
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
File: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft (raw, json)
Hash identifier: aYimMai24j4uXuScof+abOY3JrxjQHa47EwIMKKZI/8=
Subject key identifier: CF:1B:70:94:31:89:F5:B6:80:83:1D:58:18:6A:FC:8D:24:8F:16:E5
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Certificate issuer: /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial: 1C927B52A20CBF5A9814840696DDA06B8349661E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
Manifest number: 0AD0
Signing time: Sat 18 Apr 2026 18:58:32 +0000
Manifest this update: Sat 18 Apr 2026 18:53:32 +0000
Manifest next update: Sun 19 Apr 2026 20:40:32 +0000
Files and hashes: 1: 3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa (hash: +m62avw6IddwGVvggyzycek9UjNiGJiSd/a1/PjiYJM=)
2: 3136302e32322e3136382e302f32332d3332203d3e20313439333031.roa (hash: AHRW5blq6or1lZiTurf+biHje3bwxw8gHPaYSscchAY=)
3: 3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa (hash: UxSlV/6Knvl4tpv7hh5F+gAJvImv7NpKT6QEuJ9sJmo=)
4: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl (hash: ndL7jlThb68uOyKVnOD5nLNH/bUlfF9Gy9CrZV72pJg=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 20:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:92:7b:52:a2:0c:bf:5a:98:14:84:06:96:dd:a0:6b:83:49:66:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650860000, serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Validity
Not Before: Apr 18 18:53:32 2026 GMT
Not After : Apr 19 20:40:32 2026 GMT
Subject: CN=CF1B70943189F5B680831D58186AFC8D248F16E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:76:cc:80:6f:55:1f:b8:32:91:c7:e8:3b:
a5:9f:99:9e:c3:7c:bc:31:41:6a:49:23:e2:80:7b:
a2:61:5a:fe:93:04:99:51:e3:ad:0e:0d:6f:1b:fd:
75:e7:30:f9:ec:05:52:7d:3c:dd:d5:2c:6f:fd:b9:
41:00:d5:42:51:00:4e:04:84:ea:78:96:81:52:c6:
91:da:35:9f:32:4a:35:99:82:1b:fe:29:c1:7b:3b:
08:9b:d7:93:0d:a7:9a:00:4f:3b:7c:e9:5d:97:a6:
a5:56:0b:77:03:78:81:a4:dc:ab:d6:7f:ff:17:dc:
78:3d:bb:97:11:42:36:b3:5c:46:9b:63:9b:60:d0:
de:a8:d7:d7:b9:26:c6:d7:6e:61:05:99:d3:0b:7d:
e5:a2:50:5f:27:9d:0e:b3:f8:20:64:50:96:07:bd:
fc:ae:c0:f9:dc:5d:a4:cd:19:6e:43:5b:09:e5:29:
0a:9a:53:79:10:9b:25:9f:50:92:49:25:23:b1:97:
ee:93:30:83:c3:8d:bc:16:f8:4d:20:ad:77:09:03:
67:f5:6a:c9:01:e0:ed:d8:b8:9b:65:89:f7:fd:39:
0b:9b:52:78:79:f2:90:7c:fb:1b:f3:35:50:78:81:
dc:60:ce:5c:d9:bb:e2:b2:f0:04:e5:d2:48:de:51:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1B:70:94:31:89:F5:B6:80:83:1D:58:18:6A:FC:8D:24:8F:16:E5
X509v3 Authority Key Identifier:
keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:30:56:a6:15:35:25:32:91:0b:7a:b6:97:8a:c1:15:88:1c:
24:ad:23:11:37:03:c1:2b:ac:2f:55:49:69:3c:16:09:d6:02:
b7:b6:b4:87:15:92:2e:19:dd:ff:01:be:99:e8:24:f4:23:cb:
f1:85:00:e0:15:b4:c0:b1:e0:34:40:ab:5e:e9:60:3b:9b:42:
2d:a7:09:d7:08:98:1b:86:61:23:4e:83:1b:cb:e5:71:78:8d:
86:e3:16:8c:c6:78:a7:c2:24:70:cc:15:34:57:11:3f:80:a3:
f3:41:c7:a8:e5:39:61:f8:30:8c:4c:17:77:67:2a:e8:84:bf:
f7:b1:ab:5f:a7:0e:41:21:77:fc:95:6f:30:34:6c:a7:50:9e:
0c:93:37:89:f9:1d:ce:67:a7:38:49:a8:28:fc:d3:32:5c:71:
1b:be:5f:b5:aa:06:bb:f9:8d:0c:4b:13:a1:8a:41:ef:8e:33:
d2:52:cf:c3:26:03:0f:0b:f9:d9:fd:77:50:b8:52:5d:49:7b:
01:43:ef:0d:8a:c6:76:dd:3a:f3:45:56:0a:28:6e:8f:af:01:
3e:aa:19:ad:1b:f4:65:49:bd:9e:72:2e:d9:5a:e3:a0:6f:a5:
7f:aa:2c:0a:c8:19:61:9b:5b:50:34:2f:90:41:1c:71:2d:56:
e8:57:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:03:00 2026 by rpki-client