$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json) Hash identifier: MWVYJxONlxA+Oa86sa8p5fMnbiq4/wO1eqx2orW7AvE= Subject key identifier: 03:A1:35:9B:5F:E2:5B:FA:11:14:73:9C:BB:1D:CC:76:2F:F8:EB:5B Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0B82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft Manifest number: 0B15 Signing time: Fri 18 Jul 2025 19:45:55 +0000 Manifest this update: Fri 18 Jul 2025 19:45:54 +0000 Manifest next update: Fri 25 Jul 2025 19:45:54 +0000 Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: 5TXnq/WZVdKf5Bh/sQK437Y8qqhZXM/4N6GvMa2Trzs=) 2: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 3y9BDXWhIindn9fV5yRhLvjaXOZjwz7wE89JCwHuZfU=) 3: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: DOBTNH4GGNPUe/CVItieZfmqwMcwBWdfPDr7AZPstYA=) 4: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: I/yFDnonwjcIdEyDMRzyxAMhULYfijDfUDeIkoqzyfk=) 5: 72E17FF2194F11ED818A3C66C4F9AE02.roa (hash: uU9R+G2quDutiuaDSqaRQis0/8oF8eouaABisexnp3Y=) 6: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: 2efUF6FV6lzagFO6ixmFLw5grpZeZdNkHznhn486HIY=) 7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: 1Oowb0Op5/Cu+8FSjA8UF2OrKzh23X2j+ax5PBrX1iA=) 8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: ioPHlw0sW6GeE8i+5W/iQUIzBchZcQHPRQo5hhiTaFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2946 (0xb82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: Jul 18 19:45:54 2025 GMT Not After : Jul 25 19:45:54 2025 GMT Subject: CN=687aa473-0e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:c2:3a:c9:e3:f6:0e:ba:89:74:24:57:76: d4:ff:51:28:38:c4:db:6d:48:37:4b:2d:80:f1:75: 5e:f2:1e:1b:36:60:0e:b5:8b:40:c4:23:a2:02:f5: 73:5f:21:48:80:eb:65:3b:2f:f4:42:32:b9:31:42: 85:86:bd:34:33:d5:c5:30:84:65:ca:bb:8e:51:9f: aa:1f:12:b5:99:93:70:db:5e:53:bc:73:c9:b8:98: a4:65:7e:a0:14:db:da:5e:89:f9:38:a3:38:7f:e3: b3:f0:83:5a:73:9d:3d:21:1e:4f:64:d9:a0:8e:14: de:d8:da:fd:aa:2f:0f:fe:0b:83:a6:92:96:c0:aa: 1d:cb:90:e7:5d:98:37:ab:3f:7e:fb:a2:55:07:e9: 88:7f:0b:27:16:ff:fe:06:4a:2f:69:0d:a8:40:04: 3c:83:41:ef:75:e9:f6:9a:e4:82:8a:a0:c3:cd:17: af:94:67:c3:cc:34:40:89:66:13:9e:43:5f:dc:aa: 74:ca:af:d1:b3:d8:9e:74:9e:45:6b:75:8d:86:35: 7c:f2:b6:45:d5:0c:c8:ea:2a:f0:ab:da:a4:b0:0e: e6:29:9c:e4:ed:61:9a:0f:aa:63:a1:8b:62:19:34: 2f:eb:b9:5c:fa:ba:b0:0b:55:80:dd:57:7a:f7:9e: 58:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A1:35:9B:5F:E2:5B:FA:11:14:73:9C:BB:1D:CC:76:2F:F8:EB:5B X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:7e:f7:4d:8c:90:8e:90:c8:1c:86:ec:1d:27:62:d3:1e:60: 62:88:c6:fa:99:fc:2a:00:ea:aa:df:ba:1c:5f:00:c4:6c:f5: 73:6d:d4:74:8e:71:13:e2:83:bd:7f:4d:76:03:1f:64:d3:7b: df:45:40:74:da:0c:29:b8:58:ed:66:df:12:6f:17:5e:34:07: e5:e0:3c:7d:b9:93:b9:56:e9:b3:51:9b:88:4a:82:da:0c:79: a4:56:70:9d:5f:7d:2b:46:dd:ea:b7:e7:1f:e3:60:b6:7b:82: 5f:61:18:15:a4:af:36:01:cb:20:fe:ef:de:13:6f:d7:c8:02: af:d9:42:36:96:1d:cb:d3:9f:2d:12:3e:81:17:cd:5e:a8:f6: 49:5a:33:cf:d8:8b:a1:61:c3:91:c5:f6:4c:2d:4b:74:4f:1b: 84:01:a7:bb:67:86:f9:58:09:0e:4d:18:b4:9b:03:b3:83:e6: 5b:cf:6c:05:d5:dc:7b:84:2d:50:a0:9e:06:35:93:5e:4c:3b: a4:aa:aa:51:a8:36:92:e3:80:b7:c9:91:7b:56:f2:6c:24:66: eb:7b:1d:b3:77:4d:78:eb:ad:c9:18:8f:a9:91:9e:9c:95:d3: 27:60:78:72:f9:cf:18:83:d7:7b:e3:d6:97:c0:3e:55:d5:21: 04:e8:f4:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjUwNzE4MTk0NTU0WhcNMjUwNzI1MTk0NTU0WjAYMRYwFAYD VQQDEw02ODdhYTQ3My0wZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwq7COsnj9g66iXQkV3bU/1EoOMTbbUg3Sy2A8XVe8h4bNmAOtYtAxCOiAvVz XyFIgOtlOy/0QjK5MUKFhr00M9XFMIRlyruOUZ+qHxK1mZNw215TvHPJuJikZX6g FNvaXon5OKM4f+Oz8INac509IR5PZNmgjhTe2Nr9qi8P/guDppKWwKody5DnXZg3 qz9++6JVB+mIfwsnFv/+BkovaQ2oQAQ8g0Hvden2muSCiqDDzRevlGfDzDRAiWYT nkNf3Kp0yq/Rs9iedJ5Fa3WNhjV88rZF1QzI6irwq9qksA7mKZzk7WGaD6pjoYti GTQv67lc+rqwC1WA3Vd6955Y+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOhNZtf 4lv6ERRznLsdzHYv+OtbMB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9CNTc3M0FBQzU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82 Sk9DZG5HTVhpbHdMTGFBZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUfvdNjJCOkMgchuwdJ2LTHmBiiMb6mfwqAOqq37ocXwDEbPVzbdR0 jnET4oO9f012Ax9k03vfRUB02gwpuFjtZt8SbxdeNAfl4Dx9uZO5VumzUZuISoLa DHmkVnCdX30rRt3qt+cf42C2e4JfYRgVpK82Acsg/u/eE2/XyAKv2UI2lh3L058t Ej6BF81eqPZJWjPP2IuhYcORxfZMLUt0TxuEAae7Z4b5WAkOTRi0mwOzg+Zbz2wF 1dx7hC1QoJ4GNZNeTDukqqpRqDaS44C3yZF7VvJsJGbrex2zd014663JGI+pkZ6c ldMnYHhy+c8Yg9d749aXwD5V1SEE6PQ7 -----END CERTIFICATE-----Generated at Sun Jul 20 07:30:18 2025 by rpki-client