
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
File: 2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json)
Hash identifier: JPGRGFpBYQHIBpKfVOYJfzqUPBxNUYVDfhZTfj+CeGI=
Subject key identifier: 78:14:AD:0C:E5:05:B6:00:5D:0D:D4:7F:82:D1:B3:94:2B:07:EA:3B
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Certificate issuer: /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial: 0944
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
Manifest number: 092B
Signing time: Wed 22 Jul 2026 20:43:15 +0000
Manifest this update: Wed 22 Jul 2026 20:43:14 +0000
Manifest next update: Wed 29 Jul 2026 20:43:14 +0000
Files and hashes: 1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: mhvRgY/6cXw5t16oqeYvnnquj9VTPPyo1E8doW0y7q4=)
2: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: KoKgWmsxfkCkbgWCHOo/9Lqsa6nPc6n6w00K8LYdEf4=)
3: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: 4vuTCUAhfJT3HGv5tLVBeeb3AAx6C5qUisVfSfItWZ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2372 (0x944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Validity
Not Before: Jul 22 20:43:14 2026 GMT
Not After : Jul 29 20:43:14 2026 GMT
Subject: CN=6a612b62-d214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:7b:1d:f3:ee:29:26:9d:32:84:ae:f0:f8:
68:ba:3e:ac:a5:07:d5:45:a3:4e:5b:7e:83:0d:9c:
a3:09:e5:fe:00:6f:2a:ac:82:8f:d4:bb:b0:fb:7f:
e3:f5:f6:30:d4:1a:63:cb:c8:52:4e:78:41:ae:91:
81:08:09:23:32:08:8f:7e:c2:8b:e2:e8:b0:03:78:
20:40:1e:57:84:3b:7e:c2:0c:13:32:40:07:4f:5c:
84:22:b5:d1:7b:4f:2e:60:9f:35:42:9f:38:9f:4f:
0f:10:9f:90:a7:08:59:60:2b:46:93:2a:17:db:b6:
34:17:97:bf:3f:86:d3:ca:ba:f7:67:20:1d:02:9c:
ca:20:ff:1e:ea:9c:41:21:b6:b7:9d:48:39:fa:4c:
cc:c7:4a:e7:69:69:44:db:63:e1:5e:b0:7b:7a:4b:
cf:9c:33:0f:ab:6e:cb:6f:a0:c8:54:86:6e:9d:fb:
1c:14:8b:a2:3f:95:56:e2:76:46:9f:47:e0:fe:d1:
cc:df:19:ce:87:ca:42:6f:5c:5f:83:a1:7b:ed:7b:
69:85:31:93:48:29:a3:9b:f9:03:03:a2:5c:f6:8a:
52:2b:45:59:d0:3d:2f:8c:96:6d:56:59:34:a4:28:
a7:53:93:41:75:8b:42:2d:0f:95:db:65:d8:11:88:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:14:AD:0C:E5:05:B6:00:5D:0D:D4:7F:82:D1:B3:94:2B:07:EA:3B
X509v3 Authority Key Identifier:
keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:43:dc:e1:e7:97:3c:45:1c:7f:ec:dd:f8:40:13:62:fe:9b:
ae:60:ff:44:01:ad:bf:0b:0b:e3:59:63:b1:bf:0e:42:00:ed:
52:54:64:e5:1c:3b:36:05:8d:52:50:21:26:18:ef:af:8c:8d:
b2:71:57:3f:51:9b:d8:8a:1f:55:9d:2b:57:e8:2c:6a:73:c4:
8b:a2:d2:75:7d:ea:d5:a5:46:5e:32:05:01:d0:78:eb:2d:eb:
73:d8:db:84:71:30:e5:12:29:66:7b:a3:f8:7d:02:9c:99:6c:
d1:f5:c8:35:4b:e5:54:75:93:90:29:0a:98:ec:d3:bb:fc:2f:
32:0e:b5:60:95:f7:d0:68:a2:e5:c6:3e:52:91:8c:fd:e9:d1:
1b:94:3c:69:1a:5d:80:88:69:4d:69:02:aa:a1:d4:da:1c:fc:
f4:a8:7e:88:4d:bf:e2:5e:02:8b:75:7b:76:83:99:d9:6d:df:
74:40:3a:b3:f9:25:1a:ea:81:02:76:7f:49:e6:f3:0b:46:95:
7b:e1:b9:ac:2c:bd:e6:c6:b2:c3:01:28:1d:fb:cd:db:74:86:
60:73:62:6d:57:84:c1:4d:4f:2f:38:1a:66:a0:6a:4d:68:1d:
57:c1:c2:75:0d:b4:09:83:96:bb:bb:3b:9d:8c:14:f9:f5:53:
c1:2f:b4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:11 2026 by rpki-client