
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
File: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft (raw, json)
Hash identifier: tBoHhP3GEW+jzkyxLpq+A0iLKgpO5k3lgClb9LB4XeY=
Subject key identifier: C9:CF:39:F3:FB:A9:73:05:AE:38:D0:D1:AF:FE:28:66:3E:B0:35:F9
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Certificate issuer: /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial: 133CF3E13E81351AA41DA12C8F520308572202F8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
Manifest number: 0B12
Signing time: Wed 13 May 2026 01:31:43 +0000
Manifest this update: Wed 13 May 2026 01:26:43 +0000
Manifest next update: Thu 14 May 2026 03:38:43 +0000
Files and hashes: 1: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl (hash: yCZVRi3Xqlnn6hMtcTD1sHnd4noy+vP55k7V3NxtlUs=)
2: 3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa (hash: uaSVLJC1Tk4lEhCwu9oCfZnU+QgSec4IdgA/TzT8ctE=)
3: 3136302e32322e3136382e302f32332d3332203d3e20313439333031.roa (hash: AHRW5blq6or1lZiTurf+biHje3bwxw8gHPaYSscchAY=)
4: 3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa (hash: fdkBLWTK3DQVYzuhxB2X2rD4UzgJP3fKM9/etqEIWms=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:3c:f3:e1:3e:81:35:1a:a4:1d:a1:2c:8f:52:03:08:57:22:02:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650860000, serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Validity
Not Before: May 13 01:26:43 2026 GMT
Not After : May 14 03:38:43 2026 GMT
Subject: CN=C9CF39F3FBA97305AE38D0D1AFFE28663EB035F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:78:6a:10:01:c9:53:c7:dd:62:b9:3b:63:
32:e0:13:89:06:06:2d:13:27:23:20:1c:b5:1d:0a:
88:c7:15:85:69:22:37:42:ad:19:7c:32:7d:8e:b8:
71:51:9d:40:c4:05:08:8b:72:f9:da:97:f1:76:79:
b2:43:be:55:ac:f3:19:0e:24:83:7e:6f:8b:b0:5a:
ad:02:92:34:ed:5f:fd:21:3e:ec:93:08:72:9a:5f:
bb:94:45:a4:8e:ce:8e:74:5e:3f:1a:61:b8:8d:80:
ce:78:35:44:d9:8c:6a:aa:43:97:ba:a6:49:c9:62:
c4:19:ca:96:90:42:13:e5:73:c2:65:91:d1:a6:1a:
73:fa:68:91:93:95:96:f8:3b:80:1b:1b:bc:b3:09:
21:3d:c5:59:1c:60:06:0a:6e:66:5b:90:86:91:bf:
e4:5f:7f:67:35:10:5e:63:c3:cc:fb:7d:ea:ec:42:
a1:82:7f:ee:a8:a0:96:ba:34:af:f6:e8:d9:2b:3f:
f4:54:70:3e:a1:f9:d0:e8:3c:43:37:da:54:2a:58:
66:8a:9b:5f:19:2a:39:ce:a8:92:fc:3d:b8:52:8d:
ff:dd:ec:c8:58:90:9e:d0:ba:1e:20:7b:06:b2:fc:
61:cb:ef:bc:09:a2:8f:1b:47:8f:60:5c:6c:e4:1c:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:39:F3:FB:A9:73:05:AE:38:D0:D1:AF:FE:28:66:3E:B0:35:F9
X509v3 Authority Key Identifier:
keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ec:93:97:1a:c6:f5:ee:a2:d2:ec:fb:a2:93:91:38:86:3f:
05:6b:9e:e1:e3:e5:7b:2a:69:2f:4a:83:a2:0d:71:61:77:9b:
07:dc:04:b7:00:3c:28:65:92:60:0a:87:a7:cc:eb:8c:2e:eb:
dc:c6:79:d9:72:c5:4a:d9:11:a4:ac:13:2d:2e:4b:fa:b1:53:
e1:41:16:a9:b1:5c:af:31:f4:71:24:d3:0f:14:61:60:a5:2d:
35:93:31:02:4f:d5:03:ed:c6:ad:68:31:5b:1f:ba:68:ce:4d:
13:7d:35:a3:c4:42:b5:36:28:9c:6f:19:d8:cc:fa:94:1d:04:
41:91:e7:fd:cb:3d:1d:1f:46:ca:2b:2c:97:76:6e:e1:ed:8c:
6c:95:ec:6e:ec:e7:28:ad:69:a5:d9:c9:9d:b8:ad:a2:b0:c6:
c2:4c:85:e9:8a:9f:12:92:d0:92:bc:ea:98:27:f3:ef:67:b8:
ef:82:b3:cd:a8:90:96:f2:c9:4b:72:bc:64:fd:19:97:09:fa:
95:45:92:83:d8:cf:50:5b:cd:60:49:32:fb:3f:5f:02:be:97:
05:8e:8a:52:77:61:1c:c5:33:0f:2e:d8:34:2b:5f:8a:6a:73:
c1:aa:85:5d:a9:9b:90:83:7f:a8:c6:e0:07:1c:a2:f3:74:03:
a6:6f:f5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:42:20 2026 by rpki-client