
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
File: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json)
Hash identifier: jt47Xy1gnekB9UgWYuIGjcpgcISrcsft01cYOMMJdpo=
Subject key identifier: 5E:62:5D:35:AC:7B:87:BA:11:08:50:18:96:C3:5C:D3:25:3A:4F:A9
Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
Manifest number: 102F
Signing time: Sat 26 Sep 2026 17:43:43 +0000
Manifest this update: Sat 26 Sep 2026 17:43:43 +0000
Manifest next update: Sat 03 Oct 2026 17:43:43 +0000
Files and hashes: 1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: xHCp+se2Ax393kmhQCT4VxhHgyuvsKPR998fwEv+UyA=)
2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: 8kaLAfVElFdAC99fHwGaunXXva1K/sV7AglDy8IxEuc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Validity
Not Before: Sep 26 17:43:43 2026 GMT
Not After : Oct 3 17:43:43 2026 GMT
Subject: CN=6ab8044f-f454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:00:06:be:c9:8f:a2:c9:1d:09:d1:02:8a:
e4:c5:81:50:df:b2:c1:ac:6c:50:f1:ed:30:44:bd:
da:bc:a5:d5:b3:77:f2:a6:24:dc:76:56:83:90:d1:
d5:bd:f5:e5:ca:b3:8e:6c:fc:e8:0d:04:d1:7d:fc:
0a:7b:fa:e9:50:f3:b9:03:96:bd:82:af:03:6c:a1:
57:b5:71:2b:4f:42:df:36:35:4c:fb:b8:cb:a8:b7:
ca:d9:cd:4e:fe:99:88:43:16:c0:14:9a:a1:be:67:
76:21:34:4d:99:5f:e1:21:fd:f5:b6:b2:b8:1f:c1:
35:88:3f:ac:32:37:60:b9:24:8e:99:df:14:b8:0a:
68:a6:ce:09:9c:07:80:5a:6e:4d:04:99:55:b9:fb:
06:a1:2a:f6:66:3e:f6:08:d1:f5:cc:c3:9f:86:6a:
70:43:8d:39:3b:c1:31:c9:97:0d:18:dc:f4:af:a6:
00:d1:51:49:af:e2:f0:13:f0:8f:e5:2a:11:76:61:
c1:63:7f:fc:1a:67:65:c7:79:36:79:eb:59:d8:ed:
59:11:20:56:84:6e:66:5e:18:df:ad:7a:2d:d1:b6:
78:97:8c:f2:bc:de:7e:26:ce:39:7d:74:fe:59:53:
d6:11:72:31:7d:ba:9f:b0:b7:a5:91:4c:a2:83:bb:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:62:5D:35:AC:7B:87:BA:11:08:50:18:96:C3:5C:D3:25:3A:4F:A9
X509v3 Authority Key Identifier:
keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5c:0c:f4:18:79:e9:f3:2e:42:f3:c8:7b:11:cc:58:19:dd:
e3:e2:38:ee:21:6c:36:ac:ee:b2:6b:23:c1:cd:25:2e:a5:7f:
59:32:0f:e6:8d:8c:26:4d:70:52:6a:6f:65:d9:17:6c:1c:02:
05:32:7b:db:a7:fb:27:5b:68:c3:cb:df:69:80:3b:43:b3:8a:
60:9c:60:e2:89:73:a5:2a:80:1e:55:82:83:9e:86:d7:7c:db:
3f:7d:56:85:25:87:86:1a:6a:66:c8:e9:b2:f4:62:f3:a5:59:
42:53:a3:43:81:b4:ae:cd:70:ee:19:1e:56:66:50:80:87:75:
91:78:d2:9e:4f:93:d0:d7:f0:78:92:6b:9c:7f:a1:51:6b:b0:
80:c5:f4:2e:6d:eb:83:77:74:c9:45:3a:8f:8c:6e:24:ef:0b:
7e:21:92:cc:2b:d1:a8:e7:66:bd:75:d5:4c:12:1e:ab:49:b8:
98:a9:4e:c6:53:cc:95:58:ef:46:23:71:3c:77:d9:76:a2:3d:
5d:9f:ae:fa:a9:5b:db:87:69:c4:76:f3:85:c3:76:e1:cf:ff:
fd:fe:e1:9c:63:30:f1:f4:09:30:6c:a7:d5:9f:e0:5d:e2:ac:
ea:19:fb:73:68:41:2d:e5:a7:41:42:f2:81:b6:9a:53:b0:ea:
e2:41:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:19:49 2026 by rpki-client