
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
File: 23zlI-hAt3_J4Zb1jxSXas5BVL4.mft (raw, json)
Hash identifier: PnPXFzrgzojeS+KxWX8PDqvUpsJeHXZbtUnnGYGFt1A=
Subject key identifier: 7F:56:BB:66:F6:7E:7F:2C:16:32:4B:65:FF:10:96:AE:48:11:E9:C1
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Certificate issuer: /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial: 077D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
Manifest number: 075A
Signing time: Mon 28 Sep 2026 22:01:53 +0000
Manifest this update: Mon 28 Sep 2026 22:01:52 +0000
Manifest next update: Mon 05 Oct 2026 22:01:52 +0000
Files and hashes: 1: 23zlI-hAt3_J4Zb1jxSXas5BVL4.crl (hash: vg4vehhXT72ZmYnYuK8FMUO8n1TFCetVgNCpnRMkb3s=)
2: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (hash: Yp5vZ4wNCCpx+gdrt1JNNzRzB8+x9ZIjyyfZWtoHuOw=)
3: F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa (hash: y3IxwzZcVIyvXDTK0dR4pibIdUtU+ExL4IB+J5qtwjE=)
4: 1E9D1268B3E011ED98356A75C4F9AE02.roa (hash: 5lB4KJ1dE9BAQX/uKgJe1+lnx+W9PJrFHNnppiXGz5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 21:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1917 (0x77d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Validity
Not Before: Sep 28 22:01:52 2026 GMT
Not After : Oct 5 22:01:52 2026 GMT
Subject: CN=6abae3d1-0c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:2a:94:0b:ca:47:20:b4:49:2f:50:94:8d:
c9:c4:8c:2a:a2:5f:36:ba:62:79:e5:21:d5:a4:d1:
c5:26:42:68:db:f2:7e:9a:27:cf:a8:97:92:e3:62:
40:97:c0:5a:2a:bc:21:c2:a1:a7:60:c6:85:e5:29:
2f:a7:c7:74:7f:23:44:1b:1a:ec:ea:a0:7d:75:98:
11:f8:0b:4d:d5:c8:97:05:fe:f0:20:0e:1f:31:04:
e6:ba:31:e0:d1:2f:2e:97:e8:75:ae:fd:24:77:5c:
7a:6e:ef:24:4a:b7:ed:d8:58:5f:74:82:62:50:33:
ef:83:f2:a7:54:dc:e0:48:4f:4f:84:06:17:71:ab:
40:f1:2f:19:7c:8b:87:cb:b4:aa:4f:a1:ff:64:7a:
6d:b1:34:d6:00:ef:14:46:b3:2a:0f:45:61:b3:3e:
ba:8c:72:76:1c:20:43:11:18:99:5b:57:c1:6f:bf:
c0:fe:fb:03:f8:0c:16:2d:59:44:b0:00:e6:68:ca:
19:32:f5:21:8d:d0:52:18:b1:98:3b:39:0d:5a:82:
d1:92:3c:fa:1c:56:1f:4a:69:c8:70:50:f3:db:a8:
f4:10:65:b2:2c:56:3b:7d:6a:ad:f3:7f:50:e8:eb:
c3:e6:ca:5e:12:84:3e:05:a4:15:27:69:a1:2e:d5:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:56:BB:66:F6:7E:7F:2C:16:32:4B:65:FF:10:96:AE:48:11:E9:C1
X509v3 Authority Key Identifier:
keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c0:c8:fa:ff:af:c4:22:96:1f:18:d3:41:50:e0:0e:af:ca:
6f:73:fb:61:4d:d3:d4:77:73:4b:c4:d9:5e:3d:1a:64:2c:75:
01:87:05:7b:3c:aa:f4:55:db:1c:5f:0c:13:7f:df:73:6f:f8:
dd:36:82:fa:fe:c1:d1:03:4f:62:b4:9f:4f:b1:4f:e7:55:47:
bf:1e:d9:79:e6:6e:56:b8:49:d7:5f:64:b0:46:62:9d:5b:d4:
c1:da:a2:4c:07:b6:94:92:e4:f1:d5:3d:11:db:0e:2a:af:db:
33:f1:47:eb:ef:28:e5:6a:79:dc:35:6f:ce:2e:12:19:5f:42:
91:e4:f8:04:59:0e:ff:f8:e0:0d:0c:bb:9d:fa:2a:f1:89:54:
4c:2e:d3:a0:77:c9:64:5a:c9:95:76:90:27:1c:c3:d5:08:26:
44:e8:84:e3:11:3e:42:43:f5:f0:40:cd:5a:dc:fd:e7:6a:88:
fd:20:09:9d:e2:01:a3:4c:88:81:23:7c:0a:cc:9e:1c:82:50:
b3:9e:7a:51:6a:34:59:c6:a3:5e:5a:1c:76:9b:02:a0:7c:07:
50:77:44:99:bb:e3:e4:d6:d1:b8:b6:ac:39:42:8d:d6:3f:b7:
38:26:61:6d:04:b4:ed:70:6a:4d:72:a4:38:89:80:53:c9:04:
8e:00:07:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:14:13 2026 by rpki-client