$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json) Hash identifier: uu7Nc/b/SaP5se+FBr2A9EylfU1ROSkU3YPgYZ/jsLI= Subject key identifier: F4:CF:38:B3:09:C9:A9:FE:68:D3:F5:42:FA:92:9A:7D:21:70:0E:33 Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0BB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft Manifest number: 0B46 Signing time: Wed 22 Oct 2025 20:04:51 +0000 Manifest this update: Wed 22 Oct 2025 20:04:50 +0000 Manifest next update: Wed 29 Oct 2025 20:04:50 +0000 Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: JG+F0kO6WTvPvg5IsbTM8+5wghv7D4wNrWIzoD5igpA=) 2: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 3y9BDXWhIindn9fV5yRhLvjaXOZjwz7wE89JCwHuZfU=) 3: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: DOBTNH4GGNPUe/CVItieZfmqwMcwBWdfPDr7AZPstYA=) 4: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: I/yFDnonwjcIdEyDMRzyxAMhULYfijDfUDeIkoqzyfk=) 5: 72E17FF2194F11ED818A3C66C4F9AE02.roa (hash: uU9R+G2quDutiuaDSqaRQis0/8oF8eouaABisexnp3Y=) 6: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: 2efUF6FV6lzagFO6ixmFLw5grpZeZdNkHznhn486HIY=) 7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: 1Oowb0Op5/Cu+8FSjA8UF2OrKzh23X2j+ax5PBrX1iA=) 8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: ioPHlw0sW6GeE8i+5W/iQUIzBchZcQHPRQo5hhiTaFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2995 (0xbb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: Oct 22 20:04:50 2025 GMT Not After : Oct 29 20:04:50 2025 GMT Subject: CN=68f938e2-ef16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5a:99:c6:6c:50:42:ed:5e:7d:aa:6d:cc:47: 82:e4:43:41:85:e5:3c:d2:99:c3:18:34:c4:2e:ae: fd:06:f4:51:8f:cd:bf:22:b7:c8:78:71:25:8e:48: ad:61:91:1d:21:d6:55:03:d8:5d:b8:b2:b4:67:96: 47:ab:b4:31:d6:06:8f:32:24:92:77:b9:36:20:59: 3c:90:bb:19:8c:ac:cb:1c:21:f6:1d:7d:d3:30:39: b8:36:6b:57:c9:f3:1b:7a:8e:e3:00:cf:8f:c3:0c: 9e:02:80:94:66:da:4b:94:ca:3f:32:52:d6:35:75: 80:4c:cb:54:3a:00:58:d6:5d:8e:7a:36:15:e5:5a: 21:56:35:ab:61:f1:f0:ca:07:99:64:3c:17:6e:13: 5b:95:d8:c9:b0:40:b0:13:da:56:bd:fe:12:0f:e2: aa:2b:da:1a:e9:2a:7e:a2:2a:b0:41:00:0b:02:db: 0b:46:3d:7d:4d:a7:3a:69:02:d9:a8:d2:56:ba:19: b4:dc:33:ff:c8:98:7d:c9:8b:be:97:1b:a4:9a:98: 77:e5:39:10:b4:f3:dd:0b:ea:6c:be:95:d1:bb:6f: f5:cb:e4:cc:f7:fc:bd:e6:4d:26:64:c3:fb:10:2c: 49:f9:3d:e3:88:1a:ff:99:f5:db:7e:62:64:fd:12: c8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CF:38:B3:09:C9:A9:FE:68:D3:F5:42:FA:92:9A:7D:21:70:0E:33 X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:ec:d3:ba:48:28:27:e8:b8:56:08:88:57:ca:6b:fd:0c:5b: aa:2c:90:b6:82:f4:23:d9:3a:e4:b7:31:fb:2f:fa:42:03:fe: b6:39:bd:86:5a:dc:38:ed:30:95:61:0c:b4:75:0e:04:8b:08: 34:2f:ae:72:7a:2d:58:4b:59:52:ec:10:11:36:67:64:ac:2f: 09:dc:c0:5e:4f:d8:e0:6c:b6:81:57:8c:0e:c9:cf:cc:2d:a1: 2f:e1:6a:09:ec:4a:08:c0:b5:60:a6:74:38:e2:7d:52:38:6b: 20:df:48:0b:cb:6a:5f:ce:71:6b:43:f4:ed:5c:3f:d9:eb:9c: a9:a9:be:14:b6:ea:08:b8:68:10:c6:9a:79:e3:12:89:12:48: 88:6b:5e:bd:9e:4d:e5:1d:0d:6d:e5:65:09:b2:d5:96:fa:e4: 5a:c9:b4:e3:22:f9:cb:18:37:69:ff:62:38:f9:b6:b4:83:6c: 72:31:1a:a7:7a:94:1d:98:6b:30:56:df:c2:0d:0c:b1:25:a3: fb:c6:63:2f:b9:ad:a6:5f:fe:28:bc:8c:e9:48:d4:ac:4b:58: ee:98:8c:53:6b:38:f2:2d:92:bf:27:c5:62:8f:ac:03:cc:ba: 6a:03:29:60:b7:fe:33:9a:73:85:55:8c:b0:58:d4:19:92:e9: 12:7f:e0:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjUxMDIyMjAwNDUwWhcNMjUxMDI5MjAwNDUwWjAYMRYwFAYD VQQDEw02OGY5MzhlMi1lZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+lqZxmxQQu1efaptzEeC5ENBheU80pnDGDTELq79BvRRj82/IrfIeHEljkit YZEdIdZVA9hduLK0Z5ZHq7Qx1gaPMiSSd7k2IFk8kLsZjKzLHCH2HX3TMDm4NmtX yfMbeo7jAM+PwwyeAoCUZtpLlMo/MlLWNXWATMtUOgBY1l2OejYV5VohVjWrYfHw ygeZZDwXbhNbldjJsECwE9pWvf4SD+KqK9oa6Sp+oiqwQQALAtsLRj19Tac6aQLZ qNJWuhm03DP/yJh9yYu+lxukmph35TkQtPPdC+psvpXRu2/1y+TM9/y95k0mZMP7 ECxJ+T3jiBr/mfXbfmJk/RLIZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTPOLMJ yan+aNP1QvqSmn0hcA4zMB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9CNTc3M0FBQzU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82 Sk9DZG5HTVhpbHdMTGFBZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz7NO6SCgn6LhWCIhXymv9DFuqLJC2gvQj2TrktzH7L/pCA/62Ob2G Wtw47TCVYQy0dQ4Eiwg0L65yei1YS1lS7BARNmdkrC8J3MBeT9jgbLaBV4wOyc/M LaEv4WoJ7EoIwLVgpnQ44n1SOGsg30gLy2pfznFrQ/TtXD/Z65ypqb4UtuoIuGgQ xpp54xKJEkiIa169nk3lHQ1t5WUJstWW+uRaybTjIvnLGDdp/2I4+ba0g2xyMRqn epQdmGswVt/CDQyxJaP7xmMvua2mX/4ovIzpSNSsS1jumIxTazjyLZK/J8Vij6wD zLpqAylgt/4zmnOFVYywWNQZkukSf+Cv -----END CERTIFICATE-----Generated at Thu Oct 23 06:03:28 2025 by rpki-client