
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
File: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft (raw, json)
Hash identifier: iwido97FuMPzSbnuH654vSK3athMBqYjFZuk2uexgxk=
Subject key identifier: 2C:87:F5:CD:44:90:EA:34:99:85:6B:5B:C0:C1:DA:C0:59:43:78:28
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Certificate issuer: /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial: 6056883BA6E5B9B338E2BBEEE61C136D2D8E7191
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
Manifest number: 0B9B
Signing time: Sat 13 Jun 2026 04:43:51 +0000
Manifest this update: Sat 13 Jun 2026 04:38:51 +0000
Manifest next update: Sun 14 Jun 2026 07:17:51 +0000
Files and hashes: 1: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl (hash: SzaWuPNnGCsIxrKcJo+MRymzItMltAHzmXD5UKrnf9Y=)
2: 3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa (hash: uaSVLJC1Tk4lEhCwu9oCfZnU+QgSec4IdgA/TzT8ctE=)
3: 3136302e32322e3136382e302f32332d3332203d3e20313439333031.roa (hash: AHRW5blq6or1lZiTurf+biHje3bwxw8gHPaYSscchAY=)
4: 3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa (hash: fdkBLWTK3DQVYzuhxB2X2rD4UzgJP3fKM9/etqEIWms=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:56:88:3b:a6:e5:b9:b3:38:e2:bb:ee:e6:1c:13:6d:2d:8e:71:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650860000, serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Validity
Not Before: Jun 13 04:38:51 2026 GMT
Not After : Jun 14 07:17:51 2026 GMT
Subject: CN=2C87F5CD4490EA3499856B5BC0C1DAC059437828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ef:52:8a:53:98:81:54:60:bd:19:ed:73:90:
61:94:52:1b:0b:96:41:a7:ee:ad:ce:48:79:29:e3:
5b:6c:35:b0:1f:67:56:a3:b8:c2:9f:20:c9:d1:d7:
d8:28:ea:29:3b:e9:de:3f:6c:5e:26:9d:89:6b:32:
52:ff:cd:0b:bd:4b:19:0f:32:a4:67:93:aa:72:31:
0a:ee:61:b6:83:85:6f:9d:07:ee:9f:e3:40:05:55:
a5:51:b2:d5:0e:96:be:70:6d:ac:b6:c1:c2:e6:1f:
d7:5c:e0:91:99:46:e8:5c:43:7a:2d:a7:df:99:72:
5a:9b:e8:b0:85:5d:ce:29:53:7a:c0:86:4f:61:af:
07:f2:c1:2d:4f:0b:dd:e5:86:f6:23:0c:39:36:52:
24:a2:23:bd:56:8d:97:91:ae:5f:13:83:72:6f:34:
6c:dc:67:97:67:56:67:71:50:74:0b:c3:41:e2:ac:
8c:74:fc:8b:13:6d:49:35:17:b1:b7:c0:f8:77:42:
e5:ef:ae:09:99:f4:37:4b:8d:17:24:e7:1a:e2:fc:
74:13:80:ab:a5:06:3a:be:52:af:6f:f7:54:74:e4:
53:57:7a:16:c9:a4:0e:23:49:81:2c:fc:ba:d4:a4:
e2:bc:89:9f:e4:d9:cd:b7:3d:20:ed:1b:8e:e5:e9:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:87:F5:CD:44:90:EA:34:99:85:6B:5B:C0:C1:DA:C0:59:43:78:28
X509v3 Authority Key Identifier:
keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:93:e3:fb:d6:97:02:52:08:c1:5b:b8:ba:c6:fa:7e:79:5e:
60:0c:55:96:b1:a9:bc:11:52:14:ee:14:33:66:9f:2d:24:3a:
54:ac:ca:62:02:af:e5:6e:24:ce:5b:78:b1:cd:1d:3a:9c:94:
89:c4:bd:80:f8:e4:eb:6c:46:3f:12:ac:81:c1:2a:d9:a3:6b:
e2:0e:f8:14:83:ca:7b:f4:0b:78:e7:36:c2:25:0f:64:19:7a:
c1:b7:9e:c9:03:bf:33:3c:ba:2e:82:32:81:0f:6f:90:b6:4a:
ce:b1:1b:f8:a9:fe:e9:2d:eb:c5:59:f5:e5:55:c2:1b:68:9c:
69:44:ec:03:f4:d1:9e:e7:62:18:1c:60:d7:35:cd:5f:cd:62:
21:ad:a8:7c:a4:85:2a:55:48:2e:1d:6a:15:9d:4d:33:e1:79:
87:35:11:51:ef:48:62:42:fa:dc:fe:65:d6:14:f8:64:0f:b2:
63:cc:ce:8a:65:e8:7d:1c:ea:1b:ce:21:1e:27:69:f3:77:79:
57:6c:dd:79:d0:62:4a:38:c9:93:07:df:d8:93:aa:41:93:c2:
3d:fc:16:5f:38:a0:58:ac:22:07:53:7d:0e:02:c0:4d:53:5b:
e2:6a:d2:1e:92:85:56:5c:4e:28:91:e3:c5:fa:db:8b:a5:94:
08:3f:47:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:47:06 2026 by rpki-client