
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json)
Hash identifier: SVFiRmJSAPMXIGFH9Ko8v4qYBCfNSYmmGSvQ3eqlSeA=
Subject key identifier: EF:0E:C6:70:8D:E9:DF:DB:DE:10:3E:0E:B6:C8:FD:CB:97:71:7D:F0
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial: 0C8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
Manifest number: 0BFE
Signing time: Fri 04 Sep 2026 19:03:37 +0000
Manifest this update: Fri 04 Sep 2026 19:03:37 +0000
Manifest next update: Fri 11 Sep 2026 19:03:37 +0000
Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: LtUnJhk4B7HxM8b+aoOS/vZgyiv3Cr7fmrbKb+Nyx9o=)
2: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 6nAz8JDLRXZpp0YQMDx9IUtnZhPPPPFT4QGkXVk5rN0=)
3: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: +GV9xhTlFORtjXxee7C6hBiagIilBpwJ2zPhAY4Q/SY=)
4: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: ROZc9LLExxAKSmBJDb4gQXjvPcIeYOybm5faBsQ7IsY=)
5: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: Ty4ZYwQyvMEEFSGfaZFvWi2WTAO0bLvXbSZDNMOJw/s=)
6: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: Ajj1+XIv2lN+bJkfK3jiIAMbBKfMDrx1rrpjChWFrTw=)
7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: l19IcHrq3/s7bkVZYJxzqFC2aowTPUonke4uOMcPczc=)
8: 5180A6FE1CD811F196994CA9363D8C67.roa (hash: SWKDhCz2E/CT6y8saxZMqLsBGiJ4AZkgU/gomKXe6eo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3210 (0xc8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Validity
Not Before: Sep 4 19:03:37 2026 GMT
Not After : Sep 11 19:03:37 2026 GMT
Subject: CN=6a9b1609-1499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:20:bf:8b:a6:10:cf:32:f2:b1:05:29:e9:
fb:25:e4:e2:46:6c:02:92:89:4c:c4:62:62:45:85:
f3:2a:31:50:fc:28:95:c1:47:ba:66:07:d6:c2:84:
f3:f9:65:d4:f7:74:65:10:64:9e:e9:97:55:fb:28:
42:c4:ab:36:76:6d:27:de:a4:ce:66:0f:aa:9f:e5:
f8:df:44:f3:8e:8b:e6:76:84:92:83:0d:70:99:55:
33:62:da:2d:7b:26:be:17:6e:31:69:2b:c1:1c:1a:
80:9d:dd:ec:e0:77:00:1c:b7:05:6f:c6:b3:de:89:
e9:4b:88:4f:b5:fa:cd:cf:96:4d:26:ff:41:b5:8a:
85:ee:08:86:9e:d3:48:fa:a8:06:cd:cd:8c:43:e1:
01:82:93:42:50:fa:4f:ad:93:dc:8e:f6:00:ec:3d:
be:16:0e:34:ed:44:49:45:89:51:1b:16:03:c9:38:
6c:01:f9:b9:ab:91:d4:66:9d:76:b9:4e:d6:3b:66:
7b:f9:fd:b0:83:80:5c:01:ec:e5:a8:a8:ae:37:d5:
36:09:28:b2:be:d6:ac:c1:b1:86:cd:db:c1:ad:7a:
e0:0b:9f:9a:94:2a:a1:1b:d4:1f:6f:18:b0:ec:24:
d8:d9:bb:00:67:70:5b:9d:ec:a9:d3:55:82:3d:69:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0E:C6:70:8D:E9:DF:DB:DE:10:3E:0E:B6:C8:FD:CB:97:71:7D:F0
X509v3 Authority Key Identifier:
keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:05:15:b7:ee:40:a1:ca:bf:d4:77:9c:0e:8d:58:de:ab:ab:
a8:ae:69:15:eb:e3:69:5d:44:63:2d:3c:04:f5:c8:4f:32:50:
86:f0:d3:7a:5a:0f:1b:54:47:6a:fb:4b:9b:8f:9d:01:4b:dc:
1f:64:d3:6e:e4:79:16:53:53:c8:29:99:f3:65:1f:5d:b7:4a:
39:0a:da:07:b5:09:fb:2b:73:2c:4f:4e:f9:71:71:a9:02:0c:
25:1c:0a:cf:24:02:08:a5:d6:94:a4:33:4d:b6:dc:f1:d8:c8:
ff:87:db:6b:d3:28:71:de:cf:11:c0:56:bd:0d:71:22:1a:90:
6e:ed:c7:fd:6f:29:cc:f0:da:a8:4f:7a:b3:ac:a1:4d:05:f0:
80:25:67:86:c0:78:2e:18:c3:6f:2e:ca:78:17:b8:27:cf:7d:
a6:cf:92:eb:e9:09:54:35:ed:55:57:cd:8f:99:b4:81:28:1e:
33:06:2a:8d:5d:a6:8c:94:b2:f6:49:8b:fb:7d:cb:65:86:18:
6a:fc:c7:cb:19:e3:5a:b6:b8:1f:2d:f3:b7:75:71:b4:9c:6d:
57:2f:24:06:3b:16:a1:07:68:c1:2e:a6:f8:c4:a8:ff:d4:1b:
bd:61:6b:14:10:25:1a:7a:b7:25:3a:74:7b:37:fa:34:c7:da:
cb:0a:46:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:01:45 2026 by rpki-client