$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json) Hash identifier: i7te/jAp8YF7sh5EsxK92VJJ1Nps9eV4AhQ6a6XzaVA= Subject key identifier: 81:AC:E4:F5:1C:03:64:A4:9B:A8:E5:E8:6B:CD:38:3C:E6:BE:20:BC Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0CA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft Manifest number: 0C17 Signing time: Sat 24 Oct 2026 19:05:53 +0000 Manifest this update: Sat 24 Oct 2026 19:05:53 +0000 Manifest next update: Sat 31 Oct 2026 19:05:53 +0000 Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: pqlAlvOrXModMQp1g3ZWh8Ff8zMDVtEqln0PMFHk46A=) 2: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: Ajj1+XIv2lN+bJkfK3jiIAMbBKfMDrx1rrpjChWFrTw=) 3: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: ROZc9LLExxAKSmBJDb4gQXjvPcIeYOybm5faBsQ7IsY=) 4: 5180A6FE1CD811F196994CA9363D8C67.roa (hash: SWKDhCz2E/CT6y8saxZMqLsBGiJ4AZkgU/gomKXe6eo=) 5: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: Ty4ZYwQyvMEEFSGfaZFvWi2WTAO0bLvXbSZDNMOJw/s=) 6: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: l19IcHrq3/s7bkVZYJxzqFC2aowTPUonke4uOMcPczc=) 7: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: +GV9xhTlFORtjXxee7C6hBiagIilBpwJ2zPhAY4Q/SY=) 8: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 6nAz8JDLRXZpp0YQMDx9IUtnZhPPPPFT4QGkXVk5rN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 19:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3235 (0xca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: Oct 24 19:05:53 2026 GMT Not After : Oct 31 19:05:53 2026 GMT Subject: CN=6add0191-f502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f2:62:67:bc:82:4a:3d:6b:95:8f:4a:30:f6: 37:0b:bd:97:30:1b:09:a1:d9:6a:1e:bb:a5:05:91: ee:5e:8f:af:ef:29:a6:f7:13:66:61:89:a1:87:94: 1e:cb:28:97:0a:3b:3c:d9:22:77:d5:ac:9f:f9:0f: 8b:55:4b:c5:b0:de:ea:43:a6:7f:71:4f:8f:50:a1: ea:54:8c:e4:f4:6c:f2:f5:15:87:db:d8:c9:e0:ec: e0:35:fb:34:05:2d:74:cd:2d:97:27:8b:88:62:c9: 06:5b:de:7f:f1:5e:5b:4d:d1:8c:6a:9c:fa:1f:26: 8f:46:cd:58:35:b5:fb:29:c4:fc:12:f1:97:06:02: f0:fc:d2:77:19:43:a6:6d:c8:a7:40:cf:4b:90:ea: 08:c2:2f:44:8e:cf:0e:5e:e9:34:3b:26:d3:51:94: 94:18:10:df:11:f0:fd:7a:2a:32:38:1e:c4:e9:b0: 65:71:91:fd:35:e1:21:9c:ef:ec:fa:92:04:95:93: c3:c4:87:fb:77:83:59:e7:b3:21:16:3a:df:57:6c: c0:c8:50:2f:87:b2:9d:c3:56:ff:e7:29:2b:89:a5: 95:34:6f:80:bd:fa:33:09:89:0c:e0:d0:39:55:c9: 9e:46:3c:49:cc:a7:9f:90:a9:bf:e9:8c:a3:b9:1e: 3b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AC:E4:F5:1C:03:64:A4:9B:A8:E5:E8:6B:CD:38:3C:E6:BE:20:BC X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:f6:a9:f2:9f:1d:0d:39:c4:17:0e:c7:28:d6:3f:81:d1:f5: 21:75:3c:b4:96:61:56:ec:71:c6:bc:d8:a6:e4:ff:fb:43:6e: f7:42:a5:db:0b:30:d3:fd:24:24:ca:2f:fb:7f:9a:2b:1b:b8: ef:8b:2c:83:4a:2b:fe:cd:4f:de:60:d1:48:39:c1:0b:d0:4d: bb:89:a4:25:16:54:ca:ad:b3:37:d0:e5:77:65:66:58:b0:5b: 72:f9:bd:ba:e4:63:31:a8:31:c0:f7:37:93:60:94:20:d8:c4: f8:90:46:e1:cb:9d:46:25:1f:e1:15:1b:82:1e:fa:9e:86:26: 29:33:e2:c1:9a:b5:c0:dc:1b:7b:d7:00:66:a2:fc:9f:73:b3: 32:8b:8f:e0:9f:31:f5:71:6a:2d:36:41:d8:de:b5:77:ea:63: f4:a9:49:1c:27:25:d2:d9:49:9a:7a:da:97:60:5c:dd:08:62: 1d:cd:32:8a:2c:68:2f:be:11:c6:81:d8:2e:5f:97:9b:9b:0e: 7e:b8:18:bd:45:d2:f6:da:93:9f:0e:90:5e:af:52:b1:17:cd: cb:df:cf:08:d9:1a:34:35:39:7f:dd:ab:33:a4:df:e0:bc:57: ac:40:71:bd:0b:16:28:27:32:fa:a6:b3:39:61:3b:36:8b:5b: 66:b1:ec:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjYxMDI0MTkwNTUzWhcNMjYxMDMxMTkwNTUzWjAYMRYwFAYD VQQDEw02YWRkMDE5MS1mNTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfJiZ7yCSj1rlY9KMPY3C72XMBsJodlqHrulBZHuXo+v7ymm9xNmYYmhh5Qe yyiXCjs82SJ31ayf+Q+LVUvFsN7qQ6Z/cU+PUKHqVIzk9Gzy9RWH29jJ4OzgNfs0 BS10zS2XJ4uIYskGW95/8V5bTdGMapz6HyaPRs1YNbX7KcT8EvGXBgLw/NJ3GUOm bcinQM9LkOoIwi9Ejs8OXuk0OybTUZSUGBDfEfD9eioyOB7E6bBlcZH9NeEhnO/s +pIElZPDxIf7d4NZ57MhFjrfV2zAyFAvh7Kdw1b/5ykriaWVNG+AvfozCYkM4NA5 VcmeRjxJzKefkKm/6YyjuR47RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGs5PUc A2Skm6jl6GvNODzmviC8MB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9CNTc3M0FBQzU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82 Sk9DZG5HTVhpbHdMTGFBZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANfap8p8dDTnEFw7HKNY/gdH1IXU8tJZhVuxxxrzYpuT/+0Nu90Kl2wsw0/0k JMov+3+aKxu474ssg0or/s1P3mDRSDnBC9BNu4mkJRZUyq2zN9Dld2VmWLBbcvm9 uuRjMagxwPc3k2CUINjE+JBG4cudRiUf4RUbgh76noYmKTPiwZq1wNwbe9cAZqL8 n3OzMouP4J8x9XFqLTZB2N61d+pj9KlJHCcl0tlJmnral2Bc3QhiHc0yiixoL74R xoHYLl+Xm5sOfrgYvUXS9tqTnw6QXq9SsRfNy9/PCNkaNDU5f92rM6Tf4LxXrEBx vQsWKCcy+qazOWE7NotbZrHsfw== -----END CERTIFICATE-----Generated at Mon Oct 26 12:52:45 2026 by rpki-client