
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json)
Hash identifier: hx9XM7nKivuEJDeU+tUJOeV0xEE3x1bVF4WMppLMvxo=
Subject key identifier: 6A:79:C1:C0:06:FF:3F:06:1D:37:44:1E:02:29:C9:29:7F:4E:56:AA
Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Certificate serial: 01CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
Manifest number: 01C4
Signing time: Sat 19 Sep 2026 04:02:13 +0000
Manifest this update: Sat 19 Sep 2026 04:02:12 +0000
Manifest next update: Sat 26 Sep 2026 04:02:12 +0000
Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: YjncXFR9Y5gNO4Ju1IM2JAeMijm38KoilsfOmcjpSdE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Validity
Not Before: Sep 19 04:02:12 2026 GMT
Not After : Sep 26 04:02:12 2026 GMT
Subject: CN=6aae0945-9d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:b6:50:43:a8:5d:4c:8e:c1:1b:fc:c3:fb:
c3:97:fc:94:0b:91:76:7e:5b:a5:00:25:63:3d:df:
f8:12:22:68:0d:bf:20:a7:d5:3b:98:3a:39:9f:bb:
b9:73:83:92:bc:15:c4:30:22:ef:df:38:7b:ab:8a:
c6:ef:38:96:82:a4:d3:7e:df:29:a3:9a:a4:27:79:
1a:aa:f8:f3:49:db:bc:96:75:af:a4:cf:e5:89:cf:
56:c7:c3:01:59:c7:de:26:fb:e8:28:25:b7:c9:49:
76:ef:ed:d3:d4:cd:e1:e0:ed:46:df:e3:3a:7c:2b:
d1:7c:41:e9:bf:03:fe:dc:33:66:24:f3:00:1a:0c:
37:47:33:b0:94:ad:5f:58:6c:e8:31:ff:6e:6d:ee:
d1:f8:a3:f4:4a:6f:e5:8c:31:bf:d2:1e:06:48:b0:
76:49:69:20:c6:75:8c:b6:b6:10:10:c8:f2:24:e7:
51:e8:f7:fb:f9:58:02:c6:11:dd:7f:fb:6d:d8:88:
ef:7e:63:f4:8b:19:8d:20:f7:82:8d:e7:0f:c4:82:
fc:95:dd:0b:2e:08:f9:54:11:55:d5:29:ea:c8:3c:
cc:16:16:23:83:f8:d1:8c:d7:8f:16:e1:4c:db:3d:
fc:44:e4:26:42:93:ff:f8:7b:94:a4:37:aa:a3:63:
47:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:79:C1:C0:06:FF:3F:06:1D:37:44:1E:02:29:C9:29:7F:4E:56:AA
X509v3 Authority Key Identifier:
keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:a3:19:1c:94:83:fd:63:17:78:54:26:0e:af:1c:69:86:41:
9c:91:7d:3d:61:c5:9e:54:67:e3:5d:d4:0d:13:fa:1d:b9:6e:
15:cc:35:9a:9f:04:87:a0:8e:c7:f8:8a:4f:77:72:9f:93:68:
c6:88:e4:c3:da:05:8b:26:30:02:14:2a:e6:b0:a6:d4:0e:9e:
bc:f6:2b:94:dd:aa:62:f8:4e:c1:2b:e2:9d:12:10:57:c7:1e:
0e:68:82:2c:24:c0:f9:cb:77:74:4a:57:18:61:95:cf:6e:ab:
9a:da:69:d7:1f:fa:ed:c6:b5:1b:57:ce:3d:61:8e:40:81:cb:
23:0c:44:3a:60:a4:bb:d9:3f:22:21:17:b0:42:2c:b2:14:c9:
fb:70:44:57:dd:3f:d3:87:7f:a3:bd:44:2e:12:15:4f:fc:aa:
53:d4:e2:98:86:e9:c9:16:76:e8:dd:7c:0e:34:85:90:a2:92:
d8:6c:6f:02:a7:2a:8a:b8:be:82:c6:82:d2:8c:32:48:00:86:
43:14:20:0a:fa:21:70:27:5d:bb:dc:bc:94:99:a9:02:0e:b9:
94:38:db:e8:b8:da:09:40:a1:c2:f6:81:93:f3:43:5d:92:43:
c7:15:a6:78:23:0b:f0:cc:f8:71:f3:7f:8f:3b:25:76:6b:c4:
c0:c1:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:44:16 2026 by rpki-client