2d:
f0:b3:12:9c:3e:d3:18:8a:81:a0:b6:d1:16:5f:f7:cd:87:97:
d4:f3:8f:5b:26:b4:f9:95:5c:9b:6b:1a:d6:ad:52:d0:18:2b:
bb:34:5d:55:1d:f3:34:5a:66:f0:fb:8d:06:dd:bb:bb:37:b2:
a5:25:c6:8a:68:08:b5:ed:f6:10:6a:4f:19:9c:d3:32:0d:3f:
20:32:aa:10:f4:0c:32:ff:ce:0b:2d:03:08:13:fd:08:a6:61:
14:ee:5e:33:9b:53:bd:06:e6:b7:5c:fa:1d:88:54:86:e5:47:
b2:8e:19:61:a8:9c:f0:d4:32:3c:29:64:fa:ec:19:30:dd:9e:
8e:f6:1c:2c:a9:78:18:f4:f9:33:c9:64:c3:cf:30:e7:71:db:
c4:f1:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:15:06 2026 by rpki-client