
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft
File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json)
Hash identifier: AkL3ySjlRpPFZ5e3qD7ScQkPffJFiE22wIFJTeLuKIk=
Subject key identifier: 95:4C:3B:A8:A6:4A:64:52:56:02:A2:A7:FA:60:1F:C8:5D:07:51:04
Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82
Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682
Certificate serial: 07FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft
Manifest number: 07EF
Signing time: Tue 12 May 2026 21:23:05 +0000
Manifest this update: Tue 12 May 2026 21:23:04 +0000
Manifest next update: Tue 19 May 2026 21:23:04 +0000
Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: xhZWFhNxOLJm2PWnnp1a2JHhEQtUijNa0/SWERUEM+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl
rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682
Validity
Not Before: May 12 21:23:04 2026 GMT
Not After : May 19 21:23:04 2026 GMT
Subject: CN=6a039a38-2d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:01:60:63:27:be:82:7f:2c:25:e1:1e:40:
66:51:e9:13:81:20:bc:54:ca:52:42:bd:02:57:97:
cb:f7:e8:c5:91:dc:6a:ad:c3:07:0f:f5:35:bc:27:
b8:86:4d:e0:87:79:7c:19:01:6a:52:8d:a5:ad:1f:
7d:30:2c:34:e5:0a:18:c1:b1:33:64:f3:e8:e2:14:
b3:21:ee:be:3c:7c:a0:d4:fa:38:3a:7c:c3:25:9a:
6a:fa:b0:82:7f:72:74:87:63:8f:96:ac:71:c9:95:
ff:83:3c:42:4d:be:57:7f:cc:f8:de:03:5f:18:b0:
5d:c4:70:c1:fb:04:93:c2:47:07:0f:64:65:98:36:
7b:aa:27:e4:d2:13:ef:84:f3:a7:67:40:0e:55:2d:
9f:96:b6:2c:a5:af:72:05:55:34:3f:f8:4d:0b:ed:
11:36:aa:03:5b:b6:83:a1:37:26:7a:14:91:b4:e4:
16:ca:ed:74:88:8a:44:be:7c:bd:db:24:1b:3a:57:
99:5f:ac:f1:46:a1:4c:06:15:c6:fb:ef:f2:38:74:
fc:c0:8f:29:3f:88:4f:28:9f:b8:dd:8a:44:4c:26:
cb:a7:ba:d9:19:2b:84:9f:c8:39:a9:60:6d:c0:4d:
d5:b4:3b:02:4a:8d:ba:08:be:01:7f:9f:40:48:fb:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4C:3B:A8:A6:4A:64:52:56:02:A2:A7:FA:60:1F:C8:5D:07:51:04
X509v3 Authority Key Identifier:
keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3a:86:83:82:90:fc:4b:8f:b9:94:84:ad:68:27:01:58:36:
10:96:7e:2e:49:d4:44:b0:b5:e9:4d:3c:0a:0f:7c:71:c6:70:
91:fa:c1:c2:6e:0b:e2:59:bf:81:7c:e1:c0:18:fa:9b:e1:c1:
06:2c:b0:8b:81:ef:78:7b:a5:87:d9:1b:22:e2:b6:7e:c9:f6:
b3:97:ac:f9:56:5f:8f:58:bd:e1:e4:f0:55:0c:2c:cb:56:50:
5c:92:21:f6:e4:aa:c1:af:c0:1a:1a:53:dc:a9:6a:e5:8a:89:
36:15:fb:46:7e:c5:df:14:c4:b8:27:42:ba:51:4a:33:71:38:
ac:a5:e4:c7:58:e4:09:7d:fb:22:a8:d2:52:b2:69:de:45:08:
05:17:4b:e0:b5:54:01:40:8a:5b:6e:8d:4b:d0:dd:b5:af:87:
a8:8e:ee:2a:d0:63:66:66:dd:6b:80:0f:d6:aa:d6:5a:b3:41:
08:d7:ee:b1:0e:05:08:9c:40:48:b8:e3:8b:f3:05:79:27:96:
3a:61:a0:af:52:62:cc:39:f9:43:50:60:a5:93:df:c1:1a:0a:
19:9e:d7:a4:7f:fe:52:de:ec:b8:7e:b2:fe:e7:90:05:93:9e:
7d:92:63:36:d2:52:2f:ef:34:35:ab:f6:67:6f:d9:2f:c7:73:
04:df:02:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:02:38 2026 by rpki-client