
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
File: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft (raw, json)
Hash identifier: xEcd0O8Vwy9N3rOvRdVrmMa9/7Zsb3gQVXd1unU/l0E=
Subject key identifier: 07:73:A0:A0:DA:17:2C:35:7B:AB:DD:CD:3A:60:DB:68:E2:F8:55:61
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Certificate issuer: /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial: 1481AF84721D70DC3C7B711F49E4EEE1717347D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
Manifest number: 0A41
Signing time: Wed 25 Mar 2026 20:42:09 +0000
Manifest this update: Wed 25 Mar 2026 20:37:09 +0000
Manifest next update: Fri 27 Mar 2026 00:24:09 +0000
Files and hashes: 1: 3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa (hash: +m62avw6IddwGVvggyzycek9UjNiGJiSd/a1/PjiYJM=)
2: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl (hash: Q6ZDsMy4yjghCB0sBE5JXlG0VKfhW4gNtGfU/Dfdaz0=)
3: 3136302e32322e3136382e302f32332d3332203d3e20313439333031.roa (hash: AHRW5blq6or1lZiTurf+biHje3bwxw8gHPaYSscchAY=)
4: 3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa (hash: UxSlV/6Knvl4tpv7hh5F+gAJvImv7NpKT6QEuJ9sJmo=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 00:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:81:af:84:72:1d:70:dc:3c:7b:71:1f:49:e4:ee:e1:71:73:47:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650860000, serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Validity
Not Before: Mar 25 20:37:09 2026 GMT
Not After : Mar 27 00:24:09 2026 GMT
Subject: CN=0773A0A0DA172C357BABDDCD3A60DB68E2F85561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:48:11:63:ed:69:f2:48:25:50:e1:82:38:
b7:c9:91:8a:43:8d:d5:a1:9a:e4:b6:ca:a6:5f:8a:
51:af:88:af:56:5b:ad:18:22:39:13:93:ed:56:62:
ec:3d:70:ab:e1:7b:5b:1d:be:33:31:14:4b:8b:55:
0c:45:ef:ea:e1:d6:2b:51:61:cd:ef:9f:49:de:20:
33:3b:12:c2:11:03:84:f7:41:6d:9d:62:2a:a0:a8:
a9:66:e4:e1:39:0b:f7:9d:8b:24:19:6e:d7:ee:c3:
f4:be:49:3c:8b:7b:db:e1:a1:4f:5f:ae:2a:79:49:
fe:45:a2:35:b2:fa:06:1d:68:35:a4:56:24:ab:33:
49:14:f3:d0:8e:e3:6e:58:57:e3:e1:0e:ff:c5:ef:
93:4d:b4:96:f3:fd:86:88:f9:ae:3e:be:00:90:21:
c1:42:89:98:2e:46:f0:79:be:a3:0c:38:13:0b:ee:
0f:c7:f2:f3:4c:e0:16:b2:44:76:86:7f:d7:e1:a7:
c3:10:f9:cc:a9:4c:a4:ab:63:84:43:9d:61:f6:d0:
10:91:24:59:46:2e:e3:b1:3e:cc:f6:da:34:9a:bc:
66:01:f1:69:c4:65:37:aa:c1:18:f1:35:4e:3d:2e:
c4:19:93:1b:34:14:82:96:82:e7:f3:ec:70:46:f3:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:73:A0:A0:DA:17:2C:35:7B:AB:DD:CD:3A:60:DB:68:E2:F8:55:61
X509v3 Authority Key Identifier:
keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:71:91:83:50:a5:16:65:41:1c:73:03:6e:7d:3d:a5:ac:c4:
fd:52:8f:1b:60:77:ff:5b:d3:29:cb:e4:0c:9f:bd:72:0c:17:
f0:aa:7a:76:8e:75:12:ad:6d:1c:86:69:a7:99:2e:6d:b0:f7:
e9:11:cf:61:88:f2:f5:a9:d2:5a:97:d1:7f:13:dc:73:64:30:
52:2c:4d:86:18:00:e9:46:29:3e:c7:a2:e0:ac:89:ba:37:03:
7a:fc:01:8c:24:46:d6:e7:1f:02:60:21:d1:35:36:b7:3b:7e:
22:dc:c7:ac:28:3a:2e:36:ef:b7:61:1a:5f:b8:7a:33:7a:32:
8a:1e:fd:58:ec:67:be:7d:31:50:8f:05:76:dc:5e:35:1b:c4:
d2:3d:28:8b:c7:ec:c6:a4:4d:c3:47:e9:b1:5a:b3:c9:38:02:
d7:ee:d4:63:54:52:bc:1d:89:ee:20:b2:e3:5e:f5:8b:aa:4e:
ef:60:41:32:5b:ee:a8:a1:57:e2:54:8c:5f:dd:b3:c5:75:27:
8e:c5:1c:f8:c9:68:39:db:a8:d6:02:dd:d4:f5:b6:49:71:0a:
89:ec:ab:df:f6:11:d2:05:a1:78:d7:21:62:22:24:fb:1e:85:
10:78:25:b0:38:f2:ee:53:de:6d:f9:de:aa:67:a8:45:7a:f3:
b4:b5:c4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:54:08 2026 by rpki-client