
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
File: 2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json)
Hash identifier: 6FeyeylQ1/0B99y2wIrRLiuOANW2YyIjLtl9ai3LbCE=
Subject key identifier: FA:D2:69:EB:21:67:F6:A3:C9:E3:94:CE:79:2A:12:97:4C:CA:D6:11
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Certificate issuer: /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial: 0920
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
Manifest number: 0907
Signing time: Tue 12 May 2026 20:23:47 +0000
Manifest this update: Tue 12 May 2026 20:23:47 +0000
Manifest next update: Tue 19 May 2026 20:23:47 +0000
Files and hashes: 1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: rfr+80DDRE6akJlUqUm4t/18b238BnKlzXYorL6FWZo=)
2: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: 4vuTCUAhfJT3HGv5tLVBeeb3AAx6C5qUisVfSfItWZ0=)
3: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: KoKgWmsxfkCkbgWCHOo/9Lqsa6nPc6n6w00K8LYdEf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2336 (0x920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Validity
Not Before: May 12 20:23:47 2026 GMT
Not After : May 19 20:23:47 2026 GMT
Subject: CN=6a038c53-ca19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:e8:4f:0f:56:12:ce:3e:5a:f4:a7:36:0f:
cf:ba:47:63:fd:a5:1f:2d:91:2c:ae:79:3b:c0:98:
8d:de:72:eb:4f:3d:99:e1:48:26:f9:89:21:7c:a6:
fe:7e:62:cc:5d:0f:6a:5b:92:3b:23:1c:ed:3a:a1:
3b:2b:d1:eb:26:2c:a3:d5:e0:35:3f:0c:1a:21:a0:
f0:09:bb:e7:2c:01:b2:fe:17:b5:53:d3:04:08:f3:
c6:5e:bb:ab:0b:2c:44:88:1b:c6:4c:95:2d:5a:95:
3d:ae:6e:90:71:e6:66:99:67:53:fc:2f:09:fb:10:
aa:47:41:e0:8f:44:eb:c4:c6:00:30:d6:78:e3:56:
0d:51:9d:d3:e6:ea:21:3a:d6:07:94:99:82:57:38:
39:17:c3:fa:a6:d5:5d:ae:5a:d5:b6:ac:9f:5e:cc:
f6:52:24:1b:c9:9b:31:27:b3:33:ec:30:7a:bc:59:
20:21:56:87:a5:17:c3:e2:bb:32:2c:6c:29:b2:38:
45:f0:a2:17:73:94:42:63:e0:6e:e6:12:29:ab:88:
41:5e:b5:9d:7f:df:a6:50:f1:9d:06:1c:cd:5c:bc:
fb:6f:7e:a2:0a:d7:7d:c2:8a:70:bb:ad:a4:5c:8b:
02:9d:7b:b4:b4:a2:02:3c:45:78:d7:b4:e6:15:29:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D2:69:EB:21:67:F6:A3:C9:E3:94:CE:79:2A:12:97:4C:CA:D6:11
X509v3 Authority Key Identifier:
keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:51:10:89:90:a8:95:db:cf:4c:48:69:15:60:17:2a:50:81:
9a:ff:9c:69:ea:49:21:74:8b:ec:22:bf:62:da:34:7d:bc:37:
7a:c2:00:03:c9:37:de:f4:bc:e7:72:c8:a4:0d:74:85:51:f6:
34:1b:52:5c:34:5c:ee:14:b7:1e:b4:53:8b:dd:00:0b:9c:8f:
85:3d:27:9e:49:10:6d:1b:e0:68:2b:14:89:42:06:e3:a6:77:
88:42:53:ae:96:bc:93:60:b5:8a:45:4d:d1:ba:d3:aa:28:2c:
0f:dc:fc:2a:dc:7d:29:d4:dd:99:c0:76:82:0c:2b:2e:0e:3c:
d9:98:57:83:22:86:5f:b5:33:d9:9a:62:a9:72:2a:17:27:14:
1a:e0:30:98:6b:b3:8e:1b:aa:0e:e8:24:f1:20:83:8e:2d:ba:
2b:0f:61:de:41:c6:17:20:03:13:fc:25:c6:43:b4:0c:e0:0c:
5a:85:22:57:e1:ab:fb:fe:5f:ae:b1:97:a6:23:e0:4f:a9:14:
16:1f:99:04:32:27:23:dd:23:2d:4a:02:58:f3:6a:72:51:dc:
78:7b:01:21:c1:58:fa:e9:4e:86:d6:9f:37:d4:7f:0c:35:18:
d3:e4:d8:f0:86:db:be:77:c6:8f:6f:0c:0b:09:67:9d:7d:87:
de:58:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:12 2026 by rpki-client