
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json)
Hash identifier: NlrxKrUUdG1OoRMiWc0xq1naYUjFf5E7e0jz9VrOJW8=
Subject key identifier: BD:8B:FA:33:85:1F:5A:51:C1:8B:59:D6:65:1E:3E:0C:01:45:3F:80
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 08CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
Manifest number: 0849
Signing time: Wed 22 Jul 2026 21:49:50 +0000
Manifest this update: Wed 22 Jul 2026 21:49:49 +0000
Manifest next update: Wed 29 Jul 2026 21:49:49 +0000
Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: Bg4kKhOIwGKG40c+XlfSFpJYKSJl0NzGU8xJYW32AFw=)
2: 113EFAA01CD311F183095B1A353D8C67.roa (hash: hxloJgOcKOBqGBUZhYK1fL/Ei66jWkYPEeVHeMiMIeQ=)
3: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: 86TlHawEYIJrsKG9qDpQKaZUIOg/AkQSTyCR37y06KQ=)
4: 723DE3FCD66A11F0B3A3696C61D3641D.roa (hash: 8QmsBUY2s//20xxLVI3hPEMb0s2pQxbXtkVnYbraTKQ=)
5: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: 2zP/u/XPb4lS5YQU45AQ3bnL/iCqP8TtJ7qEosRQcfQ=)
6: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: tDdAfUG8eCP0TQX57qdH9o5o3LcfwqBq8wJ4yE3QIyI=)
7: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: XlJ4FUowQX/Y/4cD7WUgyXsW7hmXlclzkcofs1Q8ApU=)
8: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: WKTJAf1xc2gCKAnmp9H0dtuF8DSxcxsaPieQCnG+VvQ=)
9: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: ixSD//VPVA20+49srKzUc+mMjY0KkEX52xrhudvtNos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2253 (0x8cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: Jul 22 21:49:49 2026 GMT
Not After : Jul 29 21:49:49 2026 GMT
Subject: CN=6a613afe-4eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:77:d9:2f:50:d6:c2:74:69:7f:5b:db:38:
e1:56:fc:dd:88:30:81:7d:97:b6:83:79:a5:22:96:
1c:15:68:6c:63:37:a4:5c:3e:95:1b:ff:25:12:1b:
45:28:8d:45:32:1f:7c:b3:00:90:ac:9e:99:9b:db:
59:a9:e3:b0:f6:77:d4:a5:c6:9e:b1:e5:dc:97:51:
ee:6d:6c:f0:e4:b1:1d:ea:6e:6a:37:40:5e:17:76:
ba:86:d3:a2:d2:3c:e8:80:e3:e7:2a:74:e6:b0:2e:
ae:39:85:7f:c3:9e:6e:e7:9a:56:33:e1:97:89:f9:
b8:97:73:83:b7:dc:7e:d6:fd:1a:5e:98:07:f7:3f:
84:0e:b1:ac:69:b8:05:82:d4:a7:22:7d:26:57:38:
df:51:68:d6:57:da:64:36:7a:1a:2c:05:dd:73:dc:
8b:a9:58:c9:26:2e:4f:83:58:4e:7e:db:b6:af:a1:
91:6e:4b:34:75:f8:fd:1f:27:80:03:73:60:5c:de:
f7:97:b6:0b:1a:00:69:4f:5e:f9:c0:51:c2:05:06:
53:79:5f:52:48:f4:ad:1a:97:28:33:f5:1d:f5:b0:
2a:f6:fd:54:18:bd:c4:ac:23:f0:60:72:b8:e2:31:
85:29:b9:88:d6:10:f0:dc:56:fb:de:29:ea:64:cd:
84:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8B:FA:33:85:1F:5A:51:C1:8B:59:D6:65:1E:3E:0C:01:45:3F:80
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ea:85:50:4c:7c:0d:47:02:58:64:7a:77:8f:e4:73:4e:ea:
45:7f:2e:98:4f:6e:3f:a4:97:7d:d3:a8:ec:70:55:82:99:ea:
6a:09:8c:79:cd:65:d8:c7:9b:93:c1:ac:e5:9b:09:f0:16:d4:
3d:cd:cc:e0:66:98:09:53:23:92:68:45:8e:a3:d6:22:3e:37:
95:4a:ff:85:14:a9:2d:ad:87:fc:fb:b6:a4:b1:e8:6f:0c:41:
54:fb:bc:c4:be:1c:8a:b0:74:60:6b:2f:9a:7f:79:e3:f3:9a:
4d:c8:10:76:49:2a:99:17:2c:6f:23:02:44:d2:aa:8c:12:b7:
ca:3d:e6:2a:f7:26:26:63:5d:39:9b:b7:9c:02:60:66:2b:86:
2d:ac:2f:4b:3b:53:bf:2e:ea:36:ac:a0:bc:cb:71:59:ca:38:
23:3e:5e:fd:56:20:7f:00:db:16:09:c8:f0:ce:cb:3f:bc:0c:
f2:0e:dc:0b:36:53:3f:03:c4:58:ff:0a:c4:97:cc:a7:81:e6:
9d:40:9f:ff:0b:4c:4f:12:0f:4a:60:ea:03:7a:fd:20:40:80:
5b:46:93:d9:c7:d6:a5:b9:14:d6:74:dc:86:c0:2c:87:05:c3:
cd:ab:0b:4a:c7:21:be:90:f4:49:c8:22:6f:c9:3f:26:77:94:
15:20:54:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:24:04 2026 by rpki-client