
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json)
Hash identifier: S1k9pqmmhnH7oqGw7xIgpARO9V6aS079itk83KmIDEs=
Subject key identifier: E2:00:39:62:8F:00:03:9F:AB:61:6E:24:D8:CA:56:74:4D:0E:F9:E0
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 08CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
Manifest number: 0848
Signing time: Mon 20 Jul 2026 21:49:53 +0000
Manifest this update: Mon 20 Jul 2026 21:49:53 +0000
Manifest next update: Mon 27 Jul 2026 21:49:53 +0000
Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: +cTudHkRa+6J7MplXFQOZX7DJG3rHlPvmcV5D8okF+Q=)
2: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: 2zP/u/XPb4lS5YQU45AQ3bnL/iCqP8TtJ7qEosRQcfQ=)
3: 723DE3FCD66A11F0B3A3696C61D3641D.roa (hash: 8QmsBUY2s//20xxLVI3hPEMb0s2pQxbXtkVnYbraTKQ=)
4: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: ixSD//VPVA20+49srKzUc+mMjY0KkEX52xrhudvtNos=)
5: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: XlJ4FUowQX/Y/4cD7WUgyXsW7hmXlclzkcofs1Q8ApU=)
6: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: WKTJAf1xc2gCKAnmp9H0dtuF8DSxcxsaPieQCnG+VvQ=)
7: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: tDdAfUG8eCP0TQX57qdH9o5o3LcfwqBq8wJ4yE3QIyI=)
8: 113EFAA01CD311F183095B1A353D8C67.roa (hash: hxloJgOcKOBqGBUZhYK1fL/Ei66jWkYPEeVHeMiMIeQ=)
9: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: 86TlHawEYIJrsKG9qDpQKaZUIOg/AkQSTyCR37y06KQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 21:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2252 (0x8cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: Jul 20 21:49:53 2026 GMT
Not After : Jul 27 21:49:53 2026 GMT
Subject: CN=6a5e9801-f9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:be:d8:ad:79:23:bf:59:6b:cd:bb:c2:04:
6f:f6:ec:80:b9:c7:2a:de:21:6f:86:16:bd:dc:05:
e2:b5:c5:6b:65:4d:5e:17:19:34:27:ed:e9:96:0d:
62:97:0b:01:35:79:78:1f:e8:2e:99:30:fc:c2:90:
1b:51:0a:cb:b5:fa:84:9a:2e:34:e2:64:84:1a:e1:
f3:b4:69:73:4c:81:9d:b9:14:0f:df:ce:4e:c6:33:
1a:cc:ec:1b:5c:73:d9:ec:f3:61:d8:24:be:d2:a1:
b8:33:28:6b:c1:6b:aa:d8:01:e8:49:16:3e:6b:cd:
3f:47:32:c6:cc:21:98:33:82:02:47:89:4f:42:ed:
f1:7d:1d:dc:7a:87:bc:1d:8e:4e:e7:bd:17:e4:5e:
58:1a:97:36:d8:d5:6c:4f:61:3c:52:84:61:bb:04:
79:ed:1a:75:63:6f:78:27:d6:98:49:c8:d6:15:11:
a9:f6:f7:8e:d0:92:83:6d:4b:bf:fc:94:89:a6:34:
f9:a4:5e:e0:f9:2e:32:6a:4f:f0:9d:93:ce:9b:39:
69:7b:a9:06:7f:07:fe:2f:23:32:f0:40:0d:41:62:
6e:8b:41:9e:f7:7b:3a:f2:7a:0a:49:7d:81:6c:58:
13:6d:4b:e1:db:97:7f:26:21:e1:8c:e3:0b:62:57:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:00:39:62:8F:00:03:9F:AB:61:6E:24:D8:CA:56:74:4D:0E:F9:E0
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fe:33:53:46:9f:3c:7d:2b:fe:31:f5:73:50:ad:d0:b7:f5:
05:94:07:cb:07:f6:f8:55:de:2a:e1:45:25:6d:0c:00:08:0b:
f9:81:e2:cb:ba:8f:bc:dd:38:13:e4:91:86:78:34:c4:61:99:
a5:49:d7:dc:d7:3e:28:8f:be:88:a1:b9:fb:fd:bc:2c:7c:4c:
ec:59:81:61:c1:f9:a5:06:50:7b:6a:32:2b:73:6b:00:5a:f4:
fe:52:7f:12:f1:81:d9:1c:bd:f0:b1:7c:85:38:a7:bc:34:3e:
e1:49:95:ee:90:b7:f8:db:b4:d5:b4:65:26:ce:3a:a2:32:09:
c5:de:1c:e1:92:3f:9c:78:8d:58:1a:0c:f0:28:2e:01:bd:d1:
d2:cb:a9:a4:81:99:b6:19:6f:d2:89:0d:ad:b1:50:48:68:03:
d7:92:97:c2:96:73:d1:60:b4:f3:80:b6:08:3e:cd:41:37:09:
b7:61:39:f5:a6:75:4f:e4:19:df:00:81:c1:eb:7a:e3:d6:c9:
5e:63:22:7b:74:f9:d7:f4:e3:96:af:a4:bf:97:f0:31:32:7b:
b2:76:a3:8f:74:17:54:69:0b:d5:0d:1f:80:cd:75:02:9f:aa:
46:ce:e5:df:e8:4d:35:39:1f:b0:04:eb:4d:a9:b1:a8:1a:48:
41:b7:73:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:34:36 2026 by rpki-client