
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
File: 91XB4Q_ErmiS0krLh4LX5cAEGLA.mft (raw, json)
Hash identifier: bFHGsSExNzSbNy/t+LFyCgfhQGqZcKTW/O6Fiivg7ww=
Subject key identifier: F8:68:B4:CA:17:0D:4B:0C:59:AB:D9:63:22:CB:DB:CC:67:BE:60:44
Authority key identifier: F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0
Certificate issuer: /CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0
Certificate serial: 03AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
Manifest number: 03A6
Signing time: Mon 21 Sep 2026 00:27:01 +0000
Manifest this update: Mon 21 Sep 2026 00:27:00 +0000
Manifest next update: Mon 28 Sep 2026 00:27:00 +0000
Files and hashes: 1: 91XB4Q_ErmiS0krLh4LX5cAEGLA.crl (hash: zrN3bVpGBq/qXbcKcyH0Dkya/dSUg7lOYLLLhHn6tmw=)
2: ED0C111CF8F611ECB6DF8835C4F9AE02.roa (hash: 784lo19KdOmoDfwOSEhn782xNYkYFZcvv9NOVToI4Bw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl
rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941 (0x3ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136F59, serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0
Validity
Not Before: Sep 21 00:27:00 2026 GMT
Not After : Sep 28 00:27:00 2026 GMT
Subject: CN=6ab079d5-0af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:aa:ce:a9:c4:12:b6:7c:9d:6c:2d:0d:ea:
7e:2b:82:01:21:e1:58:d5:2b:e6:35:54:fb:b6:15:
2f:ef:dd:05:3f:dc:a9:12:36:cc:52:c8:98:57:f2:
ea:b6:7c:89:c8:a2:e3:f6:48:b0:8c:ae:58:68:19:
e4:e6:f9:36:cc:3a:3f:aa:76:a4:11:d1:c9:54:e3:
e9:76:4d:87:19:7e:c4:de:e5:69:41:2c:81:d7:d2:
16:63:cb:2b:80:2f:12:7b:4b:4d:cb:b6:4b:b6:d3:
bc:4c:d2:4e:a9:07:b8:ec:9c:7a:75:c9:b2:39:bc:
34:66:64:3e:46:1c:38:d6:f7:b1:9e:ab:a6:b7:4d:
04:96:12:ee:4f:3d:7e:e1:44:d4:0a:ac:82:44:bb:
0d:a4:14:b9:64:b0:6d:63:35:b0:56:9d:3d:28:4b:
62:1c:60:66:bb:bb:d1:92:c9:5d:d8:6a:a8:98:ac:
d3:dd:76:74:cb:f8:c9:3d:c5:2d:fc:0b:4d:e7:f1:
95:b1:3f:e5:75:6e:3d:c9:79:3d:e4:85:a9:16:e4:
2c:ff:78:3d:c8:e0:89:41:c5:a5:1c:bb:1d:96:fb:
34:f3:bb:e0:7b:14:35:46:13:15:1c:8f:7b:55:22:
99:f7:3f:17:b5:42:84:45:97:db:2b:96:36:bd:3a:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:68:B4:CA:17:0D:4B:0C:59:AB:D9:63:22:CB:DB:CC:67:BE:60:44
X509v3 Authority Key Identifier:
keyid:F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:34:68:ed:c7:a8:4c:ce:a8:27:82:7d:6b:19:b5:f4:80:39:
28:f5:d4:80:34:dd:41:c2:ee:c9:64:e6:97:3d:50:f7:6b:3c:
e7:65:60:75:38:be:ba:b6:35:cc:23:bc:e3:36:a4:68:a9:d4:
dd:9a:da:26:56:82:ae:92:a0:5b:c8:9f:a4:44:23:1a:89:6a:
52:75:13:12:06:4f:6f:8f:6e:63:48:5f:d5:42:64:ab:e0:ae:
12:21:61:c3:c5:09:49:e3:f2:5a:16:23:a5:2e:d6:24:e8:a8:
a7:91:b8:07:27:b4:01:ed:47:80:61:92:1c:4f:aa:ba:78:00:
43:04:aa:b2:9e:ad:2b:64:1c:6e:1b:8f:4c:51:f3:93:ea:b3:
79:47:a6:9b:6f:25:16:09:3e:39:e3:f9:e9:eb:20:c1:61:36:
eb:cc:bf:f2:6d:f9:7c:4b:81:64:0a:e9:a6:32:42:97:05:bc:
8b:cd:98:40:ea:6c:0d:f0:39:84:27:10:05:d2:78:57:1a:9c:
ae:34:ee:81:27:61:d7:0e:89:8d:bf:df:46:12:96:20:d4:65:
c2:e4:13:c3:f6:ed:88:a3:6f:4e:66:6d:9d:ab:47:82:27:35:
c3:78:9d:7c:76:4e:f8:c9:1f:bf:43:cc:10:8f:5d:97:ce:9d:
8e:54:db:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:58:14 2026 by rpki-client