
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
File: 2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json)
Hash identifier: 3Z176XH1KYuUAtqPYfYkAerTZT50m+oFiN2fysoa7ds=
Subject key identifier: 18:E1:FB:3A:8B:88:4C:6B:5C:BB:F8:2E:52:F0:14:AC:C9:C1:C9:E2
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Certificate issuer: /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial: 08F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
Manifest number: 08E0
Signing time: Sat 28 Feb 2026 20:44:02 +0000
Manifest this update: Sat 28 Feb 2026 20:44:02 +0000
Manifest next update: Sat 07 Mar 2026 20:44:02 +0000
Files and hashes: 1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: MvwozuYRCbkrlARPj7NPruLS9redwowy8IDQkglLCuQ=)
2: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: d3AVE6MmRgC9f1BP/vAUeg941gkBQiu4la3PQf5xjqo=)
3: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: 69lFJmCSoZqJFnlRVMecyEqrZmFOaweKrojaOmIkHVY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2293 (0x8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Validity
Not Before: Feb 28 20:44:02 2026 GMT
Not After : Mar 7 20:44:02 2026 GMT
Subject: CN=69a35392-fb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:d3:68:56:24:25:9d:66:8a:8a:0d:b9:9b:
3b:81:3f:38:7a:12:bc:62:5f:1b:ab:f9:c9:7d:13:
39:85:49:5e:a3:49:8d:cb:02:ea:72:e7:d9:ee:9a:
d5:e6:42:45:89:5c:7e:8d:9c:e6:75:b6:df:37:2e:
46:c4:e9:44:d6:bb:17:b5:a1:78:b5:f0:e6:a8:5c:
62:91:49:8b:05:2b:93:ec:48:a7:23:4c:e3:e5:34:
1d:84:29:52:d4:56:93:8a:de:76:af:f2:24:a1:75:
7a:eb:71:92:1b:bc:18:94:c3:a1:c7:9b:f6:10:05:
a3:e8:1d:53:79:ed:ee:8f:4a:7d:07:25:9b:b9:8b:
ef:5d:0c:06:13:74:fb:52:ab:96:ad:c1:e3:18:80:
f1:4e:40:50:2d:71:d7:8b:5b:4e:f7:ba:ae:d9:9d:
fd:dd:fb:88:4b:85:73:a6:65:2f:db:b8:98:1a:ae:
2f:1b:87:d2:00:fb:a4:68:cf:fb:9b:de:a5:13:78:
9a:af:39:3e:10:ec:5e:eb:18:e1:d9:99:83:79:a8:
81:9d:75:06:2c:f1:d5:68:f3:cc:60:d7:f3:2e:ad:
54:8d:3e:3e:9a:74:59:f1:c2:08:89:b4:a4:e2:3d:
61:ed:86:da:1d:58:0c:c9:64:b1:f7:3a:37:aa:6d:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E1:FB:3A:8B:88:4C:6B:5C:BB:F8:2E:52:F0:14:AC:C9:C1:C9:E2
X509v3 Authority Key Identifier:
keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:95:63:4f:ad:3a:cc:08:f1:ee:f7:20:50:96:21:3b:8a:b5:
c6:58:f1:e6:b0:65:82:4e:35:59:ff:45:20:87:39:d2:4f:ec:
ee:c3:3a:4a:79:48:66:07:94:4b:8f:5f:f9:99:05:93:c3:a8:
27:09:9d:a8:c2:b4:de:a7:93:91:d5:68:96:f6:10:fc:50:9a:
19:a9:18:d5:fd:8e:18:c0:6a:cf:d4:bb:b3:a2:38:e3:5b:45:
72:6b:9f:ba:74:0d:31:93:d7:91:96:43:27:bf:ed:3d:0a:c8:
7d:8c:3c:f9:37:9e:6c:f6:14:d1:1d:3d:97:ef:fe:10:cb:1e:
ea:eb:c0:b5:c2:cf:48:cc:1a:d8:88:7f:ee:f3:2e:5e:04:79:
d6:74:98:e7:28:33:07:e0:29:94:ce:19:90:6c:32:c1:cf:55:
e7:4b:f5:f4:4d:92:89:58:e4:6a:00:99:13:31:2c:10:8d:5e:
94:21:1b:86:bb:89:28:56:a3:71:d6:df:16:59:5e:f9:c3:7d:
83:88:d0:b8:90:f4:7a:5b:4f:10:62:69:3d:75:64:c5:29:da:
e5:8e:0e:7b:a6:32:64:65:0f:f4:71:fd:13:e6:89:87:54:2a:
7c:51:c8:c1:ae:5e:48:97:ee:b4:73:b6:f7:f4:c7:ff:7f:2b:
ed:66:53:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:27 2026 by rpki-client