
$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
File: 36hgRQpvzrHG57jU_1SxVBobabM.mft (raw, json)
Hash identifier: Gq0HlL1nzEo2O+yPAvLFt+RSfroRQzky4C4xeG6vRcw=
Subject key identifier: DF:16:8E:68:D3:41:3D:6B:7A:E2:F1:38:3E:8F:E1:9C:C6:11:C1:D7
Authority key identifier: DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3
Certificate issuer: /CN=A91534B8/serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
Certificate serial: 0345
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
Manifest number: 0337
Signing time: Fri 17 Apr 2026 00:59:50 +0000
Manifest this update: Fri 17 Apr 2026 00:59:49 +0000
Manifest next update: Fri 24 Apr 2026 00:59:49 +0000
Files and hashes: 1: 36hgRQpvzrHG57jU_1SxVBobabM.crl (hash: q3vs1JQk69N8V6CuVe538/ASJtm+m9KgWrm8q779cdc=)
2: B0FA33FE6F9611ED8A672F69C4F9AE02.roa (hash: 9w8S4OWRKiHn00WgTxK8sW6EL9lR2MtKh2D9FC7SrtA=)
3: 56C4B5083DF511ED98215F18C4F9AE02.roa (hash: eDkYP5k4VqPL3dwJbL2mqB+b8x4YcSaltVXpsNGVZfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl
rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 837 (0x345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91534B8, serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
Validity
Not Before: Apr 17 00:59:49 2026 GMT
Not After : Apr 24 00:59:49 2026 GMT
Subject: CN=69e18606-cc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:86:fa:b1:bc:81:5d:51:a5:fd:94:ed:b9:
a3:3e:77:54:a8:5c:96:41:35:f5:32:41:9d:1e:34:
f9:ca:c6:09:77:cc:f6:9d:c2:06:84:79:9a:54:67:
7a:c6:41:bc:da:a3:99:6a:92:e3:d7:49:bf:d5:08:
a9:29:fd:46:c2:9f:b9:61:e1:7c:98:d3:e5:c6:32:
33:73:cf:29:a8:57:9e:45:19:f0:ae:9d:31:5c:e8:
d6:a8:76:79:6c:fa:ae:74:3c:a8:9a:fb:a8:d6:41:
f5:95:51:52:7d:ad:8c:5b:e9:e3:aa:8d:00:e6:3a:
7c:2e:fd:b8:cb:8c:8f:72:dd:45:ba:a9:3e:cc:1c:
69:df:95:1c:29:25:19:3e:5d:d0:07:98:b1:81:7a:
83:d6:a0:9a:49:4d:74:b1:40:a0:a7:4b:97:c8:cd:
34:0b:fb:d6:7c:c7:4d:1c:23:6e:02:24:58:83:d6:
2c:c6:86:3c:8b:19:33:30:03:8f:50:1a:a3:b9:12:
d8:85:82:66:9b:b4:00:3d:24:03:0c:18:45:52:03:
04:82:ac:41:de:14:93:88:5a:1f:b7:41:c4:f3:48:
44:68:c4:f2:26:6b:0e:67:d0:7c:76:12:74:e9:ed:
1c:a1:4a:f5:58:02:52:73:d0:30:7b:22:3b:ca:8a:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:16:8E:68:D3:41:3D:6B:7A:E2:F1:38:3E:8F:E1:9C:C6:11:C1:D7
X509v3 Authority Key Identifier:
keyid:DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:43:98:5f:47:6d:f2:5b:a5:d7:5d:c1:4d:13:7f:28:b8:03:
b6:ca:3b:a3:f2:3d:da:54:5c:f7:54:64:28:e0:6b:74:5b:bd:
6f:21:6e:ba:90:d4:2b:23:21:2e:97:e2:00:8c:49:08:40:22:
bc:30:e8:98:cf:40:1c:3b:34:57:6a:a1:8d:cf:fb:ac:c2:d8:
90:91:0d:19:38:b5:7b:0b:3c:9e:1a:d6:e7:3c:52:54:94:43:
23:ff:49:d1:3f:f6:94:cc:13:52:51:05:25:1d:a2:bb:c6:bd:
2b:f3:84:9b:e8:22:70:a4:66:df:06:75:b8:da:5f:40:fe:08:
8f:98:c6:ed:8f:97:ab:ab:77:4c:32:95:5d:30:56:2e:e6:c2:
6a:45:51:cb:54:b6:92:23:a6:d2:99:58:26:79:a6:1b:47:7c:
3d:1d:ef:2f:26:db:10:cb:29:07:d3:10:c9:62:81:59:47:1c:
c5:b2:d5:58:eb:e2:c4:23:5e:1d:03:8b:aa:1c:aa:91:5e:72:
32:70:7e:9f:ad:d4:3d:b8:22:97:c0:d6:f2:e1:e5:6e:51:fd:
ae:f3:c9:33:00:5a:14:bf:c4:e0:d4:b9:a2:d5:1b:cb:c6:31:
21:b6:ff:09:0a:36:0b:50:48:0d:fa:ef:13:88:ba:36:0c:f6:
9d:dc:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:31:27 2026 by rpki-client