
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
File: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json)
Hash identifier: 4DYtWMU4XGIzkyXKDPjKJnn1DLKmAOGIRTp6kb7AaAA=
Subject key identifier: 1F:84:EE:4A:FF:24:B9:A1:C1:EF:91:4F:24:C5:13:82:12:E0:86:59
Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
Manifest number: 0FEB
Signing time: Wed 22 Jul 2026 17:52:38 +0000
Manifest this update: Wed 22 Jul 2026 17:52:37 +0000
Manifest next update: Wed 29 Jul 2026 17:52:37 +0000
Files and hashes: 1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: sxmp4+TQj4nqEP42d2Z/4+PqJmnrIFNUGJ3ljOjAlOU=)
2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: 8kaLAfVElFdAC99fHwGaunXXva1K/sV7AglDy8IxEuc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Validity
Not Before: Jul 22 17:52:37 2026 GMT
Not After : Jul 29 17:52:37 2026 GMT
Subject: CN=6a610366-5010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:22:6b:80:4b:0b:e7:78:48:55:2f:1a:cb:
63:09:1d:52:b0:6c:ce:9f:c0:cc:c1:59:6c:aa:0a:
8a:14:ac:27:3d:c7:cc:9e:0d:d1:cb:f8:9c:df:31:
77:45:98:0a:95:4c:8c:50:d2:d3:ca:b7:18:3a:26:
8d:f7:d8:68:d7:6c:b3:6c:2f:dc:f8:01:7e:8e:74:
b6:45:37:3e:6c:34:7e:a0:9b:e0:cb:8a:72:bc:1a:
8d:79:7e:82:d5:21:b0:99:0b:32:bc:93:c8:8e:f7:
98:62:e2:11:2e:04:b4:51:47:0a:7e:cf:d4:ab:c8:
af:79:a0:aa:7b:fe:51:93:d5:87:83:9e:9b:62:61:
83:b2:fa:57:8d:5d:bd:08:cb:25:47:ac:e8:14:2c:
69:23:79:02:5f:05:94:c3:62:62:09:80:a3:f7:2b:
06:cb:bc:02:65:c0:d2:a5:06:57:81:ff:de:4d:fc:
3f:96:d6:26:65:90:bf:d4:57:4a:13:b6:0f:88:06:
a2:d3:67:87:3e:51:0d:da:aa:11:9c:9c:22:bb:30:
1f:e1:c8:82:f2:8e:95:1a:6f:b2:3f:c1:09:e5:a1:
0a:ef:fb:74:95:ce:3a:0c:fb:fa:c0:5f:70:45:ea:
9d:16:49:7f:78:c8:a5:5c:ed:19:bc:f1:1c:62:0f:
ee:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:84:EE:4A:FF:24:B9:A1:C1:EF:91:4F:24:C5:13:82:12:E0:86:59
X509v3 Authority Key Identifier:
keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:9f:70:20:ae:45:ea:1f:4d:b1:28:6e:2d:e0:9f:be:43:4d:
a1:20:13:f3:05:3f:99:94:d6:0a:ca:ca:e4:d6:b0:b1:56:17:
2e:47:e7:f6:3a:23:bd:37:e1:6d:ed:7d:62:6d:79:bb:a3:84:
87:13:29:1e:34:35:98:5a:0c:9b:c3:31:47:8a:20:7a:ca:8e:
a2:93:56:ef:fd:88:74:99:dc:d2:18:e2:ff:0e:2a:e1:1f:c8:
17:0b:22:fc:75:a1:f0:2b:b3:39:2d:89:db:ef:ae:dd:ec:e5:
9f:ba:0d:27:05:15:d8:79:32:7b:0a:53:55:8f:9e:80:d8:9f:
ef:40:5b:45:18:51:c9:60:0e:ca:ee:d9:ba:a6:f8:c1:e7:94:
57:5d:fd:1d:cd:e7:ef:0f:cb:a0:c8:78:a4:91:31:fc:90:d3:
14:3f:5e:91:43:81:13:85:c5:43:07:10:b0:81:d1:1e:41:96:
6c:e3:a1:7f:db:d9:fc:0c:ea:12:ef:d7:ee:29:97:d6:09:53:
0e:c3:88:07:a1:69:c6:3c:b2:3a:91:aa:9f:8e:0c:2c:4a:eb:
64:cb:6d:fa:53:aa:af:6d:e5:5c:23:62:fd:22:7f:e1:66:f8:
28:a0:7e:51:09:55:ef:75:8f:48:56:be:d4:9f:ab:0e:63:0e:
ad:07:a8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:21:40 2026 by rpki-client