
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
File: 91XB4Q_ErmiS0krLh4LX5cAEGLA.mft (raw, json)
Hash identifier: DDvJNUonEgxbhRMA64bl7FoJivkNCt8g7BPdSeT9Y/4=
Subject key identifier: 6C:B2:1B:4E:BE:03:1C:D0:30:60:C6:73:99:57:9A:A0:76:D4:D3:87
Authority key identifier: F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0
Certificate issuer: /CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0
Certificate serial: 0341
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
Manifest number: 033C
Signing time: Sun 01 Mar 2026 01:50:46 +0000
Manifest this update: Sun 01 Mar 2026 01:50:46 +0000
Manifest next update: Sun 08 Mar 2026 01:50:46 +0000
Files and hashes: 1: 91XB4Q_ErmiS0krLh4LX5cAEGLA.crl (hash: vVwyIMiy/LUKj+JIpUj90ZK80VuCEhKpG6DSHy7YuGk=)
2: ED0C111CF8F611ECB6DF8835C4F9AE02.roa (hash: GSaMIr6pgI7dtk3phmzJ+sITrRTfHVwUtDPjWfHSWD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl
rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 833 (0x341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136F59, serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0
Validity
Not Before: Mar 1 01:50:46 2026 GMT
Not After : Mar 8 01:50:46 2026 GMT
Subject: CN=69a39b76-c5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:6f:b0:59:3c:95:1a:d8:bd:bc:65:57:ab:
cc:e8:a0:e5:57:f7:2b:17:90:40:73:a4:ba:9d:bb:
54:49:93:bd:b5:42:41:66:06:10:24:5d:47:f5:b0:
fc:f1:a9:37:9e:df:56:70:50:07:d8:e7:93:96:63:
15:df:8a:09:2c:11:d1:23:22:82:57:6c:14:d1:d0:
c8:81:b4:ca:51:4d:10:64:74:39:12:95:5e:b3:50:
83:99:ab:5c:21:61:cd:54:1d:ee:7d:99:35:09:c6:
df:22:9a:fb:0f:b5:3d:2b:99:0e:08:12:cf:63:a6:
e2:e4:90:dd:a9:ea:db:87:0b:22:d0:3f:ea:ac:d7:
3c:64:29:d7:2a:69:39:cb:96:60:70:c2:92:e3:a2:
e0:bf:4a:23:00:18:a4:65:96:63:d5:43:7e:f3:8b:
19:ba:d1:17:18:d2:fa:80:a6:e0:cc:0a:74:d4:7f:
12:63:c3:bf:65:32:88:4e:01:f9:59:38:df:ae:f3:
8e:0e:27:97:f6:41:aa:48:47:f9:61:41:54:bc:77:
b3:30:a4:6a:c7:82:e5:c5:0e:3d:55:04:d0:a4:f1:
45:3d:1e:41:c8:4c:cd:93:c7:a6:a3:d3:74:e1:1b:
9e:53:45:b8:6d:7c:75:35:a4:18:b1:60:af:80:b5:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B2:1B:4E:BE:03:1C:D0:30:60:C6:73:99:57:9A:A0:76:D4:D3:87
X509v3 Authority Key Identifier:
keyid:F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:32:a3:1f:09:bc:9c:db:39:86:12:2b:19:ff:48:20:1e:1c:
05:2d:ab:e1:74:4e:16:78:26:d1:20:b2:1c:14:6b:21:00:97:
d6:00:5f:f1:3a:42:76:ed:21:1f:34:ce:11:18:f4:4a:ea:04:
c4:49:f1:1a:eb:26:01:93:bd:b4:3c:ae:1d:c2:96:de:03:ca:
76:3d:4e:df:eb:05:2c:30:0d:57:63:06:f0:10:22:30:3e:88:
37:9d:79:c2:36:44:b1:7e:83:f4:5f:d0:02:e5:d2:02:51:71:
d5:5d:ab:4d:05:74:e3:72:1f:97:c9:f2:a2:52:2d:aa:ae:30:
20:2d:20:90:e4:35:f8:9c:7f:2b:f3:ad:4d:03:c0:fd:42:59:
97:7c:1b:e7:58:72:bc:46:0f:20:56:00:eb:f3:33:3c:80:81:
e6:1d:2e:6b:43:d6:3c:6b:b2:87:8e:1b:ce:ff:d9:a1:99:90:
da:64:9c:af:29:06:c3:66:70:7f:3d:81:62:dd:7d:02:3c:a9:
cb:8f:49:66:59:e2:f0:1e:35:26:f5:05:6c:0c:66:48:0f:5d:
2e:14:ff:10:a4:29:7c:e7:e8:35:ad:50:43:5e:a1:ea:11:36:
38:e2:65:66:aa:3c:a1:6f:06:18:6a:4f:3e:d8:a1:ac:be:35:
0a:66:a0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:34 2026 by rpki-client