
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
File: Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft (raw, json)
Hash identifier: q83LW+clA5N2Yu1aqo+xnI5l/alHANoaBVN7jIztclM=
Subject key identifier: 8E:B1:10:29:10:BB:B6:65:53:67:59:5F:6B:DB:9E:52:8E:4E:0C:63
Authority key identifier: 12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA
Certificate issuer: /CN=A916DFDD/serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
Manifest number: 95
Signing time: Wed 25 Mar 2026 06:41:27 +0000
Manifest this update: Wed 25 Mar 2026 06:41:27 +0000
Manifest next update: Wed 01 Apr 2026 06:41:27 +0000
Files and hashes: 1: Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl (hash: CCy5w7jqgronlec6LTznyRwSoJvgieFCuqZANLQx0Oc=)
2: 780B9CF8867811F0AA0D2534C4F9AE02.roa (hash: bIV64sVlTL7EaQgJ84zASy5o4zZxDgzDVzxmS49KHn0=)
3: 78817658867811F0AA0D2534C4F9AE02.roa (hash: FMz5zBTx4wx3km6uWz9f+jD8U/Hm5BuImLwf1/hq9iU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl
rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:41:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DFDD, serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA
Validity
Not Before: Mar 25 06:41:27 2026 GMT
Not After : Apr 1 06:41:27 2026 GMT
Subject: CN=69c38397-e85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:0f:a6:19:25:46:8f:1c:c9:b8:16:ec:6f:
53:7a:d0:e3:b6:a3:7e:e6:c0:63:ee:ca:1f:5d:f8:
8c:78:1f:c9:7d:13:0c:e8:ce:c0:2e:4c:96:90:cb:
41:d0:98:b8:47:2b:2c:92:c1:9a:78:4b:ba:3e:1d:
42:6b:c2:10:d1:75:0f:5a:6d:47:82:89:a0:85:aa:
98:75:7b:6f:c8:f7:25:b6:71:3d:d1:36:d2:d3:8d:
30:9e:3a:d8:27:d2:58:77:ee:7f:83:0c:97:ac:1d:
04:63:10:f7:4a:c9:ff:11:9f:23:a3:86:ae:e6:85:
ac:b2:b6:89:07:46:4a:7c:23:99:0c:20:e9:d3:6f:
bb:be:eb:f3:47:c7:cc:d6:61:d1:7a:5b:34:20:17:
65:95:30:8e:40:12:70:ba:f8:36:3d:2b:97:36:e8:
06:06:7b:3f:f0:f0:bf:7b:ad:0e:94:dc:89:f3:ae:
1b:f4:57:97:28:30:e2:2e:ab:4a:ac:da:8b:a5:3d:
99:cb:86:72:6b:7f:ba:46:3d:66:5b:1c:24:f9:e3:
f1:fa:5e:d8:f6:95:a8:fc:a3:68:76:28:4e:cb:0f:
d3:20:6f:07:51:b0:34:e1:eb:9a:71:ae:2f:6d:98:
37:8f:2e:9b:7b:a5:8e:b3:2c:6f:7e:c8:c5:bb:4e:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B1:10:29:10:BB:B6:65:53:67:59:5F:6B:DB:9E:52:8E:4E:0C:63
X509v3 Authority Key Identifier:
keyid:12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:c3:ab:52:69:1d:fc:ed:f9:4a:c2:3c:21:c5:5b:11:8c:a3:
5c:ba:fe:44:db:07:de:64:6a:91:9e:c3:b0:17:d3:6a:67:ea:
3e:7e:3e:f1:12:bb:04:3e:66:79:8f:01:11:e6:55:83:5e:b5:
76:50:c5:7d:5f:a7:31:34:47:95:5c:aa:70:ec:91:5d:f0:23:
b9:11:71:11:d1:31:a9:9a:28:89:7b:23:de:ee:b5:df:c8:91:
9c:a2:a7:6e:97:a2:b7:c8:4f:e3:4e:5d:97:ed:ff:bf:40:1e:
2f:07:15:7d:01:ff:2e:7f:f3:ef:f8:3a:c9:ce:59:5b:12:4f:
68:6c:3c:89:6f:26:23:2c:63:f3:66:fa:de:e4:75:b2:de:3a:
2a:be:be:3b:7a:ce:e2:76:6e:41:c4:e8:60:90:ab:1a:bf:a3:
ce:69:1f:69:90:59:b5:44:ff:5c:21:ed:dd:96:f3:d3:07:71:
7c:3e:e3:93:73:0a:a4:a3:86:0a:08:a0:89:d9:b0:f3:ff:f5:
b4:1c:20:35:5d:24:fd:8e:a5:9c:2c:0d:a9:24:23:08:f4:14:
10:b8:9d:af:ef:02:52:ba:38:f0:02:50:68:61:bf:93:08:3b:
43:ab:86:e2:33:c1:16:cf:cd:ef:17:be:ff:2b:49:de:5a:a1:
f8:a0:17:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:55 2026 by rpki-client