
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json)
Hash identifier: HZUp7TFPcWBeVxj07vKwVDFQASHhO0PTy4Ci2LOGeKE=
Subject key identifier: C1:0E:F3:26:B1:75:F0:F0:B7:E6:F0:21:03:27:43:87:8D:E5:40:90
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial: 0C72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
Manifest number: 0BE6
Signing time: Mon 20 Jul 2026 19:33:15 +0000
Manifest this update: Mon 20 Jul 2026 19:33:14 +0000
Manifest next update: Mon 27 Jul 2026 19:33:14 +0000
Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: WuKgDjpcpVaiW8m+PXKojvJB3tNo24SM4kxpgSnGClA=)
2: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: +GV9xhTlFORtjXxee7C6hBiagIilBpwJ2zPhAY4Q/SY=)
3: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: l19IcHrq3/s7bkVZYJxzqFC2aowTPUonke4uOMcPczc=)
4: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: ROZc9LLExxAKSmBJDb4gQXjvPcIeYOybm5faBsQ7IsY=)
5: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: Ajj1+XIv2lN+bJkfK3jiIAMbBKfMDrx1rrpjChWFrTw=)
6: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: Ty4ZYwQyvMEEFSGfaZFvWi2WTAO0bLvXbSZDNMOJw/s=)
7: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 6nAz8JDLRXZpp0YQMDx9IUtnZhPPPPFT4QGkXVk5rN0=)
8: 5180A6FE1CD811F196994CA9363D8C67.roa (hash: SWKDhCz2E/CT6y8saxZMqLsBGiJ4AZkgU/gomKXe6eo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 19:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3186 (0xc72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Validity
Not Before: Jul 20 19:33:14 2026 GMT
Not After : Jul 27 19:33:14 2026 GMT
Subject: CN=6a5e77fb-a422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:e9:20:bb:2e:f3:f1:83:7b:1b:99:68:f9:
3a:01:a4:5a:e3:c3:b3:99:3d:c8:60:a7:56:d6:c4:
6a:b5:f4:db:96:8e:df:55:0e:5e:2c:62:f4:25:19:
ca:e5:bd:28:23:6d:f1:19:b7:15:34:00:c3:12:58:
32:b4:8a:81:4a:59:1f:21:86:ac:13:4d:05:b5:04:
9b:fd:0d:dc:49:72:7b:19:f5:8c:25:f2:0a:d4:0a:
fd:1d:d8:a3:bd:a6:7d:c0:9e:45:f0:de:5e:40:bb:
e6:0e:6a:53:a5:42:3f:03:50:32:2b:be:b8:2c:88:
3e:1c:49:e9:06:b5:0b:86:ff:2d:d2:4f:5a:1b:90:
b1:d7:4b:94:2e:9f:8d:06:22:20:34:8c:56:20:4c:
9e:83:19:aa:e4:fc:d1:dd:77:7c:c8:70:d8:b8:03:
f1:ba:ee:69:95:c2:85:14:f2:b0:9e:70:df:d0:db:
0c:15:0c:83:39:3d:68:ff:ba:fb:06:ad:ce:4b:a8:
01:16:8f:49:a2:0a:7c:61:23:de:f8:3e:68:e9:b5:
b5:5e:be:3b:88:dc:54:71:15:30:50:4b:8f:22:8b:
9c:93:49:00:d3:a4:54:fc:61:19:8c:89:91:74:b0:
6e:30:3f:98:84:aa:b9:59:0a:08:2d:ba:b4:25:1d:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0E:F3:26:B1:75:F0:F0:B7:E6:F0:21:03:27:43:87:8D:E5:40:90
X509v3 Authority Key Identifier:
keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:dc:4b:61:30:08:60:1b:e5:c1:7f:c9:b9:f5:99:38:b0:e4:
92:1c:3e:d8:d4:17:d5:71:59:dd:33:f1:1d:6e:86:eb:7c:d4:
92:0e:85:47:46:04:77:43:05:fe:ee:9e:f3:50:ca:1d:61:0e:
e0:43:02:9a:ff:89:11:dd:5b:fa:7d:7f:2d:85:57:d5:14:d9:
48:40:0b:eb:ed:b0:19:01:75:ed:13:24:6a:3a:8d:10:fb:0b:
6e:0e:c3:4a:50:43:73:07:86:14:84:ed:90:03:69:5e:c9:fc:
b5:cd:5a:94:bc:1a:27:14:b1:b4:c8:72:99:89:2d:7f:e1:5e:
d4:df:5c:ec:e6:8c:eb:39:2b:58:92:fb:7a:87:14:fb:db:66:
e1:63:67:ca:58:17:6d:f7:f9:6f:06:98:60:d7:82:11:07:98:
09:ac:e2:b4:13:08:46:25:b7:15:a9:ec:83:de:62:0f:3d:07:
0f:88:09:c6:1c:1e:74:2a:e2:72:79:5b:5c:56:c3:1f:af:54:
cd:79:61:b6:87:26:65:a9:f8:81:85:7d:fb:e2:d8:26:b8:99:
12:4b:c2:0b:c8:ae:89:7c:ee:03:ce:84:c5:a6:5e:14:f3:7d:
01:85:c6:d0:aa:cc:59:e8:e5:48:b0:16:e5:33:2c:d1:ce:81:
85:7c:de:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:57:05 2026 by rpki-client