
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
File: Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft (raw, json)
Hash identifier: kDKNaKnopFWkgqB+4MFOagKBGD7AvGtEbjB0I2RWXe4=
Subject key identifier: EF:A6:70:19:B8:71:BE:D0:E3:2A:BC:61:71:DA:16:E1:00:65:10:7F
Authority key identifier: 12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA
Certificate issuer: /CN=A916DFDD/serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
Manifest number: A1
Signing time: Fri 17 Apr 2026 07:02:43 +0000
Manifest this update: Fri 17 Apr 2026 07:02:42 +0000
Manifest next update: Fri 24 Apr 2026 07:02:42 +0000
Files and hashes: 1: Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl (hash: Z0lMWqnGJVUqTK+76ZlFXn+2Kx+U59UnEdk3Od9jrsY=)
2: 780B9CF8867811F0AA0D2534C4F9AE02.roa (hash: bIV64sVlTL7EaQgJ84zASy5o4zZxDgzDVzxmS49KHn0=)
3: 78817658867811F0AA0D2534C4F9AE02.roa (hash: FMz5zBTx4wx3km6uWz9f+jD8U/Hm5BuImLwf1/hq9iU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl
rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DFDD, serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA
Validity
Not Before: Apr 17 07:02:42 2026 GMT
Not After : Apr 24 07:02:42 2026 GMT
Subject: CN=69e1db13-6b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:eb:a7:e7:3d:69:44:ae:06:cc:76:3c:c3:
1e:e9:76:cd:f9:1f:34:c3:22:63:7e:98:7f:37:9d:
eb:31:5b:21:f4:da:5b:fb:bd:cd:27:93:e7:7c:cf:
6d:13:fe:ce:ab:f6:a0:2e:70:aa:8c:ab:81:01:6e:
c9:7d:a0:3a:50:48:af:64:3f:6a:e6:b1:22:c7:ad:
01:e5:f0:a8:2c:d5:c8:34:67:77:ae:77:3f:3d:e8:
08:3b:a1:7e:c6:2b:ce:53:de:33:77:5f:2a:82:74:
4f:b0:79:0e:f4:b8:d6:76:9b:7f:a2:31:c0:d3:bb:
a4:01:73:bd:2a:02:50:d1:76:3a:09:ea:45:16:18:
c0:60:2a:47:21:b1:01:99:82:e5:0d:0a:10:d2:c2:
1f:d4:01:0c:bb:5c:4c:ad:6e:e5:5b:e4:03:b2:2f:
05:26:01:16:e6:ca:87:28:e2:4d:31:ba:5b:4c:13:
7f:16:41:86:d7:cd:57:bc:ab:9c:68:a9:71:e8:8a:
dc:97:74:1f:b9:e3:0e:58:83:b3:ac:ee:d4:a1:37:
b4:85:24:e8:01:38:e2:bc:ea:6f:85:8d:1a:f5:a1:
da:e1:37:dd:29:67:9a:84:26:54:a6:d7:3c:e3:dc:
5a:b7:39:51:76:3b:8c:94:ab:de:78:b2:9e:5b:cd:
94:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A6:70:19:B8:71:BE:D0:E3:2A:BC:61:71:DA:16:E1:00:65:10:7F
X509v3 Authority Key Identifier:
keyid:12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:12:ec:41:95:90:0b:39:f3:04:c9:d8:3c:de:48:5a:b0:89:
4e:63:bf:b9:ad:5b:04:1d:cf:07:8b:a4:a4:a1:69:9c:39:6a:
8e:1e:24:b2:9c:42:d1:1a:52:00:e8:69:2b:5c:31:5a:c1:4b:
ee:4c:6a:4a:da:f7:d3:d7:b8:52:f0:89:56:e6:9f:50:94:0f:
0c:4e:89:8f:d7:43:b4:c4:95:62:f2:21:6a:3a:0c:61:65:5b:
34:dd:32:11:2a:ee:da:a8:10:ab:f9:60:27:25:c1:1a:90:58:
98:12:6a:a2:b2:d5:75:f3:8c:ed:dd:7d:e1:97:2d:29:37:84:
9a:a0:86:4d:2b:23:fd:28:12:49:61:b7:42:95:1d:3f:bf:79:
cf:f1:01:76:2a:f8:2a:88:04:50:d9:2c:83:26:30:4b:0f:3e:
af:16:3a:1c:08:b7:c8:8c:48:67:95:23:b4:c6:6d:87:64:f5:
c2:03:20:35:d2:99:c1:f2:53:da:b7:bd:63:2a:7b:c2:35:9c:
b5:51:2e:24:08:b4:0f:5d:72:dd:74:19:b5:c2:37:bb:04:51:
81:82:9f:9d:3e:d9:c5:b1:bc:e8:73:d3:57:3b:0c:76:2c:ee:
d9:c1:83:38:ab:94:a8:16:43:c9:d1:45:37:21:91:42:80:2f:
0a:41:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:41 2026 by rpki-client