
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
File: elR0EjxUiBfiXzSEzCa2CwZBvWk.mft (raw, json)
Hash identifier: JMEhF93NUC/is+bwoRge0fDnULHhxIlZaQU2ZMpAQdc=
Subject key identifier: CF:C8:98:DC:2D:6A:3B:66:7A:36:E5:31:E1:56:28:7E:D7:6B:28:C3
Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69
Certificate issuer: /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69
Certificate serial: 081A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
Manifest number: 0805
Signing time: Tue 24 Mar 2026 20:59:25 +0000
Manifest this update: Tue 24 Mar 2026 20:59:25 +0000
Manifest next update: Tue 31 Mar 2026 20:59:25 +0000
Files and hashes: 1: elR0EjxUiBfiXzSEzCa2CwZBvWk.crl (hash: UFAU4iAGyVlMWqeF889aAsj/Khxil+eIPZtIxbX0hB4=)
2: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (hash: xYotCNT5gCNIUjui/L3r9m3hvbE/2pZfHJK9qEIIwa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl
rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074 (0x81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6F87, serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69
Validity
Not Before: Mar 24 20:59:25 2026 GMT
Not After : Mar 31 20:59:25 2026 GMT
Subject: CN=69c2fb2d-d733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:7e:33:a2:ab:55:49:5a:5c:6a:c3:94:4b:
58:a0:df:03:72:6d:93:ea:fe:0b:42:f6:42:0d:17:
bb:eb:89:b8:65:7c:ed:7f:08:66:bd:25:04:34:50:
fd:6c:4c:5e:58:a1:20:48:c2:c2:5b:99:77:27:3a:
98:a2:23:eb:55:6f:68:7d:1c:b8:fa:39:fc:33:3b:
4f:9c:5e:38:32:76:a5:62:6b:12:31:71:35:8f:51:
65:2a:b9:2b:9c:e1:bd:20:47:8a:e1:c7:fb:52:ea:
8f:a2:dd:5b:0a:b0:16:ea:8d:7b:b4:ce:3a:59:4b:
82:c5:26:ba:3f:50:b2:97:39:c8:76:64:a8:a9:91:
32:7c:43:5c:29:a1:25:16:fb:44:14:9e:6e:32:d6:
01:81:f1:0f:48:e6:d5:79:ee:a4:ad:d4:c5:32:87:
0b:66:80:fe:f1:39:55:83:cd:2e:ba:ae:86:c8:cb:
81:db:86:47:41:97:58:9c:9c:16:c9:c9:73:b8:40:
67:56:f3:bb:7c:4d:7c:57:d9:5a:c8:63:2a:2d:dd:
2e:89:f6:92:c8:ce:02:24:1a:5d:34:b2:aa:65:83:
84:2f:e2:98:e4:5e:53:fd:33:28:f2:ed:40:a6:3b:
9b:45:c1:9a:97:08:bc:89:62:08:96:96:b1:5e:d3:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C8:98:DC:2D:6A:3B:66:7A:36:E5:31:E1:56:28:7E:D7:6B:28:C3
X509v3 Authority Key Identifier:
keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:23:17:0e:6c:97:4a:40:20:ba:05:71:5a:38:6f:67:42:a4:
45:48:38:e0:a7:4f:c2:65:c5:f1:85:b8:cb:16:43:70:ee:04:
a4:7b:d4:ab:3b:e5:1c:2c:34:22:04:37:af:df:97:75:ca:1c:
ed:c1:16:ee:fa:d0:13:34:47:a6:f6:4a:a1:b7:25:c5:be:8f:
7d:17:b0:92:0a:74:49:31:fa:fb:6b:90:b4:ae:a6:87:a6:f9:
3d:e3:e6:53:98:61:18:16:c4:d3:5b:f7:38:87:43:6e:6e:e2:
a2:1a:2f:a2:26:92:37:dd:67:d6:93:a5:6d:32:97:6d:3f:3d:
20:b3:84:d7:59:36:5c:31:3d:c4:eb:fb:95:a2:06:0b:db:9f:
71:3e:4b:22:73:bb:bc:f6:85:88:ee:8e:79:34:85:07:bc:0d:
d7:4c:3e:c0:aa:be:17:e0:9a:f3:aa:98:ce:5a:77:44:23:12:
89:2c:de:6e:29:bc:dc:b6:3f:8b:82:d5:06:e7:54:2d:3b:5e:
be:e6:fe:5d:fe:21:85:d2:c2:3e:66:39:cf:59:8c:e5:e3:44:
eb:0d:d9:ce:bb:d4:7d:52:08:4e:55:74:c1:9c:c8:f1:b4:70:
ad:0a:54:e1:be:9b:d6:4b:59:96:34:9a:15:40:d2:56:4b:cf:
f3:48:4a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:35:48 2026 by rpki-client