
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json)
Hash identifier: zXLO+Wb5TZhqtKrfPRjrShaL9Znkq7Y04k2uLf3BVbc=
Subject key identifier: 1A:B8:F6:6D:42:58:4D:B7:51:6F:76:72:BB:EC:D7:EA:0B:1A:D0:10
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 089F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
Manifest number: 0823
Signing time: Tue 12 May 2026 21:25:10 +0000
Manifest this update: Tue 12 May 2026 21:25:10 +0000
Manifest next update: Tue 19 May 2026 21:25:10 +0000
Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: fRsqJ8gdw4hVyFBh2xaKXUOgIYoElHWNeVn8uiL2jGA=)
2: 723DE3FCD66A11F0B3A3696C61D3641D.roa (hash: uNl8uI/Y06/jKDpoEQIF2O5Wgby+uee7OgBCJpMQCEM=)
3: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: oCHezxKbqgIOpUes05U+r9qxPkrF4vvX3lRKLSI9mWE=)
4: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: wkz0E3KQK2rolOPmgqS0wEV7h4PEskQ/F1Ta8MRQbyA=)
5: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: AFldPYzskKofLD2xIzt86cc8IlYApoOmFnrOgjzA31o=)
6: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: 7Yjv2D+C4s/JmkOjYex+PzbIpnr1u2qQg3ovSsYkAKA=)
7: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: tJJ3ttdH7S3OYNjDPkqoa0z/UMLsdz/MnlboneFuOes=)
8: 113EFAA01CD311F183095B1A353D8C67.roa (hash: TAj7O8xjhTcdQgZnbEQZaQF/AhebpxuKlmmmr8dqDPA=)
9: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: iuCuOVGGw7h8GRcGcuIJ1MRpIK+069nl7NuNXpL0hyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:25:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2207 (0x89f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: May 12 21:25:10 2026 GMT
Not After : May 19 21:25:10 2026 GMT
Subject: CN=6a039ab6-8183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7a:f1:2f:a8:e4:fc:71:f3:de:c8:46:5e:26:
e1:17:47:22:5c:c8:39:0b:bb:47:e8:8b:3b:3d:32:
5a:a9:57:ed:59:d2:56:9e:08:57:48:a1:87:00:b5:
c6:2b:1c:67:71:1e:a1:a0:64:f8:1e:31:82:ac:d8:
06:e3:69:6d:21:bd:e1:eb:0b:d7:b4:24:a0:6a:63:
6f:25:ab:be:9c:57:bf:9b:87:79:38:0d:a6:52:c4:
d2:c5:66:ae:58:25:ba:bd:d4:8c:f3:0e:c3:54:51:
13:7d:64:7e:b5:6a:c9:a6:a0:ed:38:70:03:f6:80:
13:1d:8e:74:b2:b6:e8:36:28:5e:c3:6b:80:76:d7:
34:ff:ca:eb:88:b9:22:ae:a5:66:39:ad:03:05:b2:
29:8c:2a:77:46:f1:87:07:9f:53:a3:92:8f:1b:14:
66:85:14:1e:77:a1:4b:fd:2d:bd:60:53:59:e9:67:
d0:fa:51:31:3d:a4:0a:c4:7f:ff:b2:33:7a:0d:4a:
97:b6:b5:3e:41:09:e9:87:f7:ab:1b:e5:39:6d:d2:
69:f5:5e:62:eb:7a:6e:4f:fd:f3:88:d1:63:42:4e:
5a:96:66:15:b4:78:f4:9a:64:a2:af:53:9e:9c:71:
9c:e2:17:3f:3e:75:1e:aa:28:42:06:63:77:35:37:
de:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B8:F6:6D:42:58:4D:B7:51:6F:76:72:BB:EC:D7:EA:0B:1A:D0:10
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a6:60:ba:a2:05:b1:02:a4:d6:e5:fd:4d:7b:f8:88:4d:16:
46:8f:53:3e:ce:43:57:42:b4:3e:33:16:91:82:31:25:ca:ba:
d3:31:13:81:7b:bd:a5:7c:eb:f5:f9:41:7a:71:dd:c9:c3:e6:
89:6e:c9:94:79:da:29:22:7e:66:17:6c:dd:12:bc:41:8f:69:
4a:a8:a3:88:f7:cd:27:3a:2d:4d:2f:d4:3e:71:c0:f2:33:92:
31:9f:d7:0a:f3:0e:01:fb:80:6a:bc:a9:0a:78:e4:75:41:7a:
37:ea:ee:61:c6:c0:25:e9:22:bc:9f:b0:e7:6c:79:e1:57:78:
c4:3a:13:d7:0f:d4:00:e7:9e:80:42:48:27:77:87:75:8a:d2:
3a:5f:c1:13:1b:61:1b:dd:ed:f1:75:d3:53:77:0d:88:b5:cd:
f6:98:ee:57:3d:56:74:45:e0:43:a0:17:93:2c:46:2b:7c:f9:
20:8f:1b:ba:40:60:a0:24:71:e2:b8:97:1e:e3:b3:24:00:da:
d6:fd:c8:25:97:96:e7:3c:69:26:96:25:65:09:d4:d9:0a:22:
20:41:8c:77:7e:94:e8:e8:90:39:72:ca:7a:ed:1a:09:94:f6:
6a:f4:da:49:bf:00:47:20:f5:bb:18:7c:4a:c9:9c:06:0e:ce:
12:2d:0e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:51 2026 by rpki-client