
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
File: 2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json)
Hash identifier: 2T3R6IrJKlSrJU9s4EOMIPn3nw2d4HeCWwkYcsnvews=
Subject key identifier: FC:B2:CC:55:D5:89:CD:B5:4D:DB:7A:3D:04:37:42:C8:95:57:F6:9A
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Certificate issuer: /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial: 0908
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
Manifest number: 08EF
Signing time: Thu 26 Mar 2026 20:15:58 +0000
Manifest this update: Thu 26 Mar 2026 20:15:57 +0000
Manifest next update: Thu 02 Apr 2026 20:15:57 +0000
Files and hashes: 1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: a6bPJxlTNf9HCx796L/JLkNv4JG8OITfjEpiJ5gfbrg=)
2: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: 4vuTCUAhfJT3HGv5tLVBeeb3AAx6C5qUisVfSfItWZ0=)
3: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: KoKgWmsxfkCkbgWCHOo/9Lqsa6nPc6n6w00K8LYdEf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 20:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2312 (0x908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Validity
Not Before: Mar 26 20:15:57 2026 GMT
Not After : Apr 2 20:15:57 2026 GMT
Subject: CN=69c593fe-3db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:a3:cf:e0:02:cb:4d:c8:ae:51:e6:ec:78:
e1:8c:0a:68:aa:88:af:da:e2:5b:04:0d:b9:b2:e5:
dd:74:b0:10:06:ea:ae:82:f5:e9:ca:08:f4:d8:b2:
e7:a6:12:7d:54:37:86:92:d8:51:f8:f8:49:06:4b:
9b:f8:dc:57:6d:02:80:8e:81:d3:85:b0:3d:64:8f:
3a:f3:c6:26:83:7d:f6:b9:e6:1c:71:4f:4b:99:67:
73:03:ef:8e:bf:15:73:65:06:b2:1d:09:a8:05:b4:
73:7e:98:4d:94:39:3a:44:36:fe:bc:5e:61:94:41:
ba:62:e8:9e:c5:8c:64:2f:7a:cf:06:cf:66:29:7e:
20:b9:9e:c9:56:aa:68:0c:07:36:a8:55:dd:07:70:
2f:6f:4f:70:22:34:50:39:b1:91:ec:ca:21:4d:1e:
4d:5f:a4:2f:41:24:37:fb:56:f9:c4:6d:73:eb:29:
66:6c:e0:fe:c5:a2:f0:d9:98:7a:fb:40:f4:46:15:
95:53:17:e3:69:5f:cb:51:39:dc:86:0e:b8:38:fa:
d1:90:cb:7a:6d:50:e1:54:6d:8b:d5:08:eb:a8:6f:
96:89:2e:56:80:b2:07:cb:2a:09:bf:9b:29:97:11:
21:93:81:9c:f8:2c:1f:85:bd:08:93:08:54:9b:9b:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B2:CC:55:D5:89:CD:B5:4D:DB:7A:3D:04:37:42:C8:95:57:F6:9A
X509v3 Authority Key Identifier:
keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:1b:d4:cd:d2:ed:ef:35:4a:28:4b:67:37:54:e2:5b:e2:31:
7f:d7:d0:92:2c:49:47:f6:b1:db:1c:76:92:3f:26:26:16:8a:
d0:a0:97:1f:a7:16:7f:fb:ea:4a:b3:66:8a:fe:9f:dc:67:c7:
d6:2a:26:ed:fe:57:dc:e4:0f:fe:92:33:01:af:65:d1:e4:56:
d6:52:ae:52:e9:7c:bb:95:3c:2a:71:26:40:d1:4d:10:b2:60:
ed:67:e3:3d:82:5a:db:cf:04:a7:7d:64:a3:49:0c:4e:bc:33:
f7:ba:9e:11:eb:06:d0:d5:6f:15:9c:5b:23:f4:01:99:00:f2:
df:49:ab:0e:bb:7d:c0:4a:67:b9:36:85:d6:05:a6:00:8a:0c:
6a:6a:16:64:df:88:0f:7b:27:48:4b:2f:20:5d:8d:a5:86:fd:
3e:85:0c:b5:9a:3a:d4:f9:36:20:a6:b1:39:2e:29:88:73:b4:
91:ec:bc:3b:c6:56:8b:15:bb:3c:e5:19:9a:02:d9:36:32:e5:
b5:70:c2:85:5d:e9:b1:23:44:bb:03:a3:c2:00:bb:b5:c2:cf:
ad:02:b7:69:4f:f5:73:e7:8d:cf:be:9d:17:24:54:56:16:80:
6c:21:13:48:86:77:33:71:0a:17:03:86:c6:40:e2:4a:85:78:
af:20:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:54 2026 by rpki-client