
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
File: ElYBj-blOMQA9j_H4SHDpwHy3qk.mft (raw, json)
Hash identifier: BtueqzvPW4N1vH0zN186k/EcaaWN60Z2haGDpqWj0VU=
Subject key identifier: 95:E5:18:EC:C8:B9:CC:96:0A:D2:04:2D:87:9A:06:0F:0A:A6:1A:E8
Authority key identifier: 12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9
Certificate issuer: /CN=A91E00FC/serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9
Certificate serial: 0A73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
Manifest number: 0A6A
Signing time: Sun 01 Mar 2026 23:29:40 +0000
Manifest this update: Sun 01 Mar 2026 23:29:38 +0000
Manifest next update: Sun 08 Mar 2026 23:29:38 +0000
Files and hashes: 1: ElYBj-blOMQA9j_H4SHDpwHy3qk.crl (hash: u4PNvgVKIbjeqyZ6EuvGdpE3OL1filht9qbvrszpaZs=)
2: 542CA96A0B1911EB92F1EB12C4F9AE02.roa (hash: Cl43nXYN99B9XMoCJJX5Y4f6XTGX9tnmhbgu70RHMgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl
rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2675 (0xa73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E00FC, serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9
Validity
Not Before: Mar 1 23:29:38 2026 GMT
Not After : Mar 8 23:29:38 2026 GMT
Subject: CN=69a4cbe3-1b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:fb:e5:9c:60:c0:1b:59:56:06:f8:af:38:
c9:95:b3:91:47:fe:79:b7:35:cc:3c:5b:90:3b:cf:
33:05:a3:b7:93:a6:20:f6:b3:53:fb:2f:0d:f9:02:
4c:38:f3:a3:bd:0e:38:fa:ee:3e:d1:ee:09:50:fb:
7b:df:83:81:06:ac:ea:18:4c:18:b9:d6:4e:ad:72:
07:0b:59:0e:d8:16:04:74:00:5a:5f:51:6e:eb:6d:
5e:d7:3d:ac:6f:d9:86:4c:52:28:53:64:f2:0b:dc:
24:64:5c:b6:75:b8:2d:18:6e:cb:c0:9c:94:eb:ad:
7c:07:88:47:87:a2:b9:1c:28:2b:8d:2d:ae:00:63:
3b:eb:68:8c:94:4a:04:b8:dd:8f:20:e5:06:21:a4:
c4:ba:72:68:6f:3f:29:46:94:10:89:18:3d:8d:81:
5e:fc:75:04:b7:46:a2:38:c7:a4:df:8b:4c:e6:78:
3e:9b:13:53:ac:d6:d4:4c:eb:d5:94:c7:a6:ac:e4:
57:a3:c4:76:65:b8:13:1f:72:a6:1f:2c:a3:00:a3:
10:a0:4a:7c:e2:7b:6f:0e:1b:9c:91:26:9e:4c:4e:
b3:0d:a6:b9:5f:02:4d:ba:1d:b9:65:36:c3:42:da:
45:87:c4:bb:8d:52:3b:87:6e:b0:58:7c:ed:e5:69:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E5:18:EC:C8:B9:CC:96:0A:D2:04:2D:87:9A:06:0F:0A:A6:1A:E8
X509v3 Authority Key Identifier:
keyid:12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:5b:9a:1c:23:67:6a:3e:19:e2:68:4f:26:c6:42:4a:7f:8c:
17:25:3c:f6:f7:86:30:ac:87:6f:6b:3d:9f:7d:a5:c5:8b:c5:
33:8f:59:16:a1:4f:52:90:7c:96:14:5a:80:b2:c1:89:69:6a:
f0:fe:54:89:c9:67:15:32:97:69:65:23:10:1b:45:1f:d6:6e:
f6:2b:93:54:1b:98:5c:0b:f1:c1:00:61:62:5d:06:4d:49:59:
28:d2:cf:1d:5d:1c:8d:7e:96:14:f3:90:15:b6:a1:05:0c:6a:
6d:1e:2f:14:c0:33:70:b4:3b:df:4d:72:10:df:cf:ca:78:a5:
72:c6:f6:67:18:e3:51:e6:b3:a4:8b:55:64:51:be:f3:f5:7f:
7e:11:e0:c6:98:c7:75:2e:73:ab:b3:1b:2d:15:a0:2c:bd:a0:
62:32:94:de:06:29:41:ee:46:b2:7a:24:eb:e3:4b:4a:82:75:
9a:a5:82:7c:45:1f:bb:93:4f:a5:e6:26:66:13:d2:58:42:81:
ad:9c:ac:e2:be:17:dd:63:d0:d7:f0:2c:88:9d:68:bb:16:df:
b4:99:fa:51:2e:88:d7:48:fa:0b:49:12:20:64:5c:52:e6:48:
8d:5e:50:5b:97:6e:b7:c9:da:50:3c:d6:a0:d6:36:c8:fa:bd:
b2:69:e7:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAwRkMxMTAvBgNVBAUTKDEyNTYwMThGRTZFNTM4QzQwMEY2M0ZDN0UxMjFDM0E3
MDFGMkRFQTkwHhcNMjYwMzAxMjMyOTM4WhcNMjYwMzA4MjMyOTM4WjAYMRYwFAYD
VQQDEw02OWE0Y2JlMy0xYjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0n75ZxgwBtZVgb4rzjJlbORR/55tzXMPFuQO88zBaO3k6Yg9rNT+y8N+QJM
OPOjvQ44+u4+0e4JUPt734OBBqzqGEwYudZOrXIHC1kO2BYEdABaX1Fu621e1z2s
b9mGTFIoU2TyC9wkZFy2dbgtGG7LwJyU6618B4hHh6K5HCgrjS2uAGM762iMlEoE
uN2PIOUGIaTEunJobz8pRpQQiRg9jYFe/HUEt0aiOMek34tM5ng+mxNTrNbUTOvV
lMemrORXo8R2ZbgTH3KmHyyjAKMQoEp84ntvDhuckSaeTE6zDaa5XwJNuh25ZTbD
QtpFh8S7jVI7h26wWHzt5WkoiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJXlGOzI
ucyWCtIELYeaBg8KphroMB8GA1UdIwQYMBaAFBJWAY/m5TjEAPY/x+Ehw6cB8t6p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81QzhDQjRENjdG
MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9FbFlCai1ibE9NUUE5al9INFNIRHB3SHkz
cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VsWUJqLWJsT01RQTlqX0g0U0hEcHdIeTNxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDBGQy81QzhDQjRENjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9FbFlCai1ibE9N
UUE5al9INFNIRHB3SHkzcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUVuaHCNnaj4Z4mhPJsZCSn+MFyU89veGMKyHb2s9n32lxYvFM49ZFqFPUpB8
lhRagLLBiWlq8P5UiclnFTKXaWUjEBtFH9Zu9iuTVBuYXAvxwQBhYl0GTUlZKNLP
HV0cjX6WFPOQFbahBQxqbR4vFMAzcLQ7301yEN/Pynilcsb2ZxjjUeazpItVZFG+
8/V/fhHgxpjHdS5zq7MbLRWgLL2gYjKU3gYpQe5Gsnok6+NLSoJ1mqWCfEUfu5NP
peYmZhPSWEKBrZys4r4X3WPQ1/AsiJ1ouxbftJn6US6I10j6C0kSIGRcUuZIjV5Q
W5dut8naUDzWoNY2yPq9smnn8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:38 2026 by rpki-client