
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
File: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft (raw, json)
Hash identifier: pzma/Ln6O1IevMdamtatfp4szHmLVhJrsH5zRh7q39Q=
Subject key identifier: 03:6A:BF:C0:D0:94:99:C9:7C:80:B5:94:5B:FE:99:AC:48:AD:D8:C6
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Certificate issuer: /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial: 2E89C078BB5C461BB05CE337A1D59F5FD8F6AFCC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
Manifest number: 0C79
Signing time: Tue 28 Jul 2026 08:34:54 +0000
Manifest this update: Tue 28 Jul 2026 08:29:54 +0000
Manifest next update: Wed 29 Jul 2026 12:03:54 +0000
Files and hashes: 1: 3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa (hash: uaSVLJC1Tk4lEhCwu9oCfZnU+QgSec4IdgA/TzT8ctE=)
2: 3136302e32322e3136382e302f32332d3332203d3e20313439333031.roa (hash: AHRW5blq6or1lZiTurf+biHje3bwxw8gHPaYSscchAY=)
3: 3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa (hash: fdkBLWTK3DQVYzuhxB2X2rD4UzgJP3fKM9/etqEIWms=)
4: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl (hash: B2DsBHUsQBkKKgwVViiDjlwa8etk/TES1WHTsmszai4=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 12:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:89:c0:78:bb:5c:46:1b:b0:5c:e3:37:a1:d5:9f:5f:d8:f6:af:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650860000, serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Validity
Not Before: Jul 28 08:29:54 2026 GMT
Not After : Jul 29 12:03:54 2026 GMT
Subject: CN=036ABFC0D09499C97C80B5945BFE99AC48ADD8C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f5:5a:99:77:e9:c4:04:a3:c2:9a:71:9d:fc:
3c:e1:4b:51:3d:d2:c3:f9:c9:ae:dd:a3:37:49:6d:
1a:32:6a:18:51:09:ab:1e:4d:27:2b:ea:33:bb:5d:
80:d9:52:4c:8c:47:3a:40:46:c0:c9:05:61:57:0d:
36:de:a8:b9:b2:2c:1f:e1:8f:cf:c2:05:0c:af:bc:
ef:de:70:14:dc:77:cd:3a:50:aa:97:25:be:02:65:
55:58:68:71:36:23:cc:24:17:64:00:38:b0:9e:f4:
67:fd:6b:99:ff:29:59:74:dc:b5:c2:08:56:6e:9f:
9c:48:2d:63:62:a6:f9:fe:b7:ac:8b:98:8a:a4:69:
35:fd:d2:0c:63:26:66:7d:da:7f:cd:05:e8:4f:5d:
bd:bf:4f:76:40:5d:5a:95:10:1d:7b:75:f8:6f:46:
62:88:6b:e1:ca:7e:82:f8:dd:f0:12:67:4f:f0:ae:
ec:d5:96:de:22:99:9e:e6:ad:b8:0e:92:32:aa:0f:
ca:bb:83:de:36:b6:0c:aa:de:99:07:42:eb:30:f3:
34:df:55:38:e0:dd:27:ca:f4:c7:24:b2:39:09:c6:
63:06:f3:69:85:d8:12:ad:3f:a2:36:ab:e6:43:8e:
82:31:44:ca:c0:e6:88:62:d0:56:8f:93:ff:c6:2b:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6A:BF:C0:D0:94:99:C9:7C:80:B5:94:5B:FE:99:AC:48:AD:D8:C6
X509v3 Authority Key Identifier:
keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:dd:9e:ad:ab:a2:67:a9:0e:a0:59:3b:dc:57:32:09:db:59:
8d:97:02:91:18:9d:eb:a8:48:03:d8:c5:28:f1:4a:3e:ad:05:
db:1f:66:ad:67:42:e5:e9:50:e0:b5:22:71:2b:bb:0d:77:f2:
a7:25:db:fe:f1:eb:32:51:b1:73:8f:72:75:77:a9:6f:16:ff:
82:eb:20:41:d0:4d:f3:cb:dd:b2:3f:53:c5:1b:36:2f:c5:e3:
9d:54:48:9e:2e:54:37:0e:a6:58:0a:f2:df:d2:30:e2:18:86:
b8:50:57:bd:58:2f:62:33:2e:8c:13:b9:c5:9d:ce:e7:01:f7:
ed:48:81:b8:c6:ae:a0:e5:2a:54:c5:bb:9d:47:01:4a:f0:ab:
dc:1b:be:03:04:f1:5b:a9:be:73:83:fd:6f:fb:36:1c:ce:05:
97:e6:d8:9c:ca:e6:d2:50:bd:70:f8:c2:ca:20:fd:af:5d:a7:
09:e9:27:17:d8:7d:e4:cd:14:a8:05:42:90:07:8d:41:66:fc:
72:c4:2a:5e:1f:51:a6:bb:88:5b:9f:58:04:0d:08:a9:06:4f:
3a:1e:6c:c6:bc:47:98:3c:76:33:21:33:a8:60:ae:af:17:97:
62:6c:14:6f:0b:43:1b:9e:8b:5a:0a:eb:0e:74:6c:d4:ac:0c:
d6:9e:e3:a2
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIULonAeLtcRhuwXOM3odWfX9j2r8wwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEygyM0IxMDMwRjND
Q0FDOTk5RjJCNTc3NDVGQzlEREExQ0NERkEzNjMwMB4XDTI2MDcyODA4Mjk1NFoX
DTI2MDcyOTEyMDM1NFowMzExMC8GA1UEAxMoMDM2QUJGQzBEMDk0OTlDOTdDODBC
NTk0NUJGRTk5QUM0OEFERDhDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMf1Wpl36cQEo8KacZ38POFLUT3Sw/nJrt2jN0ltGjJqGFEJqx5NJyvqM7td
gNlSTIxHOkBGwMkFYVcNNt6oubIsH+GPz8IFDK+8795wFNx3zTpQqpclvgJlVVho
cTYjzCQXZAA4sJ70Z/1rmf8pWXTctcIIVm6fnEgtY2Km+f63rIuYiqRpNf3SDGMm
Zn3af80F6E9dvb9PdkBdWpUQHXt1+G9GYohr4cp+gvjd8BJnT/Cu7NWW3iKZnuat
uA6SMqoPyruD3ja2DKremQdC6zDzNN9VOODdJ8r0xySyOQnGYwbzaYXYEq0/ojar
5kOOgjFEysDmiGLQVo+T/8YraxMCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBQDar/A
0JSZyXyAtZRb/pmsSK3YxjAfBgNVHSMEGDAWgBQjsQMPPMrJmfK1d0X8ndoczfo2
MDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC81LzIzQjEwMzBGM0NDQUM5OTlGMkI1Nzc0NUZDOUREQTFDQ0RG
QTM2MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3
QzcyRkQxRkYyL0k3RUREenpLeVpueXRYZEZfSjNhSE0zNk5qQS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzUvMjNCMTAzMEYzQ0NBQzk5OUYyQjU3NzQ1RkM5RERBMUNDREZBMzYzMC5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMzdnq2romepDqBZO9xXMgnbWY2XApEYneuoSAPYxSjxSj6tBdsfZq1n
QuXpUOC1InEruw138qcl2/7x6zJRsXOPcnV3qW8W/4LrIEHQTfPL3bI/U8UbNi/F
451USJ4uVDcOplgK8t/SMOIYhrhQV71YL2IzLowTucWdzucB9+1IgbjGrqDlKlTF
u51HAUrwq9wbvgME8VupvnOD/W/7NhzOBZfm2JzK5tJQvXD4wsog/a9dpwnpJxfY
feTNFKgFQpAHjUFm/HLEKl4fUaa7iFufWAQNCKkGTzoebMa8R5g8djMhM6hgrq8X
l2JsFG8LQxuei1oK6w50bNSsDNae46I=
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:02:33 2026 by rpki-client