
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
File: 91XB4Q_ErmiS0krLh4LX5cAEGLA.mft (raw, json)
Hash identifier: 5ruYB+W2FD1sZoYwppI22YZ1Oc4yzAs2IuGUx7mTrFo=
Subject key identifier: 0C:6F:53:65:74:38:80:2D:DF:58:43:08:79:F2:EA:E7:4F:33:DF:B2
Authority key identifier: F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0
Certificate issuer: /CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0
Certificate serial: 035E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
Manifest number: 0357
Signing time: Sun 19 Apr 2026 00:49:57 +0000
Manifest this update: Sun 19 Apr 2026 00:49:57 +0000
Manifest next update: Sun 26 Apr 2026 00:49:57 +0000
Files and hashes: 1: 91XB4Q_ErmiS0krLh4LX5cAEGLA.crl (hash: CnqyOmy+RFzqHyUPtQddJDmEAaV3rZlmzgV5b1DRDik=)
2: ED0C111CF8F611ECB6DF8835C4F9AE02.roa (hash: 784lo19KdOmoDfwOSEhn782xNYkYFZcvv9NOVToI4Bw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl
rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 00:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862 (0x35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136F59, serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0
Validity
Not Before: Apr 19 00:49:57 2026 GMT
Not After : Apr 26 00:49:57 2026 GMT
Subject: CN=69e426b5-abfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:e6:35:6e:64:f3:96:a0:de:f7:00:ca:01:
7f:f4:9c:60:6a:f2:b7:7b:e4:8f:52:d0:ad:cf:7b:
59:3a:b8:39:30:06:af:e4:ac:c7:8c:22:43:86:e6:
90:8c:a1:58:19:74:ea:45:2b:52:28:15:0f:3a:57:
e3:f8:b3:bf:5d:7c:e1:16:61:fc:1a:7e:0c:2c:9d:
08:54:b9:b6:01:cb:19:b8:a9:70:4c:c5:69:3b:e9:
7e:b7:25:c2:17:ee:ad:d0:fe:f3:d7:92:a5:08:49:
93:52:84:71:57:7e:73:28:ad:37:c3:4e:3e:d9:30:
d6:1b:d7:4f:59:8f:9d:20:3c:22:d8:51:18:af:fe:
7d:b6:50:e2:b3:3a:a2:46:6a:d7:eb:5f:91:0b:2f:
e8:8f:bf:51:69:fe:69:fe:f0:4a:b7:9e:0b:94:8a:
7e:ee:a5:ad:00:60:a0:d7:b5:26:21:d8:04:64:8c:
01:2f:e4:c0:5f:c0:0d:67:18:cb:8c:f6:6e:56:87:
61:13:5f:59:7d:4d:7f:35:90:dc:01:cd:c4:f6:ee:
8c:11:48:53:a5:93:7b:84:a0:d2:b4:9c:9e:78:00:
44:7d:d7:d5:a0:8c:ad:35:26:90:a5:2f:e6:4d:83:
b6:00:3a:fb:37:34:23:a1:3a:de:d7:4a:73:eb:7b:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6F:53:65:74:38:80:2D:DF:58:43:08:79:F2:EA:E7:4F:33:DF:B2
X509v3 Authority Key Identifier:
keyid:F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:55:74:47:84:66:7a:48:43:c9:5c:06:f1:0e:63:b5:ad:99:
c0:91:94:34:c3:94:90:bb:fd:2c:bd:15:4a:2e:42:6d:ab:05:
78:c3:d1:0a:34:b7:83:18:83:e4:a7:9c:06:82:e0:36:65:8d:
c2:4f:27:ae:02:2f:d5:f1:d1:fb:6d:4d:45:65:33:c1:e8:d2:
c0:78:62:35:83:ad:4e:f6:3b:37:aa:2a:b1:89:05:1f:98:84:
f1:97:8f:4b:f9:99:c1:7f:cb:32:4a:ff:40:5d:ba:53:20:08:
2c:ce:cb:83:6b:ff:d6:40:76:78:6a:77:9b:17:d6:69:4e:f4:
27:97:db:e7:b8:23:1a:f0:92:7f:a0:2d:fb:25:4d:ec:4e:2b:
16:d0:51:50:7c:36:2b:44:e1:68:f7:ad:d1:4a:de:ae:9e:f0:
31:46:f9:69:d1:1b:5b:78:14:f2:2f:b2:8b:fc:41:21:6b:ee:
17:2f:46:dc:49:5b:01:e0:4a:e4:88:71:46:7a:dc:93:76:4e:
aa:ac:e3:b9:be:3d:f2:48:12:2e:07:37:b1:95:ef:7a:af:80:
5d:bd:f6:27:9a:91:9d:2b:aa:59:e2:79:15:f5:90:ef:2b:42:
04:8e:09:0c:d2:4d:09:fa:c3:96:70:73:7f:16:a0:9f:99:a1:
94:ed:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:18:03 2026 by rpki-client