
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft
File: I_DaaXyqHZJHpmnfh4G6MBN9elk.mft (raw, json)
Hash identifier: cgrnXX28SWniU4lq561lCfgjMDTJO+Fi6QNKeNFKWcY=
Subject key identifier: AB:F2:27:3C:70:A7:A2:45:D3:B2:A5:32:02:B3:D3:F1:19:11:27:8E
Authority key identifier: 23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59
Certificate issuer: /CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59
Certificate serial: 022E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft
Manifest number: 0228
Signing time: Sun 05 Apr 2026 02:17:50 +0000
Manifest this update: Sun 05 Apr 2026 02:17:49 +0000
Manifest next update: Sun 12 Apr 2026 02:17:49 +0000
Files and hashes: 1: I_DaaXyqHZJHpmnfh4G6MBN9elk.crl (hash: rLkfOwNIYs0Oxu4ktmvQIHmnuxCwoD5FyjeSviUhSOo=)
2: C662FB52399511EFA72CB43DC4F9AE02.roa (hash: Ff1Uf+eUposwwHM44+GIll0sBwmQpafQVQxIknpsjAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl
rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8, serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59
Validity
Not Before: Apr 5 02:17:49 2026 GMT
Not After : Apr 12 02:17:49 2026 GMT
Subject: CN=69d1c64e-c039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:52:47:fa:79:35:2b:66:de:dc:80:14:ef:
9f:99:85:f6:11:ae:16:33:5e:65:c0:1b:b4:ac:ec:
47:90:48:54:31:da:87:43:12:97:da:88:d5:37:bd:
16:d8:1d:6c:4f:2c:8d:45:9e:c1:05:50:1f:0c:2b:
a9:ca:a2:37:23:70:84:14:44:05:0d:c8:fc:ad:55:
90:6e:d7:9b:c7:45:e7:d9:81:c6:d2:38:22:cb:e5:
ed:ac:71:47:26:e8:6c:4a:92:d8:06:96:77:8a:bf:
15:f4:2e:dc:07:0e:fd:45:ad:c0:65:3a:51:12:91:
9a:91:e1:d2:f3:be:80:e5:cc:c4:87:d9:8d:78:08:
ae:ac:85:1d:60:65:9a:8a:4f:c2:aa:35:78:d3:14:
86:ab:8c:02:a2:1e:3d:37:c1:74:12:42:13:cc:32:
05:3a:70:bd:e8:7e:7f:dd:d1:d3:63:5a:64:23:a5:
08:03:81:82:60:9d:f8:75:5f:10:91:b9:72:2d:00:
24:20:2d:6f:e3:2d:17:1c:47:70:f0:c3:7d:d4:c5:
60:2a:ae:2d:d9:25:98:c9:75:cb:b1:07:76:4f:6b:
f0:55:5d:d3:13:29:25:4b:5b:ba:d0:c7:bb:ba:13:
a1:c5:7a:21:19:0d:4d:31:76:1b:55:ab:df:92:27:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F2:27:3C:70:A7:A2:45:D3:B2:A5:32:02:B3:D3:F1:19:11:27:8E
X509v3 Authority Key Identifier:
keyid:23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:55:13:b7:2a:e5:84:61:cc:cd:88:0f:66:5c:2c:4f:0e:68:
7b:90:c6:8c:58:ad:23:43:eb:7a:4c:59:fc:01:d7:58:03:60:
15:ca:70:1d:79:45:d9:7e:ea:01:82:31:65:e3:96:5b:45:f2:
2d:a2:2a:40:40:de:c5:d2:b1:a1:e7:17:c5:5b:1e:0c:23:42:
38:f3:cb:bc:ab:29:f9:ee:eb:2e:e5:cd:23:c6:68:67:44:e0:
5b:f4:3c:39:cd:34:f5:d8:32:9f:8d:34:27:4b:3f:f2:ec:81:
44:f4:d4:02:d7:d8:ab:80:9e:fa:26:d1:5c:fd:c2:33:5a:e9:
01:48:85:bd:c9:1f:6f:5f:68:25:9b:11:96:18:6a:b3:f9:99:
6e:20:53:e1:89:01:4b:1d:94:1f:67:df:57:52:70:02:64:f5:
77:0c:9d:56:3d:84:f0:e6:b0:e8:d8:05:23:31:f1:62:39:6e:
39:cb:50:a7:b0:2e:4e:33:40:04:96:80:de:19:1b:39:c1:be:
8e:c5:e0:fd:c1:23:16:c5:cc:1c:6e:20:bd:3c:3a:d3:80:89:
6b:ea:25:0c:60:d0:e8:ce:7e:ac:7b:48:e1:67:ac:10:2a:c8:
3d:38:3f:8e:bf:70:80:fd:4b:74:1b:db:9b:53:3b:c8:62:10:
c9:56:58:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:26 2026 by rpki-client