
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json)
Hash identifier: xIoPr2p7WbYbWU3/eTcCWaDkHP+E/33KdPDsXTpcVQI=
Subject key identifier: 1C:23:01:61:8E:7D:D2:7F:A6:BA:7A:FB:EF:B6:C8:4A:DF:0F:12:57
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 085D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
Manifest number: 07F6
Signing time: Sat 28 Feb 2026 21:51:52 +0000
Manifest this update: Sat 28 Feb 2026 21:51:51 +0000
Manifest next update: Sat 07 Mar 2026 21:51:51 +0000
Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: NX/Hcult5NTn4aIHfsx02P4oRz5Bm+lkFvnf3lDGESE=)
2: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: rFNdBE/l2Q3OnzMQ6TN5aUj23PCHorUgqebxmyTEGXU=)
3: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: I61epdoS7NgSvCNgvdHOLFptBBSx5JIqUPN5lG/cUj8=)
4: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: qln4gvIuOP7tepjN2xzQIyOgSArueoVOrTlqRA/GgZc=)
5: 723DE3FCD66A11F0B3A3696C61D3641D.roa (hash: aL/kODOLIDHuNmCnLe8Qvybv/SiBsmo7P+ETCMyOtcA=)
6: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: VPyjHXIlyfKXrjtRepxZP54GhoJ+eI58uZbgIe9Td2M=)
7: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: fcLk74mhI/vJXY1ktCkvuDEMWDBzEh5+AvgLMjlAcms=)
8: 93FACB2AF99411F086574951556F56BC.roa (hash: Z5ZANkL0ED9ZUdQ7vxt4dRihpfXrxpEonDSbpmjiPzo=)
9: 8C47DF70131C11F194DDB11E1C3D8C67.roa (hash: cfa8a7VLxcZyUPpVyGTTAwXQEsKYqWM+zobP/xhmMkM=)
10: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: xQhNdK+dmnWFBSYuPKpKIiIyOGr1KTaY3ftw2n4c55M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141 (0x85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: Feb 28 21:51:51 2026 GMT
Not After : Mar 7 21:51:51 2026 GMT
Subject: CN=69a36378-b111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:72:f8:97:df:fd:26:ac:a1:f1:37:a6:ea:
ea:dd:78:43:3e:58:31:e7:ce:d8:a0:67:57:aa:8e:
33:69:d2:96:5f:f8:62:0f:8c:2a:e0:d2:44:8e:7e:
49:3e:62:65:5d:e3:7c:69:b9:b1:56:7f:b4:93:24:
63:b7:2c:54:cf:0d:1d:df:bb:4b:31:05:5e:8a:e3:
4f:37:f0:8e:54:62:17:d9:6f:89:66:dd:22:1f:d6:
ca:53:9c:17:e6:c0:e2:96:ee:3c:a8:6c:62:8f:91:
94:29:14:1d:0c:b9:e9:de:95:c3:12:eb:8b:a7:f6:
94:d8:03:b2:ad:e7:f9:95:50:2f:07:5d:cd:61:11:
76:c5:c9:bb:eb:a9:bb:28:6c:68:89:26:0f:41:2c:
db:15:37:ec:2c:71:7f:2a:72:b9:46:69:29:8f:92:
b3:e8:b5:8d:c5:4c:8f:49:15:64:a7:20:cd:29:20:
3d:0e:ea:d7:6b:6a:09:05:60:65:5a:bd:57:35:7c:
c4:dd:76:94:cd:1b:2c:30:01:f8:20:3e:7e:75:db:
e5:8c:c5:62:28:0d:b6:d1:d7:78:40:72:b4:fa:84:
96:ff:16:4d:31:e3:33:92:96:97:52:41:6b:21:6b:
ec:ed:bc:e9:67:64:71:14:33:98:53:b1:a4:67:e5:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:23:01:61:8E:7D:D2:7F:A6:BA:7A:FB:EF:B6:C8:4A:DF:0F:12:57
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:b6:16:90:0d:66:52:be:8e:95:ac:bf:a9:12:86:e1:a1:ce:
1b:8f:a8:cb:20:0e:89:b1:14:9d:6e:48:a2:87:d8:cc:c7:08:
a5:84:d7:af:b7:50:9e:ed:da:b4:91:ad:59:05:48:6a:70:0a:
d7:a7:db:d1:4a:ea:2b:fd:2b:29:bc:ce:07:24:ce:d0:f4:71:
82:1d:4e:b1:72:1f:1c:67:02:37:5e:f0:8d:8e:ab:16:06:fa:
35:0d:67:e8:7e:80:bb:0b:0a:7b:fd:c6:9c:ef:2e:64:28:69:
9c:c8:e5:18:32:1f:1c:89:c1:57:0a:12:ab:72:0a:39:11:9d:
f5:fb:a6:45:91:8f:50:4a:31:02:43:53:bb:2e:85:dc:41:56:
f6:c1:bd:33:aa:6f:44:1c:c5:3d:a7:cf:f8:f5:cb:67:c1:9d:
0c:96:01:9a:b7:1a:97:c0:54:5f:ef:16:c8:e4:23:38:a7:50:
50:12:7d:0b:5d:39:1a:c4:ca:92:c1:03:52:16:ff:74:51:4a:
da:96:db:95:19:96:29:61:52:5f:87:94:24:c9:5e:4f:f4:b3:
00:cb:0d:55:65:df:11:b6:6b:70:18:de:02:af:fd:07:2a:61:
99:f6:9a:cd:c7:0b:2b:a5:dc:59:79:ab:fe:f8:51:e6:3e:70:
2d:e5:15:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:57:38 2026 by rpki-client