
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
File: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json)
Hash identifier: eTtUmRi67pGmX2If0Oh7Yqc30sdlIstZXq98C2YpolI=
Subject key identifier: A3:5E:93:17:86:76:00:3C:E5:0A:D7:C5:6D:66:B0:AE:B4:B8:7E:83
Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
Manifest number: 0F58
Signing time: Mon 02 Mar 2026 01:41:19 +0000
Manifest this update: Mon 02 Mar 2026 01:41:16 +0000
Manifest next update: Mon 09 Mar 2026 01:41:16 +0000
Files and hashes: 1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: 9NtPK97y4u254pSCAc1clXzGY5oIMPef12cvJqOn7/w=)
2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: Dfnpdx7fQvQO0Rh8jNA5Tx09pBgCccW2N8IKNsboZGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:41:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Validity
Not Before: Mar 2 01:41:16 2026 GMT
Not After : Mar 9 01:41:16 2026 GMT
Subject: CN=69a4eabe-c74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:59:80:de:2b:54:83:db:4d:e4:e8:c7:06:
38:20:61:25:2f:c1:ab:0b:ff:03:31:b2:56:1c:95:
d0:c8:6b:69:55:fc:ed:0d:9e:cb:44:50:3f:68:24:
9a:d7:34:d9:af:1b:0e:0e:ec:65:0e:29:dd:91:7b:
02:76:95:01:66:2e:4f:2b:51:57:05:da:63:f0:1e:
ea:06:50:cf:25:5d:ab:33:6d:43:dd:40:47:37:ee:
81:26:e1:d2:44:f6:c2:32:92:03:b6:d7:a3:bf:bf:
30:20:c8:3d:10:b9:9c:b9:64:25:84:fa:a9:5d:9c:
b5:d7:8c:fb:8c:f1:78:34:56:75:6b:ea:97:b6:7d:
39:2f:b6:68:c5:e2:2c:1f:04:20:20:39:c5:31:35:
8b:dc:a5:0e:01:db:c8:14:6e:dd:3c:a0:9b:53:51:
52:d0:f0:cc:63:a5:86:28:71:35:f2:e6:7c:e5:d4:
ab:50:ab:f0:26:6c:a4:02:64:f9:5c:27:71:d6:d6:
b8:dc:a8:67:cf:0a:2e:3b:d5:ef:5e:93:a9:b6:6f:
c5:c9:64:f4:ec:c3:18:3a:31:97:ea:1c:99:75:9a:
6e:01:6e:93:be:7b:5e:39:70:43:4e:b3:b7:4f:17:
d5:1e:eb:13:6d:c2:c7:99:42:60:47:b6:8a:f1:d9:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5E:93:17:86:76:00:3C:E5:0A:D7:C5:6D:66:B0:AE:B4:B8:7E:83
X509v3 Authority Key Identifier:
keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5d:ad:89:3c:dd:63:29:a2:1b:c8:ba:2d:1b:32:5e:1b:c6:
14:d2:d0:0f:0b:ca:19:47:cd:bb:2e:a1:1c:e3:8c:1c:a0:38:
61:1a:18:d0:4a:f5:4b:dd:f1:51:85:5f:d1:62:d7:f6:06:06:
99:c9:60:7b:59:12:12:d5:52:56:83:d6:01:ac:34:d3:4a:bf:
1f:ab:24:4a:00:dc:98:40:d1:00:6b:7d:46:41:5b:36:48:59:
11:1a:7d:c2:8f:bb:34:87:81:ec:65:1b:f8:8c:7d:42:70:eb:
6e:7c:f5:49:05:fe:57:ff:1b:70:c8:6f:52:38:2a:dc:d3:38:
ef:ff:79:a6:81:e1:d0:62:f3:1a:7b:74:2d:4d:b8:63:9b:84:
75:f7:31:44:d3:d7:a6:bd:86:fe:9d:71:c8:5b:4b:ef:40:11:
34:e8:d1:b8:3f:77:ec:ef:e4:3e:b6:eb:cb:a6:60:de:ae:49:
5a:27:d7:0b:c8:3f:41:51:d8:cc:f5:0b:41:9f:08:99:54:02:
30:9c:7f:d9:2d:83:46:15:c0:f8:39:d0:04:82:74:25:45:e8:
c0:33:c9:25:a5:b3:39:79:84:3d:2d:4b:1a:da:ce:20:45:d3:
ac:25:98:21:93:39:1a:15:4f:0c:7a:52:03:29:b9:15:1c:bf:
18:0a:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:47 2026 by rpki-client