Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
File:                     91XB4Q_ErmiS0krLh4LX5cAEGLA.mft (raw, json)
Hash identifier:          WiaaBt6lB64XberwjWvj9dwu7nt6UaEZJDY3UXYEY5I=
Subject key identifier:   98:30:E1:CB:A5:1F:5F:4D:E8:42:0C:4E:44:10:66:D9:0A:96:1A:F4
Authority key identifier: F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0
Certificate issuer:       /CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0
Certificate serial:       037A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
Manifest number:          0373
Signing time:             Sat 13 Jun 2026 00:51:01 +0000
Manifest this update:     Sat 13 Jun 2026 00:51:01 +0000
Manifest next update:     Sat 20 Jun 2026 00:51:01 +0000
Files and hashes:         1: 91XB4Q_ErmiS0krLh4LX5cAEGLA.crl (hash: dxNhZuqYp+No+NDTo+tWifNikg7DGnCOnmDlzWu1jwI=)
                          2: ED0C111CF8F611ECB6DF8835C4F9AE02.roa (hash: 784lo19KdOmoDfwOSEhn782xNYkYFZcvv9NOVToI4Bw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl
                          rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136F59, serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0
        Validity
            Not Before: Jun 13 00:51:01 2026 GMT
            Not After : Jun 20 00:51:01 2026 GMT
        Subject: CN=6a2ca975-87e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4d:07:82:43:e5:16:26:89:28:f9:23:8e:56:
                    f3:35:5c:0e:23:96:7c:0b:eb:37:88:ab:22:dd:ac:
                    22:d4:be:51:3b:7f:07:b1:ae:8e:0f:d5:5e:45:e4:
                    f7:d4:82:d5:dc:91:f5:e5:21:49:5f:ac:6e:2c:7c:
                    6f:e5:72:a3:b5:f2:e6:8f:c2:fe:df:db:19:4a:9b:
                    4f:ae:9e:fd:86:d1:33:dc:79:8a:37:89:19:78:64:
                    8c:c0:36:32:3a:3d:ba:b6:4b:b4:e1:45:58:4c:0c:
                    e8:a4:a5:34:4c:88:e0:cd:6c:c8:24:72:b5:12:57:
                    7b:6b:30:6f:77:3e:01:fe:ec:7a:cd:4c:80:41:e3:
                    a3:6e:26:1d:06:24:a8:89:d9:6d:c8:15:fb:6b:8c:
                    53:8b:e5:6e:73:fc:08:49:8c:55:82:ea:35:46:03:
                    df:b0:3d:48:23:0d:5e:ad:89:0a:d7:36:09:15:fb:
                    c3:e8:c2:83:7f:43:b2:8d:ff:5c:9e:15:3d:dc:c1:
                    82:13:8d:93:fa:07:85:88:08:f2:27:77:c8:38:82:
                    9f:88:cb:78:c0:3f:f5:71:b9:91:e8:6c:57:f9:2f:
                    2d:4b:04:7c:a3:96:53:9e:7a:81:16:f5:7f:84:b6:
                    1f:98:3d:8c:d3:73:c2:4a:dc:4d:fc:37:16:6f:b5:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:30:E1:CB:A5:1F:5F:4D:E8:42:0C:4E:44:10:66:D9:0A:96:1A:F4
            X509v3 Authority Key Identifier:
                keyid:F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e9:0c:a4:ae:04:79:f6:6e:e6:60:36:7e:91:c2:da:f6:11:
         85:28:b0:83:39:69:2a:2d:22:75:22:c6:1a:4d:f3:c0:90:c7:
         96:22:7f:d6:35:24:9d:0b:a3:0a:3c:d9:3a:20:e8:56:f8:66:
         04:8b:9c:36:73:8e:3f:dc:0d:51:2e:c4:ea:aa:84:de:fa:43:
         e4:f7:73:d3:f1:6c:72:74:d3:8a:20:99:f2:bf:3e:dc:2a:46:
         5c:62:4a:fe:9d:1f:e6:1b:65:50:b0:9b:44:e7:c7:68:08:5f:
         58:fb:44:de:ca:3c:ac:e0:23:05:01:4b:6b:9b:c9:51:5a:cd:
         76:f3:ae:12:1f:8d:ec:f9:af:dd:34:65:34:d6:52:ce:bf:9b:
         10:3b:9a:50:d0:bf:ed:af:3e:d3:5d:d1:9e:ed:2b:2e:f7:21:
         1d:c4:72:0d:61:51:48:3b:c1:dd:5a:d5:34:b1:7a:73:9f:20:
         0d:2b:43:e2:67:9a:c8:89:d7:ff:57:4b:8d:ec:52:f6:a1:63:
         e0:ad:b5:42:fc:05:c1:76:50:0d:92:cd:a9:6a:ab:0a:87:28:
         f3:dd:95:d9:a7:00:d8:54:91:0d:5f:43:8f:59:57:68:22:a4:
         1a:1b:20:dc:2a:69:cc:61:f6:ac:37:45:47:56:7e:9a:66:fa:
         8f:51:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:33 2026 by rpki-client