
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json)
Hash identifier: CD6yoPj9w5G7B0XGyDCs3w3GA4ccxFRSHD8r1m+fBA0=
Subject key identifier: 51:B4:9C:7C:1C:5F:A9:20:F8:AA:5F:6B:4F:38:9A:D9:AD:CE:2D:65
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 0874
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
Manifest number: 07FB
Signing time: Fri 06 Mar 2026 21:09:13 +0000
Manifest this update: Fri 06 Mar 2026 21:09:13 +0000
Manifest next update: Fri 13 Mar 2026 21:09:13 +0000
Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: gKK7bPYy31GO+xO6VL3l3tUItBQe6uMtNSOITMa1Bh4=)
2: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: 7Yjv2D+C4s/JmkOjYex+PzbIpnr1u2qQg3ovSsYkAKA=)
3: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: MiqtehrqvS8QEo1D5TLWH3bgAbD151KvPXNOMIE4JZM=)
4: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: tJJ3ttdH7S3OYNjDPkqoa0z/UMLsdz/MnlboneFuOes=)
5: 723DE3FCD66A11F0B3A3696C61D3641D.roa (hash: uNl8uI/Y06/jKDpoEQIF2O5Wgby+uee7OgBCJpMQCEM=)
6: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: AFldPYzskKofLD2xIzt86cc8IlYApoOmFnrOgjzA31o=)
7: 8C47DF70131C11F194DDB11E1C3D8C67.roa (hash: rF1ignRUguSqTJS3SdetIsIq2+O87IEWx9HIa6jJ2S4=)
8: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: wkz0E3KQK2rolOPmgqS0wEV7h4PEskQ/F1Ta8MRQbyA=)
9: 93FACB2AF99411F086574951556F56BC.roa (hash: D2xLSxPv4O+1ZhFlr1a9hIxQzE3An+Z0IbN7j+1fC08=)
10: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: iuCuOVGGw7h8GRcGcuIJ1MRpIK+069nl7NuNXpL0hyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 21:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: Mar 6 21:09:13 2026 GMT
Not After : Mar 13 21:09:13 2026 GMT
Subject: CN=69ab4279-dd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:c5:30:78:33:e0:41:76:ed:27:39:25:ae:
0c:d3:76:c9:11:fd:3c:a6:ab:ee:23:a1:86:b7:b1:
4c:95:72:1f:e5:6a:8b:cb:24:59:b9:12:5c:c1:49:
d2:37:cf:72:b1:a7:2b:e1:84:b6:73:6d:12:28:37:
fd:7c:c8:3c:65:6d:b4:e2:5e:a8:5a:94:86:cb:58:
7e:e3:ed:c1:48:46:46:0a:e5:4c:a8:ab:0d:d7:e1:
b3:5d:e7:45:90:67:e4:57:00:20:89:0c:ff:db:37:
ae:e7:7c:ea:dd:ac:c9:a7:ef:4a:a7:7b:21:f8:62:
2b:6c:97:b8:bb:70:19:43:f9:28:e5:38:29:b5:e0:
21:38:4a:81:01:06:5b:d0:58:ad:d0:a0:bf:0f:f4:
f2:11:e6:14:77:05:22:f4:48:6e:56:f8:44:ed:44:
78:70:96:56:5d:ad:31:20:81:7a:9c:39:25:5f:c7:
c3:a4:46:ea:4c:e6:38:0c:c0:db:68:11:a0:84:a5:
2c:6e:d2:df:5b:e3:6c:67:c4:dc:ff:5a:a9:0a:49:
ed:24:38:42:06:28:28:46:69:91:c1:01:6c:16:ef:
11:a5:86:b9:71:d3:f2:e6:fc:a3:27:8a:6e:23:f1:
b3:af:ed:9d:51:7f:49:d8:fd:9d:45:b6:b9:cb:61:
b8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B4:9C:7C:1C:5F:A9:20:F8:AA:5F:6B:4F:38:9A:D9:AD:CE:2D:65
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:73:00:e8:a8:ef:b2:3f:91:bc:10:23:df:cc:28:a4:46:a0:
2d:f6:79:c8:80:69:bc:7c:7e:2e:f1:1f:93:f8:0a:85:d4:e1:
e7:b1:b7:83:15:31:64:74:69:7b:94:9d:85:84:f9:6e:56:fc:
a0:61:71:d8:3e:ce:2a:e4:b6:dc:bd:ca:ba:55:b9:17:7e:62:
aa:68:87:e1:ba:1c:9d:cc:2d:03:dd:a4:b0:52:2e:4d:5a:4a:
4d:c5:54:b1:3b:ac:cc:21:8a:61:e1:3c:ce:cc:c6:65:28:87:
fc:43:9b:0d:21:1d:d6:b8:09:ea:59:3b:3b:cb:db:2a:30:4b:
df:31:78:e4:2d:8a:34:8e:34:c8:a0:bd:b4:fe:6e:8f:f4:9c:
23:1f:dd:92:14:e9:71:5e:f8:75:cf:ee:75:2a:fb:ec:5c:c0:
51:80:e1:52:eb:d1:9e:5c:95:a1:14:95:ca:1c:9b:4b:0d:57:
f9:a4:12:f4:ba:21:a7:ee:23:ee:61:59:26:b4:ba:14:81:e1:
f9:8c:dd:26:08:c6:98:54:ac:3e:ea:88:aa:a0:14:1b:88:5e:
d0:b9:b3:c2:34:ac:32:ff:aa:2e:e7:a5:8a:27:95:5a:ec:c6:
4b:33:cd:8f:e7:10:3f:4e:38:4a:22:22:ff:bd:67:b8:19:b7:
0d:ed:3a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:08:57 2026 by rpki-client