$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json) Hash identifier: SII5ERRU2PuOaa37mQppyzhTcv7QELMRrz6U8UjcjiY= Subject key identifier: ED:A5:09:D2:25:E7:2C:84:23:D2:41:BD:79:BC:70:70:8B:70:3E:FF Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Certificate serial: 07E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft Manifest number: 07D5 Signing time: Tue 24 Mar 2026 21:06:38 +0000 Manifest this update: Tue 24 Mar 2026 21:06:37 +0000 Manifest next update: Tue 31 Mar 2026 21:06:37 +0000 Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: I+2pktgdp+jK+upo40TViv7g4cuJIeogT+lnHwIcSLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2016 (0x7e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Validity Not Before: Mar 24 21:06:37 2026 GMT Not After : Mar 31 21:06:37 2026 GMT Subject: CN=69c2fcdd-706e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:1c:d9:76:e5:e2:d7:a6:4f:7c:c6:dc:98: 68:d4:f5:1f:6f:b0:bc:34:38:d9:44:01:e0:56:40: 8f:d6:d7:1a:19:78:7c:4b:6b:3a:b5:47:ae:b0:8f: f2:1b:2f:1b:55:ef:5b:75:c1:01:bc:ad:60:0d:22: 77:0f:6e:ad:ae:78:da:7a:4b:2a:c1:b7:49:cc:bd: 54:75:35:1e:2a:b4:30:7f:5a:19:db:4b:2f:4d:ad: 09:1a:0c:db:3f:e6:a9:d0:90:7d:ca:75:c1:26:ae: 15:24:80:a1:67:74:37:4c:a7:82:38:bc:9d:87:03: 6a:ea:87:94:8d:69:ef:96:f8:40:b4:e0:7c:39:0a: e0:c2:55:27:3d:9e:80:fb:05:84:9a:ec:ff:87:83: 4a:b9:06:32:1f:5c:be:40:32:ff:46:08:20:58:57: 9e:05:19:07:da:8d:fd:7c:8e:79:d8:cd:08:f0:bd: 68:7f:f4:56:74:80:ef:83:6a:0c:d1:33:b5:bb:e7: ad:1a:c9:63:52:af:99:b8:ec:4b:aa:d5:62:58:2b: bf:1d:a7:ec:62:f8:c2:b9:fb:e1:2b:d8:34:7f:04: a8:c8:d3:cc:ca:8d:2e:c7:8b:e7:e6:64:ce:55:64: a0:e5:70:d5:a5:5c:a6:ff:10:de:43:9d:4d:bf:5f: 3f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A5:09:D2:25:E7:2C:84:23:D2:41:BD:79:BC:70:70:8B:70:3E:FF X509v3 Authority Key Identifier: keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:77:d9:06:92:9b:f6:14:d2:7a:48:9f:7a:55:6a:2e:72:00: 80:02:ae:de:17:0c:0c:08:19:2d:b2:d8:91:4c:31:7b:5e:96: c8:2f:1f:33:6a:29:a8:7a:14:87:61:d3:35:13:f5:ac:c3:e4: 9a:4f:6f:52:95:ae:a6:0c:32:a0:fb:c8:67:8c:80:4b:07:65: f5:41:be:d6:a7:14:e2:1c:65:ec:ea:56:af:87:73:04:11:56: 92:5e:75:3f:7b:52:2c:fb:44:d3:46:99:08:75:1d:39:63:a0: d3:cb:92:0a:4a:17:0f:cb:aa:ab:75:0f:05:aa:f3:39:00:d6: 32:71:e9:e6:03:cd:08:87:a5:e6:76:ba:07:86:4e:8d:ee:3d: a4:21:8a:c2:bb:a5:c4:01:ad:3f:a2:f1:3f:5c:4c:86:73:02: 96:26:f7:28:32:16:bc:75:a0:e8:bb:3d:68:be:d3:4a:b0:20: 9d:f3:2b:7f:ca:46:3e:a4:21:84:eb:46:18:b7:ca:f0:9f:18: cb:87:17:b2:7a:ff:a0:79:ff:ca:fb:62:1d:4d:7f:03:e4:20: d3:3d:ad:9f:84:3a:9e:90:9e:0b:9a:24:ed:14:ad:a0:6f:ff: 76:08:6f:fb:27:f8:43:f4:ff:53:b6:de:fd:b7:b4:12:98:fa: df:1f:fe:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx OTRCMTc2ODIwHhcNMjYwMzI0MjEwNjM3WhcNMjYwMzMxMjEwNjM3WjAYMRYwFAYD VQQDEw02OWMyZmNkZC03MDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuawc2Xbl4temT3zG3Jho1PUfb7C8NDjZRAHgVkCP1tcaGXh8S2s6tUeusI/y Gy8bVe9bdcEBvK1gDSJ3D26trnjaeksqwbdJzL1UdTUeKrQwf1oZ20svTa0JGgzb P+ap0JB9ynXBJq4VJIChZ3Q3TKeCOLydhwNq6oeUjWnvlvhAtOB8OQrgwlUnPZ6A +wWEmuz/h4NKuQYyH1y+QDL/RgggWFeeBRkH2o39fI552M0I8L1of/RWdIDvg2oM 0TO1u+etGsljUq+ZuOxLqtViWCu/HafsYvjCufvhK9g0fwSoyNPMyo0ux4vn5mTO VWSg5XDVpVym/xDeQ51Nv18/DQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO2lCdIl 5yyEI9JBvXm8cHCLcD7/MB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTEwNS9ERDcyMEI4NjMwRjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5i U3JQenZZMEY3cGNaU3hkb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC3fZBpKb9hTSekifelVqLnIAgAKu3hcMDAgZLbLYkUwxe16WyC8fM2opqHoU h2HTNRP1rMPkmk9vUpWupgwyoPvIZ4yASwdl9UG+1qcU4hxl7OpWr4dzBBFWkl51 P3tSLPtE00aZCHUdOWOg08uSCkoXD8uqq3UPBarzOQDWMnHp5gPNCIel5na6B4ZO je49pCGKwrulxAGtP6LxP1xMhnMClib3KDIWvHWg6Ls9aL7TSrAgnfMrf8pGPqQh hOtGGLfK8J8Yy4cXsnr/oHn/yvtiHU1/A+Qg0z2tn4Q6npCeC5ok7RStoG//dghv +yf4Q/T/U7be/be0Epj63x/+2g== -----END CERTIFICATE-----Generated at Thu Mar 26 11:14:37 2026 by rpki-client