
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft
File: 2QhrDfk0LcKwkbrobLd5_GJZvXs.mft (raw, json)
Hash identifier: FcG+ZMqUvNtxm4vuPXcKuRa0NlWZGpn/2+CHL4RgBrQ=
Subject key identifier: 60:76:21:1C:8F:2C:23:F5:2C:C7:D4:A7:62:61:AA:07:23:5E:D6:F0
Authority key identifier: D9:08:6B:0D:F9:34:2D:C2:B0:91:BA:E8:6C:B7:79:FC:62:59:BD:7B
Certificate issuer: /CN=A914F2EC/serialNumber=D9086B0DF9342DC2B091BAE86CB779FC6259BD7B
Certificate serial: 355E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft
Manifest number: 3553
Signing time: Fri 12 Jun 2026 14:58:05 +0000
Manifest this update: Fri 12 Jun 2026 14:58:05 +0000
Manifest next update: Fri 19 Jun 2026 14:58:05 +0000
Files and hashes: 1: 2QhrDfk0LcKwkbrobLd5_GJZvXs.crl (hash: JhEoVCtyYugshAfas96czeRkKFXoHA4DurtfrBlf6jM=)
2: 588BD7269A1211E8B97A623AC4F9AE02.roa (hash: WIHf/g57A92kBt+M1v/6HUGwLpZi39D8KAuOlAkvShg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.crl
rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13662 (0x355e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F2EC, serialNumber=D9086B0DF9342DC2B091BAE86CB779FC6259BD7B
Validity
Not Before: Jun 12 14:58:05 2026 GMT
Not After : Jun 19 14:58:05 2026 GMT
Subject: CN=6a2c1e7d-d009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:38:b2:e2:1d:cd:49:b2:c8:b5:16:fd:2e:e9:
5a:2b:1f:d8:49:46:92:9e:f6:cf:3a:99:72:fd:a5:
12:ea:79:3a:f2:16:25:04:4e:45:d5:ee:e2:20:d2:
a2:54:67:1f:db:f1:f2:90:8c:6c:2c:03:05:8c:8d:
c3:09:cc:68:af:1c:d9:b2:ca:dc:db:c1:f8:d7:d9:
62:98:85:1d:8c:40:7e:33:ba:9a:96:e1:e5:76:be:
83:ce:fe:53:4e:d8:7d:5f:ff:da:61:b8:14:34:0e:
9d:ed:6c:cd:18:24:00:bd:1d:f6:ef:9d:9f:4e:69:
03:84:3f:b5:86:5f:0b:89:d2:25:cf:71:ae:a8:32:
37:90:17:3a:36:94:5b:91:44:31:e8:00:13:60:a8:
74:ab:b6:2e:98:2d:ce:ca:98:df:b5:37:57:4e:96:
e3:ff:ba:e9:f4:71:08:35:58:87:79:38:f0:e7:6b:
d2:48:42:d7:cc:73:6d:22:50:c1:64:d1:2c:82:fe:
22:c9:1a:73:d5:f3:94:22:d7:4e:8f:b4:3e:74:67:
c3:9c:be:49:f1:db:92:0e:08:9a:8d:8d:12:47:ce:
09:6a:53:91:42:ab:c7:e4:57:69:7a:07:4a:4c:ac:
ec:43:e9:be:f1:7d:7b:60:b7:ed:c2:20:54:e3:78:
ab:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:76:21:1C:8F:2C:23:F5:2C:C7:D4:A7:62:61:AA:07:23:5E:D6:F0
X509v3 Authority Key Identifier:
keyid:D9:08:6B:0D:F9:34:2D:C2:B0:91:BA:E8:6C:B7:79:FC:62:59:BD:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:70:ea:98:55:96:11:ba:29:31:01:6e:70:51:41:6e:47:e9:
29:ee:ad:59:dc:16:ce:4c:aa:d6:19:24:1a:5d:2e:c1:cb:4f:
66:3f:55:d6:7d:4a:2e:1b:5e:6f:16:6c:d1:f6:15:77:20:85:
10:9b:f2:4a:a3:27:4c:b7:e5:a0:69:bb:88:d9:53:78:97:c2:
62:1f:36:a8:8f:a5:7b:7b:67:f6:4f:c5:b1:0d:00:5a:f8:f3:
3d:59:ca:75:a5:b8:45:ea:18:d0:07:95:39:ad:d4:8c:40:ec:
62:4a:7d:bf:be:91:ab:69:65:4d:68:50:c1:c4:e1:1c:80:0a:
87:a0:54:43:39:24:e3:bf:1d:26:32:b3:11:8c:77:5e:9b:d8:
de:70:ef:4b:33:a9:bb:d6:e3:e0:9f:ce:22:63:6c:b5:5d:5f:
06:6f:ca:20:b9:8e:1d:f1:3a:49:e8:c9:59:d0:f7:2e:3a:26:
f1:95:eb:98:94:fc:87:04:55:ac:fe:83:69:01:9c:b5:34:08:
e2:1c:a0:a0:d1:c7:a6:2c:81:b9:0d:c4:53:5e:b0:fe:14:ab:
07:42:5a:6d:78:ec:bb:64:ad:7d:a3:cc:8f:81:41:5e:c1:19:
2b:ea:3e:74:fa:46:09:b9:f4:cc:9d:84:b8:79:35:6f:b0:5f:
10:74:f4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:18 2026 by rpki-client