
$ rpki-client -vvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
File: 23zlI-hAt3_J4Zb1jxSXas5BVL4.mft (raw, json)
Hash identifier: dW5r1H4QI5SPvcstZHx5IyJnA2LgVbJj+mT9TYSwm3A=
Subject key identifier: 89:6C:6B:4B:63:37:60:F6:E2:18:B5:84:6B:D3:D1:27:C1:FE:A3:D7
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Certificate issuer: /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial: 070E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
Manifest number: 06EB
Signing time: Sun 01 Mar 2026 23:48:55 +0000
Manifest this update: Sun 01 Mar 2026 23:48:53 +0000
Manifest next update: Sun 08 Mar 2026 23:48:53 +0000
Files and hashes: 1: 23zlI-hAt3_J4Zb1jxSXas5BVL4.crl (hash: 6dDpLURdXEXPVgxA9TQ/u3qgvqFH3zHoR+//uPbwZv8=)
2: 1E9D1268B3E011ED98356A75C4F9AE02.roa (hash: 5lB4KJ1dE9BAQX/uKgJe1+lnx+W9PJrFHNnppiXGz5M=)
3: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (hash: Yp5vZ4wNCCpx+gdrt1JNNzRzB8+x9ZIjyyfZWtoHuOw=)
4: F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa (hash: y3IxwzZcVIyvXDTK0dR4pibIdUtU+ExL4IB+J5qtwjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Validity
Not Before: Mar 1 23:48:53 2026 GMT
Not After : Mar 8 23:48:53 2026 GMT
Subject: CN=69a4d066-1a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:c7:f7:16:06:12:ae:2b:2c:25:2d:2d:e6:
35:8c:62:c5:fd:df:ad:dd:03:39:c8:50:93:e8:fd:
7f:d1:64:68:74:33:43:a1:0d:8a:84:b3:b2:3f:ed:
37:ef:99:ef:04:b2:0d:5e:de:e4:8a:4d:a9:fe:53:
63:49:e0:96:5f:ce:1b:89:c2:c4:e5:4a:83:d6:bc:
06:17:a7:15:11:48:90:57:65:4e:b4:b7:3f:de:2b:
91:59:93:bf:71:b9:93:e1:41:60:c5:99:9e:ad:21:
ed:10:78:09:69:64:64:f4:89:d2:a8:b0:89:e5:b4:
ad:47:77:14:21:7e:35:37:71:47:e4:b7:b5:14:cc:
42:cb:a6:d6:29:7a:de:1e:85:03:79:20:0a:c4:60:
c6:10:d3:fd:5e:ec:1d:52:73:84:dc:62:32:f0:4e:
2b:85:19:d0:b8:86:0a:5d:f3:19:e2:73:9e:ac:c7:
22:49:b6:7d:29:da:59:98:32:9c:e1:33:0a:13:c5:
30:ad:a5:ad:00:28:78:c2:d8:91:c5:50:dc:ff:fd:
6d:91:e3:e4:9b:bb:0f:f3:95:13:2e:8b:fa:7a:9e:
2f:ab:3d:7b:b8:83:a5:41:3e:a8:8f:6d:ab:13:88:
85:ad:ac:4d:57:f6:a3:61:ca:7f:22:9a:cd:e3:9f:
8c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6C:6B:4B:63:37:60:F6:E2:18:B5:84:6B:D3:D1:27:C1:FE:A3:D7
X509v3 Authority Key Identifier:
keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:29:de:62:72:86:96:c4:d1:12:2f:9f:48:d3:a2:39:18:36:
b6:16:33:5d:2c:75:79:08:16:e0:a9:14:aa:bb:01:d5:4d:87:
b7:bd:b5:51:4a:ba:71:fa:51:58:80:7a:25:cb:8b:35:79:02:
86:6c:f0:d2:b4:37:eb:3a:35:0a:62:44:f4:0b:ff:d0:7e:7a:
1e:ae:f7:e3:63:04:d4:ac:ce:4e:c1:ab:46:55:39:8d:9c:b1:
81:a7:46:93:17:58:20:8f:83:68:d3:86:5b:c9:c7:b6:7b:b7:
42:7b:7e:ad:d4:32:43:18:62:69:11:20:7f:cb:26:1a:41:05:
83:7e:e4:be:2b:24:a4:6f:ee:35:a7:12:42:f8:60:22:fd:26:
a4:cf:26:09:ca:93:c2:d9:a9:bc:b9:9c:1f:0c:44:cf:bb:fb:
3c:dc:22:ea:9e:bd:b7:75:c7:4c:e1:d9:82:ea:72:9f:2f:19:
4b:ec:8d:63:33:5c:e8:2d:35:bf:0c:78:27:b4:d8:65:ae:a5:
a8:6e:b7:18:ca:2b:ea:01:cb:13:e9:64:3e:b5:28:07:d9:1d:
b6:03:9b:1e:24:68:6a:ee:e6:6b:4a:5b:cb:62:39:46:fd:fc:
cd:0a:f4:8a:46:65:14:96:e4:54:00:89:d0:30:e8:43:ac:9a:
6b:31:52:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU0MkMxMTAvBgNVBAUTKERCN0NFNTIzRTg0MEI3N0ZDOUUxOTZGNThGMTQ5NzZB
Q0U0MTU0QkUwHhcNMjYwMzAxMjM0ODUzWhcNMjYwMzA4MjM0ODUzWjAYMRYwFAYD
VQQDEw02OWE0ZDA2Ni0xYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0uPH9xYGEq4rLCUtLeY1jGLF/d+t3QM5yFCT6P1/0WRodDNDoQ2KhLOyP+03
75nvBLINXt7kik2p/lNjSeCWX84bicLE5UqD1rwGF6cVEUiQV2VOtLc/3iuRWZO/
cbmT4UFgxZmerSHtEHgJaWRk9InSqLCJ5bStR3cUIX41N3FH5Le1FMxCy6bWKXre
HoUDeSAKxGDGENP9XuwdUnOE3GIy8E4rhRnQuIYKXfMZ4nOerMciSbZ9KdpZmDKc
4TMKE8UwraWtACh4wtiRxVDc//1tkePkm7sP85UTLov6ep4vqz17uIOlQT6oj22r
E4iFraxNV/ajYcp/IprN45+MKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlsa0tj
N2D24hi1hGvT0SfB/qPXMB8GA1UdIwQYMBaAFNt85SPoQLd/yeGW9Y8Ul2rOQVS+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQyQy8xQjYzNDY2RThD
QTgxMUVCQTJCRDBBNkJDNEY5QUUwMi8yM3psSS1oQXQzX0o0WmIxanhTWGFzNUJW
TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzIzemxJLWhBdDNfSjRaYjFqeFNYYXM1QlZMNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTQyQy8xQjYzNDY2RThDQTgxMUVCQTJCRDBBNkJDNEY5QUUwMi8yM3psSS1oQXQz
X0o0WmIxanhTWGFzNUJWTDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1yneYnKGlsTREi+fSNOiORg2thYzXSx1eQgW4KkUqrsB1U2Ht721UUq6cfpR
WIB6JcuLNXkChmzw0rQ36zo1CmJE9Av/0H56Hq7342ME1KzOTsGrRlU5jZyxgadG
kxdYII+DaNOGW8nHtnu3Qnt+rdQyQxhiaREgf8smGkEFg37kviskpG/uNacSQvhg
Iv0mpM8mCcqTwtmpvLmcHwxEz7v7PNwi6p69t3XHTOHZgupyny8ZS+yNYzNc6C01
vwx4J7TYZa6lqG63GMor6gHLE+lkPrUoB9kdtgObHiRoau7ma0pby2I5Rv38zQr0
ikZlFJbkVACJ0DDoQ6yaazFSag==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:55 2026 by rpki-client