
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json)
Hash identifier: sLI0wp3Dat5rj0hKU3lacV1oeXstwRW40uG08nI5L+I=
Subject key identifier: 3B:EC:C4:C9:16:29:A6:BE:C9:EE:01:8F:97:AC:3B:38:0B:69:5F:D9
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 08B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
Manifest number: 0835
Signing time: Fri 12 Jun 2026 21:20:39 +0000
Manifest this update: Fri 12 Jun 2026 21:20:39 +0000
Manifest next update: Fri 19 Jun 2026 21:20:39 +0000
Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: RZW5xo8S6+SokRAvG/EaEl85JjfsS23F+3/J/q7Tj3g=)
2: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: ixSD//VPVA20+49srKzUc+mMjY0KkEX52xrhudvtNos=)
3: 113EFAA01CD311F183095B1A353D8C67.roa (hash: hxloJgOcKOBqGBUZhYK1fL/Ei66jWkYPEeVHeMiMIeQ=)
4: 723DE3FCD66A11F0B3A3696C61D3641D.roa (hash: 8QmsBUY2s//20xxLVI3hPEMb0s2pQxbXtkVnYbraTKQ=)
5: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: 86TlHawEYIJrsKG9qDpQKaZUIOg/AkQSTyCR37y06KQ=)
6: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: tDdAfUG8eCP0TQX57qdH9o5o3LcfwqBq8wJ4yE3QIyI=)
7: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: XlJ4FUowQX/Y/4cD7WUgyXsW7hmXlclzkcofs1Q8ApU=)
8: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: WKTJAf1xc2gCKAnmp9H0dtuF8DSxcxsaPieQCnG+VvQ=)
9: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: 2zP/u/XPb4lS5YQU45AQ3bnL/iCqP8TtJ7qEosRQcfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2233 (0x8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: Jun 12 21:20:39 2026 GMT
Not After : Jun 19 21:20:39 2026 GMT
Subject: CN=6a2c7827-a3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:7e:b3:95:bb:50:c0:61:52:5a:6c:3d:da:
e8:3d:3d:41:a7:67:61:c6:73:ac:4f:ca:f8:54:ca:
dc:a3:2f:8c:98:11:1d:fa:f9:66:67:28:48:e2:c7:
23:87:25:b5:be:79:3d:66:d5:c9:5e:46:59:b5:c9:
d7:a1:b5:2c:66:e6:d1:67:24:be:32:fb:05:13:bf:
9f:b5:21:60:a2:3c:a8:33:21:23:b1:eb:e8:6b:c9:
d4:62:58:a5:02:d9:8b:45:f5:1e:3d:56:9b:d2:06:
cd:7c:ba:56:26:1c:c3:d3:07:0d:50:5f:b9:64:90:
25:2d:03:7c:23:43:ba:ca:33:c7:95:5a:96:8a:0e:
6f:b0:6f:34:63:e0:b6:e8:3d:ae:d4:1c:33:4c:84:
0b:eb:41:8b:3d:85:34:cd:df:43:8d:63:e9:4d:ec:
78:5e:cb:6f:04:c7:da:8c:e8:a8:cf:2e:84:3c:10:
e8:74:87:b1:9d:ab:61:14:63:54:55:dd:76:c5:ec:
6a:d2:3a:2e:cd:16:f5:17:d0:67:6f:26:42:5c:02:
81:45:ac:35:7c:c9:0e:b5:cc:8f:25:1f:44:1e:76:
64:a5:a8:9f:29:17:d6:58:fb:9c:62:d8:59:f1:1a:
96:45:c9:a6:2e:f1:4b:da:f7:e5:af:12:5e:fa:47:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EC:C4:C9:16:29:A6:BE:C9:EE:01:8F:97:AC:3B:38:0B:69:5F:D9
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:00:af:48:86:92:65:a0:62:73:4c:a2:f1:17:7f:5b:b2:88:
09:ef:0c:0e:5a:fe:71:06:dd:65:99:3b:c7:db:93:3d:93:bb:
c0:b0:4f:b5:01:df:e2:04:6c:20:4e:e1:99:71:62:67:bb:e5:
32:88:bd:71:72:10:bb:50:58:7f:3f:d6:e7:9f:50:57:bc:80:
9c:47:aa:9b:4e:e9:42:c8:5d:9c:fb:30:d5:d6:b2:4d:2f:a8:
6e:50:8e:93:78:10:9f:06:57:a0:a5:6e:9e:6c:fd:42:77:32:
64:f5:10:b7:98:9d:f7:60:1d:56:29:91:d9:ae:a1:68:1d:76:
84:89:e3:81:c1:0e:20:60:27:5d:7f:84:5a:1b:e0:f8:35:34:
98:41:65:f2:9c:c1:a6:40:ed:fa:3a:0b:85:f7:10:44:57:5c:
e1:a0:a6:60:4c:d1:1f:11:2b:44:87:78:8b:28:b7:de:7b:f9:
9d:3d:e1:8c:f9:a2:b3:cd:77:ca:20:c6:a0:61:2d:0d:51:c9:
10:40:7c:53:b0:f0:3e:92:0d:1c:7d:ec:d7:8d:b8:1d:22:86:
41:2a:58:bf:a2:84:91:8a:3c:8f:98:66:2e:87:29:54:54:a6:
32:a6:08:f8:a2:49:7c:b5:44:c4:2d:b8:3b:16:dc:21:8b:2b:
e8:13:47:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:56:11 2026 by rpki-client