
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json)
Hash identifier: RnJJAR9NTfeEDrSAGtJmzcQaDkLynz05DYegBgbohN4=
Subject key identifier: D2:E0:97:A4:BF:F5:A1:59:FB:FD:4D:45:4C:4F:7A:E9:22:2B:6A:59
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial: 0C5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
Manifest number: 0BCF
Signing time: Thu 04 Jun 2026 19:15:22 +0000
Manifest this update: Thu 04 Jun 2026 19:15:21 +0000
Manifest next update: Thu 11 Jun 2026 19:15:21 +0000
Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: TnA+zK8d0WGklLTXJjoQCFn4sCQmiV8uW6xtX/oXA+o=)
2: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: ROZc9LLExxAKSmBJDb4gQXjvPcIeYOybm5faBsQ7IsY=)
3: 5180A6FE1CD811F196994CA9363D8C67.roa (hash: SWKDhCz2E/CT6y8saxZMqLsBGiJ4AZkgU/gomKXe6eo=)
4: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: Ajj1+XIv2lN+bJkfK3jiIAMbBKfMDrx1rrpjChWFrTw=)
5: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 6nAz8JDLRXZpp0YQMDx9IUtnZhPPPPFT4QGkXVk5rN0=)
6: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: Ty4ZYwQyvMEEFSGfaZFvWi2WTAO0bLvXbSZDNMOJw/s=)
7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: l19IcHrq3/s7bkVZYJxzqFC2aowTPUonke4uOMcPczc=)
8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: +GV9xhTlFORtjXxee7C6hBiagIilBpwJ2zPhAY4Q/SY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3163 (0xc5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Validity
Not Before: Jun 4 19:15:21 2026 GMT
Not After : Jun 11 19:15:21 2026 GMT
Subject: CN=6a21ceca-6e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:53:21:a8:07:3d:78:a2:33:63:80:bc:2d:
88:a1:f7:89:47:9f:b7:cb:16:a7:71:ba:54:b0:b5:
8d:bc:4a:03:60:fd:55:cb:d2:1b:6d:3c:cb:20:f1:
9e:dd:a7:e3:b6:a8:58:93:b0:a8:16:14:f6:5b:92:
11:2b:04:df:f5:0c:52:bb:37:0d:17:7d:02:32:a9:
04:52:bd:94:1b:35:27:7b:ee:c6:ff:86:db:f7:55:
2e:69:d4:07:06:1a:64:cf:03:10:6b:7d:1f:26:df:
ae:2b:78:3c:50:99:4f:59:4b:d2:42:07:dd:50:8c:
13:f1:55:90:94:aa:87:bc:8e:37:49:53:74:5e:9a:
1d:8e:6a:c5:32:51:82:fe:45:bc:af:ed:cf:47:ec:
d6:20:38:9c:e4:5f:08:11:ee:19:80:5b:9c:90:89:
0e:b4:18:26:cb:ee:40:27:e1:76:2e:b7:03:aa:87:
b5:c8:75:70:93:df:f4:bc:b8:e4:dd:22:01:26:65:
f8:c6:92:3f:6c:11:10:da:91:c7:e3:73:fb:50:08:
5e:84:d0:e1:92:b7:f3:02:75:78:bc:a0:84:4a:60:
ca:dc:97:14:16:03:c3:40:d8:6d:4f:1c:63:57:7d:
84:3d:51:47:b7:82:5a:88:ff:d1:f0:ca:32:f7:63:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E0:97:A4:BF:F5:A1:59:FB:FD:4D:45:4C:4F:7A:E9:22:2B:6A:59
X509v3 Authority Key Identifier:
keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5e:32:07:ec:1e:8c:64:20:0c:4f:c4:cb:a9:4f:b7:bd:fd:
52:a2:d2:d2:d2:74:d1:57:ff:ca:61:43:dd:bc:e0:42:89:8d:
02:58:79:0a:c5:ea:39:61:e9:80:b4:5b:a7:50:ac:ea:86:ee:
c6:37:36:f9:5d:15:a1:64:ca:26:57:21:54:ee:31:fa:15:6e:
a6:cd:6a:3c:7d:5e:d9:cd:f4:0b:d7:c1:b5:b9:f1:0e:39:d7:
52:7b:4d:52:c5:f1:f3:ad:47:55:d3:a5:f3:81:6a:6f:13:25:
8a:3a:ef:01:86:a2:4f:d0:c6:52:ae:dd:53:d4:fc:a5:d9:ab:
e0:dd:92:ff:1e:15:38:c7:2e:5a:6a:1c:b7:5e:b3:bc:f4:c4:
8c:c1:ca:9e:b2:d8:74:e1:ef:00:13:e2:aa:ea:50:1e:d7:82:
51:72:ce:27:2e:e2:67:c5:05:02:ed:59:94:d8:76:b9:03:40:
0d:a2:89:76:34:38:e5:cd:b8:b8:2f:74:e2:20:0b:39:98:4e:
05:ac:03:c4:ea:9c:9b:2d:ed:e3:62:21:c7:4d:49:c0:e2:9c:
17:ec:b5:3e:37:3f:cf:f2:18:1c:58:3b:16:c9:a9:6e:12:4f:
3f:7d:56:d2:71:3d:5e:64:81:d6:97:7c:34:2d:88:73:3e:46:
90:56:7d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:53:16 2026 by rpki-client