
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
File: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft (raw, json)
Hash identifier: oyDjA+OiedkmkrPPnoRD4wGvo2IibiY4VKViBKZiXnk=
Subject key identifier: FD:EA:8A:34:1A:21:96:24:05:3D:C0:F4:E2:AE:A5:07:11:2C:69:C6
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Certificate issuer: /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial: 66284DF4B69FF8EB45C54930DFB06A4844BEF96A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
Manifest number: 09CE
Signing time: Tue 03 Mar 2026 03:59:22 +0000
Manifest this update: Tue 03 Mar 2026 03:54:22 +0000
Manifest next update: Wed 04 Mar 2026 04:35:22 +0000
Files and hashes: 1: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl (hash: wHmCq9jJNysJ6S1YBiY2q1VJT7+bOr4eayVgPR/Z/N4=)
2: 3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa (hash: +m62avw6IddwGVvggyzycek9UjNiGJiSd/a1/PjiYJM=)
3: 3136302e32322e3136382e302f32332d3332203d3e20313439333031.roa (hash: AHRW5blq6or1lZiTurf+biHje3bwxw8gHPaYSscchAY=)
4: 3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa (hash: UxSlV/6Knvl4tpv7hh5F+gAJvImv7NpKT6QEuJ9sJmo=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 04:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:28:4d:f4:b6:9f:f8:eb:45:c5:49:30:df:b0:6a:48:44:be:f9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650860000, serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Validity
Not Before: Mar 3 03:54:22 2026 GMT
Not After : Mar 4 04:35:22 2026 GMT
Subject: CN=FDEA8A341A219624053DC0F4E2AEA507112C69C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:18:39:b0:db:70:7c:14:38:83:0c:a7:b6:
f5:22:01:2c:40:c6:04:4e:f1:af:d1:54:9d:b8:e6:
52:b6:72:14:dd:12:e7:99:0d:47:1e:6d:94:43:e2:
18:a9:4c:13:cc:b5:ee:79:b9:8e:a2:e9:dd:fd:09:
75:0d:f0:d4:d4:f0:21:71:f2:c1:cd:64:d5:37:1c:
fa:f5:2a:06:2e:cd:b6:5e:95:83:32:51:37:7c:1f:
ec:ad:26:6d:21:b3:1d:01:47:c7:dd:a2:d3:ba:46:
3e:7d:e3:23:03:96:45:d0:63:72:56:07:55:52:22:
47:ba:0b:e4:56:8d:25:7b:d9:1f:19:59:f3:e4:fb:
8b:52:81:48:d2:40:76:93:fa:73:40:6d:8b:20:30:
1f:16:9f:0d:0a:3a:db:bb:88:06:00:6a:8a:43:0c:
5e:83:f0:f5:02:f0:27:30:8f:aa:de:31:6e:14:5e:
29:e2:b2:20:3b:5e:e9:70:a5:d2:2a:39:8d:7d:44:
3c:cc:f9:0c:0e:87:1e:72:64:82:5a:66:fd:49:c0:
7e:f4:e4:53:7a:55:e8:4e:8f:86:3d:44:67:03:ce:
f2:52:38:c5:6d:06:8f:87:92:8d:40:54:ba:ec:46:
b1:f5:51:b0:35:70:f3:ef:6a:15:79:6a:b9:12:9b:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EA:8A:34:1A:21:96:24:05:3D:C0:F4:E2:AE:A5:07:11:2C:69:C6
X509v3 Authority Key Identifier:
keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:67:84:d7:d5:08:c8:e4:85:5c:b3:a3:ae:66:94:7b:02:0e:
43:68:95:89:f1:22:3a:60:53:bb:a1:ff:83:0f:ee:bc:8a:5b:
35:03:81:c0:46:6a:54:aa:d1:3a:d0:f6:4c:b9:04:04:e8:a0:
8e:1f:d6:4a:99:8d:e4:8b:4a:62:fc:53:40:04:54:5e:9c:68:
d9:f0:e6:89:86:70:e2:df:b1:0d:51:a8:a1:18:ce:43:17:22:
b0:71:e2:9e:9f:21:60:1b:64:02:e9:60:c1:04:91:65:33:25:
32:87:28:bd:79:a7:5e:6e:2e:99:1b:5e:dd:e9:d1:84:30:71:
66:8f:4e:c4:19:a6:50:e7:de:7c:2c:9e:2b:ad:f1:1d:3e:e6:
79:f3:12:88:d9:c2:0c:32:a1:43:90:4f:95:b0:c3:8f:47:18:
5a:1f:b4:e4:95:8f:5b:0f:44:ae:c4:d2:27:4f:98:9f:9c:d1:
22:59:73:08:ee:cd:d6:c8:ad:6c:65:e5:07:66:fe:e8:90:58:
d0:ba:34:4b:89:0d:75:24:5b:67:b7:b2:2d:a7:f4:48:74:b2:
05:b9:cb:88:9f:99:2c:b9:12:81:67:41:a1:1f:60:d8:dc:f7:
f8:d0:57:46:2e:d1:b3:58:f9:f6:d8:a6:57:0a:3d:b4:b6:da:
12:1e:99:9a
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUZihN9Laf+OtFxUkw37BqSES++WowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEygyM0IxMDMwRjND
Q0FDOTk5RjJCNTc3NDVGQzlEREExQ0NERkEzNjMwMB4XDTI2MDMwMzAzNTQyMloX
DTI2MDMwNDA0MzUyMlowMzExMC8GA1UEAxMoRkRFQThBMzQxQTIxOTYyNDA1M0RD
MEY0RTJBRUE1MDcxMTJDNjlDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOTIGDmw23B8FDiDDKe29SIBLEDGBE7xr9FUnbjmUrZyFN0S55kNRx5tlEPi
GKlME8y17nm5jqLp3f0JdQ3w1NTwIXHywc1k1Tcc+vUqBi7Ntl6VgzJRN3wf7K0m
bSGzHQFHx92i07pGPn3jIwOWRdBjclYHVVIiR7oL5FaNJXvZHxlZ8+T7i1KBSNJA
dpP6c0BtiyAwHxafDQo627uIBgBqikMMXoPw9QLwJzCPqt4xbhReKeKyIDte6XCl
0io5jX1EPMz5DA6HHnJkglpm/UnAfvTkU3pV6E6Phj1EZwPO8lI4xW0Gj4eSjUBU
uuxGsfVRsDVw8+9qFXlquRKbCaUCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBT96oo0
GiGWJAU9wPTirqUHESxpxjAfBgNVHSMEGDAWgBQjsQMPPMrJmfK1d0X8ndoczfo2
MDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC81LzIzQjEwMzBGM0NDQUM5OTlGMkI1Nzc0NUZDOUREQTFDQ0RG
QTM2MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3
QzcyRkQxRkYyL0k3RUREenpLeVpueXRYZEZfSjNhSE0zNk5qQS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzUvMjNCMTAzMEYzQ0NBQzk5OUYyQjU3NzQ1RkM5RERBMUNDREZBMzYzMC5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAFnhNfVCMjkhVyzo65mlHsCDkNolYnxIjpgU7uh/4MP7ryKWzUDgcBG
alSq0TrQ9ky5BATooI4f1kqZjeSLSmL8U0AEVF6caNnw5omGcOLfsQ1RqKEYzkMX
IrBx4p6fIWAbZALpYMEEkWUzJTKHKL15p15uLpkbXt3p0YQwcWaPTsQZplDn3nws
niut8R0+5nnzEojZwgwyoUOQT5Www49HGFoftOSVj1sPRK7E0idPmJ+c0SJZcwju
zdbIrWxl5Qdm/uiQWNC6NEuJDXUkW2e3si2n9Eh0sgW5y4ifmSy5EoFnQaEfYNjc
9/jQV0Yu0bNY+fbYplcKPbS22hIemZo=
-----END CERTIFICATE-----
Generated at Tue Mar 3 05:54:25 2026 by rpki-client