
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
File: 23zlI-hAt3_J4Zb1jxSXas5BVL4.mft (raw, json)
Hash identifier: CQF7j+t+mOW6uhNYKDPIJpxICG414pcO+Q9WEz6hg6s=
Subject key identifier: 0C:D7:E8:4E:39:CB:36:7C:0C:26:0D:8D:C0:B2:9E:0F:D4:92:6A:C8
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Certificate issuer: /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial: 077F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
Manifest number: 075C
Signing time: Fri 02 Oct 2026 22:09:45 +0000
Manifest this update: Fri 02 Oct 2026 22:09:44 +0000
Manifest next update: Fri 09 Oct 2026 22:09:44 +0000
Files and hashes: 1: 23zlI-hAt3_J4Zb1jxSXas5BVL4.crl (hash: nF3Z69vo9/SlUdSaD53PyYEqnccUQQrD+1FEZ89DOR8=)
2: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (hash: Yp5vZ4wNCCpx+gdrt1JNNzRzB8+x9ZIjyyfZWtoHuOw=)
3: 1E9D1268B3E011ED98356A75C4F9AE02.roa (hash: 5lB4KJ1dE9BAQX/uKgJe1+lnx+W9PJrFHNnppiXGz5M=)
4: F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa (hash: y3IxwzZcVIyvXDTK0dR4pibIdUtU+ExL4IB+J5qtwjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919 (0x77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Validity
Not Before: Oct 2 22:09:44 2026 GMT
Not After : Oct 9 22:09:44 2026 GMT
Subject: CN=6ac02ba9-4fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:36:ce:a0:37:89:ea:4e:73:c4:a2:02:93:31:
57:ea:96:9a:ca:46:fb:9c:78:f6:0c:87:4c:d3:20:
f6:c0:d1:3c:c3:f1:e8:a0:b6:9f:ad:70:76:de:71:
c2:89:8b:90:3d:35:ef:6b:5a:aa:44:87:cb:46:1c:
cf:38:2a:94:2e:56:c3:fd:f6:6a:04:b9:d1:3a:16:
67:33:56:e0:c3:ec:5e:28:55:1a:a5:0a:33:7e:43:
29:a6:1a:38:38:7b:64:7e:cb:e7:42:13:0a:fe:a2:
10:07:08:75:48:6b:ec:09:71:b1:2d:d9:de:39:fa:
a2:9c:30:dd:e8:fe:38:ab:68:89:b1:28:49:e5:3f:
bd:5e:f2:91:38:89:e9:ce:e8:f8:28:c7:58:33:0b:
26:1f:d1:dd:66:6f:a9:ab:91:f6:b7:76:20:4f:07:
79:5d:b2:9e:1a:d3:8e:85:09:ca:6e:81:bc:6e:b8:
04:65:d2:88:7f:23:86:6e:f4:3d:97:66:c3:f6:11:
d1:d1:cf:e0:fd:c7:fd:e6:7f:2e:77:81:fc:a7:c8:
d4:9d:f4:76:4f:5a:f2:b9:7e:7c:37:db:bd:d3:c5:
50:ee:ff:9a:d3:d9:1e:d0:c0:48:1f:d1:0d:33:ee:
f2:a6:c0:4e:21:d7:10:da:81:16:3b:e9:96:71:f7:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D7:E8:4E:39:CB:36:7C:0C:26:0D:8D:C0:B2:9E:0F:D4:92:6A:C8
X509v3 Authority Key Identifier:
keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bb:d2:6d:a9:7d:be:f2:8a:26:d3:aa:54:5a:4f:07:f1:df:
01:33:9f:2e:c2:8d:51:d7:22:2f:33:13:29:9d:c8:78:74:18:
55:b2:7b:47:1f:2e:60:c5:19:d4:e7:18:09:fa:1a:7b:5c:dd:
58:e7:ef:b0:3a:42:bd:22:79:03:02:e0:fc:4f:aa:b5:84:ea:
ed:a1:18:80:58:b3:5c:1c:0b:71:fc:e9:16:f0:8a:17:87:2a:
c6:b9:f0:8f:cc:a5:6c:65:9d:e9:2d:e6:92:52:b0:ee:32:04:
66:f2:5b:bb:58:77:dd:68:3f:a3:ed:f0:f9:9d:d8:4a:81:3c:
71:c6:84:cb:25:bf:c8:1a:44:73:ef:9d:7b:d5:9b:09:02:50:
79:63:72:7d:ff:85:4a:91:de:eb:1e:0e:95:7c:ed:26:e6:2e:
73:a6:fa:3b:4c:3e:0c:81:c4:bc:18:0a:a6:f5:20:dd:af:d4:
08:c9:13:e1:15:e2:79:d6:58:23:f6:0d:ad:24:c3:3a:37:b4:
f8:42:ac:29:5f:a4:3a:d4:f5:f2:a5:22:87:9e:cc:78:a4:48:
3f:67:ba:c9:65:20:ed:43:20:d7:34:8b:e1:f0:19:9e:82:df:
7b:37:84:88:f9:9e:54:29:02:87:5a:53:20:13:ac:ad:3c:6c:
08:29:64:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:17:49 2026 by rpki-client