
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json)
Hash identifier: BGbMVamcjTWBqPgMiTtSTjQ874K6qCPBe37DUZ9pOTI=
Subject key identifier: 25:44:44:41:22:11:C2:79:BB:31:94:33:C3:C8:C9:F3:82:21:63:DB
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 08FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
Manifest number: 0878
Signing time: Thu 22 Oct 2026 21:14:22 +0000
Manifest this update: Thu 22 Oct 2026 21:14:22 +0000
Manifest next update: Thu 29 Oct 2026 21:14:22 +0000
Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: kQ1wVuqcHbvt1Y0A4h7uW6oB8vWRp+O6480siFF+mSg=)
2: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: 86TlHawEYIJrsKG9qDpQKaZUIOg/AkQSTyCR37y06KQ=)
3: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: tDdAfUG8eCP0TQX57qdH9o5o3LcfwqBq8wJ4yE3QIyI=)
4: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: XlJ4FUowQX/Y/4cD7WUgyXsW7hmXlclzkcofs1Q8ApU=)
5: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: WKTJAf1xc2gCKAnmp9H0dtuF8DSxcxsaPieQCnG+VvQ=)
6: 113EFAA01CD311F183095B1A353D8C67.roa (hash: hxloJgOcKOBqGBUZhYK1fL/Ei66jWkYPEeVHeMiMIeQ=)
7: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: 2zP/u/XPb4lS5YQU45AQ3bnL/iCqP8TtJ7qEosRQcfQ=)
8: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: ixSD//VPVA20+49srKzUc+mMjY0KkEX52xrhudvtNos=)
9: 723DE3FCD66A11F0B3A3696C61D3641D.roa (hash: 8QmsBUY2s//20xxLVI3hPEMb0s2pQxbXtkVnYbraTKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 21:14:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2300 (0x8fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: Oct 22 21:14:22 2026 GMT
Not After : Oct 29 21:14:22 2026 GMT
Subject: CN=6ada7cae-cb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:57:bf:03:a2:b3:2e:00:ef:0a:41:1a:52:
6f:22:33:89:ef:df:86:91:93:68:57:3e:09:88:86:
d2:58:91:88:28:3e:7d:a2:f3:f0:93:48:93:30:82:
6a:75:d3:03:50:0d:c8:53:b2:ac:16:d1:c9:d7:17:
8c:62:2d:e5:96:d2:ec:e4:7b:17:e5:0e:83:8a:f8:
01:50:af:f1:84:af:90:4c:53:08:92:a5:97:8d:4b:
f8:0b:54:3d:6d:b7:d7:bc:65:06:5e:27:89:7a:f5:
04:6f:09:9b:f6:d7:f4:41:a8:bb:fb:82:cb:d9:86:
05:ad:0e:8c:91:dc:26:fe:24:05:af:8d:2d:13:bb:
f9:f1:1a:5e:1d:58:df:bf:5d:cf:2b:c7:e9:1a:0c:
7a:37:36:aa:33:cf:c7:1f:60:c5:0a:77:00:f6:9a:
02:55:4e:ed:7f:4b:2b:d0:65:0f:bc:f9:f6:49:07:
c3:8f:db:55:9c:23:56:f4:73:da:ec:64:19:c3:c7:
66:0f:ba:6f:91:02:b1:4d:6b:db:0f:47:19:54:47:
23:54:6e:84:f1:53:6c:f6:a5:90:15:91:d5:da:30:
35:d2:da:05:de:a1:9b:6b:e8:ba:4d:2c:b8:67:cd:
1e:14:46:91:eb:7b:98:44:9f:51:10:06:87:8b:6c:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:44:44:41:22:11:C2:79:BB:31:94:33:C3:C8:C9:F3:82:21:63:DB
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:19:b1:af:50:cb:6b:f4:56:51:b4:49:a3:6c:72:7f:65:7b:
a2:05:ac:ce:f2:d5:35:b2:6e:da:7f:2c:1b:ec:68:6a:6f:08:
8d:ca:71:75:05:1f:5b:51:42:61:c3:d4:a7:e3:13:67:e7:e8:
aa:31:05:bb:b1:d5:72:99:49:9d:f5:e4:a5:85:ab:7c:85:84:
b7:d2:62:28:72:11:be:fa:be:e3:4b:34:5a:13:2c:61:6b:a3:
60:57:7d:59:97:56:7f:45:81:1d:91:66:60:68:80:ea:7b:9b:
cd:ef:93:2a:b3:f5:f8:64:50:8f:84:ae:19:af:77:97:18:6b:
b7:97:68:7f:c5:91:6f:21:ce:20:6b:d8:53:0d:48:e9:f1:07:
63:8b:d0:d0:7b:8b:38:a7:ee:b6:a7:9d:27:6d:9a:31:2f:a0:
3e:3f:ff:71:ba:cf:29:de:4b:89:02:31:e8:f0:57:70:46:09:
d1:4b:c1:61:1f:35:82:02:14:77:88:89:28:1c:30:3b:1d:5e:
97:de:de:3f:f7:7b:e8:de:ff:6f:d2:4f:59:d1:c4:82:50:68:
77:3e:d3:ec:37:af:a3:ab:df:e1:5a:6c:fe:d7:22:9f:3a:c3:
90:8f:bc:6d:f5:f4:3b:d0:e3:6d:19:7e:f3:2f:6b:b6:8f:b5:
9f:57:9c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:24:24 2026 by rpki-client