
$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json)
Hash identifier: BVDFhu7mTmGMJrCe3HYasWVsbjpHPRcJ9YnfxP8ICag=
Subject key identifier: 0F:B6:11:5B:5C:49:B7:12:72:B5:EC:40:DC:5F:0E:0D:B9:7C:83:78
Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
Manifest number: 0168
Signing time: Sun 05 Apr 2026 04:20:25 +0000
Manifest this update: Sun 05 Apr 2026 04:20:25 +0000
Manifest next update: Sun 12 Apr 2026 04:20:25 +0000
Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: +ilBQAD1olfY65feWnCiCRzbj2zAikZ6y+/C5dHGUCk=)
2: 71DE3A16C2F511F09F5F373FC4F9AE02.roa (hash: 8TbV+zYNCDzHLyCRMT9o+lX4iB4i5tIxVYs1dczzSvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Validity
Not Before: Apr 5 04:20:25 2026 GMT
Not After : Apr 12 04:20:25 2026 GMT
Subject: CN=69d1e309-2150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:fb:6e:c3:9f:62:da:55:a7:a7:79:30:e0:
01:3f:8e:51:2a:d9:01:10:af:51:81:a0:1d:db:ab:
d6:e8:73:c6:74:c7:29:87:e5:be:79:ae:36:52:23:
e8:4b:61:a0:dc:5b:10:98:e7:5e:d6:6d:f8:74:d8:
4e:a3:1e:34:fb:06:ed:88:11:57:bf:dc:5a:6c:4b:
2a:f7:e7:a8:3f:0f:69:07:90:29:5b:97:c7:10:fe:
03:e3:f0:2c:fd:d9:8f:9b:ac:af:2d:5c:da:4b:ea:
af:e4:a8:da:50:7a:47:0f:3c:9b:e2:ad:7f:ab:48:
9a:05:ab:2d:8a:95:1f:56:34:85:30:70:bf:59:fa:
cd:d1:31:3e:d3:1d:b1:c3:d7:5b:e9:d5:2b:72:57:
e0:a1:ca:c6:02:c0:15:5b:f8:11:0a:fe:c2:7c:b9:
d6:11:5e:21:66:7a:86:4f:08:93:b5:6a:9c:86:99:
f6:d7:c3:16:82:53:a5:53:71:5d:70:9e:52:a7:f9:
3b:d2:43:b2:69:e0:35:1b:42:dc:07:c9:26:da:8a:
18:3e:52:d2:ba:4c:2a:02:38:1e:1d:10:7c:74:cb:
fd:7e:9c:81:d7:1b:48:d3:30:50:44:cb:3a:6b:36:
e0:c9:80:7a:5f:a7:21:d8:80:d4:b3:26:ea:9b:18:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B6:11:5B:5C:49:B7:12:72:B5:EC:40:DC:5F:0E:0D:B9:7C:83:78
X509v3 Authority Key Identifier:
keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2f:1a:d3:0b:4a:f9:82:97:cc:1f:89:5d:be:32:59:6e:4c:
d2:99:89:75:9a:fc:45:70:b7:8d:d5:09:00:ac:ba:f3:3e:e7:
90:ed:fb:a8:b4:d5:cd:d7:6b:c2:cb:ad:06:75:12:ff:0c:c3:
c9:66:45:da:62:08:43:b9:5f:7c:6c:5d:c2:5f:04:ce:3f:82:
5d:9a:f6:42:00:ca:07:ae:54:7c:e8:b3:27:74:dd:b0:b6:89:
74:d7:c5:5c:8c:83:57:a0:9e:f3:b7:d2:a7:74:02:e4:b1:e5:
15:cf:4c:c4:10:c3:05:99:0d:5e:c6:99:a6:8f:9a:0e:90:9d:
9b:17:c1:7f:ec:ba:e7:36:fe:2e:0b:69:45:e9:81:63:20:35:
09:84:52:1b:2f:87:b4:e0:14:8f:2c:fc:9b:5e:f3:2f:95:44:
91:59:88:d7:b8:c5:fa:c5:38:0f:a0:c9:12:61:0e:b6:5d:2c:
6e:dd:a5:c6:13:4b:8c:f6:db:e4:42:86:6c:35:0b:b7:27:fd:
c3:1f:f3:64:9a:bd:b5:d0:e7:b7:db:5f:b8:fe:c2:5c:b2:15:
aa:f3:d4:f3:04:8e:4f:7e:96:82:72:7c:a2:d1:0a:3e:ac:2b:
ea:2b:bb:f2:2a:87:0e:1a:81:ac:aa:1c:96:20:29:a2:b5:d0:
39:51:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:34 2026 by rpki-client