
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json)
Hash identifier: 2XisqKponVpwKeIhS/wNUMDzNRb28fK68u80PQXH1iE=
Subject key identifier: 84:A8:A5:9F:D7:59:B5:E8:A6:4E:71:05:F0:B9:57:05:F9:04:41:FE
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial: 0C18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
Manifest number: 0B99
Signing time: Fri 06 Mar 2026 19:03:06 +0000
Manifest this update: Fri 06 Mar 2026 19:03:05 +0000
Manifest next update: Fri 13 Mar 2026 19:03:05 +0000
Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: 0BIeF+P7HPn6yZMA+9eO9e44DPk9tQ1lu+SVWIoMX7E=)
2: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: n5U2VFCOEQTSOh6nc6suUj77+8ZXZZeQOgQNXBchDAk=)
3: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: iDD/cykx6wIoU1qmgTIgB853kbpj3nssniFazk/0qr0=)
4: 5D4853E018D411F1B7EF27C9133D8C67.roa (hash: i/b+sYb7pyPEbpgrVFPvwijfAoww9I6cyRdcV2i80Zg=)
5: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: e1Z9G29giVfx/TlMnNPTJ5NHuDRFDqUi7DBFlVhYvVc=)
6: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: iDi9kb8b28KqeEkRb6+jnpdjdCoQ0UA/2dxXpejWRto=)
7: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: LXCZa4eT6auT5fb/1SRaqdOV231cd9TBAb1bo44Vaoo=)
8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: uV1mWEm9Bs1DW7VnjBjbNklIBwl6dVIf/TDxxXlFI88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 19:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Validity
Not Before: Mar 6 19:03:05 2026 GMT
Not After : Mar 13 19:03:05 2026 GMT
Subject: CN=69ab24ea-2fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:9c:aa:c6:61:4d:c9:a9:9c:0d:1f:a4:23:
3d:ed:b5:5b:7b:9c:65:7e:4b:d1:5d:b2:91:e9:02:
20:d3:a2:1f:14:b3:30:ba:39:89:bd:84:7a:42:a0:
0b:f8:dd:ea:6f:8a:e4:3f:0f:a2:ef:88:92:5e:7d:
47:8c:a5:3e:78:27:0c:19:8d:c1:54:6a:fd:47:d6:
c3:00:5b:fe:99:2d:52:fb:a0:a1:eb:d6:7a:d2:37:
1a:92:93:82:cd:88:02:9e:fe:51:35:89:00:a0:83:
55:3c:16:11:4d:4b:d0:41:c0:e7:83:b6:39:6c:15:
7a:ed:f0:f9:0a:07:8d:23:8d:2f:bb:3d:77:21:ce:
1f:5c:0a:dc:dc:e3:af:6a:24:23:35:a3:f2:ab:d7:
a4:e5:40:88:70:b6:5c:83:d0:45:e7:85:87:b5:90:
7e:9b:10:15:3a:9c:8c:c7:3d:b5:3c:ec:1e:12:dc:
2a:38:2b:81:ab:1e:8b:0d:14:53:13:1b:ee:ef:80:
8a:72:b0:e6:3d:54:d2:06:0a:49:ae:6d:33:cb:6d:
40:7c:dd:6a:cf:87:04:76:70:1a:34:4f:e5:f4:03:
3b:2a:c3:bc:3f:c9:05:ea:15:ee:76:81:c0:42:6e:
35:23:d0:7e:b5:44:42:a9:c9:a2:8c:03:1f:e7:d2:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A8:A5:9F:D7:59:B5:E8:A6:4E:71:05:F0:B9:57:05:F9:04:41:FE
X509v3 Authority Key Identifier:
keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9d:54:be:73:db:28:7d:3e:c4:6a:66:81:2d:2d:ba:60:b8:
20:21:54:5b:b6:ff:fd:1c:83:fa:92:a0:8b:c2:33:68:16:00:
08:6d:d0:e8:12:34:88:d4:1c:7d:3a:cd:74:bb:51:fd:37:70:
3c:dd:f7:79:96:bc:4f:aa:e1:5a:13:29:b3:79:c4:bf:d4:48:
77:56:51:d4:0f:51:be:56:06:61:d4:5a:71:57:6c:f1:4d:d6:
09:3c:b1:f5:31:c9:06:01:9a:8f:2d:97:7c:a9:e5:96:90:62:
d3:e9:0e:43:1d:29:62:64:92:ae:ef:54:21:34:3a:a1:d6:bb:
39:89:1e:38:40:fd:91:96:f5:91:e9:d4:45:07:62:98:09:85:
23:8f:b5:91:ba:31:d2:ab:f3:66:2f:11:0c:71:7a:01:52:47:
8a:4f:76:c4:ac:82:12:9c:6e:d4:9b:e6:de:a4:ad:eb:dc:f9:
96:74:b6:49:c2:b9:fa:f5:59:64:b4:06:3b:31:2d:5b:2b:81:
55:4f:d8:a6:fb:50:36:ae:9b:0a:6d:6c:92:25:5e:f5:84:de:
94:e0:4d:d9:2c:6e:ae:19:d5:17:4a:9c:02:fc:0c:6a:fb:2d:
1c:76:17:42:df:b2:4c:2b:3a:f4:39:f4:18:e7:74:6a:33:e4:
4f:f5:4f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:51:51 2026 by rpki-client