$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft File: 36hgRQpvzrHG57jU_1SxVBobabM.mft (raw, json) Hash identifier: kHyXfNtTl9LqtRbRGaQRlRl7jxc/rqHWpwPxfWcU/qA= Subject key identifier: 6B:7C:D2:1A:74:EF:33:79:D3:6D:BD:05:88:02:DE:75:3A:3E:40:9C Authority key identifier: DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3 Certificate issuer: /CN=A91534B8/serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3 Certificate serial: 0339 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft Manifest number: 032B Signing time: Wed 25 Mar 2026 00:46:44 +0000 Manifest this update: Wed 25 Mar 2026 00:46:44 +0000 Manifest next update: Wed 01 Apr 2026 00:46:44 +0000 Files and hashes: 1: 36hgRQpvzrHG57jU_1SxVBobabM.crl (hash: rB6q989W3jtIte5OpCFV27CjxEzqDEkj+Chjqv7ZvHo=) 2: 56C4B5083DF511ED98215F18C4F9AE02.roa (hash: eDkYP5k4VqPL3dwJbL2mqB+b8x4YcSaltVXpsNGVZfY=) 3: B0FA33FE6F9611ED8A672F69C4F9AE02.roa (hash: 9w8S4OWRKiHn00WgTxK8sW6EL9lR2MtKh2D9FC7SrtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 825 (0x339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8, serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3 Validity Not Before: Mar 25 00:46:44 2026 GMT Not After : Apr 1 00:46:44 2026 GMT Subject: CN=69c33074-926e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bc:d7:e7:4c:34:1f:4e:f1:64:d4:0b:f5:da: ce:d2:47:53:83:5b:3a:a2:94:4a:6a:cd:27:c2:89: fa:45:bd:78:2c:e0:f6:9f:0a:09:6a:80:59:cc:a5: 1e:6f:28:62:40:81:ca:03:d4:79:46:a0:9c:2b:a3: 77:67:b9:2b:1c:22:a5:84:89:ac:2a:e9:3a:61:47: 7b:89:a7:82:8f:3e:3c:14:77:d5:50:f5:c4:44:c5: 4f:d7:4f:60:41:4d:6b:82:4f:b8:41:df:f8:36:54: e0:bb:c0:50:21:4e:c9:be:ac:93:f3:6d:ba:4c:a5: b7:85:bd:e8:84:4f:7a:7a:55:c2:b0:85:2c:45:eb: 40:4c:fa:9c:94:8a:1c:45:c4:3b:70:c1:f2:12:14: af:86:32:94:ce:35:d0:b9:60:26:50:ac:b8:ad:14: dd:56:ec:20:c9:1b:6b:8c:fa:91:e6:14:c6:ec:ff: b4:9c:68:31:07:5e:6f:d9:4c:0d:c7:55:1b:c0:50: 5d:68:a1:52:69:ab:6d:1d:76:2d:58:40:b2:e8:ca: f4:1f:ae:4f:5f:25:0d:cb:2b:54:bf:05:38:48:36: ec:71:3e:e6:14:08:51:e2:f8:e1:68:87:9e:97:88: d7:19:2d:50:50:a7:c7:99:1d:2b:c6:51:c1:ae:c8: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7C:D2:1A:74:EF:33:79:D3:6D:BD:05:88:02:DE:75:3A:3E:40:9C X509v3 Authority Key Identifier: keyid:DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:e9:ff:c3:99:f5:43:bd:c4:62:62:1d:e3:a0:fe:26:36:f6: f8:67:ee:7a:ac:b4:3c:19:05:de:70:4f:bc:83:39:72:19:a2: a6:45:55:7a:8f:fe:9a:94:44:ec:e9:65:3f:00:46:ac:66:57: d4:83:89:45:e6:c4:2b:f0:b0:ed:4a:6c:da:69:82:ce:bc:80: 49:86:be:56:6e:64:e2:ab:8c:d7:a5:dc:cb:4e:3b:87:96:48: 15:ee:94:2b:11:0b:bb:49:3f:77:2a:f6:48:c5:e0:58:21:21: fa:1d:0a:41:af:61:8d:db:58:12:5c:d7:79:69:5e:c9:fe:53: 90:f9:d5:78:f1:18:c5:4b:d9:91:19:a8:0e:1a:f8:e0:b0:70: 3a:25:2d:f8:22:70:a3:a3:f6:26:b1:ad:39:0d:76:a1:47:c4: 1a:da:28:42:fa:aa:e1:2a:8c:09:57:ee:92:4f:ef:b4:a9:74: db:64:cb:7d:c0:47:f8:06:d4:ca:5b:da:b1:39:38:9e:39:53: ea:e7:15:56:81:69:2d:aa:0b:fe:95:bf:f9:46:3b:91:68:67: 9e:08:8d:05:13:af:83:bd:0e:03:92:2c:ec:88:a7:09:a9:ec: 84:50:f9:92:17:05:9c:a9:55:18:8d:3c:a2:db:df:a6:0a:e8: e7:03:89:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKERGQTg2MDQ1MEE2RkNFQjFDNkU3QjhENEZGNTRCMTU0 MUExQjY5QjMwHhcNMjYwMzI1MDA0NjQ0WhcNMjYwNDAxMDA0NjQ0WjAYMRYwFAYD VQQDEw02OWMzMzA3NC05MjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7zX50w0H07xZNQL9drO0kdTg1s6opRKas0nwon6Rb14LOD2nwoJaoBZzKUe byhiQIHKA9R5RqCcK6N3Z7krHCKlhImsKuk6YUd7iaeCjz48FHfVUPXERMVP109g QU1rgk+4Qd/4NlTgu8BQIU7JvqyT8226TKW3hb3ohE96elXCsIUsRetATPqclIoc RcQ7cMHyEhSvhjKUzjXQuWAmUKy4rRTdVuwgyRtrjPqR5hTG7P+0nGgxB15v2UwN x1UbwFBdaKFSaattHXYtWECy6Mr0H65PXyUNyytUvwU4SDbscT7mFAhR4vjhaIee l4jXGS1QUKfHmR0rxlHBrsj/RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGt80hp0 7zN50229BYgC3nU6PkCcMB8GA1UdIwQYMBaAFN+oYEUKb86xxue41P9UsVQaG2mz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC85RjAzQkI2MDA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8zNmhnUlFwdnpySEc1N2pVXzFTeFZCb2Jh Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzM2aGdSUXB2enJIRzU3alVfMVN4VkJvYmFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC85RjAzQkI2MDA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8zNmhnUlFwdnpy SEc1N2pVXzFTeFZCb2JhYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqen/w5n1Q73EYmId46D+Jjb2+Gfueqy0PBkF3nBPvIM5chmipkVVeo/+mpRE 7OllPwBGrGZX1IOJRebEK/Cw7Ups2mmCzryASYa+Vm5k4quM16Xcy047h5ZIFe6U KxELu0k/dyr2SMXgWCEh+h0KQa9hjdtYElzXeWleyf5TkPnVePEYxUvZkRmoDhr4 4LBwOiUt+CJwo6P2JrGtOQ12oUfEGtooQvqq4SqMCVfukk/vtKl022TLfcBH+AbU ylvasTk4njlT6ucVVoFpLaoL/pW/+UY7kWhnngiNBROvg70OA5Is7IinCanshFD5 khcFnKlVGI08otvfpgro5wOJGA== -----END CERTIFICATE-----Generated at Thu Mar 26 21:39:46 2026 by rpki-client