This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json)
Hash identifier: /mHqJj0ARsH2XRbv2o5Ykg6qG+1cQ+ujZ5aEFKE6E8g=
Subject key identifier: 35:E4:CF:BA:EC:4C:9A:AA:05:BA:11:76:B2:68:57:42:F1:83:7F:63
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial: 0BCA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
Manifest number: 0B5D
Signing time: Sat 06 Dec 2025 18:39:34 +0000
Manifest this update: Sat 06 Dec 2025 18:39:33 +0000
Manifest next update: Sat 13 Dec 2025 18:39:33 +0000
Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: BwKGgVqvhW4a+nKpC6U8vAJT9Aic/0PJuCeAMVnpDK8=)
2: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 3y9BDXWhIindn9fV5yRhLvjaXOZjwz7wE89JCwHuZfU=)
3: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: DOBTNH4GGNPUe/CVItieZfmqwMcwBWdfPDr7AZPstYA=)
4: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: I/yFDnonwjcIdEyDMRzyxAMhULYfijDfUDeIkoqzyfk=)
5: 72E17FF2194F11ED818A3C66C4F9AE02.roa (hash: uU9R+G2quDutiuaDSqaRQis0/8oF8eouaABisexnp3Y=)
6: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: 2efUF6FV6lzagFO6ixmFLw5grpZeZdNkHznhn486HIY=)
7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: 1Oowb0Op5/Cu+8FSjA8UF2OrKzh23X2j+ax5PBrX1iA=)
8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: ioPHlw0sW6GeE8i+5W/iQUIzBchZcQHPRQo5hhiTaFw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3018 (0xbca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Validity
Not Before: Dec 6 18:39:33 2025 GMT
Not After : Dec 13 18:39:33 2025 GMT
Subject: CN=69347865-c179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:2a:80:c3:4b:93:65:f4:b2:b5:0c:bd:67:
e8:e9:4a:08:11:03:39:c4:13:33:be:93:df:01:00:
28:5a:75:bc:09:67:1a:a1:f3:f6:90:3c:58:45:fe:
e7:bc:34:81:89:d8:4b:92:e2:bf:75:8b:61:e1:94:
dc:58:cf:e9:c2:ed:de:82:de:8e:13:81:9b:e4:58:
99:3a:22:34:3a:2f:43:d1:49:c5:de:e6:eb:52:22:
b3:bd:29:d7:9d:88:fc:03:37:c8:0d:38:13:04:43:
22:e5:97:25:96:84:3c:2a:2e:72:6b:0d:46:b9:64:
76:52:ce:01:55:7e:7e:58:34:e5:81:a6:2b:b2:6e:
a9:db:1a:32:ba:c6:4b:50:c0:10:1e:77:78:e9:09:
ac:82:d3:30:58:a7:1a:59:98:9c:c3:76:9e:b8:f2:
d2:37:0c:37:5a:52:6d:ca:b7:03:ba:9d:d2:f8:7a:
23:c5:9f:33:ba:16:18:fe:c3:98:3d:09:d4:1f:0c:
1c:11:ae:cd:00:5a:f5:53:17:d5:c2:90:91:95:aa:
87:33:e2:24:bb:94:2e:f7:57:ee:7f:04:e0:43:69:
5c:cc:9c:18:2a:99:aa:ac:f1:5e:6d:36:95:2b:c8:
14:0e:87:dc:8c:bf:b4:2c:f5:13:1c:5d:eb:33:be:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E4:CF:BA:EC:4C:9A:AA:05:BA:11:76:B2:68:57:42:F1:83:7F:63
X509v3 Authority Key Identifier:
keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:78:cb:0e:4a:4f:da:8c:f9:49:8b:86:81:f7:f9:b9:86:2e:
46:9f:10:45:f4:72:89:31:04:96:d3:75:26:99:b3:00:0a:61:
04:91:d2:cd:34:9e:eb:ba:e1:47:bf:7c:54:77:0a:db:c2:c6:
0f:9b:37:70:51:03:b4:fa:6b:56:54:75:d8:f7:f8:cb:e5:51:
38:e9:0b:0b:5e:b8:8a:de:de:73:31:19:37:2c:a3:59:2c:b0:
24:27:47:c1:43:78:e2:64:f6:c0:78:34:4a:19:ee:ec:42:d3:
36:a7:21:53:e4:a1:14:fb:40:21:9e:43:fb:cc:c8:68:17:43:
2a:de:61:ef:e4:71:55:63:6e:fc:97:1a:d5:00:c1:13:86:a4:
14:09:ba:a0:b6:d7:18:53:f4:21:3d:2e:cf:fb:97:30:84:ee:
82:74:a4:08:0e:3e:25:89:05:37:f9:53:29:61:ed:ed:30:be:
0e:a8:7c:90:ac:04:80:51:52:a4:8a:63:28:2f:10:b5:74:92:
bf:6c:4e:1c:15:7a:b6:cf:2a:17:f7:13:2f:cb:1f:3b:6c:84:
f4:33:b1:04:86:64:b0:ec:f6:1e:89:a0:a0:b6:8d:c7:8d:e3:
2c:77:17:fa:22:68:ef:37:df:94:8b:62:f5:4c:2c:e8:2e:c3:
e5:1d:cc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:00:40 2025 by rpki-client