
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
File: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft (raw, json)
Hash identifier: nl+N43Wd7e32JJACf4qkT5waHtaRdw0fAz10oTtVrxE=
Subject key identifier: A4:9F:38:81:E6:8D:CC:A1:52:08:4D:B9:B0:48:DC:A9:D6:97:52:A0
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Certificate issuer: /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial: 58777AF78E7B6924CD855FECD5BAA74026AB6EAB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
Manifest number: 0A4C
Signing time: Sat 28 Mar 2026 07:17:19 +0000
Manifest this update: Sat 28 Mar 2026 07:12:19 +0000
Manifest next update: Sun 29 Mar 2026 11:11:19 +0000
Files and hashes: 1: 3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa (hash: UxSlV/6Knvl4tpv7hh5F+gAJvImv7NpKT6QEuJ9sJmo=)
2: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl (hash: F8Rtc2nkZu+cA6RNgXzgcAIc9DrOFWK817uu/N1vioc=)
3: 3136302e32322e3136382e302f32332d3332203d3e20313439333031.roa (hash: AHRW5blq6or1lZiTurf+biHje3bwxw8gHPaYSscchAY=)
4: 3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa (hash: +m62avw6IddwGVvggyzycek9UjNiGJiSd/a1/PjiYJM=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 11:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:77:7a:f7:8e:7b:69:24:cd:85:5f:ec:d5:ba:a7:40:26:ab:6e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650860000, serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Validity
Not Before: Mar 28 07:12:19 2026 GMT
Not After : Mar 29 11:11:19 2026 GMT
Subject: CN=A49F3881E68DCCA152084DB9B048DCA9D69752A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:f4:ea:de:55:3e:2c:7e:2a:42:ca:51:58:
8b:5b:e4:57:80:df:a0:2d:d9:23:06:f2:63:1e:08:
8e:f1:ee:6e:09:c4:c7:46:33:a8:bc:f7:2a:d4:82:
59:af:71:a3:e7:b3:6f:21:d1:ca:04:45:24:a1:08:
56:9c:a9:70:b2:5a:07:29:a2:40:48:e1:e7:ad:53:
b3:3e:ba:46:29:75:9a:c3:aa:4c:6e:c7:ee:3a:63:
82:f4:64:b9:b1:38:89:0a:6f:68:1b:d9:c1:bd:84:
13:c7:4c:31:15:b5:09:09:6a:3a:a9:aa:8a:f8:27:
31:57:d0:18:e1:1d:09:ee:4a:bf:46:01:98:23:b9:
56:ff:3e:60:12:a7:0e:7a:10:cf:17:0f:11:b8:95:
17:27:c5:2b:2e:42:2f:a9:f5:8b:4a:e8:2f:4d:e3:
37:f4:ff:6e:09:d1:3c:cb:04:bd:1a:e6:03:50:b6:
3a:bb:9c:de:a5:eb:ba:4a:ef:73:04:90:18:72:b8:
bf:25:71:c1:f7:7d:e8:80:a0:d1:40:23:20:6f:46:
af:ed:5b:0c:5e:a0:cc:db:14:72:08:ad:26:86:50:
69:72:86:1e:93:78:5c:03:02:e9:02:8e:bd:27:dd:
0a:0a:91:9b:ee:0c:e1:4f:ab:18:85:db:39:a4:0b:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9F:38:81:E6:8D:CC:A1:52:08:4D:B9:B0:48:DC:A9:D6:97:52:A0
X509v3 Authority Key Identifier:
keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:6f:09:24:2f:71:38:a2:85:51:4b:47:b6:4f:d1:09:6d:59:
3d:2b:ce:48:7d:cd:73:9e:95:df:22:b9:28:e8:55:ef:02:8e:
f7:6b:3e:f7:95:ce:df:bd:cf:1e:25:ce:8b:6c:a2:d8:bb:71:
73:34:89:5a:a5:f8:8b:1c:9c:46:4e:44:55:11:7f:4b:cb:88:
e6:ff:4b:1a:50:a7:d6:0e:d9:83:ad:00:e0:48:93:40:a2:48:
16:6d:09:41:49:8d:1a:07:34:c7:e2:36:bb:05:70:7c:5e:29:
02:ed:a5:43:e3:7f:26:86:2f:bb:0a:62:84:a9:65:bd:69:10:
2c:26:8c:8c:5c:40:69:63:ca:e5:a3:62:06:55:94:70:35:77:
6c:3c:dc:55:bc:e4:8c:bc:77:46:04:05:b9:17:14:0f:e7:02:
8a:93:01:88:7d:bc:3b:97:02:83:c8:de:bf:b7:e6:6f:25:a9:
1f:0c:4f:ce:00:1a:8b:17:8e:64:60:b0:fe:88:88:28:73:69:
ea:76:ac:ff:64:dd:01:3f:6b:ea:98:b8:22:a0:87:3a:e3:35:
27:78:cf:79:84:0c:ae:f3:5d:8d:f8:0f:67:aa:21:6f:85:36:
8b:03:63:5c:e4:12:53:4e:41:fe:9b:72:73:68:42:1a:d1:21:
5c:49:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:23:02 2026 by rpki-client