
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
File: 23zlI-hAt3_J4Zb1jxSXas5BVL4.mft (raw, json)
Hash identifier: qB0IHBzi57jCzuj26NC2648inCYLnN6rt3CRBqivbXA=
Subject key identifier: 06:88:97:4E:A2:65:A4:FE:86:7F:59:3A:19:5F:9F:D7:DE:48:64:47
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Certificate issuer: /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial: 0783
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
Manifest number: 0760
Signing time: Sat 10 Oct 2026 21:56:24 +0000
Manifest this update: Sat 10 Oct 2026 21:56:24 +0000
Manifest next update: Sat 17 Oct 2026 21:56:24 +0000
Files and hashes: 1: 23zlI-hAt3_J4Zb1jxSXas5BVL4.crl (hash: agHVH9bOXIJejNloeB4nci9VVmtIse8bO+q4pO2xNW0=)
2: F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa (hash: y3IxwzZcVIyvXDTK0dR4pibIdUtU+ExL4IB+J5qtwjE=)
3: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (hash: Yp5vZ4wNCCpx+gdrt1JNNzRzB8+x9ZIjyyfZWtoHuOw=)
4: 1E9D1268B3E011ED98356A75C4F9AE02.roa (hash: 5lB4KJ1dE9BAQX/uKgJe1+lnx+W9PJrFHNnppiXGz5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1923 (0x783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Validity
Not Before: Oct 10 21:56:24 2026 GMT
Not After : Oct 17 21:56:24 2026 GMT
Subject: CN=6acab488-63e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:40:32:a7:b5:dc:21:f2:af:a4:37:79:77:
fc:0b:ce:f8:d7:93:69:34:0a:04:92:1e:ee:39:9c:
0a:14:97:87:02:49:97:9d:51:e2:77:d2:a5:3d:9e:
09:ee:be:f9:df:a2:81:e2:1d:1e:64:fa:ab:c4:f4:
96:99:19:a7:e2:7d:2f:3e:d4:78:50:f3:2b:80:e3:
75:7e:fa:af:57:fa:da:e5:21:cc:50:da:90:92:e6:
bd:15:ad:0d:c1:cf:b6:0b:c3:25:1c:13:9a:f8:70:
a8:40:e0:44:ff:69:df:5f:35:ed:24:13:c8:7e:52:
d7:1b:5d:55:bd:36:92:60:dd:08:64:d9:78:f7:5f:
bb:08:de:29:c3:a9:2c:f0:2e:1c:77:4b:e1:2c:ec:
2f:43:2c:74:a2:1e:a5:76:06:c2:5d:fe:3c:74:f5:
0a:c6:f4:b0:69:40:c0:5e:16:e7:ca:01:78:1e:db:
25:84:cd:27:64:3d:4f:9d:ae:80:74:e0:9a:d4:20:
66:b1:b3:53:59:cf:f5:8f:85:20:e6:c6:00:57:e1:
e6:8c:b4:5e:19:e1:b2:74:39:2b:19:64:03:41:b3:
93:62:6f:30:c7:a4:31:52:4e:ce:76:b2:86:31:9e:
c9:cf:45:d3:c3:e0:71:94:60:e2:6b:fa:2a:4b:5e:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:88:97:4E:A2:65:A4:FE:86:7F:59:3A:19:5F:9F:D7:DE:48:64:47
X509v3 Authority Key Identifier:
keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:82:59:ce:aa:de:6e:2a:8e:3f:b1:16:ac:52:53:bd:82:29:
af:33:d5:fc:4a:b4:1c:20:f6:36:d7:5d:c0:61:7c:3a:5b:74:
4f:61:c4:36:c9:72:a1:91:15:d3:2b:3a:d7:8a:f2:fd:cc:f6:
e7:3a:93:39:3e:58:3d:c8:36:66:43:e6:23:6d:f7:25:86:56:
97:34:3a:89:73:40:4a:12:7c:e7:01:d2:be:f3:ca:d4:8e:b7:
03:49:22:fe:c3:bc:40:01:16:64:49:92:16:9a:16:cc:8e:92:
46:1b:c0:6a:ce:33:55:06:9d:3e:e4:bc:a8:4d:09:bd:34:c0:
3f:d2:8c:32:3f:2a:56:24:62:a9:d9:0a:9e:4d:05:58:b9:9a:
a6:27:46:13:e9:8b:01:ef:69:d0:8f:f9:71:ce:92:cc:54:dc:
a7:ee:5e:69:2b:66:18:b5:7d:d6:99:14:4d:3d:7f:b0:59:6a:
f7:a7:af:8f:e1:61:d7:07:df:18:1d:f6:59:9d:fb:2a:bb:14:
2a:97:cd:42:11:83:0a:1c:c5:a0:9e:8d:15:c0:52:60:fb:4c:
59:eb:53:d9:b8:ca:0b:a9:bb:96:cf:83:26:4f:70:b0:6c:3d:
4a:b8:34:79:8d:16:45:a8:4e:3b:14:fb:84:f2:02:0e:2e:74:
2d:e3:61:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:45:33 2026 by rpki-client