
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft
File: 8ElXN_-ojhn_HhUqVgIex1bYUps.mft (raw, json)
Hash identifier: 27Q7+6mjlFlO1NydP1o4wdQaIQrkzYWpwcmW7/Wn0Ns=
Subject key identifier: 0B:D9:31:E4:65:2D:4C:3D:CF:B5:A9:C7:EF:88:EA:E0:BF:5C:C6:44
Authority key identifier: F0:49:57:37:FF:A8:8E:19:FF:1E:15:2A:56:02:1E:C7:56:D8:52:9B
Certificate issuer: /CN=A918E1C4/serialNumber=F0495737FFA88E19FF1E152A56021EC756D8529B
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft
Manifest number: 3D
Signing time: Wed 25 Mar 2026 07:41:22 +0000
Manifest this update: Wed 25 Mar 2026 07:41:22 +0000
Manifest next update: Wed 01 Apr 2026 07:41:22 +0000
Files and hashes: 1: 8ElXN_-ojhn_HhUqVgIex1bYUps.crl (hash: AJlgG+GebftqOxbPs2UZtSHSAo9OlBDkAidcaeVPQI0=)
2: E209029ACE9311F09FB94826C4F9AE02.roa (hash: ufH3RqyZs/KCX/MEMIMIi9q3jKuJOCXeHV0hgCUZTCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.crl
rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E1C4, serialNumber=F0495737FFA88E19FF1E152A56021EC756D8529B
Validity
Not Before: Mar 25 07:41:22 2026 GMT
Not After : Apr 1 07:41:22 2026 GMT
Subject: CN=69c391a2-546d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:e1:53:2e:0a:67:c7:a4:fb:30:5e:fa:52:
a3:2b:92:14:74:be:11:11:e5:3d:f9:a6:61:45:ad:
c4:6e:51:1f:03:9c:98:97:38:a8:24:ff:e5:cb:36:
6f:e2:f5:f4:6b:ef:f4:1d:12:19:e6:5d:91:23:21:
b1:c8:34:f7:a6:02:f1:8e:6d:48:c2:eb:3c:f7:ec:
63:92:21:1c:dd:07:5c:00:df:3d:0d:fb:92:60:5c:
dd:f4:23:f2:a3:ab:83:3a:c0:c5:d8:82:4b:0f:a1:
0e:12:ba:74:77:ad:8d:52:4b:47:f1:d5:bb:af:51:
ad:a9:0f:58:d6:0e:18:51:37:fd:64:8f:c8:3b:7f:
68:2a:9d:0a:c5:54:90:39:36:db:5a:b1:b7:51:5c:
d8:a0:00:ef:36:f3:98:2f:81:39:d0:28:ca:4f:e0:
73:c9:64:32:7c:c8:ef:fa:7f:73:20:60:57:9e:b2:
64:0c:11:e0:30:36:27:9e:f0:f7:56:73:91:23:f3:
61:97:02:9a:af:b3:47:13:ea:f7:75:d6:64:cc:93:
5f:37:74:dd:2c:74:5d:4c:4d:e2:48:37:fc:8a:12:
8d:3b:26:59:2c:fc:dc:cc:a2:40:dc:eb:01:d2:01:
ba:c5:45:c1:a1:5a:21:e0:09:a3:56:1e:74:e2:55:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D9:31:E4:65:2D:4C:3D:CF:B5:A9:C7:EF:88:EA:E0:BF:5C:C6:44
X509v3 Authority Key Identifier:
keyid:F0:49:57:37:FF:A8:8E:19:FF:1E:15:2A:56:02:1E:C7:56:D8:52:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:c5:10:9f:2b:07:e2:49:11:96:18:a3:14:a1:38:79:41:de:
97:70:7b:47:24:83:0a:f9:5d:4a:df:c3:37:6f:ae:75:4e:8a:
11:f6:fa:d5:06:b4:e8:00:2d:4d:c6:14:12:a3:0e:a7:a8:6a:
a6:5b:83:ee:65:bf:9b:81:31:a0:8b:a3:c3:29:2d:61:1f:f7:
f1:da:d5:99:26:ca:a9:3a:57:e7:ec:0e:51:e6:ec:d2:96:03:
30:5c:08:3c:e2:0c:a5:c6:e1:c6:7f:c8:97:ba:fe:32:68:d1:
c2:3c:1d:81:2a:33:e6:43:0b:14:b5:26:82:f0:b5:ff:f5:4c:
56:3e:01:51:a3:4c:27:5d:1f:d0:f5:5f:41:7d:a7:9c:34:03:
4c:f0:5d:9f:49:9a:f8:84:ce:a6:e0:1b:45:ee:15:b5:d9:19:
60:cf:0a:05:00:63:cd:d8:d0:d2:37:6f:a7:9f:e0:5b:34:5c:
1a:7d:b2:89:06:3b:94:97:0a:a6:5f:37:63:b7:87:8d:b5:c0:
f5:a3:dd:2f:92:70:e4:30:9d:5f:f5:e7:13:9c:68:dd:1c:b8:
07:df:cf:c0:b5:ac:40:1c:4a:ad:42:ac:4d:39:b5:55:bd:87:
e5:41:33:21:1a:c2:d9:72:7e:3f:1c:28:82:bc:55:6c:60:02:
57:ef:53:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:00:59 2026 by rpki-client