
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft
File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json)
Hash identifier: lAxl0IOzEDZkGWYYaE/+SSnYD2FBWmWKfIMbIf4gy0c=
Subject key identifier: 6C:20:69:DA:7A:4E:BA:EF:5E:83:2D:07:12:DE:2E:B3:F0:65:7B:4B
Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82
Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682
Certificate serial: 07EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft
Manifest number: 07E1
Signing time: Thu 16 Apr 2026 21:15:08 +0000
Manifest this update: Thu 16 Apr 2026 21:15:08 +0000
Manifest next update: Thu 23 Apr 2026 21:15:08 +0000
Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: inTsm585g9l8tKoZxvmd5VfvBVL8Hj2uInIjxNfRL3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl
rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028 (0x7ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682
Validity
Not Before: Apr 16 21:15:08 2026 GMT
Not After : Apr 23 21:15:08 2026 GMT
Subject: CN=69e1515c-22ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:97:ef:0e:5b:20:55:3b:fa:30:bc:1b:7a:cd:
8e:88:9b:96:12:40:04:fc:57:25:01:3d:dc:43:30:
fe:3b:49:ce:89:3e:07:6b:e8:00:0a:60:cb:eb:60:
2b:ba:a6:87:7b:29:fd:ad:53:54:d1:b3:f6:ba:ad:
d0:a0:57:f0:16:78:93:87:82:71:e0:69:a1:0f:9c:
7f:0d:33:81:e0:77:c3:34:cb:f1:d7:55:cc:09:a0:
e6:be:d5:a8:a3:81:fb:b6:73:93:7d:88:84:fe:71:
11:e9:e2:d1:8f:7a:1c:25:00:80:bd:28:a2:53:67:
50:2f:49:98:80:b1:d5:70:ee:ea:14:a2:5c:eb:14:
93:79:83:22:14:8b:d4:3b:81:b3:03:e9:b3:e2:52:
37:2d:ea:28:1e:01:3e:dd:0d:ec:9e:8a:1d:f0:25:
7c:57:28:d5:23:c6:06:e5:e1:cb:cc:47:67:91:75:
a1:86:af:f9:00:6e:5a:33:a0:17:f5:0d:5a:83:16:
86:cc:7b:42:db:f5:82:d7:68:b2:93:41:7e:d8:16:
73:44:6c:1c:dc:2a:65:aa:e2:39:69:07:2e:b6:70:
91:7f:d9:e5:09:58:7f:b2:60:36:6d:31:b4:01:b0:
61:ea:97:67:ce:74:6f:ef:0d:ab:4b:cc:f6:74:ad:
2e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:20:69:DA:7A:4E:BA:EF:5E:83:2D:07:12:DE:2E:B3:F0:65:7B:4B
X509v3 Authority Key Identifier:
keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:6a:e2:79:73:17:96:0f:5f:f2:27:38:28:dd:29:15:5f:37:
b1:df:ba:03:d4:a5:bf:f5:bb:6d:8c:7b:d2:0d:91:63:32:e0:
78:8c:04:3a:53:eb:db:ef:c8:84:d7:17:55:35:db:e0:03:80:
5f:35:dc:a3:21:17:d4:70:0c:00:cb:66:1f:d5:52:a4:be:e4:
4e:26:05:1a:97:f9:1f:f4:7b:2f:18:68:b5:ea:4f:60:44:5f:
5a:5f:2f:c1:30:6c:f7:50:d9:47:10:ae:8f:86:2b:0c:69:db:
f2:66:75:8f:8a:00:62:99:1b:31:0f:f4:1b:3f:2d:61:c1:c6:
71:bf:79:b8:58:99:7f:17:91:9a:c6:1f:b1:95:38:34:e4:3c:
db:65:5e:d7:77:04:7d:ce:3d:4f:46:40:ee:02:fe:3e:46:44:
90:d9:99:71:9d:27:11:fe:9a:6a:1c:a9:ac:8c:25:da:8e:49:
93:11:1b:4c:64:94:a5:18:37:3e:6c:09:7b:db:23:a9:17:ac:
02:a5:62:f6:8d:58:32:d4:4b:76:ce:b4:df:f7:41:b8:63:90:
25:27:5f:6a:07:9b:5a:af:16:69:5e:a5:7b:9b:bf:29:fd:89:
49:7b:81:08:0b:77:c1:8f:66:1a:5b:6f:00:e6:58:8b:ac:43:
bc:e0:57:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:13:09 2026 by rpki-client