$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json) Hash identifier: G9/7sjOMM7TYBqxRYB9wkmVhlzV8cgjT9XysJcRVYB8= Subject key identifier: CF:AA:FF:C0:32:89:2D:A4:0B:D3:C1:BD:B9:1B:EA:89:EA:95:BF:BB Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0B69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft Manifest number: 0AFC Signing time: Fri 30 May 2025 19:46:37 +0000 Manifest this update: Fri 30 May 2025 19:46:37 +0000 Manifest next update: Fri 06 Jun 2025 19:46:37 +0000 Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: jN6ebM4LCWAD6SzInkBqRXQ/NDmJKlxluw95TnHK/SM=) 2: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 3y9BDXWhIindn9fV5yRhLvjaXOZjwz7wE89JCwHuZfU=) 3: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: DOBTNH4GGNPUe/CVItieZfmqwMcwBWdfPDr7AZPstYA=) 4: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: I/yFDnonwjcIdEyDMRzyxAMhULYfijDfUDeIkoqzyfk=) 5: 72E17FF2194F11ED818A3C66C4F9AE02.roa (hash: uU9R+G2quDutiuaDSqaRQis0/8oF8eouaABisexnp3Y=) 6: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: 2efUF6FV6lzagFO6ixmFLw5grpZeZdNkHznhn486HIY=) 7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: 1Oowb0Op5/Cu+8FSjA8UF2OrKzh23X2j+ax5PBrX1iA=) 8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: ioPHlw0sW6GeE8i+5W/iQUIzBchZcQHPRQo5hhiTaFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2921 (0xb69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: May 30 19:46:37 2025 GMT Not After : Jun 6 19:46:37 2025 GMT Subject: CN=683a0b1d-cd31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:51:cd:1b:83:52:c7:68:d1:11:89:65:95: fd:4c:c8:b8:42:49:3d:91:e6:40:3a:b7:7f:1d:48: fb:df:1e:2f:12:31:36:0a:22:76:13:dd:81:e4:e1: da:56:9f:5f:1d:e7:43:02:27:43:69:5d:9c:b3:36: 13:74:1d:fa:db:47:b3:fe:5f:ef:b2:f9:0f:c6:22: 75:5e:17:99:06:9c:d8:08:5c:76:c7:13:26:89:8c: 61:05:84:34:4d:a6:71:3d:13:a0:22:06:3e:fd:5c: 53:a4:cd:16:f7:1b:d3:1c:cb:78:95:3f:1f:06:75: 16:b5:e4:65:13:18:1f:f6:83:91:25:92:94:e3:21: 91:87:00:1d:de:79:0e:8e:ec:b5:15:35:7c:31:5c: af:18:c6:31:d8:bb:2e:7f:8e:86:04:37:ef:07:23: 9b:f5:54:e3:6f:fe:9c:8f:56:dd:54:39:7d:40:f7: 71:cf:ef:8a:94:99:72:31:5b:c1:16:d6:1b:60:ed: 78:b8:07:91:62:9c:93:e8:d2:e2:43:7c:64:62:f7: 5e:04:07:40:ce:1c:a4:00:42:ad:f3:45:ef:fc:75: be:79:56:3a:7c:a3:7e:a0:64:ab:a6:65:6a:05:b6: e3:4c:b9:2b:20:2e:4f:3c:7c:bf:76:e9:4f:e3:4f: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AA:FF:C0:32:89:2D:A4:0B:D3:C1:BD:B9:1B:EA:89:EA:95:BF:BB X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:83:01:a0:e9:67:a7:3c:e4:d1:cb:94:4d:a7:26:3c:9e:b3: 8d:b4:20:d0:9c:cc:89:47:ad:64:04:82:fd:10:de:cf:59:8a: b9:3b:b5:b4:31:c4:cf:92:ae:d9:b4:72:b5:77:f0:7f:c3:86: 05:e8:32:9c:cb:b9:d3:3c:3c:b5:3a:de:de:f5:9e:62:ef:64: 4c:3a:a1:8f:35:1b:52:3a:4b:b0:3c:d8:a8:e1:84:2f:26:04: 1c:e7:fe:78:56:03:45:cf:e5:9c:83:4f:69:a6:58:bb:86:7c: 1b:1c:cf:81:d2:75:00:df:f5:40:11:86:d0:54:f2:11:c0:af: 62:8f:de:07:02:b3:e6:95:b4:62:8b:53:7f:74:73:e7:42:53: 33:47:7f:28:ca:88:f0:52:18:0d:0f:05:51:31:a1:06:e1:0a: 43:99:b3:35:c8:22:bf:ba:06:fe:75:e1:df:66:0a:41:3e:90: 80:57:ff:f7:39:6d:74:d0:f0:8e:19:2e:67:b6:f0:c9:6b:31: e3:b3:95:ae:4f:a5:2d:d5:23:fa:92:e1:a3:18:fc:45:1a:2f: 9b:49:b2:b4:3a:a9:d3:cd:21:1e:0a:c6:3e:d7:79:4f:03:62: ca:40:8b:96:8d:8c:83:80:08:a9:a7:d3:aa:77:83:ba:ae:94: 92:a2:3a:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjUwNTMwMTk0NjM3WhcNMjUwNjA2MTk0NjM3WjAYMRYwFAYD VQQDEw02ODNhMGIxZC1jZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzlRzRuDUsdo0RGJZZX9TMi4Qkk9keZAOrd/HUj73x4vEjE2CiJ2E92B5OHa Vp9fHedDAidDaV2cszYTdB3620ez/l/vsvkPxiJ1XheZBpzYCFx2xxMmiYxhBYQ0 TaZxPROgIgY+/VxTpM0W9xvTHMt4lT8fBnUWteRlExgf9oORJZKU4yGRhwAd3nkO juy1FTV8MVyvGMYx2Lsuf46GBDfvByOb9VTjb/6cj1bdVDl9QPdxz++KlJlyMVvB FtYbYO14uAeRYpyT6NLiQ3xkYvdeBAdAzhykAEKt80Xv/HW+eVY6fKN+oGSrpmVq BbbjTLkrIC5PPHy/dulP408ybwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+q/8Ay iS2kC9PBvbkb6onqlb+7MB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9CNTc3M0FBQzU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82 Sk9DZG5HTVhpbHdMTGFBZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEgwGg6WenPOTRy5RNpyY8nrONtCDQnMyJR61kBIL9EN7PWYq5O7W0 McTPkq7ZtHK1d/B/w4YF6DKcy7nTPDy1Ot7e9Z5i72RMOqGPNRtSOkuwPNio4YQv JgQc5/54VgNFz+Wcg09ppli7hnwbHM+B0nUA3/VAEYbQVPIRwK9ij94HArPmlbRi i1N/dHPnQlMzR38oyojwUhgNDwVRMaEG4QpDmbM1yCK/ugb+deHfZgpBPpCAV//3 OW100PCOGS5ntvDJazHjs5WuT6Ut1SP6kuGjGPxFGi+bSbK0OqnTzSEeCsY+13lP A2LKQIuWjYyDgAipp9Oqd4O6rpSSojox -----END CERTIFICATE-----Generated at Sat May 31 16:28:42 2025 by rpki-client