
$ rpki-client -vvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
File: 23zlI-hAt3_J4Zb1jxSXas5BVL4.mft (raw, json)
Hash identifier: 3NFFj2+x1kui9UN/nxRhoPOHgHmmXNbc/0AwMFsb/A8=
Subject key identifier: D1:09:AA:BC:87:F6:A9:4F:F5:19:D5:C7:A0:91:2B:22:D6:5F:96:1B
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Certificate issuer: /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial: 0728
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
Manifest number: 0705
Signing time: Thu 16 Apr 2026 22:01:21 +0000
Manifest this update: Thu 16 Apr 2026 22:01:21 +0000
Manifest next update: Thu 23 Apr 2026 22:01:21 +0000
Files and hashes: 1: 23zlI-hAt3_J4Zb1jxSXas5BVL4.crl (hash: 8yIaqyAUckZrX9sDuTtFkkd1hqm6lFq3rK05EJKacIo=)
2: 1E9D1268B3E011ED98356A75C4F9AE02.roa (hash: 5lB4KJ1dE9BAQX/uKgJe1+lnx+W9PJrFHNnppiXGz5M=)
3: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (hash: Yp5vZ4wNCCpx+gdrt1JNNzRzB8+x9ZIjyyfZWtoHuOw=)
4: F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa (hash: y3IxwzZcVIyvXDTK0dR4pibIdUtU+ExL4IB+J5qtwjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1832 (0x728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Validity
Not Before: Apr 16 22:01:21 2026 GMT
Not After : Apr 23 22:01:21 2026 GMT
Subject: CN=69e15c31-c236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:bc:8e:50:03:3f:83:46:bd:d5:5d:0e:45:
ee:f4:18:d8:5c:85:73:88:76:46:9e:39:82:95:e5:
30:49:cd:c8:aa:89:cd:7b:4f:31:19:06:03:f4:e0:
ec:17:90:cd:15:ab:c2:b0:31:4b:e7:d1:26:de:e0:
aa:46:f9:16:ea:63:33:b2:31:83:80:0b:56:75:4c:
50:a1:25:ff:6e:85:7b:55:ae:69:2c:d2:0a:e4:98:
bd:05:f8:4b:de:88:3f:67:5b:1e:32:ae:72:11:d5:
07:e6:7b:57:01:ee:4c:62:be:0a:e4:10:ef:16:dc:
7b:f0:74:0d:26:c3:c2:67:d3:26:e1:20:4c:3a:0c:
0e:8c:cf:fc:a4:7b:38:06:13:c3:44:80:61:71:33:
ba:c8:a4:c4:21:f7:b6:d5:8a:49:fd:83:8d:c7:91:
0c:ed:ef:f0:44:a5:a7:df:cf:3b:bc:9c:ed:6f:6e:
26:49:3d:22:f8:83:14:9c:49:11:bb:ef:f9:12:4b:
f4:69:64:ea:3f:45:65:c1:69:9a:ec:bf:ff:d2:35:
36:b5:99:6c:a9:12:14:08:04:35:2d:31:dd:c5:fe:
36:9c:8c:77:a6:f9:d9:eb:d3:43:2b:f3:5c:cd:f0:
42:a9:86:13:f4:e9:16:77:dd:69:13:6b:0c:c6:8d:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:09:AA:BC:87:F6:A9:4F:F5:19:D5:C7:A0:91:2B:22:D6:5F:96:1B
X509v3 Authority Key Identifier:
keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:da:74:94:0a:a0:15:3c:da:d7:27:ff:ff:c6:be:5f:22:5c:
92:d2:2c:7a:2d:ee:c4:f8:76:19:30:73:bc:cf:2a:76:c1:47:
5c:7b:21:4c:6e:a9:54:d8:2d:fc:cf:7e:53:df:40:13:28:6e:
55:eb:dc:63:70:ba:11:48:a4:08:46:ce:3e:52:8e:0d:17:6c:
70:4a:cb:1c:a8:51:f2:85:6f:60:f0:fa:69:18:78:6a:8f:76:
56:e6:ff:7c:bb:30:c3:6f:cc:68:89:2d:da:36:46:51:ce:e1:
cb:6c:ca:e2:29:32:5d:2c:51:24:6d:e3:6e:c0:dd:db:51:1f:
cc:60:fb:37:7e:89:fc:fc:11:c4:6e:e3:6e:7e:fc:1e:09:c6:
c6:45:4f:44:db:82:2a:4b:c2:2c:9e:19:1c:83:ef:44:9c:a5:
3f:db:7a:76:05:d8:58:a1:f1:c4:3f:6e:20:7f:2f:8a:71:b8:
8c:47:42:83:1d:1e:ff:4c:2b:f2:7a:0a:52:da:c7:65:26:71:
7f:7f:c2:76:ed:99:bc:7b:c1:9c:5f:66:10:7d:3a:7a:77:31:
41:21:83:b6:c8:39:6f:a3:0f:33:34:91:9a:7d:4b:20:ec:e6:
cd:e7:4e:31:96:6b:fe:be:04:a8:c1:32:9f:0f:3f:f7:27:02:
d8:a2:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:36 2026 by rpki-client