
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft
File: elxN0KO7nNgUshdK9pPj90FLmVs.mft (raw, json)
Hash identifier: C6cvQd6o1lnBQL6a9LfJLQ53jY20OferbWUUqC3JUCY=
Subject key identifier: D6:D3:A9:32:53:A2:7B:FA:B7:A1:82:BF:EA:6A:03:9D:BE:F0:7E:41
Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B
Certificate issuer: /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft
Manifest number: 01CC
Signing time: Mon 11 May 2026 03:47:39 +0000
Manifest this update: Mon 11 May 2026 03:47:38 +0000
Manifest next update: Mon 18 May 2026 03:47:38 +0000
Files and hashes: 1: elxN0KO7nNgUshdK9pPj90FLmVs.crl (hash: iIRV+nPChuCU4K7Or9/Ez/UmQuDyOfFTUJHIu1hE2Xw=)
2: 24CB4F36957811EEA7BF2753C4F9AE02.roa (hash: 5qkckcYMaH0GRLGYr930Mpl8yumJzOAzDnGsPuTvO/o=)
3: 4A0A2DC8958011EE91C9DF80C4F9AE02.roa (hash: W1FAqZ5GczduFFlZHlqg4Dus/uvW3pBCGnVTQ4ZW/88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl
rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182FD0, serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B
Validity
Not Before: May 11 03:47:38 2026 GMT
Not After : May 18 03:47:38 2026 GMT
Subject: CN=6a01515a-51cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:85:1e:d3:5a:01:23:05:4c:95:ca:63:59:
c4:2d:19:ac:82:56:9b:33:50:3c:d4:3b:f7:c9:5e:
25:11:90:c0:22:18:f0:06:d2:d5:78:18:56:5f:71:
2c:46:fb:3d:39:60:cb:d7:c2:93:53:f7:f8:6e:64:
20:96:6d:49:3a:42:a7:be:4e:92:1d:29:3f:6d:3c:
56:74:34:19:2c:2c:cc:76:44:aa:08:8a:54:0f:7b:
98:6e:8a:4c:c8:32:0b:fd:61:56:d5:ee:6a:04:0a:
5a:60:45:a3:62:db:03:cb:e1:1f:87:75:8d:71:c9:
c4:5b:4f:28:eb:fc:d1:e6:3c:f8:6f:f5:0a:ed:c8:
7f:28:b4:d3:94:ea:44:db:7a:f7:6c:0f:12:12:8e:
d9:e4:bb:94:e7:7f:ed:32:73:a3:a5:58:8a:8c:69:
cb:50:4e:00:13:be:1e:ef:a8:62:1f:8b:42:02:ef:
d4:6f:3e:51:e8:d1:79:6e:ce:cd:3f:fd:78:cb:84:
af:53:c1:ed:16:54:f8:2f:a5:94:56:f1:d9:06:d6:
cb:aa:a7:e5:3d:3c:84:46:37:0e:8d:20:53:34:be:
99:1b:e6:26:70:19:c1:3f:e9:71:cd:6b:70:b8:89:
ed:46:58:e1:cd:61:61:43:1d:01:f0:3f:5e:ec:e2:
9d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D3:A9:32:53:A2:7B:FA:B7:A1:82:BF:EA:6A:03:9D:BE:F0:7E:41
X509v3 Authority Key Identifier:
keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:cc:7e:b9:00:be:c5:a6:17:ce:e9:ef:8e:68:1d:48:98:f1:
2e:1c:3f:91:c6:99:1e:2b:6c:a2:c4:df:6a:a5:bd:2e:96:70:
b4:c7:61:80:b0:af:1d:7c:7e:f5:02:56:86:3e:96:67:26:17:
50:e0:a7:71:af:af:a1:4d:af:f1:19:ee:98:49:1b:13:0d:91:
06:ca:4d:99:f7:d8:f0:d0:a6:fc:d7:19:e9:10:a9:15:3b:f7:
ca:f6:e8:6c:ea:8f:54:57:61:ea:45:b3:07:1e:f1:04:8f:77:
1d:7c:5f:44:00:3e:29:ae:30:2c:4c:07:9f:32:d6:cf:38:c2:
6b:98:ed:76:ef:5d:5d:4c:f1:bd:25:60:30:a9:c5:0d:c1:0f:
73:5f:71:0b:f9:4f:95:55:8a:8a:e8:86:81:f0:5e:26:91:81:
ea:52:52:fa:9b:11:0d:5a:01:bc:92:4c:3c:a3:8e:37:25:af:
d9:1b:5d:0a:54:45:ff:da:61:b5:be:1f:10:ea:c3:2f:d9:60:
5e:e7:4c:89:89:15:cd:42:a8:eb:48:ab:a0:ee:12:01:41:f9:
68:a4:ef:9a:a9:09:fb:77:81:21:ec:0a:8e:68:6f:a8:4b:98:
ae:53:6a:b0:16:84:50:ea:f3:63:ad:23:19:85:01:7b:68:98:
4d:f6:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:53 2026 by rpki-client