
$ rpki-client -vvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
File: 23zlI-hAt3_J4Zb1jxSXas5BVL4.mft (raw, json)
Hash identifier: 1PpO7JQU9dsvdDn34hd8P4b54CHzv0TIbWTu/XHw8KA=
Subject key identifier: F1:35:3C:8A:F8:AC:42:1D:2A:08:50:29:7B:EC:E2:C8:F3:99:10:4C
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Certificate issuer: /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial: 0736
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
Manifest number: 0713
Signing time: Tue 12 May 2026 22:09:31 +0000
Manifest this update: Tue 12 May 2026 22:09:31 +0000
Manifest next update: Tue 19 May 2026 22:09:31 +0000
Files and hashes: 1: 23zlI-hAt3_J4Zb1jxSXas5BVL4.crl (hash: 1G9WPjrq9RIRzfchbodsCsvqbPzy1T+F6W30HkaDjHg=)
2: F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa (hash: y3IxwzZcVIyvXDTK0dR4pibIdUtU+ExL4IB+J5qtwjE=)
3: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (hash: Yp5vZ4wNCCpx+gdrt1JNNzRzB8+x9ZIjyyfZWtoHuOw=)
4: 1E9D1268B3E011ED98356A75C4F9AE02.roa (hash: 5lB4KJ1dE9BAQX/uKgJe1+lnx+W9PJrFHNnppiXGz5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1846 (0x736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Validity
Not Before: May 12 22:09:31 2026 GMT
Not After : May 19 22:09:31 2026 GMT
Subject: CN=6a03a51b-bf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:3a:4d:ca:4b:41:85:0e:4a:cf:16:b2:5d:
a9:61:8f:de:aa:d0:0e:23:e1:03:a4:e7:05:a3:61:
d0:db:5b:95:db:fd:50:8d:3a:cf:2e:5d:be:29:bb:
27:65:65:fa:c2:11:53:aa:6a:cf:70:00:01:44:07:
ef:eb:73:3b:ac:f3:6b:15:32:0e:d3:4a:de:7e:17:
a9:80:e4:98:54:a0:40:c7:0d:ba:0b:ae:6a:34:15:
66:28:44:7c:52:15:34:f1:55:94:6e:a2:cd:94:99:
a2:48:dc:06:70:bc:71:a5:66:2c:eb:a6:f6:17:55:
ac:87:54:0d:11:5b:76:a3:b7:0e:3d:b5:70:9c:c3:
ac:ca:c6:1a:be:b5:15:53:82:f2:6b:bd:78:9b:88:
1f:2f:e6:34:d3:74:73:78:16:78:f0:02:bc:70:a7:
33:a0:c5:62:1c:e0:81:92:e9:b7:78:42:6e:7e:54:
53:7c:81:b2:f3:23:23:95:8d:3d:48:44:0a:81:5d:
09:3b:f7:a8:87:a6:75:bb:3a:f0:5e:3e:2e:8c:e7:
5f:c1:dc:2d:de:bd:72:96:2a:2c:b7:0c:f7:24:af:
d0:d7:fb:a3:fb:d7:f4:07:49:84:91:5a:02:5b:c4:
e1:17:73:49:67:27:19:f5:52:e8:56:fa:a2:13:aa:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:35:3C:8A:F8:AC:42:1D:2A:08:50:29:7B:EC:E2:C8:F3:99:10:4C
X509v3 Authority Key Identifier:
keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:60:f5:20:a8:3c:57:b6:c5:a9:31:b7:f2:2e:8e:1f:89:7b:
09:a6:dc:82:84:e4:c3:2b:3a:da:77:fa:71:da:08:72:ac:f4:
dd:c2:88:29:8e:ab:5f:3a:97:73:fa:18:1c:58:58:33:39:62:
f1:d7:80:84:d7:f0:a9:1b:3c:54:70:34:49:0c:6f:31:af:85:
6a:15:0e:a0:6e:4e:bb:18:e5:72:52:a0:b9:46:c2:20:65:62:
1a:e9:cb:72:6f:0f:3e:e5:46:b3:8d:1d:9d:eb:2a:82:4a:d7:
36:c7:2e:95:7a:8c:ed:50:48:cc:fa:b8:f2:47:73:16:8b:83:
ac:63:d4:e3:87:49:3a:23:1f:e7:c5:07:f1:be:4e:f9:19:69:
53:ca:ac:f2:42:ba:f7:85:98:e2:bc:e4:ec:78:fa:d4:d4:b4:
06:40:ee:cd:2e:73:e9:79:c2:c7:1d:50:2b:55:10:aa:7d:d1:
46:86:ce:fa:15:2d:90:cb:be:28:db:4b:e8:cd:e9:58:93:ee:
18:3f:a3:51:6d:13:d8:31:8e:1b:20:bc:29:11:8b:0d:09:66:
f8:b1:4d:b9:7c:d1:b1:e3:f2:e0:76:1d:20:30:2a:29:2a:50:
b7:95:42:3b:e8:14:69:f6:2a:15:8f:2a:9b:6c:85:5b:5a:b9:
2e:de:6f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:40:56 2026 by rpki-client