
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft
File: elxN0KO7nNgUshdK9pPj90FLmVs.mft (raw, json)
Hash identifier: JEauGFiRxE9dw8DWo2wE0Wa8FxSfhLwPhY1TBBTwlYk=
Subject key identifier: BB:08:3E:DC:68:0B:DD:37:CA:E6:3D:E6:86:E6:34:CD:F4:8B:81:6C
Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B
Certificate issuer: /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B
Certificate serial: 01B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft
Manifest number: 01A8
Signing time: Sun 01 Mar 2026 22:46:51 +0000
Manifest this update: Sun 01 Mar 2026 22:46:50 +0000
Manifest next update: Sun 08 Mar 2026 22:46:50 +0000
Files and hashes: 1: elxN0KO7nNgUshdK9pPj90FLmVs.crl (hash: YTg8OkeTl6480ip2H7uPICVQ4XJMStH0eJoOXuNNHwo=)
2: 24CB4F36957811EEA7BF2753C4F9AE02.roa (hash: 5qkckcYMaH0GRLGYr930Mpl8yumJzOAzDnGsPuTvO/o=)
3: 4A0A2DC8958011EE91C9DF80C4F9AE02.roa (hash: W1FAqZ5GczduFFlZHlqg4Dus/uvW3pBCGnVTQ4ZW/88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl
rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182FD0, serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B
Validity
Not Before: Mar 1 22:46:50 2026 GMT
Not After : Mar 8 22:46:50 2026 GMT
Subject: CN=69a4c1db-59b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:b4:70:2f:08:17:2b:c3:04:24:4f:8e:66:
58:4c:73:b4:48:28:31:8e:38:a4:52:1f:cc:ab:f4:
a7:5b:f8:9c:ac:be:de:2d:08:5c:31:21:55:54:43:
48:9f:31:4b:01:1c:d7:d5:f3:d0:5c:e4:34:d5:b1:
ab:f4:0d:b4:ff:e9:1d:b8:43:90:06:d3:f9:51:82:
24:52:45:77:a6:12:67:f1:f6:ef:f2:09:3b:1c:64:
cf:3d:5e:8b:db:98:7b:49:87:c5:e1:39:0d:88:81:
25:bb:7d:de:20:48:e9:e3:2e:af:2f:ee:6a:f0:86:
6d:31:fe:3a:97:86:9b:3f:2f:ab:e4:f6:89:5b:c3:
b3:b5:6e:92:e1:69:78:7d:fc:b6:2b:86:fb:d8:d0:
83:51:72:a8:51:22:e4:c5:91:e3:7a:54:a7:ae:7f:
78:37:81:86:1f:70:13:3c:8d:0e:83:da:57:fa:40:
dc:47:c1:e3:bb:d4:fb:4a:cf:4e:64:38:d8:65:2a:
b3:82:12:fc:cf:60:c6:72:85:51:ba:d1:34:9e:5f:
45:96:5b:5e:49:25:1a:aa:cf:2e:35:e2:17:a1:46:
4b:0f:8c:e4:f3:2a:46:54:91:3a:8e:b1:19:36:37:
70:00:df:ca:d6:ac:7c:11:ce:56:a6:00:06:57:14:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:08:3E:DC:68:0B:DD:37:CA:E6:3D:E6:86:E6:34:CD:F4:8B:81:6C
X509v3 Authority Key Identifier:
keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:df:74:66:02:bf:7c:10:e1:98:7d:b1:f6:98:b9:a5:66:d2:
c1:17:47:27:a8:cb:00:92:6e:4c:c2:0f:df:1e:e2:74:5e:94:
19:4f:81:94:72:13:f6:3d:79:64:fd:f6:ef:0f:33:7d:bb:d2:
b3:40:5f:51:22:a6:6d:5c:79:66:be:fd:2b:d2:38:4a:20:75:
e5:31:00:06:df:6e:83:d9:23:be:bc:e1:0b:ea:f2:2a:26:47:
98:e6:d1:44:1b:5b:a5:92:f1:64:70:b2:e5:11:91:eb:39:34:
98:fb:5b:97:9f:65:8e:14:bc:a9:0d:ff:d2:20:bd:e9:05:59:
b9:e4:0d:4f:9f:da:e6:86:85:0a:1a:96:4b:53:bf:59:fd:30:
b5:44:1e:e3:53:3e:10:7f:43:62:32:72:9f:c0:2d:b4:4b:62:
ee:d4:5e:88:c4:1e:9d:ba:aa:75:ae:8a:9f:0f:82:0b:dd:25:
08:1c:a0:02:61:fc:51:61:db:c6:b7:df:ac:49:ea:c7:1e:55:
ac:14:08:5a:94:bb:d7:7b:45:c1:ed:38:c0:c3:fc:8b:3a:73:
6f:d2:2d:cb:b7:a5:5c:4e:f7:4e:e7:a2:c0:50:c9:9e:07:29:
48:c9:a2:db:73:f8:b6:af:88:18:36:2a:89:ac:9d:95:70:b7:
47:e9:ea:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:18 2026 by rpki-client