
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json)
Hash identifier: 6zpiaZcTzFAkJcKMCiOK+Al2YolrInyq8040m+tz8KA=
Subject key identifier: F6:3D:D7:62:2D:BB:F5:34:58:30:25:26:55:F0:04:CE:AC:5C:B6:E4
Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69
Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
Certificate serial: 1CD2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
Manifest number: 1CCA
Signing time: Sun 20 Sep 2026 16:07:18 +0000
Manifest this update: Sun 20 Sep 2026 16:07:17 +0000
Manifest next update: Sun 27 Sep 2026 16:07:17 +0000
Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: SEb4nTMPtfCQewXIbmEapScc5DmE3BzH5PYJ5W7A7nc=)
2: 11600CECBA8E11F09FE88B46C4F9AE02.roa (hash: 9K9fDRvX3O0E2/MpAztE8iQtUevsHHg/Ud2dwJCf/vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl
rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7378 (0x1cd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
Validity
Not Before: Sep 20 16:07:17 2026 GMT
Not After : Sep 27 16:07:17 2026 GMT
Subject: CN=6ab004b6-cf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:b3:00:8a:e8:f8:df:10:d9:3c:d8:f0:e6:
61:bc:98:fa:58:26:66:7a:68:42:6d:24:1a:0c:e7:
38:67:71:26:8c:55:ce:fd:38:5a:9f:40:9a:37:8e:
de:b4:fa:f9:79:b2:a5:6d:1b:2d:94:eb:49:6f:cc:
6a:9f:22:6c:4e:97:b7:5d:2e:d2:e6:d4:f9:24:9e:
a9:d3:a4:71:bb:a0:73:eb:65:cf:d0:d2:0c:39:dc:
0b:a7:e9:22:2d:13:3b:31:ce:73:54:36:e9:09:3a:
45:17:fc:e0:52:19:68:05:ef:f2:df:03:ee:2b:97:
ed:a5:70:80:aa:09:d0:25:38:03:7f:72:e1:d1:aa:
fa:34:20:bd:83:ee:ce:47:2d:76:35:81:3a:ff:11:
e9:91:b5:5a:47:13:0d:91:e3:d3:3e:11:bb:7a:02:
9b:53:d9:9e:ee:bd:c8:80:61:f9:78:9a:15:60:c8:
9f:4b:8a:66:b7:2b:b6:31:43:9b:33:e7:89:25:9b:
08:82:6d:d9:d5:54:0b:bc:37:5c:1a:cc:55:35:02:
77:09:d4:0e:a6:2b:33:8f:4c:c6:62:48:54:fd:be:
0b:8b:81:ca:26:83:2e:b5:d0:9b:4c:c8:8d:95:22:
d8:40:f2:24:f9:c3:ba:9e:28:b4:f6:80:54:ad:ae:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3D:D7:62:2D:BB:F5:34:58:30:25:26:55:F0:04:CE:AC:5C:B6:E4
X509v3 Authority Key Identifier:
keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:ef:8a:17:da:61:e6:2a:31:f9:49:c5:f8:68:43:a8:9b:00:
30:47:ae:12:ae:79:70:67:31:bf:99:b4:4c:ca:3c:67:d5:7f:
2d:a5:4a:ad:84:3a:b7:06:a9:4b:d2:76:82:1f:37:90:16:68:
7f:f7:91:05:6c:df:25:1d:48:8d:7d:7f:52:41:b0:29:58:e1:
aa:be:1e:34:c9:bb:62:fa:a9:02:d9:56:f4:e9:dd:7c:57:35:
15:9c:42:f7:33:f6:47:19:5b:73:a1:60:e5:3a:0e:1c:18:b6:
65:25:4b:31:9b:2c:eb:ca:a1:06:36:35:88:94:c2:5b:b6:b7:
49:71:62:d3:f0:a0:96:2d:06:96:2f:7a:09:51:66:8a:0f:97:
68:c2:70:4b:a0:9a:10:73:be:18:22:5b:c4:25:c1:f4:ca:1a:
65:eb:a4:e2:3b:da:67:ba:6e:61:97:4e:30:c8:ca:84:dd:b9:
3d:96:7c:5e:b7:42:89:53:2a:6a:1f:ee:71:3f:f3:1a:e6:4c:
69:39:fe:76:ed:e4:81:5c:83:4f:bf:a3:a9:ab:59:ca:dc:36:
99:fb:98:17:d7:ec:11:14:b7:f0:30:4c:db:5d:a4:79:5e:6d:
20:28:29:b0:e6:ac:41:7d:73:6a:4e:df:70:fb:14:b4:50:a4:
a2:48:dc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:10:39 2026 by rpki-client