
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json)
Hash identifier: 7ffYPqaM18zN5P4kIX6Wg4MNhPbbwGdymQLE7MQXOJI=
Subject key identifier: 79:FA:A4:F8:25:1B:D5:0F:22:5E:E2:67:AB:2D:32:26:08:84:1C:14
Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69
Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
Certificate serial: 1C74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
Manifest number: 1C6D
Signing time: Thu 26 Mar 2026 16:09:51 +0000
Manifest this update: Thu 26 Mar 2026 16:09:51 +0000
Manifest next update: Thu 02 Apr 2026 16:09:51 +0000
Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: q9ab86i8SAvjF0tjtsGeN5+ISlv9uf5btzpAL0T8KEA=)
2: 11600CECBA8E11F09FE88B46C4F9AE02.roa (hash: NzPA3vTx/A3a5wnPCMTUeeGHZAhzPwo4b+b76jAubug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl
rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 16:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7284 (0x1c74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
Validity
Not Before: Mar 26 16:09:51 2026 GMT
Not After : Apr 2 16:09:51 2026 GMT
Subject: CN=69c55a4f-76a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:dc:22:f6:df:cc:51:46:c4:75:34:e9:0b:
cf:5e:98:ca:fb:59:61:b3:21:10:da:73:4f:35:7b:
33:61:8b:81:14:4c:0c:af:a5:db:dc:c2:4e:e3:96:
0b:2c:e2:74:61:41:f3:b7:1c:21:01:dc:a1:e1:58:
27:3c:8f:f7:3e:8e:5b:e3:96:19:53:fc:12:ad:c5:
af:b9:09:b5:7a:87:d9:cd:90:60:14:01:4b:78:fd:
4f:f6:1f:96:dd:e1:99:9c:5f:11:0c:e0:9c:11:8f:
2a:14:0e:40:bb:21:e7:9a:d5:34:73:80:e5:f6:25:
dc:cd:ee:08:28:af:ea:bd:c7:a8:16:af:cf:21:5f:
01:0a:24:1a:1b:1d:d5:79:0e:d1:cc:9a:e7:46:27:
0a:50:b1:b5:dd:7f:04:d6:d8:49:88:65:76:54:20:
af:e5:6f:3b:6c:b8:3f:32:6c:48:52:d6:e1:d5:47:
a1:d4:35:8b:94:da:e3:78:7c:45:be:02:0d:fa:f4:
d1:4d:11:6e:6e:0f:60:83:1b:5d:2a:45:83:43:cd:
c1:c2:59:69:eb:26:ac:db:c7:5c:db:e8:da:e3:22:
dc:4c:d5:45:3e:94:ac:2b:a6:0f:f8:bd:55:e6:28:
0b:21:1c:87:5a:af:2c:a9:3e:a2:e2:cf:c6:11:41:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FA:A4:F8:25:1B:D5:0F:22:5E:E2:67:AB:2D:32:26:08:84:1C:14
X509v3 Authority Key Identifier:
keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c3:4d:55:0f:3f:47:8f:96:e7:72:26:e4:4d:98:8c:b1:1c:
0e:f7:58:9e:16:74:01:8c:25:d2:55:75:7d:74:a7:af:55:39:
f6:76:82:cd:f4:d1:9c:14:9c:65:b0:07:38:02:29:71:9b:d1:
87:05:88:57:13:fa:a8:ba:ac:4f:9a:0a:90:90:8b:2e:62:e8:
18:ca:57:8e:47:76:d4:79:83:38:1e:a5:ca:81:f6:1a:f9:be:
f4:6a:44:d0:f3:5d:5c:c3:6e:65:44:03:72:85:6c:de:ec:38:
e1:6f:81:2d:27:c5:f9:78:0f:8a:84:31:d2:da:62:1c:1a:d3:
db:35:f0:3d:1b:29:31:e0:29:4e:40:61:52:dd:61:62:6a:0e:
15:6a:5a:f6:ba:6c:af:39:31:1f:12:28:5a:3a:5c:1a:83:1e:
c0:f5:c0:6a:83:8f:94:ab:be:67:64:a4:b0:e1:5a:66:37:2e:
8b:c3:1d:9f:3c:b4:91:51:68:de:a9:f5:9d:97:82:8e:ad:40:
ba:b2:a9:a1:e3:30:6e:08:2b:7e:29:59:b1:b9:bb:fc:a1:cc:
d8:87:43:fa:fe:34:83:5a:cc:70:72:5a:8a:d0:1d:00:47:0a:
32:29:2f:65:2c:f0:78:2d:88:45:8c:2d:1f:9f:21:49:c6:2d:
a4:c5:86:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:14 2026 by rpki-client