
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
File: Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft (raw, json)
Hash identifier: qlbexmImyuDwEC97gL/auTwVdHSJfY8T7de0kEz6eKk=
Subject key identifier: E4:0A:B0:CD:F1:C4:B8:31:6F:D6:73:51:90:05:2C:58:58:AC:B6:E6
Authority key identifier: 12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA
Certificate issuer: /CN=A916DFDD/serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
Manifest number: D1
Signing time: Thu 23 Jul 2026 08:31:21 +0000
Manifest this update: Thu 23 Jul 2026 08:31:20 +0000
Manifest next update: Thu 30 Jul 2026 08:31:20 +0000
Files and hashes: 1: Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl (hash: CaIB3br/dwF5D3DXIz5rfor82IiJkz8kB+QdXAO7DRs=)
2: 780B9CF8867811F0AA0D2534C4F9AE02.roa (hash: bIV64sVlTL7EaQgJ84zASy5o4zZxDgzDVzxmS49KHn0=)
3: 78817658867811F0AA0D2534C4F9AE02.roa (hash: FMz5zBTx4wx3km6uWz9f+jD8U/Hm5BuImLwf1/hq9iU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl
rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DFDD, serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA
Validity
Not Before: Jul 23 08:31:20 2026 GMT
Not After : Jul 30 08:31:20 2026 GMT
Subject: CN=6a61d159-d7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:6a:46:ef:6e:e6:1d:19:40:9c:ad:c5:d5:
89:1a:74:27:49:48:b0:fc:26:ab:c7:52:54:3a:68:
d7:ef:f6:94:43:20:54:b5:be:09:46:ab:a8:ca:99:
c0:57:42:31:95:5d:73:d5:29:44:1b:6a:5c:83:f6:
c9:81:f2:d6:a4:25:04:7f:e8:ba:3b:fa:2a:0d:09:
41:b3:81:12:36:e3:23:ef:d4:5b:a2:d1:2b:e7:1b:
1d:e1:e0:2d:2d:06:3c:f1:ca:48:63:f7:c4:62:f6:
5b:ab:cb:fa:43:57:8a:a2:51:22:73:06:40:da:6c:
28:75:c2:ef:b4:ab:fd:f0:0f:33:3f:ba:5e:2c:cc:
87:8f:7e:f2:65:56:47:67:31:83:10:e6:56:cb:22:
01:fe:a0:61:99:8c:f2:47:0c:dc:dd:9e:23:23:da:
18:df:3d:05:6d:d6:e7:20:3b:00:36:c5:b8:83:91:
5f:8f:e8:8e:17:51:39:b9:04:22:94:f1:70:03:29:
ea:b3:07:36:be:98:80:66:a1:9f:84:aa:3d:7e:83:
cc:7e:33:6b:9a:50:b9:1c:7c:e1:aa:94:6f:ff:a2:
69:6c:46:e1:e8:21:5b:51:97:49:9f:5a:a7:95:e0:
f9:34:1e:0b:c6:20:9f:39:fe:a3:18:a6:61:d6:e1:
9a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0A:B0:CD:F1:C4:B8:31:6F:D6:73:51:90:05:2C:58:58:AC:B6:E6
X509v3 Authority Key Identifier:
keyid:12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8a:10:17:cc:27:05:e5:89:bc:2d:57:11:e8:55:b4:b5:dc:
b6:3d:f9:e8:b1:d3:02:3b:78:c7:a9:8f:9f:2b:b6:3a:88:f4:
34:20:5e:66:4a:ae:40:38:05:af:ff:c4:d4:d8:66:b6:70:9a:
a8:c7:a6:1c:e4:73:6e:e5:81:3e:5a:e3:21:5d:87:08:88:2c:
d8:95:b8:9b:be:c7:71:d7:db:d6:77:7b:a2:02:69:63:de:69:
42:73:c1:85:6f:ba:69:41:7a:3b:c1:cd:c9:63:3b:03:c1:5d:
32:9d:8a:82:b6:53:02:b0:bf:81:ee:31:0e:81:7a:8a:01:15:
db:40:d1:d2:8e:81:4a:80:62:c5:30:db:97:f0:c4:b6:c0:36:
7a:63:45:c7:14:d1:ab:5c:ab:3b:19:0a:9c:79:9f:1b:77:bb:
db:b5:54:e4:ca:b7:a7:c9:21:7b:f8:c8:17:07:40:4d:2e:87:
2a:b7:0d:aa:83:45:16:49:03:cd:1b:b1:a5:e8:e9:77:fa:d3:
c7:01:39:75:f9:75:81:23:84:b4:16:fc:63:ee:ec:d7:d3:6d:
88:28:f0:e5:33:8a:37:f9:0d:32:60:36:7a:f9:e2:32:f7:7c:
18:8b:68:51:bb:33:15:04:c8:df:cd:0b:88:1a:58:81:af:e4:
04:d6:f8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:19 2026 by rpki-client