
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json)
Hash identifier: lPqD9TI8/H5r3FCgQoZxiWVL+IqqwyjxVrG9qa65FXI=
Subject key identifier: 65:AF:06:6C:9F:93:C0:06:00:2D:51:C8:EB:69:88:41:2C:C7:F9:B6
Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E
Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E
Certificate serial: 0DAD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
Manifest number: 0DA0
Signing time: Tue 06 Oct 2026 18:00:55 +0000
Manifest this update: Tue 06 Oct 2026 18:00:55 +0000
Manifest next update: Tue 13 Oct 2026 18:00:55 +0000
Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: vGGsb9eE+Xv1gpeIGbie8HR2Ku0FbQ3NjTMS2dAmrbg=)
2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: Ohcdy58kQP+4fXw4fnYH+zSLsCeQ8xFhQqrxtgGqWp8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl
rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3501 (0xdad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E
Validity
Not Before: Oct 6 18:00:55 2026 GMT
Not After : Oct 13 18:00:55 2026 GMT
Subject: CN=6ac53757-fe28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:97:5d:2a:94:84:e8:e3:35:4e:65:f5:e1:
6a:9c:3f:53:11:9f:0f:75:71:d2:e7:18:f9:51:a9:
16:ed:6b:c4:7f:3d:2c:8e:00:c4:ef:35:a6:9c:3d:
a3:f9:6c:13:59:ee:65:85:98:9c:6b:94:1c:29:7f:
62:4e:dc:a1:b8:f4:3a:22:a1:ae:f2:df:03:f2:49:
25:24:01:d1:60:e9:f1:66:a8:26:d9:9f:23:1c:db:
15:50:61:90:4e:2a:40:42:a1:28:08:62:6a:c0:19:
65:ee:f6:20:28:4e:0a:27:aa:04:41:3a:31:60:7f:
d0:4a:a0:c2:4a:e0:04:f3:8a:87:84:6a:f4:48:23:
89:f5:08:48:23:9a:a4:36:d5:bd:d1:eb:c4:ef:02:
f4:b8:6a:bf:0f:1b:75:33:27:dd:14:d3:62:c6:b4:
0f:20:6e:b7:5c:7d:7a:c4:c0:3b:1c:1e:45:2c:49:
e2:cb:9d:7c:11:94:43:6c:46:23:b3:0f:50:52:48:
6f:35:45:bc:c6:14:50:ae:b4:03:a9:d9:11:6a:b8:
97:f7:38:57:b2:f1:18:4c:c1:28:bc:53:cf:44:16:
25:a7:c3:da:12:c0:48:7c:69:22:37:7d:f1:b7:a6:
16:fb:cc:f4:3b:12:8c:4f:b1:59:3e:f0:9f:c1:f6:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AF:06:6C:9F:93:C0:06:00:2D:51:C8:EB:69:88:41:2C:C7:F9:B6
X509v3 Authority Key Identifier:
keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:6b:cd:71:b6:21:c8:84:3e:a4:d4:e3:57:2f:87:84:36:f2:
42:52:3b:38:88:4c:a9:77:b0:26:32:48:4a:0b:39:81:b3:9c:
8d:d1:09:b8:bf:d1:8c:48:9b:c1:87:4b:41:b0:2c:10:db:c1:
37:b6:f1:c0:f7:f3:8d:93:cb:b6:8a:90:ad:6c:be:34:ac:44:
d9:bd:b1:7c:b1:df:92:43:e0:66:26:d2:14:9e:fa:1b:1f:49:
65:74:46:d5:93:b5:5c:aa:48:7e:63:be:5c:a9:82:47:3d:94:
34:90:18:2d:f7:6a:38:82:2d:36:a1:fd:4f:2c:b2:5b:f9:7a:
b7:19:36:0f:64:5f:88:91:a7:9d:d4:57:53:89:78:01:ee:05:
f4:20:d0:b3:ff:72:59:25:7a:36:d4:52:43:3a:de:11:83:53:
93:b2:dd:e0:62:b6:4d:84:e0:d2:2f:94:28:eb:23:4a:2f:6a:
98:9f:17:ed:d1:bd:a9:4c:8a:35:fc:a1:1a:3f:39:f1:4b:b5:
20:0e:95:99:0d:f1:cd:52:84:eb:e8:f3:80:d0:43:db:54:cb:
bd:4a:05:ac:c1:e8:9f:17:48:ba:be:eb:0c:a4:33:65:1d:2e:
fa:6a:dd:33:96:f4:d7:02:2a:24:f6:1e:ff:f6:33:fc:0f:10:
76:a4:87:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:46:15 2026 by rpki-client