
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json)
Hash identifier: Ej9mtestROPLidwIBjSj5KOalpiG63gsmrQl6WI3Ayc=
Subject key identifier: FE:72:4A:BD:46:A4:7D:AB:EF:4A:D9:FA:2F:33:DC:7F:77:3F:6A:47
Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E
Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E
Certificate serial: 0D38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
Manifest number: 0D2E
Signing time: Sat 28 Feb 2026 18:10:14 +0000
Manifest this update: Sat 28 Feb 2026 18:10:13 +0000
Manifest next update: Sat 07 Mar 2026 18:10:13 +0000
Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: DXvtx4CWm+IP6a9LdqxhsE3cvAJjcZLsIjTAiprd/Ow=)
2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: ZbqSCThADHHYWGKzVNAbVRxCH9aXKYjL/LVme0xsR9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl
rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3384 (0xd38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E
Validity
Not Before: Feb 28 18:10:13 2026 GMT
Not After : Mar 7 18:10:13 2026 GMT
Subject: CN=69a32f85-88ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:1a:09:1f:fd:73:7f:09:22:b4:64:20:c7:
53:f3:28:17:6f:db:7b:2f:92:1b:ec:42:72:d0:2f:
d3:c5:f9:bc:a8:9e:89:c1:57:fb:01:89:29:b8:c9:
5f:ae:2f:01:1a:b3:3c:5d:c1:8b:b3:8e:04:9f:55:
35:60:9f:a0:7a:2a:0d:64:c2:e6:38:bf:73:6b:a4:
e6:23:82:f2:32:fd:ae:74:37:33:8c:46:8e:79:6f:
a1:6c:e3:df:ff:6d:a0:83:d7:ae:ce:3c:c7:d3:a4:
15:03:97:95:9b:4f:2b:90:c9:ff:2d:ef:88:f8:6a:
97:0c:48:86:9e:7e:2d:01:57:12:95:f1:94:a1:e2:
06:96:58:25:a7:d6:35:ec:7c:52:64:c2:c0:a1:ac:
ea:2f:16:57:b5:15:73:be:bd:e9:b9:05:38:9a:3d:
fe:fc:c0:db:f3:d8:38:77:ac:84:66:8e:3e:99:fd:
83:0d:7c:cc:33:8c:38:60:48:e2:30:25:95:0f:4b:
92:be:df:2c:0b:5c:68:1d:5e:93:51:dc:ac:e0:1a:
12:a6:81:35:37:f2:3a:9f:e3:17:b2:5e:c3:14:24:
f8:ee:f5:13:7d:28:cf:b9:86:8e:b3:89:e2:98:06:
2c:c4:e6:0f:6e:d2:52:a4:d1:5c:fe:51:d9:44:2c:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:72:4A:BD:46:A4:7D:AB:EF:4A:D9:FA:2F:33:DC:7F:77:3F:6A:47
X509v3 Authority Key Identifier:
keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:7a:5c:8a:1a:1e:92:d5:51:81:88:65:f0:e8:86:24:3b:6a:
5b:bb:83:fc:ae:93:f6:af:0d:0f:17:7e:f0:44:23:b6:2d:92:
b2:dd:dd:42:87:0b:73:65:da:f9:0d:11:1f:b1:8f:1f:f1:e4:
f9:d5:18:22:c1:a1:fc:52:3a:48:a3:7a:63:0f:0b:f4:62:ad:
70:71:97:f6:84:66:af:f3:ba:d5:20:d2:62:41:d7:96:4b:36:
8b:11:22:a8:88:c8:8c:28:7f:e6:3e:35:5b:3d:25:49:6e:bc:
b3:3b:e2:ac:58:ed:02:8c:3e:06:db:3a:f2:82:ef:0d:d2:7c:
36:aa:4b:e2:bd:ab:28:74:b6:33:6b:2c:f9:20:8a:44:a4:7b:
84:71:2d:08:6c:2f:59:08:8b:5e:f6:5d:a3:7b:56:d8:7e:17:
3b:02:17:a4:b5:70:54:20:6c:15:69:a4:bd:fd:bb:94:c3:4a:
32:6b:9a:59:9f:c6:8d:c4:e4:6a:7d:db:1b:b1:f1:b8:f5:7a:
dc:09:10:a3:1a:71:7c:6c:c1:51:1e:74:77:9b:2d:d0:5a:0a:
5b:4f:1a:ca:dc:5f:3e:83:e7:92:d0:1d:40:ce:8e:11:a5:75:
9a:85:67:66:76:b8:d4:0a:72:1b:4f:fd:ef:09:a2:68:75:45:
52:88:7c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:33:43 2026 by rpki-client