
$ rpki-client -vvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
File: 23zlI-hAt3_J4Zb1jxSXas5BVL4.mft (raw, json)
Hash identifier: wsJB8OGcPKYxkHB3GApqdir2G9DigZTFi37EeGAGCuI=
Subject key identifier: CC:3F:10:68:D6:06:5E:3F:9C:33:86:8A:4A:B0:ED:14:22:27:CA:A2
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Certificate issuer: /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial: 0746
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
Manifest number: 0723
Signing time: Fri 12 Jun 2026 22:04:19 +0000
Manifest this update: Fri 12 Jun 2026 22:04:18 +0000
Manifest next update: Fri 19 Jun 2026 22:04:18 +0000
Files and hashes: 1: 23zlI-hAt3_J4Zb1jxSXas5BVL4.crl (hash: 6cctcVIuybtsqflVHR6MZ7ko7TZagdndFkilQrvp9cc=)
2: 1E9D1268B3E011ED98356A75C4F9AE02.roa (hash: 5lB4KJ1dE9BAQX/uKgJe1+lnx+W9PJrFHNnppiXGz5M=)
3: F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa (hash: y3IxwzZcVIyvXDTK0dR4pibIdUtU+ExL4IB+J5qtwjE=)
4: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (hash: Yp5vZ4wNCCpx+gdrt1JNNzRzB8+x9ZIjyyfZWtoHuOw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1862 (0x746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Validity
Not Before: Jun 12 22:04:18 2026 GMT
Not After : Jun 19 22:04:18 2026 GMT
Subject: CN=6a2c8263-b624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:3f:97:c7:d0:5d:bf:17:c5:0f:62:1c:56:
01:4b:47:00:16:1d:03:f6:5d:7b:1a:b4:4c:77:ba:
17:e2:cb:8e:13:2b:66:f4:d9:12:d9:fd:3e:a0:1c:
70:83:51:63:24:df:11:3a:5c:dd:69:8e:32:72:e1:
65:99:99:18:7b:50:b3:c4:12:1d:2a:cd:be:ee:b9:
5e:c3:d8:95:2e:1c:6c:74:27:d4:64:8f:28:52:a4:
69:a9:54:9b:10:86:d5:d7:ef:a9:6d:9a:52:a6:44:
99:05:81:8e:38:11:1b:5c:0f:3e:91:8e:a5:8a:9c:
11:27:b0:48:2a:40:67:cf:f8:db:3e:10:29:25:11:
08:4d:2a:d6:c7:90:62:32:82:d5:33:75:2c:65:86:
12:a7:c4:6f:4b:2f:85:c7:23:81:de:5f:f6:7d:09:
99:84:88:60:ce:d7:b3:67:18:3a:88:b8:00:54:b6:
18:16:26:26:2c:6c:da:17:7c:00:82:1b:c2:c8:8b:
ee:d6:1c:c1:7e:51:df:99:a9:0a:f8:1f:89:12:e0:
4e:61:41:3a:77:0e:1d:a0:44:31:4f:cc:5c:cd:3d:
d0:ed:31:c2:a3:46:5e:04:64:46:f0:b9:bc:2f:27:
25:28:05:aa:dd:72:cd:0b:c9:86:c7:c5:84:ff:9a:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3F:10:68:D6:06:5E:3F:9C:33:86:8A:4A:B0:ED:14:22:27:CA:A2
X509v3 Authority Key Identifier:
keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0d:c5:c8:69:4b:07:04:61:87:a5:6d:dd:1e:a0:a2:92:9d:
6f:97:ee:67:61:0f:12:3c:6b:51:31:37:f1:9b:cc:1b:fd:6d:
76:84:47:32:f9:d8:ee:d8:ee:4e:7c:cd:f6:27:bc:a9:8b:f3:
1b:2f:76:1e:04:ed:03:15:2f:6b:e8:e0:81:9f:b4:44:23:92:
55:c1:fd:3e:de:f5:21:90:a1:d4:54:c0:d6:9c:fc:dc:9f:a7:
f2:80:b3:1d:74:3e:66:16:87:4d:ff:4c:ce:4d:0f:e5:3d:3b:
81:72:dc:8f:90:90:e2:ea:5b:14:7e:ac:5f:57:59:cf:ef:23:
b8:4e:d1:1b:45:a2:95:ab:cb:bc:f1:5b:87:08:f6:22:13:86:
62:34:95:97:3d:2c:89:65:db:ff:e1:ae:d4:1e:6c:3b:ba:da:
e0:8f:a3:46:61:e6:06:81:47:b6:04:9a:5a:d6:cf:fd:b7:90:
55:66:08:ab:78:35:ee:eb:9a:f1:ab:f3:4a:1b:58:9f:47:65:
b3:08:eb:17:25:ed:0e:37:c5:8f:ab:bb:32:05:ec:01:d7:c8:
10:38:a6:b0:6e:d1:a0:fd:98:8f:25:d5:f9:e0:6a:7b:b8:86:
57:fd:9f:70:b2:5c:5d:16:b3:f7:e6:d6:fe:2d:9a:61:38:00:
f3:73:25:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:34:56 2026 by rpki-client