
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
File: 91XB4Q_ErmiS0krLh4LX5cAEGLA.mft (raw, json)
Hash identifier: WiaaBt6lB64XberwjWvj9dwu7nt6UaEZJDY3UXYEY5I=
Subject key identifier: 98:30:E1:CB:A5:1F:5F:4D:E8:42:0C:4E:44:10:66:D9:0A:96:1A:F4
Authority key identifier: F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0
Certificate issuer: /CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0
Certificate serial: 037A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
Manifest number: 0373
Signing time: Sat 13 Jun 2026 00:51:01 +0000
Manifest this update: Sat 13 Jun 2026 00:51:01 +0000
Manifest next update: Sat 20 Jun 2026 00:51:01 +0000
Files and hashes: 1: 91XB4Q_ErmiS0krLh4LX5cAEGLA.crl (hash: dxNhZuqYp+No+NDTo+tWifNikg7DGnCOnmDlzWu1jwI=)
2: ED0C111CF8F611ECB6DF8835C4F9AE02.roa (hash: 784lo19KdOmoDfwOSEhn782xNYkYFZcvv9NOVToI4Bw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl
rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136F59, serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0
Validity
Not Before: Jun 13 00:51:01 2026 GMT
Not After : Jun 20 00:51:01 2026 GMT
Subject: CN=6a2ca975-87e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4d:07:82:43:e5:16:26:89:28:f9:23:8e:56:
f3:35:5c:0e:23:96:7c:0b:eb:37:88:ab:22:dd:ac:
22:d4:be:51:3b:7f:07:b1:ae:8e:0f:d5:5e:45:e4:
f7:d4:82:d5:dc:91:f5:e5:21:49:5f:ac:6e:2c:7c:
6f:e5:72:a3:b5:f2:e6:8f:c2:fe:df:db:19:4a:9b:
4f:ae:9e:fd:86:d1:33:dc:79:8a:37:89:19:78:64:
8c:c0:36:32:3a:3d:ba:b6:4b:b4:e1:45:58:4c:0c:
e8:a4:a5:34:4c:88:e0:cd:6c:c8:24:72:b5:12:57:
7b:6b:30:6f:77:3e:01:fe:ec:7a:cd:4c:80:41:e3:
a3:6e:26:1d:06:24:a8:89:d9:6d:c8:15:fb:6b:8c:
53:8b:e5:6e:73:fc:08:49:8c:55:82:ea:35:46:03:
df:b0:3d:48:23:0d:5e:ad:89:0a:d7:36:09:15:fb:
c3:e8:c2:83:7f:43:b2:8d:ff:5c:9e:15:3d:dc:c1:
82:13:8d:93:fa:07:85:88:08:f2:27:77:c8:38:82:
9f:88:cb:78:c0:3f:f5:71:b9:91:e8:6c:57:f9:2f:
2d:4b:04:7c:a3:96:53:9e:7a:81:16:f5:7f:84:b6:
1f:98:3d:8c:d3:73:c2:4a:dc:4d:fc:37:16:6f:b5:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:30:E1:CB:A5:1F:5F:4D:E8:42:0C:4E:44:10:66:D9:0A:96:1A:F4
X509v3 Authority Key Identifier:
keyid:F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:e9:0c:a4:ae:04:79:f6:6e:e6:60:36:7e:91:c2:da:f6:11:
85:28:b0:83:39:69:2a:2d:22:75:22:c6:1a:4d:f3:c0:90:c7:
96:22:7f:d6:35:24:9d:0b:a3:0a:3c:d9:3a:20:e8:56:f8:66:
04:8b:9c:36:73:8e:3f:dc:0d:51:2e:c4:ea:aa:84:de:fa:43:
e4:f7:73:d3:f1:6c:72:74:d3:8a:20:99:f2:bf:3e:dc:2a:46:
5c:62:4a:fe:9d:1f:e6:1b:65:50:b0:9b:44:e7:c7:68:08:5f:
58:fb:44:de:ca:3c:ac:e0:23:05:01:4b:6b:9b:c9:51:5a:cd:
76:f3:ae:12:1f:8d:ec:f9:af:dd:34:65:34:d6:52:ce:bf:9b:
10:3b:9a:50:d0:bf:ed:af:3e:d3:5d:d1:9e:ed:2b:2e:f7:21:
1d:c4:72:0d:61:51:48:3b:c1:dd:5a:d5:34:b1:7a:73:9f:20:
0d:2b:43:e2:67:9a:c8:89:d7:ff:57:4b:8d:ec:52:f6:a1:63:
e0:ad:b5:42:fc:05:c1:76:50:0d:92:cd:a9:6a:ab:0a:87:28:
f3:dd:95:d9:a7:00:d8:54:91:0d:5f:43:8f:59:57:68:22:a4:
1a:1b:20:dc:2a:69:cc:61:f6:ac:37:45:47:56:7e:9a:66:fa:
8f:51:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:33 2026 by rpki-client