
$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json)
Hash identifier: ptCPNU9cLjYwazQvRDBYjWXhzc0YJm0Hn/P4XpQFJjU=
Subject key identifier: 7E:6F:14:99:80:E5:A5:8D:E7:7D:39:AC:F9:6E:7E:44:85:6C:F2:54
Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
Manifest number: 0154
Signing time: Sun 01 Mar 2026 06:07:56 +0000
Manifest this update: Sun 01 Mar 2026 06:07:55 +0000
Manifest next update: Sun 08 Mar 2026 06:07:55 +0000
Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: cPNrCP1byebQ+plCQMHzl0fNg5KaFLOF8AqsRRwEzxk=)
2: 71DE3A16C2F511F09F5F373FC4F9AE02.roa (hash: WkJYQisnSBazPrwPxv44l2gKryzTzLronGoqsIsb18Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Validity
Not Before: Mar 1 06:07:55 2026 GMT
Not After : Mar 8 06:07:55 2026 GMT
Subject: CN=69a3d7bc-0c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:38:ec:07:e3:bd:51:b0:e6:ee:72:66:2d:
3a:93:96:c7:e3:22:2e:d4:cc:6b:b4:e1:3d:dd:c6:
45:9d:66:2b:af:f2:8e:99:a4:d5:fe:46:4b:92:72:
71:6a:bb:73:7d:5b:86:61:62:6a:2f:f9:1d:76:0f:
15:01:dc:f7:e1:77:6e:46:94:2d:fc:3f:21:1c:af:
5a:ed:c0:7a:b5:ad:b0:54:27:dd:30:48:40:18:52:
23:82:de:21:32:8c:cd:c8:18:e7:20:84:ce:8a:50:
10:a4:a2:00:3d:8d:77:b0:72:00:84:5b:96:10:b3:
38:ed:b8:71:9e:11:34:35:05:56:d0:ec:2a:d5:a8:
da:f7:46:6a:cd:5c:73:39:3c:32:fd:9d:77:76:c1:
e6:37:80:87:11:bc:a1:70:28:22:e6:61:a2:13:d2:
10:c5:04:6b:b6:d7:a7:38:f8:96:96:b1:74:95:3d:
00:ca:85:08:3f:b2:ca:d5:21:3c:ed:18:6e:f7:50:
f8:f4:99:5b:7d:55:b1:e7:f7:22:55:63:89:cb:5e:
7c:bb:cc:fc:34:ae:6a:a9:ab:d7:ad:f5:a9:50:42:
96:d9:46:4f:81:7d:a4:e6:f1:b5:6c:6e:5c:66:ac:
bb:14:c7:71:c2:a0:d7:87:16:da:47:6e:f5:65:f8:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6F:14:99:80:E5:A5:8D:E7:7D:39:AC:F9:6E:7E:44:85:6C:F2:54
X509v3 Authority Key Identifier:
keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b9:cd:93:a6:f9:57:4b:75:3a:91:10:0f:0a:52:f4:26:12:
9e:f5:75:97:b6:b1:4d:6b:b0:7e:25:d3:6c:3a:43:a4:ed:1f:
c3:94:47:30:eb:a0:ad:41:80:e4:58:65:87:aa:04:57:d5:11:
7c:84:2c:d5:04:31:83:8f:66:95:57:b0:d5:23:e6:3e:dd:b7:
bd:12:f0:fb:0e:1f:73:42:ef:50:4b:76:8a:8d:f0:91:47:b1:
c3:2f:75:38:ba:ea:38:ac:7e:4c:77:52:b8:77:36:5f:83:72:
77:fa:6c:8a:ae:e1:a0:f4:63:ba:d6:2e:aa:a2:93:79:e5:23:
be:d2:38:5d:9a:35:2f:fd:00:be:27:09:19:df:30:94:e1:89:
a5:bd:81:74:d8:d0:3f:4f:ca:3f:6c:cc:e3:83:65:bd:fd:6b:
14:83:8b:99:d1:86:0c:ab:1a:39:6a:6e:2f:2c:07:4a:80:54:
31:fe:b0:e7:01:2f:df:3f:20:bc:76:4b:27:df:e3:eb:8f:a0:
8e:d1:57:a8:a7:17:a6:43:68:da:45:a4:37:b9:e3:68:18:e4:
9e:6c:ab:9b:2a:d5:fb:d4:c6:4d:66:2e:e5:8f:e0:3e:57:52:
66:77:8d:05:f6:58:2d:17:4b:da:6a:2e:94:2b:4f:80:9f:f0:
5e:9c:b8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:47:43 2026 by rpki-client