
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json)
Hash identifier: T9Sgd9SJjSyhKrLYaGwI67RDS8sUrrHlqfn4pzAY4L4=
Subject key identifier: 87:92:49:11:4B:D8:4A:86:0F:4F:0A:72:C6:B5:48:A3:BF:00:CD:9D
Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69
Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
Certificate serial: 1CDC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
Manifest number: 1CD4
Signing time: Sat 10 Oct 2026 16:09:24 +0000
Manifest this update: Sat 10 Oct 2026 16:09:24 +0000
Manifest next update: Sat 17 Oct 2026 16:09:24 +0000
Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: MPsaepzrwNCufIOc1o1Lb2P1PAj5OuirnSQ2a3idn2k=)
2: 11600CECBA8E11F09FE88B46C4F9AE02.roa (hash: 9K9fDRvX3O0E2/MpAztE8iQtUevsHHg/Ud2dwJCf/vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl
rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:09:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7388 (0x1cdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
Validity
Not Before: Oct 10 16:09:24 2026 GMT
Not After : Oct 17 16:09:24 2026 GMT
Subject: CN=6aca6334-f75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:45:3e:8b:ca:8a:c2:7d:2b:ae:93:b4:c1:
ec:08:f3:63:36:38:a9:9f:1d:ae:3e:7c:8b:67:1c:
cf:8f:39:46:ab:e8:6e:11:8c:f9:39:47:bd:3f:8c:
3e:08:b4:67:53:67:8b:46:26:c9:ba:f0:22:fa:d3:
e9:51:b7:12:36:82:06:c7:bd:68:8c:f2:77:20:66:
32:20:27:5e:ba:31:9b:be:b9:93:85:c6:51:10:83:
55:4f:db:e9:28:55:96:71:6b:b0:97:af:6b:c8:bb:
20:85:a9:6c:f8:7b:23:12:6e:d8:1e:7d:6d:38:bc:
7b:cd:7b:5c:28:09:c4:96:dc:c2:85:6d:81:6c:20:
9a:d5:cd:48:e5:5a:20:64:0c:ad:cc:72:5b:ba:37:
28:a8:00:12:05:bf:74:b4:96:88:4c:99:55:ce:98:
1e:4b:3c:0e:3c:9d:92:4b:2e:10:79:8a:ff:f9:34:
d0:a5:35:6c:87:fd:f9:5e:7d:76:ae:8e:7c:b7:7e:
04:fd:7e:cc:01:08:39:32:b7:59:27:c5:da:c2:0b:
f8:24:0e:3e:20:90:b6:9f:3c:49:e3:eb:56:ff:c6:
67:a9:6d:95:c9:7c:59:74:31:e6:55:56:51:09:d9:
04:d7:12:5d:6f:0b:92:56:f9:6f:ea:de:5d:39:77:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:92:49:11:4B:D8:4A:86:0F:4F:0A:72:C6:B5:48:A3:BF:00:CD:9D
X509v3 Authority Key Identifier:
keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:b2:1f:c0:c7:d5:09:67:ea:d0:c1:27:52:99:6a:6c:c9:52:
be:d8:01:3d:03:28:d1:13:e2:f3:1b:75:bb:ad:08:52:66:69:
0a:36:fd:97:ec:f8:bd:f3:84:a3:ce:66:ac:b9:91:08:5e:36:
bc:54:9f:a3:c4:ff:3d:71:f2:8f:56:44:70:f9:37:82:f5:b9:
90:9f:69:3c:1e:80:d0:ae:95:5d:ea:3f:e4:3b:b0:35:f0:56:
78:0b:95:1e:c2:8c:23:6e:9b:b8:95:1f:94:15:49:58:f1:e4:
a2:91:b9:4c:b0:20:fb:33:20:2c:c9:aa:ed:6f:fa:ee:58:24:
39:d4:4d:fd:c3:60:a5:26:eb:db:2d:cf:20:5c:a8:6b:b1:9d:
d4:be:6d:f3:c7:2a:21:84:9d:84:dc:06:a0:82:3e:10:86:e4:
8a:8f:39:51:8a:02:61:1c:a5:52:68:d5:60:8d:e8:23:fb:27:
e2:08:c4:fa:d3:cc:98:eb:ca:de:8c:e4:46:b1:45:38:64:74:
98:68:69:fa:af:03:d4:1d:45:4e:f1:89:cd:71:6d:ba:96:7f:
af:62:74:5f:52:3e:03:2c:2e:62:5e:0a:11:f5:7b:be:29:3a:
ee:da:1c:72:f8:b6:e9:31:33:98:e9:1d:7c:7a:9e:e2:84:7b:
72:0e:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:02:12 2026 by rpki-client