
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
File: eLB7yieVuFKmVslAPke8uKvgelo.mft (raw, json)
Hash identifier: BCRugXgJ8MXDtOWEVdylhwjtP7apP4p136bJ2w43pPc=
Subject key identifier: 49:13:2E:19:05:24:4A:E0:21:3B:C0:83:7B:55:F9:28:69:1E:FE:12
Authority key identifier: 78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A
Certificate issuer: /CN=A91B0380/serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
Manifest number: 0118
Signing time: Wed 25 Mar 2026 05:00:52 +0000
Manifest this update: Wed 25 Mar 2026 05:00:52 +0000
Manifest next update: Wed 01 Apr 2026 05:00:52 +0000
Files and hashes: 1: eLB7yieVuFKmVslAPke8uKvgelo.crl (hash: FiDXAjOOfrgW81ArJe0ImgGD9QlekkiZz171rjrXXcQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl
rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0380, serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
Validity
Not Before: Mar 25 05:00:52 2026 GMT
Not After : Apr 1 05:00:52 2026 GMT
Subject: CN=69c36c04-9961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:a5:ae:f5:a7:f9:71:1d:fe:64:37:48:78:
54:07:24:78:85:05:03:79:de:5e:ab:8f:78:d9:a7:
b6:f1:bb:64:c5:5e:99:90:24:b9:74:92:d0:d1:5d:
32:62:25:dd:38:8c:09:c9:2e:f7:31:2c:e1:35:e8:
4c:39:6a:b8:88:da:3a:ea:98:fa:14:dd:ac:fa:01:
89:53:4e:73:1c:30:95:f0:1f:43:6b:82:92:36:fb:
cf:cf:34:e6:f0:7d:88:80:4a:6f:ac:d0:7a:54:ad:
77:f6:20:de:c5:12:b9:ac:6d:70:79:be:42:56:cf:
46:4d:e9:c3:87:44:8c:ae:22:1e:fe:a1:f0:ac:41:
17:97:fd:6a:9d:27:03:66:01:89:dd:41:e4:90:0c:
1d:16:6b:10:a6:6e:67:01:38:73:b0:50:48:5c:ac:
27:39:0f:71:8b:30:75:ec:e5:45:e7:47:a3:f3:da:
82:20:e2:f7:4f:0b:0f:a3:eb:c3:a7:18:f8:89:31:
f9:15:5c:91:c9:8a:36:48:53:5e:6d:3f:60:08:e3:
45:73:8e:44:af:6b:69:30:4c:3c:19:3e:3a:11:b5:
ea:a4:30:d1:f4:14:8e:ec:51:3e:ea:44:32:9c:48:
81:7c:af:9d:85:63:97:aa:80:1c:1c:cc:54:6e:48:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:13:2E:19:05:24:4A:E0:21:3B:C0:83:7B:55:F9:28:69:1E:FE:12
X509v3 Authority Key Identifier:
keyid:78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:93:d0:e4:30:1f:44:ab:2b:0c:ad:ad:c8:0e:dc:41:c7:a3:
24:15:4a:c9:6c:3b:3b:e6:c9:54:9a:ad:51:61:da:2a:78:f0:
36:be:c3:7b:75:39:62:7d:91:1b:8b:0e:3b:78:75:5d:c5:d7:
2b:4f:86:91:00:2c:c5:36:db:65:1f:83:c8:39:5b:8b:8d:78:
ce:c6:03:17:bd:62:58:ec:a8:73:48:1b:3d:92:d6:78:12:10:
8e:d9:f2:27:45:e3:5e:5e:44:10:f9:c8:fa:12:bf:80:77:94:
90:b5:ef:e4:0a:66:33:32:c8:fc:cd:59:af:6e:33:4a:0e:9b:
35:13:69:8b:3c:8a:da:df:bd:24:4c:6a:62:34:75:16:4a:6d:
c3:89:70:ef:7a:45:a2:b9:58:05:92:87:4f:85:1b:eb:e3:dd:
4f:d6:ca:66:48:b1:eb:d3:bc:f3:29:37:81:23:83:cc:22:45:
19:ec:cc:cf:cb:c2:9e:c6:29:d9:ea:ac:62:93:32:1d:45:84:
b1:93:f3:b6:4d:26:d1:29:ba:54:c9:54:1b:ea:d5:fa:97:39:
4a:e6:9e:82:62:66:3a:67:ab:ab:39:90:ae:86:07:fc:40:09:
4e:10:11:a4:17:9e:9e:ab:07:d3:93:73:fb:cb:77:23:93:b3:
3a:1e:b7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:11:49 2026 by rpki-client