
$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json)
Hash identifier: ZGmWhNxSbxoxkNRgwnP86MIO6q6UhLqu6Ji1BTJ3cTk=
Subject key identifier: 53:23:2B:43:60:34:78:F3:2C:15:3D:9B:A0:E1:D7:89:24:8B:98:65
Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
Manifest number: 016E
Signing time: Fri 17 Apr 2026 04:31:42 +0000
Manifest this update: Fri 17 Apr 2026 04:31:42 +0000
Manifest next update: Fri 24 Apr 2026 04:31:42 +0000
Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: PBPMBahtOCZjonUCqk8zjdqqZYAbT4141XALpiRsn8E=)
2: 71DE3A16C2F511F09F5F373FC4F9AE02.roa (hash: 8TbV+zYNCDzHLyCRMT9o+lX4iB4i5tIxVYs1dczzSvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Validity
Not Before: Apr 17 04:31:42 2026 GMT
Not After : Apr 24 04:31:42 2026 GMT
Subject: CN=69e1b7ae-d860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:d3:e7:a9:96:da:e1:20:d9:97:a2:f1:f7:
ff:86:f4:42:1d:23:fc:7a:1d:ec:9b:fc:f9:5d:e4:
71:d4:c6:ea:ce:bb:99:c1:b1:01:e1:9c:c4:b8:c5:
b4:2a:8d:bb:28:f7:0f:ec:93:56:be:ed:b0:13:af:
7c:3a:ca:89:4e:94:44:af:91:5d:29:f8:75:97:7d:
54:63:0c:28:3e:14:60:c7:7c:e6:ee:83:77:8d:b8:
4b:a4:85:4d:b0:eb:4f:56:3d:b3:25:44:bf:65:67:
62:68:52:26:52:24:0c:74:66:e4:79:57:4b:d0:72:
c3:b7:e1:07:00:ff:c9:6e:f9:a1:67:29:09:3e:ee:
05:bf:6f:1c:f9:a5:43:b0:96:16:62:b8:61:3a:77:
55:cf:6f:7b:75:a2:4f:4b:2c:b6:46:8f:55:97:01:
ef:94:7e:81:cb:9e:7f:18:18:8d:04:f9:e0:62:c3:
db:5c:87:ca:26:57:99:59:e9:ed:5a:17:eb:33:27:
fd:c2:bf:bb:a2:cd:df:ea:43:d9:df:b1:be:d7:fd:
d5:1e:7c:12:c3:97:69:17:8f:f3:0b:78:a1:41:90:
11:b0:5b:97:69:90:c3:6a:88:91:3f:d4:35:55:5a:
67:7a:58:75:09:64:fc:b5:b4:67:51:47:dc:e2:a9:
13:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:23:2B:43:60:34:78:F3:2C:15:3D:9B:A0:E1:D7:89:24:8B:98:65
X509v3 Authority Key Identifier:
keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:c9:bc:b9:db:33:61:aa:5a:4f:ef:e0:22:66:d8:9c:20:bd:
ea:96:70:3c:f4:1a:90:ea:64:a2:d9:a8:6a:61:d6:a0:47:44:
a4:64:2f:42:19:43:7f:a7:33:23:41:a0:fe:4d:69:5d:72:fe:
61:69:79:33:84:c0:fe:3d:1e:a6:bc:a5:4f:bb:a8:2d:4e:c2:
b2:e3:6b:83:82:61:78:3f:af:03:33:06:22:85:f4:0f:3c:ae:
c3:ca:01:7c:d1:68:e4:1a:6f:a5:b2:e0:59:fb:10:82:e9:13:
8d:7e:e5:19:81:14:5c:7b:06:b6:aa:e9:34:da:c4:95:7d:73:
a5:c7:0a:1a:c0:37:56:0a:1f:ab:ad:c4:ec:f4:06:ff:36:0e:
27:d3:d6:24:0f:34:86:26:20:77:f5:7e:ee:08:77:60:b9:ad:
f7:b3:5f:31:3d:28:04:7c:2a:97:07:12:98:20:c6:4c:22:8e:
cd:71:58:ef:06:6a:08:4d:48:08:7a:f9:df:97:80:bc:57:9b:
dc:a5:74:ee:98:ae:8b:30:59:35:0d:75:34:02:fd:a1:83:f1:
51:0c:7f:63:b1:77:1d:90:d7:0b:ad:56:c5:e0:85:ff:4b:eb:
2b:08:d9:6c:18:36:ec:c3:f1:fb:f6:55:2d:5e:73:82:9f:e0:
48:1a:f5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:17:01 2026 by rpki-client