
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json)
Hash identifier: nkrGTe1nFEq4legBr+PhtSvcQZONWVK5bsfO68g932s=
Subject key identifier: 5A:0B:C7:D3:67:46:7F:A4:A4:86:34:9E:88:4E:B5:59:62:8F:40:51
Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69
Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
Certificate serial: 1C7F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
Manifest number: 1C78
Signing time: Thu 16 Apr 2026 16:07:53 +0000
Manifest this update: Thu 16 Apr 2026 16:07:52 +0000
Manifest next update: Thu 23 Apr 2026 16:07:52 +0000
Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: 9wwWFhzMtcObMwMsh2eeWAtgY0kOx+MIgNTd/C4yRiI=)
2: 11600CECBA8E11F09FE88B46C4F9AE02.roa (hash: NzPA3vTx/A3a5wnPCMTUeeGHZAhzPwo4b+b76jAubug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl
rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7295 (0x1c7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
Validity
Not Before: Apr 16 16:07:52 2026 GMT
Not After : Apr 23 16:07:52 2026 GMT
Subject: CN=69e10959-2979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:53:cc:35:74:61:7f:35:6f:02:4d:b7:ce:
b8:3e:12:23:aa:9f:25:24:5a:d5:30:22:19:9a:56:
67:da:c6:5b:2d:6c:cd:0a:93:0c:fd:54:dc:af:82:
0e:d3:e8:83:34:35:36:e1:93:1c:0a:bf:80:ae:08:
fa:75:65:05:61:9b:04:96:aa:3c:b1:96:e8:33:a6:
70:8a:e5:c8:ff:48:9d:72:3d:a8:b0:33:49:13:9f:
e3:ef:25:f5:ef:75:5b:61:cf:dc:aa:86:1d:9f:26:
68:68:9e:67:cb:ba:08:8d:35:0f:40:5e:7c:5e:2b:
16:cd:2f:a1:72:35:cc:3c:c9:e9:b3:7d:5e:73:a3:
3c:32:8b:21:d1:48:d6:8c:3b:a0:30:9f:02:be:40:
7d:4b:2a:67:fb:0a:01:1a:2c:37:80:c3:0a:6b:c9:
c1:7e:fd:7a:74:55:ea:12:e7:63:09:86:da:3b:19:
6f:6b:e4:c4:d2:d7:08:15:db:f6:32:87:cb:c4:24:
52:48:59:91:70:d7:c1:fd:dc:35:61:41:d2:de:3c:
33:41:87:c1:ac:6b:48:fe:0b:4a:a6:68:97:42:0b:
57:d1:f3:05:6d:eb:94:10:99:d7:75:61:36:5b:53:
62:97:30:6d:07:0c:d4:bb:d7:1d:68:e9:15:f8:00:
ec:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0B:C7:D3:67:46:7F:A4:A4:86:34:9E:88:4E:B5:59:62:8F:40:51
X509v3 Authority Key Identifier:
keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:05:e4:9e:26:19:fd:2f:a4:07:d4:d9:85:9e:78:c4:34:82:
2b:5b:98:b5:cb:4c:6c:18:e9:b1:1b:31:f8:eb:2e:3b:d1:14:
22:50:91:dd:00:2d:82:d8:3c:00:27:6f:65:80:30:f9:0a:1c:
e5:db:a8:b5:b2:fc:26:92:3b:93:e1:46:99:04:f8:0c:a0:bb:
be:af:b3:77:5d:b1:ac:82:62:bf:e3:16:9b:e9:ee:54:42:19:
0c:91:21:c0:de:0a:f4:8e:e4:3b:77:35:96:a5:c8:ec:28:15:
70:9c:d5:74:7e:fc:de:dc:3c:06:b3:a8:4b:a3:6e:b4:55:18:
b5:6e:80:8c:60:c8:c4:b7:b2:0c:2b:a4:6e:7c:d4:18:c6:44:
44:cb:b7:4b:59:45:05:d3:1d:3f:9f:88:c8:ba:04:49:fa:70:
9e:2b:1a:4a:77:62:a5:1a:63:8c:05:db:7c:fd:cc:03:64:12:
97:d7:5b:7a:41:80:32:ad:44:4e:72:39:46:f7:92:d9:af:81:
de:cc:f6:11:4e:de:b0:fd:69:53:b0:db:cf:56:ee:23:da:ce:
a3:24:af:ef:56:88:38:f0:6f:ba:9e:9e:69:ff:45:40:c9:42:
bc:92:f0:69:43:e7:2b:0a:3d:a6:13:e1:19:3e:63:5d:ee:77:
b8:75:17:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:21 2026 by rpki-client