
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
File: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json)
Hash identifier: Sshqh7Rli9txz0uivls7p6MUodh2Uijyrk9kfAHJmuI=
Subject key identifier: F7:91:25:51:EF:6F:30:E8:84:21:4D:10:9A:27:E1:04:C5:17:9E:87
Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
Manifest number: 1042
Signing time: Mon 12 Oct 2026 17:45:00 +0000
Manifest this update: Mon 12 Oct 2026 17:45:00 +0000
Manifest next update: Mon 19 Oct 2026 17:45:00 +0000
Files and hashes: 1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: lTb/RnjI+IoC4MeIEhQibvWbJfm+h8mXFR/oUNdTeHM=)
2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: eTaM2SU1horTXKEuOS9PVwx3GGBErFgVkCBHE0SrSsI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 17:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Validity
Not Before: Oct 12 17:45:00 2026 GMT
Not After : Oct 19 17:45:00 2026 GMT
Subject: CN=6acd1c9c-bc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:b6:b9:59:ae:71:33:01:ce:5e:1b:7d:f1:
64:5a:42:a8:99:6e:82:07:8c:29:68:07:77:72:44:
2d:0f:0e:f0:63:09:72:a7:1e:4c:7b:d2:fa:6e:85:
55:ee:40:0f:2f:56:1b:db:a1:9a:90:eb:d5:09:c3:
90:f9:a8:23:43:66:05:be:2f:e3:71:a1:10:d4:30:
ce:96:c9:1e:cb:c7:79:81:9e:b2:7d:48:30:70:ef:
74:88:e3:8e:d2:52:65:86:6d:5d:e2:33:9f:20:0b:
d3:2d:47:05:a4:b8:a6:7a:87:4f:74:5a:a3:7e:ad:
05:83:67:6a:e0:73:34:3e:29:55:5c:ea:67:3f:b3:
92:1a:75:e5:29:19:0e:94:b2:8b:ad:e7:0c:cd:06:
36:d9:8f:e3:2b:4e:af:a0:d9:e4:ee:22:6f:5d:c8:
76:a7:ff:2d:d7:a5:1e:b6:7f:04:7a:f8:f5:b1:32:
01:84:3f:a6:fd:72:61:aa:be:f3:6b:20:a3:2e:78:
62:7a:9e:1c:2d:5e:4b:db:18:19:bf:80:ca:50:cf:
74:6a:95:32:04:cf:f0:92:e6:da:4f:ee:41:9f:1b:
cc:d4:c4:f2:c2:2a:a4:01:93:e2:68:7c:54:ea:76:
6b:be:7e:8f:8f:1c:1f:49:ee:1d:f3:58:7c:3a:b0:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:91:25:51:EF:6F:30:E8:84:21:4D:10:9A:27:E1:04:C5:17:9E:87
X509v3 Authority Key Identifier:
keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:95:a1:91:29:32:69:9d:54:b1:3e:29:8e:57:41:ba:ba:36:
5d:82:b0:27:51:91:c7:2e:21:0c:b2:ca:d4:77:8e:dc:a9:7d:
e8:f7:ac:ff:16:56:f0:c0:d2:3f:af:8d:90:0d:a2:0d:0c:12:
2e:93:15:0f:a0:3e:43:21:5b:82:39:37:60:47:60:e3:83:bf:
a6:fc:48:eb:6e:fa:34:92:72:b9:5b:16:de:40:1a:4b:d9:98:
ff:98:7e:b6:af:d5:12:25:ce:8e:83:23:e1:fb:10:6d:12:f3:
4a:cb:86:a4:d5:72:5a:4f:49:d5:6e:f7:ca:8b:54:39:ad:be:
54:45:42:8e:59:a9:cf:10:77:ec:ac:47:31:32:ac:7c:ff:d1:
a8:48:c6:47:a8:1a:f1:02:89:94:a5:e9:8d:50:d2:6c:1b:72:
99:02:f6:87:16:47:0a:cb:de:b5:e2:d1:4a:8c:c8:85:c7:7a:
dd:65:1f:6d:e1:a0:35:e2:48:79:9c:16:91:55:2c:08:6c:b5:
89:05:5f:de:c0:27:de:ce:12:11:c3:6b:b2:29:8d:8d:12:de:
37:7f:83:0b:5f:e4:98:32:4b:dd:92:da:10:51:c6:d7:5b:df:
75:31:7b:b7:0e:42:27:27:77:be:90:8b:ec:5a:d3:10:0e:d6:
9a:b2:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:39:27 2026 by rpki-client