
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json)
Hash identifier: 07tPtzq+9MNnrH/b7TRBzvWLfs8VBEaQN4DD8lcnP4U=
Subject key identifier: FA:4B:70:CB:57:BF:9A:06:82:F0:2C:EA:4F:F7:BF:6D:CB:39:39:DA
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial: 0C44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
Manifest number: 0BB8
Signing time: Mon 20 Apr 2026 19:12:00 +0000
Manifest this update: Mon 20 Apr 2026 19:11:59 +0000
Manifest next update: Mon 27 Apr 2026 19:11:59 +0000
Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: up4sYObkSl3orbMOCHyi4xBdu9z+zNknWrFDK09h/M4=)
2: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 6nAz8JDLRXZpp0YQMDx9IUtnZhPPPPFT4QGkXVk5rN0=)
3: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: Ty4ZYwQyvMEEFSGfaZFvWi2WTAO0bLvXbSZDNMOJw/s=)
4: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: Ajj1+XIv2lN+bJkfK3jiIAMbBKfMDrx1rrpjChWFrTw=)
5: 5180A6FE1CD811F196994CA9363D8C67.roa (hash: SWKDhCz2E/CT6y8saxZMqLsBGiJ4AZkgU/gomKXe6eo=)
6: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: ROZc9LLExxAKSmBJDb4gQXjvPcIeYOybm5faBsQ7IsY=)
7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: l19IcHrq3/s7bkVZYJxzqFC2aowTPUonke4uOMcPczc=)
8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: +GV9xhTlFORtjXxee7C6hBiagIilBpwJ2zPhAY4Q/SY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 19:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3140 (0xc44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Validity
Not Before: Apr 20 19:11:59 2026 GMT
Not After : Apr 27 19:11:59 2026 GMT
Subject: CN=69e67a80-2d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:9f:04:0e:67:7f:fa:06:a1:78:12:e2:71:
23:0c:d4:7f:7b:b3:26:19:8a:b1:d2:2b:79:36:3a:
e9:a1:0c:a2:3d:68:03:72:8d:5e:ee:03:19:78:89:
fb:57:eb:5a:7c:24:42:e1:17:ea:61:0a:13:58:82:
7d:0d:19:9d:e4:e8:98:1f:45:5d:5b:db:25:1e:27:
a9:de:37:e9:2a:93:fb:60:77:4e:ad:80:58:ca:5f:
3c:f0:00:0d:20:ef:74:3e:c6:4f:62:70:7d:9b:03:
b5:cc:82:62:33:d8:33:15:a2:c5:f8:36:f3:20:43:
65:52:d1:0e:9d:b1:e7:5e:56:72:0d:c7:ad:ca:84:
c0:83:fd:45:ec:2e:fb:d8:3e:98:f4:06:80:e3:ec:
22:a3:a5:a1:20:2d:e5:db:d7:63:31:7f:ba:d4:e2:
7d:6f:36:9b:92:a1:43:eb:c9:e6:82:9a:64:98:91:
85:90:a0:c7:1a:df:fd:ae:f7:96:70:d3:f3:48:69:
b2:70:f3:0e:8d:34:8d:ed:86:88:70:5d:e9:2d:f0:
36:dd:88:29:6d:25:40:cc:47:41:08:86:d6:ee:20:
b5:6e:84:44:a2:63:55:e4:50:da:28:18:cc:9e:b0:
1a:66:89:5e:ad:93:87:8d:02:fd:e7:c9:3e:96:ff:
ef:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4B:70:CB:57:BF:9A:06:82:F0:2C:EA:4F:F7:BF:6D:CB:39:39:DA
X509v3 Authority Key Identifier:
keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:4c:8a:31:c7:a3:ea:7e:b8:44:5f:ce:90:35:dd:30:ef:83:
a6:91:24:fc:15:0f:d6:1b:19:89:9b:09:e5:2e:cc:e4:f8:b5:
50:22:97:70:e9:97:57:97:94:87:7c:0b:4f:fd:a1:ec:fa:d4:
42:7c:fe:98:4c:0c:98:4a:42:c0:51:bc:90:f1:39:42:20:20:
55:61:b8:83:d8:9f:7b:bd:de:e7:45:a1:b9:d0:c7:8f:71:f3:
c4:e3:b1:57:f6:50:2f:d0:6a:3d:94:4f:ef:aa:54:6d:1f:95:
6f:12:97:ba:55:a9:de:8f:3e:8a:09:c2:f8:bc:6b:01:8d:7b:
c7:49:16:9d:f8:0e:85:2b:a4:45:be:99:38:70:d9:7a:c8:73:
14:8e:6c:1c:cd:77:2c:8e:5c:dd:3c:f0:e4:22:c5:27:e9:8f:
41:b5:76:28:db:07:5d:a1:4f:c4:8f:af:38:a1:fa:c9:8d:1c:
46:5a:06:2c:f2:48:f7:ed:24:c2:b1:70:10:0f:f8:7c:24:5a:
34:73:4b:a1:9f:a4:cd:7a:f7:81:2f:19:39:83:06:d5:04:b1:
85:e3:ab:51:cf:25:ca:99:6f:03:d9:e2:90:2e:d3:a8:10:58:
e4:29:7f:50:e1:57:92:e9:16:fa:d4:74:c5:e7:4a:35:02:05:
d5:65:cc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:09:33 2026 by rpki-client